Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.mft
File: 2eEBm74RtVEUh0yWFxbrI4oRzU4.mft (raw, json)
Hash identifier: xAXNcuGRllcdHOQ8XDszBfLe+frdWoWkFtKcb02ZAt4=
Subject key identifier: F5:D1:AF:E3:6D:4F:DE:73:05:D3:5F:B5:FE:D6:53:68:E4:E9:3A:46
Authority key identifier: D9:E1:01:9B:BE:11:B5:51:14:87:4C:96:17:16:EB:23:8A:11:CD:4E
Certificate issuer: /CN=d9e1019bbe11b55114874c961716eb238a11cd4e
Certificate serial: 019D9A3EE70DFBE75A3D999B6BA71396D29F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2eEBm74RtVEUh0yWFxbrI4oRzU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 07:01:46 +0000
Manifest this update: Fri 17 Apr 2026 07:01:46 +0000
Manifest next update: Sat 18 Apr 2026 07:01:46 +0000
Files and hashes: 1: 2eEBm74RtVEUh0yWFxbrI4oRzU4.crl (hash: wsDAzaZyppsznn7s5DvNvY0LgVkXqTX+NbnovUwfgH0=)
2: F6-tR7vg6L_c0tc5N_XzUYnc5Hs.roa (hash: 4XFHQlUZw+5vTRxUTYeT4+YjnJnMJyoXfBSAScrWHnE=)
3: vJl1BXhZ3zRMbOos6LDoB38KE4Q.roa (hash: VDAC21VKqXFo8f4kpCzGmv5zrcQUyhDkUhgQDzFTnGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2eEBm74RtVEUh0yWFxbrI4oRzU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:e7:0d:fb:e7:5a:3d:99:9b:6b:a7:13:96:d2:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9e1019bbe11b55114874c961716eb238a11cd4e
Validity
Not Before: Apr 17 07:01:46 2026 GMT
Not After : Apr 18 07:01:46 2026 GMT
Subject: CN=f5d1afe36d4fde7305d35fb5fed65368e4e93a46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fb:18:7c:eb:bf:47:8d:0b:b6:b1:49:db:c4:
7a:dd:2f:83:fd:25:7b:a8:0b:e4:49:6e:fd:65:24:
ff:af:a8:c3:6e:66:54:ec:25:af:65:58:00:79:bd:
36:d3:fc:a8:47:12:6b:1a:07:b1:d8:12:c2:b2:cc:
7f:31:5b:e1:7e:0e:7e:44:fc:e4:cc:66:44:77:24:
2b:93:52:d1:02:ad:5d:f6:23:f6:20:7d:7f:f7:d0:
78:32:76:14:7d:1c:05:69:6f:ba:a4:9a:95:ec:be:
a3:e7:69:9c:16:2e:3d:4c:d7:a7:3c:5a:df:2d:c0:
e7:c6:a0:d6:6c:24:f8:2e:0e:bd:b1:49:b9:41:93:
a1:14:05:66:71:55:a3:ee:52:27:30:13:3e:6b:81:
79:95:8a:00:18:3b:24:fc:75:0c:c4:22:15:20:db:
20:0a:e1:56:e7:89:bc:1c:9f:66:13:00:c7:76:0a:
b7:46:ed:ae:88:ae:ec:0a:35:99:2c:09:b2:6a:32:
21:eb:8e:2c:9f:b2:35:31:45:66:b4:38:e2:5d:84:
8b:92:64:40:13:16:08:86:84:17:b8:7b:52:4d:4d:
5b:5f:e0:5b:ad:f6:9f:95:83:c2:ad:fd:89:2a:6f:
e3:11:5a:fe:ad:8f:93:78:d9:65:0a:57:e1:c1:66:
b8:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:D1:AF:E3:6D:4F:DE:73:05:D3:5F:B5:FE:D6:53:68:E4:E9:3A:46
X509v3 Authority Key Identifier:
keyid:D9:E1:01:9B:BE:11:B5:51:14:87:4C:96:17:16:EB:23:8A:11:CD:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2eEBm74RtVEUh0yWFxbrI4oRzU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:f1:16:4b:52:ea:3e:98:9b:6a:cb:e8:28:87:8c:2a:d1:83:
02:ca:37:8c:83:41:5b:28:e2:de:09:c8:13:9b:77:3d:f0:64:
94:05:2d:cb:2e:09:0c:c1:a9:c7:45:9c:0c:2a:3b:3d:31:f3:
ba:0e:e5:ed:4e:e8:b9:2c:1e:fe:80:e6:5f:d1:3b:f8:e5:dd:
c8:58:96:cc:3b:8f:21:ad:b3:62:3e:20:53:8b:08:eb:d6:ce:
36:2e:87:aa:64:f1:79:62:ea:be:f4:61:2a:a4:68:e3:6b:b1:
99:56:ec:68:c7:4b:f3:a0:ff:8f:e2:69:e9:eb:74:ac:41:af:
ec:e8:32:be:a2:b2:2b:fa:ac:2a:91:17:9b:59:0e:3e:80:d9:
14:5c:7e:6f:9d:a0:e9:97:74:0b:e5:16:74:3d:98:92:f2:79:
e5:3b:87:d5:2a:c7:02:dd:5a:c6:e1:bf:7f:18:22:86:93:a1:
ef:a3:e9:7b:df:5c:bd:be:c5:20:df:71:40:40:3b:07:70:a5:
8f:17:bf:fe:48:14:6b:39:0a:d9:e0:b7:4f:1c:5c:52:e7:85:
e0:94:10:f5:31:d7:4e:86:74:0b:c7:20:15:b0:c4:6f:3e:6b:
3f:14:0e:54:ab:bf:ac:39:90:aa:16:d4:6c:39:73:85:18:66:
08:b8:09:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:16:09 2026 by rpki-client