Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.mft
File: pByW6THu5BuJnWLH24NjNEajxCs.mft (raw, json)
Hash identifier: 3lbMki5FtbpqNTJU/gU1GxWQs/v+D3605nnddCjIvLk=
Subject key identifier: CC:6D:E7:05:93:FE:35:E0:66:9D:6D:79:EF:47:F3:6A:55:CF:2E:62
Authority key identifier: A4:1C:96:E9:31:EE:E4:1B:89:9D:62:C7:DB:83:63:34:46:A3:C4:2B
Certificate issuer: /CN=a41c96e931eee41b899d62c7db83633446a3c42b
Certificate serial: 019D9BBE3549C2CA7C28BE8DD00BC47B1966
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pByW6THu5BuJnWLH24NjNEajxCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 14:00:27 +0000
Manifest this update: Fri 17 Apr 2026 14:00:27 +0000
Manifest next update: Sat 18 Apr 2026 14:00:27 +0000
Files and hashes: 1: 08erSysabwz5oeBdP8PLy755AHA.asa (hash: RIOLOsPK24oYYh42JNS8I14+Rr+oEV6iLUu+Usr4/PY=)
2: Ug2vF1vgPHmEqRhi6uOzDzFa8k4.roa (hash: J3X4+yL+W+OJhZWrAFHs4AhqGxikLkSzill4Qp4q87Q=)
3: pByW6THu5BuJnWLH24NjNEajxCs.crl (hash: cJv8IqISE7ACjKiiOKemJETlMJKAk9psAUJghXsfGnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pByW6THu5BuJnWLH24NjNEajxCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:35:49:c2:ca:7c:28:be:8d:d0:0b:c4:7b:19:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a41c96e931eee41b899d62c7db83633446a3c42b
Validity
Not Before: Apr 17 14:00:27 2026 GMT
Not After : Apr 18 14:00:27 2026 GMT
Subject: CN=cc6de70593fe35e0669d6d79ef47f36a55cf2e62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ed:17:f0:88:8e:d3:e7:36:a8:25:f6:67:4a:
48:ca:69:f9:af:82:ff:c7:61:ac:4f:cd:5b:04:e8:
50:dc:db:0d:4a:0f:79:51:31:60:00:65:11:eb:5e:
bd:87:50:24:cc:ac:0d:f6:7c:17:48:c1:3d:a8:7c:
2b:9d:e7:ef:81:77:cd:87:b1:d1:f1:8f:fb:13:3b:
0f:f2:ff:ff:25:e4:f3:92:03:f4:89:ca:79:33:89:
64:10:64:ed:e1:c2:2b:ad:03:1f:0f:1b:30:a3:3d:
e9:18:66:5d:11:2c:e9:47:79:12:82:fc:57:08:53:
cf:6b:57:fd:47:f0:ba:5b:a1:7b:6a:64:e2:44:f2:
f1:66:76:53:37:90:1a:77:b3:f4:03:79:7f:89:a6:
51:e5:e7:e9:c5:06:38:55:35:8a:b9:76:e6:15:d8:
f8:1b:9d:86:6f:cf:df:07:f0:a7:03:c6:41:4c:40:
03:da:f3:47:f0:a7:6c:e9:cf:52:cd:c1:45:fb:d7:
61:3c:bd:cb:84:8f:ac:e8:84:7e:48:1d:a4:92:34:
44:90:0a:e7:37:10:1e:0e:85:38:3f:76:df:3c:93:
9e:61:5e:ae:53:f2:24:1c:30:11:14:a6:82:74:ed:
fd:c1:0f:22:ac:ba:c9:41:7d:3e:c8:10:e4:54:18:
46:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:6D:E7:05:93:FE:35:E0:66:9D:6D:79:EF:47:F3:6A:55:CF:2E:62
X509v3 Authority Key Identifier:
keyid:A4:1C:96:E9:31:EE:E4:1B:89:9D:62:C7:DB:83:63:34:46:A3:C4:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pByW6THu5BuJnWLH24NjNEajxCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:5e:d4:e8:b1:2d:89:0f:87:72:f0:8a:13:1c:6f:f6:48:24:
39:78:6e:eb:03:d0:a8:a1:52:0d:90:b6:bc:37:da:30:24:78:
a9:15:b4:7d:9e:76:5d:2a:dc:70:4b:89:b3:28:fd:36:f5:5f:
b4:cd:a1:ca:67:ac:d9:9e:3d:c2:b0:61:4a:ec:b0:3b:d2:e4:
ed:06:65:cf:f1:f2:d8:3d:ce:43:10:f1:5c:62:b0:ff:c6:c9:
62:78:55:76:52:63:0a:ee:d6:08:c9:e1:d8:3a:92:d8:d3:98:
88:76:57:60:f4:0c:49:92:d1:e1:b9:02:7e:02:fc:fd:9f:35:
72:cb:03:58:8b:5c:71:33:56:5e:46:05:bc:36:59:d5:bb:32:
db:d3:2c:10:19:ab:55:12:6d:d3:a9:6e:aa:ee:64:53:88:c5:
8e:de:80:58:d2:c7:f3:39:be:0c:37:1a:e8:25:af:c7:02:53:
c1:3c:47:12:d0:98:f4:f5:78:d4:ec:c7:08:c2:dd:6e:c6:77:
fc:e7:bc:b0:5b:13:c2:1b:13:16:90:95:6c:c5:44:f5:ef:f7:
86:23:05:1e:c1:26:2a:79:7f:86:c5:67:19:a8:60:de:17:29:
6e:c7:04:b5:72:df:17:23:d8:fe:36:56:43:7b:4a:c9:4a:95:
84:6a:e8:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:57:00 2026 by rpki-client