Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/cd33d5-7bba-49e4-9ab0-78f6c804773d/1/r633xfgtvAsdujKChi1T7Ih9XGY.mft
File: r633xfgtvAsdujKChi1T7Ih9XGY.mft (raw, json)
Hash identifier: 6jWRBvkzAaNdn4zGj83DzVqYU8QiClK91xi3RJ5Zf8Y=
Subject key identifier: 0E:E2:73:AE:F2:82:2D:40:9D:E2:8E:C7:97:64:B3:DC:06:B0:05:96
Authority key identifier: AF:AD:F7:C5:F8:2D:BC:0B:1D:BA:32:82:86:2D:53:EC:88:7D:5C:66
Certificate issuer: /CN=afadf7c5f82dbc0b1dba3282862d53ec887d5c66
Certificate serial: 019D98BDD43066D90AB744C7B294A159702A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r633xfgtvAsdujKChi1T7Ih9XGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/cd33d5-7bba-49e4-9ab0-78f6c804773d/1/r633xfgtvAsdujKChi1T7Ih9XGY.mft
Manifest number: 18BF
Signing time: Fri 17 Apr 2026 00:01:10 +0000
Manifest this update: Fri 17 Apr 2026 00:01:10 +0000
Manifest next update: Sat 18 Apr 2026 00:01:10 +0000
Files and hashes: 1: br96nbfJfdxdq-LCA_KvHZNFqIk.roa (hash: ZyqCkCl993Y1/5tl1GjhHrDKFvVu/SQ6o/9tpMFALfs=)
2: r633xfgtvAsdujKChi1T7Ih9XGY.crl (hash: 2lFT/Cp+aAndPRSicQ50XboFl/m2UoWy9reaT0RaP5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/cd33d5-7bba-49e4-9ab0-78f6c804773d/1/r633xfgtvAsdujKChi1T7Ih9XGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/cd33d5-7bba-49e4-9ab0-78f6c804773d/1/r633xfgtvAsdujKChi1T7Ih9XGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/r633xfgtvAsdujKChi1T7Ih9XGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 00:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:d4:30:66:d9:0a:b7:44:c7:b2:94:a1:59:70:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afadf7c5f82dbc0b1dba3282862d53ec887d5c66
Validity
Not Before: Apr 17 00:01:10 2026 GMT
Not After : Apr 18 00:01:10 2026 GMT
Subject: CN=0ee273aef2822d409de28ec79764b3dc06b00596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:38:42:4e:d3:21:1f:78:bd:78:4a:a8:86:c6:
8a:bb:fe:81:8a:97:8c:de:65:82:bf:30:97:cd:7a:
e4:43:c5:be:cb:ca:8a:30:f5:e8:a6:74:ce:58:91:
2a:aa:e2:6a:09:91:c5:81:eb:38:c7:d9:4f:9d:f8:
72:a9:c8:a4:b5:1c:ef:b3:13:0f:2d:dd:25:c8:7f:
a0:85:ce:4d:28:e0:fc:8d:3a:19:74:99:ec:1d:82:
96:bb:bb:c0:03:67:41:79:25:19:06:13:eb:ac:2e:
5f:1f:1e:49:76:2d:5a:26:2d:b4:8b:fa:2c:31:8d:
26:10:aa:7e:4c:2d:7c:f3:df:39:05:e9:ce:b1:45:
9d:ec:61:f3:9b:16:06:1b:7e:cd:e3:3f:0f:f4:8b:
9f:2d:8a:72:ed:cd:b8:60:de:bf:10:e4:52:6e:69:
28:1e:1a:14:a2:f0:8f:7a:23:4e:66:68:03:c2:28:
d2:1c:4c:89:ab:54:f1:d5:73:f9:17:4d:c6:a8:1b:
c3:c7:d4:97:f1:b9:d8:e8:d0:12:52:4f:c0:7c:0d:
40:45:8d:5b:ce:5c:60:6e:03:6e:ed:b5:c7:7a:a2:
aa:50:fc:1b:6c:e2:4b:a7:68:7b:21:5e:20:1a:eb:
67:4c:ca:3d:97:fe:ab:7e:2d:ad:8d:65:83:11:de:
7d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:E2:73:AE:F2:82:2D:40:9D:E2:8E:C7:97:64:B3:DC:06:B0:05:96
X509v3 Authority Key Identifier:
keyid:AF:AD:F7:C5:F8:2D:BC:0B:1D:BA:32:82:86:2D:53:EC:88:7D:5C:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r633xfgtvAsdujKChi1T7Ih9XGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/cd33d5-7bba-49e4-9ab0-78f6c804773d/1/r633xfgtvAsdujKChi1T7Ih9XGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/cd33d5-7bba-49e4-9ab0-78f6c804773d/1/r633xfgtvAsdujKChi1T7Ih9XGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:3f:ed:0f:3b:45:2b:70:66:73:39:f9:a0:e2:92:0e:57:b7:
38:73:6e:a5:53:b7:a2:b5:76:fb:0c:f1:41:9a:e1:6a:e6:34:
74:a4:fa:f9:b3:c8:78:56:7c:f0:49:a6:af:24:39:6e:9b:19:
47:5c:f5:ac:32:ec:ad:62:a6:5f:a2:db:1a:ae:41:b1:cc:5c:
e3:e5:3e:ce:b5:6f:27:81:4d:68:50:4c:b4:cc:f8:27:94:17:
9a:04:16:8c:c7:56:5c:c5:54:f0:54:d7:72:dd:da:fa:29:82:
6b:ef:d9:9f:16:21:d5:69:a2:d1:f0:aa:59:2a:8a:8a:52:68:
4f:e8:da:4b:05:8d:c2:4a:86:86:e4:a9:17:ba:c5:e7:b2:95:
a6:91:2e:b2:07:83:ef:10:90:82:3a:f3:04:d3:47:26:5e:1b:
af:7d:0a:c6:be:c0:5f:2b:77:c7:08:a3:fe:d2:c5:88:08:55:
36:b4:af:56:69:a3:b9:fa:76:dc:24:db:b3:1d:e4:f1:be:81:
03:ec:9a:69:2a:8b:bf:e5:80:a4:bb:63:c0:38:74:5f:3b:de:
9b:5e:3d:1f:1f:1b:92:1c:2d:49:af:c4:1a:b9:80:00:d5:17:
c1:cb:ed:c2:af:f9:a0:21:d6:47:25:9a:03:1b:fc:80:60:8f:
73:ee:5a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:24:01 2026 by rpki-client