Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft
File: _sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft (raw, json)
Hash identifier: 4/x+UhUF7mgffqy/5IaMnbRAzoUEhj7DD7tC4aEo0oE=
Subject key identifier: E9:FA:87:FA:23:B0:AE:36:D6:F9:F4:54:59:A9:4E:53:B7:02:5C:CF
Authority key identifier: FE:C3:5D:4F:2F:2D:24:7E:A0:8C:4A:01:17:D3:28:E4:E8:ED:F1:52
Certificate issuer: /CN=fec35d4f2f2d247ea08c4a0117d328e4e8edf152
Certificate serial: 019D9B50619EEDB11CB4B92D847F5245D7B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft
Manifest number: 18C6
Signing time: Fri 17 Apr 2026 12:00:29 +0000
Manifest this update: Fri 17 Apr 2026 12:00:29 +0000
Manifest next update: Sat 18 Apr 2026 12:00:29 +0000
Files and hashes: 1: _sNdTy8tJH6gjEoBF9Mo5Ojt8VI.crl (hash: se8bgAe4f01Q+a6sWzQNhXB5UDqvkfmIdmJq5pNB6gg=)
2: ffUc8_MFuN5GuGa6IoP-AwjDMng.roa (hash: KNgb7b/tPa4J6bvxUtY9aR+BXwQn3PEB0DvOOi2I63k=)
3: sM3tnsiZQn2B9YY5mcbZ8QMKhas.asa (hash: 8b+A4QTkJNsWBcHqmtMFMLgJOAkXA+/IFEAZETTjwiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:61:9e:ed:b1:1c:b4:b9:2d:84:7f:52:45:d7:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fec35d4f2f2d247ea08c4a0117d328e4e8edf152
Validity
Not Before: Apr 17 12:00:29 2026 GMT
Not After : Apr 18 12:00:29 2026 GMT
Subject: CN=e9fa87fa23b0ae36d6f9f45459a94e53b7025ccf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b5:89:5e:21:7b:3d:b1:0c:8a:09:84:d3:ab:
f9:c2:82:11:5d:9c:89:e4:27:df:0c:20:75:fa:ed:
3e:c1:75:b6:a7:a9:47:95:d0:a9:c9:37:39:de:6a:
8b:d3:d8:fb:8b:51:e6:b1:bb:ee:ec:c1:21:88:98:
bf:3b:27:df:2a:c9:ca:9c:10:da:1f:59:35:b3:c5:
22:b3:d4:e4:7d:d8:06:56:af:cc:98:4f:8c:24:53:
de:45:d1:18:25:50:3b:c6:c1:f1:1f:61:5b:d9:c7:
7b:31:42:2c:7c:05:27:35:9e:a4:ab:bd:80:31:22:
da:2c:3a:91:af:01:d9:eb:e4:f6:11:2a:0c:ea:15:
11:e4:18:54:b7:6f:5e:a9:19:65:65:19:fb:3a:96:
b1:c8:8b:5f:fa:8f:cc:b6:1d:51:02:7c:6a:5f:04:
d3:a3:b4:bd:39:b0:99:3a:35:36:aa:17:45:0a:f6:
f5:77:8f:4b:4e:16:d9:c1:2c:4c:b2:33:37:e5:30:
22:9e:85:45:37:f8:59:14:d9:11:3d:2e:ac:aa:b8:
59:2c:0c:fa:36:92:3b:04:80:bd:32:ac:1a:34:80:
49:40:4b:97:72:56:38:2c:a2:85:51:2a:a3:ae:34:
f6:41:a3:1d:05:be:aa:5b:56:b0:bd:66:f1:de:0e:
37:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:FA:87:FA:23:B0:AE:36:D6:F9:F4:54:59:A9:4E:53:B7:02:5C:CF
X509v3 Authority Key Identifier:
keyid:FE:C3:5D:4F:2F:2D:24:7E:A0:8C:4A:01:17:D3:28:E4:E8:ED:F1:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:2e:bb:2e:58:44:c7:07:cf:c1:cf:36:86:ea:1d:71:f5:4a:
d9:4a:c6:48:3b:29:e4:cd:f1:b4:4b:a5:e0:13:bc:09:d0:f5:
81:a6:34:f5:9a:7a:0e:40:ea:96:0f:b5:13:fb:6c:03:2b:a3:
dd:f3:92:21:b8:0c:8f:01:75:bc:86:ef:6e:a6:1f:fe:21:39:
dd:ac:60:e4:94:16:c2:f6:87:cb:5e:ed:ad:8f:e5:58:e3:f1:
a5:92:8f:ed:5d:d1:5c:b8:89:3d:21:37:e2:87:7a:66:46:66:
c9:d3:c4:ed:ba:4d:4f:27:59:1d:0b:34:4b:3e:9a:ce:ed:1f:
b8:7e:ef:f9:f1:7a:ff:3e:ab:47:d8:a1:4f:e5:6b:44:51:fd:
35:e7:fc:69:67:18:7f:e0:b2:49:ac:1d:a5:48:71:b5:85:ff:
c3:10:c8:43:77:bb:c6:d3:5c:4c:22:ad:41:f8:5c:b8:b2:07:
e2:e9:00:d0:de:ea:3b:0a:87:9d:29:d2:8f:64:fa:31:ba:ca:
d5:55:36:c8:56:58:f3:03:a0:d9:ed:e6:43:31:e6:04:44:ac:
17:8e:ba:23:c8:84:dd:f9:99:da:5f:48:d0:b6:c4:be:4f:08:
84:81:90:1b:95:7f:27:ed:e9:0d:4c:01:0e:c0:8a:47:2e:dd:
14:fd:46:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:41:31 2026 by rpki-client