Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft
File: rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft (raw, json)
Hash identifier: XE+yVyNrYEr6rGxM4MEzhTTo+vnNgWzmLy1fPmuVim8=
Subject key identifier: 9D:F7:57:B2:A4:6A:2E:66:FE:0A:69:16:C3:10:CE:9C:1A:BF:CE:8E
Authority key identifier: AC:A7:7C:70:8A:F0:BA:1F:81:54:9C:9F:87:08:95:59:39:01:67:A5
Certificate issuer: /CN=aca77c708af0ba1f81549c9f87089559390167a5
Certificate serial: 019D996269B9F5BA63D164FE16A89234453B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft
Manifest number: 18C9
Signing time: Fri 17 Apr 2026 03:00:56 +0000
Manifest this update: Fri 17 Apr 2026 03:00:56 +0000
Manifest next update: Sat 18 Apr 2026 03:00:56 +0000
Files and hashes: 1: STxyqEZJdelIgYwPQkrFzkgfanw.roa (hash: s65hDXY2ql7cBoPqQwS0YK+flCpqESibXFG1uh5dHgQ=)
2: r3hgF8w2ISQEvnYVws0uagdgXaQ.roa (hash: fTPQMjGaJ6jaiZa2YYhiWQOETzK7JUfg3B1DmMWkq3g=)
3: rKd8cIrwuh-BVJyfhwiVWTkBZ6U.crl (hash: 6Ou6gmGY0i4dx6Tw+a9Szze3wDO0EO+wNk98pvfVLZ4=)
4: uljHeXtwPoXTWfqHenoj_DXb3ww.roa (hash: wGmp5Bh78//8aIg6gUIYujT06jT2kqD/3V641rlo7LY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:69:b9:f5:ba:63:d1:64:fe:16:a8:92:34:45:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca77c708af0ba1f81549c9f87089559390167a5
Validity
Not Before: Apr 17 03:00:56 2026 GMT
Not After : Apr 18 03:00:56 2026 GMT
Subject: CN=9df757b2a46a2e66fe0a6916c310ce9c1abfce8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:48:4c:07:4d:61:c5:af:1d:d8:44:b1:0a:92:
55:3e:52:25:4e:b8:0c:c8:73:c4:3c:85:5a:a9:a5:
a7:0d:75:a0:46:98:cd:71:0f:2d:4f:50:a2:77:9e:
9c:17:6c:a2:9a:2a:5f:03:4f:b9:de:e4:a4:be:c6:
4c:f2:3d:8f:40:b9:02:3a:aa:55:17:07:ff:4d:12:
97:20:23:f2:d6:3a:45:38:93:e8:4a:ac:96:98:27:
c6:72:fe:18:a8:cc:27:fd:ab:f8:c0:89:1b:17:16:
51:82:84:0e:dc:e7:e5:81:fd:54:79:95:d9:aa:ea:
18:58:00:da:fe:4e:43:4b:f2:d4:a9:6c:5c:03:c5:
f5:c4:f0:77:7d:17:0c:74:03:e7:0d:45:f2:4a:05:
e9:0c:0f:82:97:79:43:bc:09:07:f6:a7:e5:cb:2e:
d3:a1:e4:dd:dc:c1:fe:28:ad:68:b2:4c:b6:3e:a5:
4d:56:cc:c0:91:69:81:6c:08:f8:e1:f3:c5:74:a5:
1f:d8:93:d1:4f:29:0c:cd:b8:87:1c:da:c2:e0:9d:
6f:14:02:63:d8:b6:3b:e8:71:6e:6b:bc:99:c1:58:
22:bb:45:9a:1b:9f:e9:d9:14:5f:04:60:9a:b6:86:
88:37:77:f4:c5:61:6b:18:1e:ca:01:b9:80:85:6c:
1f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:F7:57:B2:A4:6A:2E:66:FE:0A:69:16:C3:10:CE:9C:1A:BF:CE:8E
X509v3 Authority Key Identifier:
keyid:AC:A7:7C:70:8A:F0:BA:1F:81:54:9C:9F:87:08:95:59:39:01:67:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:89:41:a3:91:29:72:62:e8:a0:2c:86:eb:b0:1f:eb:cb:59:
7a:f4:6c:95:ec:4c:18:58:33:b8:7a:5c:e2:20:fa:53:55:b1:
98:9e:0c:cc:c9:e7:c6:cf:d1:51:13:0d:26:3f:9b:9b:74:8e:
f1:6d:2c:48:da:90:24:82:8c:95:24:9a:2e:c2:b0:49:51:1e:
cf:58:c5:45:c1:27:02:c0:99:2a:4b:3b:57:bb:94:bb:37:57:
2d:fc:f0:ae:5d:22:49:63:c3:bd:65:fb:a8:96:0e:6b:10:f1:
85:fd:48:25:57:c6:a7:96:08:04:56:ea:f5:1f:d1:ea:b8:78:
fc:16:48:16:2c:e5:79:6e:9d:14:72:e9:39:fc:9c:ae:60:e7:
b8:93:aa:2f:ae:e9:39:3e:d5:8b:b2:24:01:86:70:6e:0e:2a:
da:76:5e:68:17:9a:40:5e:64:1a:4e:5e:6d:64:c2:a2:61:01:
1b:05:28:d1:ec:7d:7c:88:f2:d2:22:7e:58:7b:57:4b:1e:78:
78:e3:cb:4f:f0:b1:e1:70:fc:8a:fe:9e:d5:71:b8:e6:52:4b:
c8:f1:08:4e:55:60:27:f3:54:f2:82:7d:27:00:59:d0:e4:4f:
60:10:59:0e:5b:a8:c3:13:61:ed:25:b4:e0:d8:6c:bc:ba:b0:
69:a5:c6:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:25:11 2026 by rpki-client