
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/94Bqw18urALMoEbWUPsivv7mjUM.mft
File: 94Bqw18urALMoEbWUPsivv7mjUM.mft (raw, json)
Hash identifier: q7RoTLSD6kVEloUarO/mj6iKzxl0BkaH1WuqUN804Z0=
Subject key identifier: 29:55:7E:6D:AA:AA:BC:41:5F:04:33:C1:D2:C4:D7:41:7B:8B:B1:80
Authority key identifier: F7:80:6A:C3:5F:2E:AC:02:CC:A0:46:D6:50:FB:22:BE:FE:E6:8D:43
Certificate issuer: /CN=f7806ac35f2eac02cca046d650fb22befee68d43
Certificate serial: 019D9962988977CE0A1E87F8328827D0C3E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/94Bqw18urALMoEbWUPsivv7mjUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/94Bqw18urALMoEbWUPsivv7mjUM.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 03:01:08 +0000
Manifest this update: Fri 17 Apr 2026 03:01:08 +0000
Manifest next update: Sat 18 Apr 2026 03:01:08 +0000
Files and hashes: 1: 94Bqw18urALMoEbWUPsivv7mjUM.crl (hash: Uar+wD2mWMaBkGaOjCnqQqWYzsc1W1bVNXTEWgG/ypI=)
2: lyCd8jSWuD5ylcHwCB_UZElDqqc.roa (hash: yIuhwu9g6Xxe3O7KESvgNx7V8m2Ye7H/CuRv/nEh5KQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/94Bqw18urALMoEbWUPsivv7mjUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/94Bqw18urALMoEbWUPsivv7mjUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/94Bqw18urALMoEbWUPsivv7mjUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:98:89:77:ce:0a:1e:87:f8:32:88:27:d0:c3:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7806ac35f2eac02cca046d650fb22befee68d43
Validity
Not Before: Apr 17 03:01:08 2026 GMT
Not After : Apr 18 03:01:08 2026 GMT
Subject: CN=29557e6daaaabc415f0433c1d2c4d7417b8bb180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8e:a6:2a:31:4c:52:f9:c2:8c:4e:ef:b2:1e:
1b:9a:fc:98:71:64:39:06:89:5a:54:a3:29:7c:cc:
6e:e0:df:89:85:94:9f:8f:4d:48:1f:9b:b9:ea:11:
86:07:ad:bd:62:18:81:fd:aa:26:04:b9:e1:b4:ec:
29:05:15:a1:8a:69:e8:fd:0e:d1:27:2b:8a:0f:be:
e2:04:04:a8:19:ed:78:79:5d:71:96:84:60:8a:cf:
7b:02:97:0f:20:b2:ea:b1:1c:9f:26:df:70:54:e7:
f1:04:bd:d4:ac:e0:29:c5:d1:23:36:5b:d6:85:8e:
a4:68:be:c7:4c:77:6a:db:58:7a:b8:17:12:86:ce:
6e:74:3f:e7:4b:e2:e0:0a:17:81:6b:a4:20:55:7d:
a1:00:ae:54:e6:c9:92:83:16:76:64:6e:f0:78:16:
ff:b4:06:ae:3b:39:0d:81:2e:3e:c8:96:00:23:ab:
a2:70:15:02:7b:3d:88:da:5d:f1:3c:20:0a:ca:27:
fd:0a:e1:7f:81:bf:7a:15:b5:79:db:6a:74:f5:da:
90:a4:38:9f:fd:48:b2:1b:70:46:8d:0e:90:55:e4:
90:73:56:41:d2:07:df:f6:3a:f0:1b:8b:5c:13:de:
13:3c:a5:ed:a7:d0:b0:bd:ec:14:8e:49:1e:72:e3:
e8:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:55:7E:6D:AA:AA:BC:41:5F:04:33:C1:D2:C4:D7:41:7B:8B:B1:80
X509v3 Authority Key Identifier:
keyid:F7:80:6A:C3:5F:2E:AC:02:CC:A0:46:D6:50:FB:22:BE:FE:E6:8D:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94Bqw18urALMoEbWUPsivv7mjUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/94Bqw18urALMoEbWUPsivv7mjUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/94Bqw18urALMoEbWUPsivv7mjUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:e3:32:0f:c7:4a:7b:25:b8:ba:f9:ce:84:a7:9c:a5:d5:48:
60:0b:ea:84:3e:6a:d7:40:00:1d:80:61:88:e1:88:06:80:87:
ce:a1:1f:cd:30:1f:fd:d8:2a:51:da:fe:2e:e1:9f:6a:30:07:
19:1c:2d:f3:cd:90:f1:b7:fe:a3:38:88:e1:8e:c5:4b:97:43:
6c:f0:62:8f:18:4e:ed:c7:b9:7d:ab:f0:1c:46:cb:cc:63:78:
33:81:f5:7e:c9:a3:3c:0e:56:a3:84:14:24:4d:41:71:03:e8:
6e:da:2c:f0:0a:74:aa:cf:74:40:8a:41:a3:62:52:c4:04:f9:
39:c8:e6:ce:18:60:a3:e2:81:70:90:81:2f:6b:40:9d:a0:40:
92:45:ac:39:c0:13:95:69:7e:02:4e:98:19:95:5e:03:5a:be:
2b:0b:74:a3:06:42:6a:7b:94:52:7b:9c:1f:28:1e:c1:4e:e8:
af:37:67:94:0d:34:e3:07:5c:2f:ff:7c:ff:b7:0f:fa:23:81:
ed:a1:d5:03:41:3b:ae:50:43:7b:14:30:46:cd:81:a1:21:c4:
bc:56:ce:56:4d:95:9d:e0:b5:86:0c:4e:b7:1a:a5:09:ae:ff:
98:be:de:c7:f6:70:70:9a:56:d5:2c:46:d1:9e:97:8c:1e:88:
e8:56:44:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:00:00 2026 by rpki-client