Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
File: mR5LF54JU7nsxYWtmFmgC-NWgAE.mft (raw, json)
Hash identifier: jJCVQp4nK4ydVjPP2WUnzIPxy0y3PPzR8gZW7HoUFNE=
Subject key identifier: C3:4A:BF:E3:15:33:24:03:B4:1A:3A:C0:67:73:FB:00:51:E6:30:B0
Authority key identifier: 99:1E:4B:17:9E:09:53:B9:EC:C5:85:AD:98:59:A0:0B:E3:56:80:01
Certificate issuer: /CN=991e4b179e0953b9ecc585ad9859a00be3568001
Certificate serial: 019D9AAB84F44BEE14C06FC2561BF0FA8A5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
Manifest number: 18C6
Signing time: Fri 17 Apr 2026 09:00:24 +0000
Manifest this update: Fri 17 Apr 2026 09:00:24 +0000
Manifest next update: Sat 18 Apr 2026 09:00:24 +0000
Files and hashes: 1: KFiiFWif923SIcwC9nBmJ-HUVJ4.roa (hash: ycwpSj4ZG3+CrkzSV++20ftzs6baQIacEYL2lp7sLR0=)
2: bQVjKkmobhkw7mkwIs0nkBnkqic.roa (hash: 8Om2d8lOTV+LsZTeylJMIewyhtQBsCBhqCI89TKYwM0=)
3: mR5LF54JU7nsxYWtmFmgC-NWgAE.crl (hash: r0pcvfStxBuP3ZFRBMf1wY5w09HgxpZ+NhY2cM52uj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:84:f4:4b:ee:14:c0:6f:c2:56:1b:f0:fa:8a:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=991e4b179e0953b9ecc585ad9859a00be3568001
Validity
Not Before: Apr 17 09:00:24 2026 GMT
Not After : Apr 18 09:00:24 2026 GMT
Subject: CN=c34abfe315332403b41a3ac06773fb0051e630b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:23:86:01:e2:60:13:44:83:f7:48:9c:7c:08:
b9:7b:99:94:a5:e3:10:f0:d7:b4:33:8d:b7:0d:04:
c4:c9:a9:0b:40:e1:a6:35:85:ea:c5:91:bd:53:47:
de:ad:a2:5a:5c:58:33:6f:9b:33:e8:e8:37:23:5d:
18:f3:52:d7:21:8c:35:dd:67:dc:f7:80:49:55:7d:
4e:61:76:26:fb:ab:ba:44:4c:1a:66:fc:20:a3:a3:
9f:aa:13:fa:74:d8:d9:75:eb:c2:01:79:d1:56:49:
89:5d:f0:fe:7a:01:7c:24:cc:98:41:f8:fe:25:06:
c2:28:b9:0e:07:bf:92:fd:bd:92:aa:e4:50:e5:bb:
b5:ef:8c:8f:c4:bd:1d:93:f6:dc:8f:9f:7a:92:db:
61:32:39:88:92:38:19:78:5a:8f:9f:12:68:e9:0c:
71:37:5c:df:eb:86:13:67:4d:5c:ea:1c:8b:56:53:
7c:14:47:b8:9e:17:9d:a5:77:32:3f:84:33:e1:0e:
52:21:78:e7:a4:25:7b:78:05:cc:1c:7b:56:53:bb:
68:87:c3:69:32:fd:f6:ad:78:9b:9c:3c:5e:57:72:
60:69:06:9b:3c:3e:53:b2:6f:2f:03:0a:21:5f:99:
89:55:20:da:6a:35:1b:f4:ac:3e:68:70:bc:e9:89:
b3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:4A:BF:E3:15:33:24:03:B4:1A:3A:C0:67:73:FB:00:51:E6:30:B0
X509v3 Authority Key Identifier:
keyid:99:1E:4B:17:9E:09:53:B9:EC:C5:85:AD:98:59:A0:0B:E3:56:80:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:12:a7:53:c9:12:f7:2d:9f:65:62:67:0b:15:8d:e9:bd:9c:
e8:37:fa:f6:91:69:71:a5:1e:ab:e3:ac:91:b4:ee:f6:8b:cf:
62:9e:01:a8:bf:20:12:e7:b4:a8:97:9e:c8:24:44:af:b0:18:
ba:68:40:9e:7e:09:33:74:7e:0c:ef:ab:ef:62:f8:af:79:50:
2d:ed:88:e8:2e:fe:be:40:0c:cd:ce:c9:60:bc:8d:17:6f:23:
a5:42:19:88:27:ce:36:1e:80:fb:a5:5c:8d:a4:02:c3:ca:28:
8b:41:3c:29:fb:21:40:d6:47:1a:aa:c3:ea:c9:c9:49:a3:20:
1b:a3:dc:51:46:f5:66:df:6a:e7:77:bd:53:cb:9d:5a:c1:16:
08:b6:26:b7:04:8c:c7:12:91:66:42:73:90:29:c1:7b:a7:a5:
58:b6:37:13:3c:de:0a:e1:e7:50:fd:d0:41:b8:98:09:ee:4c:
a5:76:31:c2:0d:47:73:d4:a3:65:62:87:dd:31:a2:7e:39:1c:
21:93:98:f0:c6:8c:e6:83:39:89:3d:de:b3:b9:1e:a2:6d:b6:
14:64:a6:cb:1d:6e:d9:1c:6a:eb:d6:80:38:01:d1:33:7a:ea:
a8:ae:1a:48:48:2f:bb:db:d1:32:2b:85:cc:e5:63:2d:41:22:
5c:16:bc:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:20:28 2026 by rpki-client