Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.mft
File: pK0j9tzk2Wg8KklDvTfBczXHYYo.mft (raw, json)
Hash identifier: jiobEAI7E9Q3l7SbT54lfx5RrD+wMg3Jcxo/8H3CcYE=
Subject key identifier: 00:44:B1:F1:9E:B5:65:C5:CC:5C:A5:9D:FF:15:D3:75:17:49:E7:D8
Authority key identifier: A4:AD:23:F6:DC:E4:D9:68:3C:2A:49:43:BD:37:C1:73:35:C7:61:8A
Certificate issuer: /CN=a4ad23f6dce4d9683c2a4943bd37c17335c7618a
Certificate serial: 019D9F2E45869337263B6197C49652F0B3E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pK0j9tzk2Wg8KklDvTfBczXHYYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.mft
Manifest number: 18C5
Signing time: Sat 18 Apr 2026 06:01:42 +0000
Manifest this update: Sat 18 Apr 2026 06:01:42 +0000
Manifest next update: Sun 19 Apr 2026 06:01:42 +0000
Files and hashes: 1: FQ8IH5cBqg-duSc2imKOt1dr3gc.roa (hash: zLx5O2JcZIf3WeCO72jwVB0rL1h+cp1I4W0w1x3rEC8=)
2: pK0j9tzk2Wg8KklDvTfBczXHYYo.crl (hash: 4sWjUevPmql9lBGGCexTV13hI+h+tOoa967bbSd6d14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pK0j9tzk2Wg8KklDvTfBczXHYYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 01:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9f:2e:45:86:93:37:26:3b:61:97:c4:96:52:f0:b3:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4ad23f6dce4d9683c2a4943bd37c17335c7618a
Validity
Not Before: Apr 18 06:01:42 2026 GMT
Not After : Apr 19 06:01:42 2026 GMT
Subject: CN=0044b1f19eb565c5cc5ca59dff15d3751749e7d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:6a:c9:53:4d:95:b1:f1:78:5b:00:af:0b:7f:
06:2b:ad:e7:60:8a:43:a5:ce:b5:a5:c4:aa:d8:4c:
91:a7:a2:d0:cd:83:56:8c:27:6a:57:2e:3b:9d:45:
7e:f3:c4:90:ff:a1:32:dc:5f:6d:cc:cc:82:ae:40:
56:65:aa:3b:c5:66:cd:65:f6:22:36:e3:c5:78:b8:
5b:ca:11:fb:8b:a7:93:d5:6d:18:c1:37:9f:2b:c0:
9a:08:dc:b0:21:11:33:cb:a8:c7:f4:8f:36:2c:f1:
22:0c:35:8f:8f:c6:4b:00:78:c0:ed:55:8a:0e:13:
9a:72:b9:b2:72:83:93:dd:58:26:d7:ce:0b:19:25:
72:25:e4:97:c9:d9:2b:28:2c:7c:0e:97:1d:f6:1c:
fd:87:07:4a:db:6e:00:20:16:74:a8:6e:fd:23:29:
0a:d9:c3:5e:96:de:04:3e:70:43:4b:2d:9c:41:a7:
c2:b8:55:17:a2:05:8b:7b:f0:03:1f:62:73:ee:4b:
dc:f8:87:d7:29:1f:70:d8:57:75:9b:13:97:07:dd:
18:cf:3e:55:0d:6d:d9:d9:ee:0a:36:25:04:29:6f:
d3:06:11:8b:d3:d2:f3:36:2c:a4:55:70:fe:cb:d7:
29:ad:e9:23:4e:a5:d0:08:24:fd:ca:0b:b1:d7:17:
9f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:44:B1:F1:9E:B5:65:C5:CC:5C:A5:9D:FF:15:D3:75:17:49:E7:D8
X509v3 Authority Key Identifier:
keyid:A4:AD:23:F6:DC:E4:D9:68:3C:2A:49:43:BD:37:C1:73:35:C7:61:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pK0j9tzk2Wg8KklDvTfBczXHYYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:d4:ba:a0:f0:55:9f:2e:02:ee:5c:7b:bb:45:02:bd:57:6f:
4e:8e:ba:8c:58:66:f8:99:f7:f7:73:2f:9c:36:99:dd:64:44:
d4:0f:bc:34:c5:97:b0:a1:88:4b:9c:9b:cc:9f:06:d8:d2:82:
bc:9b:ed:98:f6:84:f3:6d:3d:26:25:b6:ae:69:5e:5d:02:14:
47:b3:ca:b2:92:9c:45:3d:e6:00:17:fc:e0:92:71:b0:3b:1d:
ad:b2:2a:92:86:27:77:23:eb:cd:db:8d:65:f1:a3:be:ee:e5:
b3:9f:bb:b4:78:76:0c:da:d3:47:62:fa:e0:08:72:65:d1:66:
c1:92:3b:cd:bb:c0:7a:95:80:e4:8d:a1:79:65:48:eb:62:07:
97:aa:21:1d:53:8f:fd:cf:d0:5a:c7:55:8f:b2:22:b7:db:2a:
e7:36:f2:e5:4e:72:a9:4b:d2:59:c4:04:58:09:55:c6:28:dc:
60:95:75:21:3d:11:b1:6a:71:ea:1d:29:b7:fd:be:90:87:d7:
38:dc:0f:56:94:23:b0:07:f1:f0:65:2e:5f:e9:6e:72:40:44:
01:44:19:af:f5:21:7e:d2:c1:6f:2e:67:3d:b0:32:ec:32:b0:
eb:cb:b4:f5:78:08:4d:60:f8:1d:09:78:e9:24:43:3a:5e:b2:
d3:5b:09:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 08:54:25 2026 by rpki-client