Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.mft
File: M-hVC8yfs7FAJgwp1p94mXjcwJo.mft (raw, json)
Hash identifier: WEohSfec2Vn9ZV93zgpFWUnLrZG7nN24Le+glJKZSos=
Subject key identifier: 48:0F:D8:B1:62:87:52:C1:F6:06:70:B1:FE:7A:4F:FD:02:AA:BF:0C
Authority key identifier: 33:E8:55:0B:CC:9F:B3:B1:40:26:0C:29:D6:9F:78:99:78:DC:C0:9A
Certificate issuer: /CN=33e8550bcc9fb3b140260c29d69f789978dcc09a
Certificate serial: 019D9B1A1F1CE105AB548DF60DEFA3EAE0D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M-hVC8yfs7FAJgwp1p94mXjcwJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 11:01:13 +0000
Manifest this update: Fri 17 Apr 2026 11:01:13 +0000
Manifest next update: Sat 18 Apr 2026 11:01:13 +0000
Files and hashes: 1: 3I4M3z7hk5Jaghl-IJJmyqtHR94.roa (hash: HXLoBLMS+Moi8PgCDzeYzip6BSpqWVV46UR0vIKYGy8=)
2: M-hVC8yfs7FAJgwp1p94mXjcwJo.crl (hash: oPh/+yrkcFD+iPKzaTmg6LXSP2ZTniTJXRuGYhwD8TY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/M-hVC8yfs7FAJgwp1p94mXjcwJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 11:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:1a:1f:1c:e1:05:ab:54:8d:f6:0d:ef:a3:ea:e0:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33e8550bcc9fb3b140260c29d69f789978dcc09a
Validity
Not Before: Apr 17 11:01:13 2026 GMT
Not After : Apr 18 11:01:13 2026 GMT
Subject: CN=480fd8b1628752c1f60670b1fe7a4ffd02aabf0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a9:85:ce:68:44:48:e1:72:d5:b9:72:c8:9f:
68:0f:e4:d0:60:9c:fb:21:94:c2:fa:14:4f:f6:de:
26:c5:fa:8a:c2:20:8b:99:0f:a6:c1:d9:12:21:30:
2e:5c:a3:be:0c:7f:9a:17:7f:0f:6e:de:9e:ad:b6:
dc:b2:d9:50:bd:97:6f:4b:95:28:43:ef:e4:72:c1:
85:3e:c8:90:18:32:a9:39:ee:5c:6a:5f:64:67:8a:
67:bd:02:ef:95:c4:84:ef:7f:26:55:7b:b0:c7:c8:
31:6f:ff:b1:9a:68:61:d9:24:7f:64:ad:6c:09:1e:
ee:46:83:6a:4b:80:9f:62:19:35:6b:31:5f:64:34:
40:a3:3c:ea:b5:96:0c:9d:f8:b3:ce:e9:2b:77:54:
7b:0b:14:64:c7:f6:24:02:be:0b:31:6b:b9:93:d2:
9a:04:db:1d:ed:c9:1a:8f:3d:64:37:3c:b0:d1:34:
c4:6f:89:ea:bc:3c:84:3a:d4:6f:60:99:f9:c6:f3:
56:05:b2:20:fa:fc:cd:31:c7:6e:11:33:85:c9:c2:
b9:70:26:2b:fc:d5:db:40:e6:a9:a7:ab:63:a0:f6:
e8:d9:61:20:19:4e:7a:8f:c8:6c:82:53:00:f5:32:
18:0c:71:05:3e:20:02:3d:ea:b0:bf:db:76:f0:58:
72:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:0F:D8:B1:62:87:52:C1:F6:06:70:B1:FE:7A:4F:FD:02:AA:BF:0C
X509v3 Authority Key Identifier:
keyid:33:E8:55:0B:CC:9F:B3:B1:40:26:0C:29:D6:9F:78:99:78:DC:C0:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M-hVC8yfs7FAJgwp1p94mXjcwJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:44:a6:03:1f:c9:82:f1:1a:2e:ea:2e:2d:e2:31:22:f0:61:
26:eb:c7:b9:56:7c:15:f0:40:86:7c:88:c4:69:3b:8f:ec:e1:
57:55:2f:7b:64:af:d5:ee:f8:1b:c9:7c:5e:9b:c5:3f:b3:9e:
95:15:8e:24:0a:0c:f1:7c:67:3c:cf:4e:e0:c0:28:85:0a:b4:
6a:bb:20:fa:2e:87:6b:07:7c:56:ca:9a:15:3b:d5:a3:82:1c:
54:9d:cc:18:e1:5d:11:a3:10:61:de:94:e2:37:cc:e7:70:f6:
d8:b3:a1:cc:3f:64:28:83:ea:7a:60:8c:1d:4b:61:bb:2f:19:
0d:8f:0d:e4:e6:97:bd:b5:e0:61:86:e8:94:5e:c1:8f:6b:b7:
7f:00:2b:47:67:25:34:4b:95:1d:34:e2:f1:89:2c:b6:8d:5b:
de:f1:da:d9:1b:9d:39:6b:30:73:d8:85:b2:7d:68:ad:fa:a4:
e0:f6:a4:09:86:f7:7c:ac:5a:09:e5:1a:29:ad:c6:8c:66:d1:
8b:d5:ec:26:6d:33:51:4f:70:45:fe:f0:c6:c7:a7:66:f2:b0:
b0:3c:af:32:63:8d:e3:64:e1:16:40:d3:c2:61:37:db:b1:85:
da:3b:12:5b:4e:27:79:c7:e3:30:db:66:b4:42:58:1d:18:19:
5a:b6:a5:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:33:09 2026 by rpki-client