Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/373414-9ce4-46f5-940e-49c24292e9bd/1/RlDGwCqb3k4XGH8FsOypUEg7-S0.mft
File: RlDGwCqb3k4XGH8FsOypUEg7-S0.mft (raw, json)
Hash identifier: JrsvOG8k659GxvPuALnAmi4BQY8mqb0dT2teuwPqJIw=
Subject key identifier: AB:A3:88:CC:D6:B7:A2:0D:6C:05:D5:A5:EB:32:BA:BB:2A:6D:19:C7
Authority key identifier: 46:50:C6:C0:2A:9B:DE:4E:17:18:7F:05:B0:EC:A9:50:48:3B:F9:2D
Certificate issuer: /CN=4650c6c02a9bde4e17187f05b0eca950483bf92d
Certificate serial: 019D98BD80DD5E35088A73C5AA2665AD87CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RlDGwCqb3k4XGH8FsOypUEg7-S0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/373414-9ce4-46f5-940e-49c24292e9bd/1/RlDGwCqb3k4XGH8FsOypUEg7-S0.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 00:00:49 +0000
Manifest this update: Fri 17 Apr 2026 00:00:49 +0000
Manifest next update: Sat 18 Apr 2026 00:00:49 +0000
Files and hashes: 1: NmmcVUfgK3TWQwUhMMatVOxVYB4.roa (hash: 9DQYkjCMrtUdnqAskr29sPlJq2qt06fWYtuUEIlYHZc=)
2: RlDGwCqb3k4XGH8FsOypUEg7-S0.crl (hash: 866UcOS3M+9ACHDWSQfL27PZMSZLsD6tPKFhQGtbJg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/373414-9ce4-46f5-940e-49c24292e9bd/1/RlDGwCqb3k4XGH8FsOypUEg7-S0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/373414-9ce4-46f5-940e-49c24292e9bd/1/RlDGwCqb3k4XGH8FsOypUEg7-S0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RlDGwCqb3k4XGH8FsOypUEg7-S0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:80:dd:5e:35:08:8a:73:c5:aa:26:65:ad:87:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4650c6c02a9bde4e17187f05b0eca950483bf92d
Validity
Not Before: Apr 17 00:00:49 2026 GMT
Not After : Apr 18 00:00:49 2026 GMT
Subject: CN=aba388ccd6b7a20d6c05d5a5eb32babb2a6d19c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1f:2d:f5:d8:e0:7f:27:41:d1:b2:e7:f8:8f:
d4:62:a2:a1:a5:74:22:43:26:81:ec:d9:09:d5:c4:
a3:e6:30:6b:3c:16:80:e5:97:e8:e3:21:09:82:a3:
0d:2a:54:b5:9e:16:cb:a5:1d:28:d2:f1:f8:aa:f6:
5c:6d:46:8d:18:b6:77:97:5f:05:20:74:3d:d0:31:
b3:61:79:e2:49:f2:45:e3:14:ff:4a:bf:ab:f6:25:
54:50:5c:e6:6f:18:27:55:65:4a:a6:90:dd:54:54:
22:e1:63:a2:12:9c:2b:13:36:6d:91:7f:e8:cf:81:
c6:61:3e:70:a9:35:94:49:30:96:7e:26:07:64:87:
c8:91:e2:e9:78:c7:ba:74:d5:5a:a0:65:5a:27:da:
41:10:26:77:47:a0:17:e8:b3:08:be:fc:8f:55:bc:
f5:8a:21:64:fd:9c:e9:99:11:3a:22:81:8c:d0:a0:
79:34:7c:d3:0a:73:9d:69:0b:0f:e8:ba:44:4d:9e:
5f:b6:9e:a0:42:2b:4a:41:ed:f3:75:b0:25:58:f9:
b4:98:91:00:e7:0c:8f:31:b2:7a:ec:79:8f:33:68:
72:ae:ec:92:2e:47:14:bf:6b:c5:bf:34:a8:80:66:
b1:49:cc:c3:82:ac:cb:7d:a6:72:96:9a:05:62:33:
c4:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:A3:88:CC:D6:B7:A2:0D:6C:05:D5:A5:EB:32:BA:BB:2A:6D:19:C7
X509v3 Authority Key Identifier:
keyid:46:50:C6:C0:2A:9B:DE:4E:17:18:7F:05:B0:EC:A9:50:48:3B:F9:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RlDGwCqb3k4XGH8FsOypUEg7-S0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/373414-9ce4-46f5-940e-49c24292e9bd/1/RlDGwCqb3k4XGH8FsOypUEg7-S0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/373414-9ce4-46f5-940e-49c24292e9bd/1/RlDGwCqb3k4XGH8FsOypUEg7-S0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:e0:f5:8e:2f:f6:93:e6:9b:48:63:1b:f2:18:4b:f5:b9:de:
f0:be:1e:d4:d4:9d:e2:99:36:b7:d1:7a:3b:a9:5d:0b:91:e6:
4d:5f:b4:62:ae:2f:9c:b8:4a:c5:95:5b:95:d5:cf:a2:34:a5:
0f:5c:2b:89:c8:03:07:47:4b:e2:26:c0:eb:d5:b0:05:a1:86:
f7:e6:1e:43:ed:2d:41:93:2f:85:fe:44:65:d1:40:b1:c9:5c:
7b:e5:62:d4:57:57:32:05:f6:93:01:b5:54:5f:07:62:7f:66:
0b:20:f4:1c:8d:10:66:01:f0:50:6c:3c:c2:53:b9:01:24:c3:
83:6a:66:ed:76:d7:e9:45:35:22:59:02:75:82:4f:85:0f:72:
f2:8f:e9:2d:9d:11:bd:10:ee:a2:ce:25:d0:e1:06:e8:97:f9:
a7:24:92:c8:50:53:16:13:b5:68:f2:9e:b2:de:35:b0:af:7a:
d1:44:bb:aa:9a:d2:e4:d8:c9:db:cc:83:cd:c1:51:3f:c5:9a:
24:71:92:43:ef:f5:61:b1:85:82:be:b2:f5:b0:e9:b5:c1:ef:
e8:ee:fb:c9:39:92:eb:33:cc:43:ae:fa:df:60:b4:52:c6:82:
b8:d4:15:eb:66:4d:a8:60:ef:a5:99:df:80:80:3c:24:c5:e8:
a1:ac:b2:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:08:16 2026 by rpki-client