Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.mft
File: 0rtm-96q__Q7llCx9svk8p7a9Yw.mft (raw, json)
Hash identifier: qaFq6Qjf6KqJ+ncLRKlW1zFAz9O2MZC8ec5vldpcNdY=
Subject key identifier: 34:AB:8A:31:F8:C1:0E:20:6E:64:52:DF:B4:06:17:69:55:27:87:CF
Authority key identifier: D2:BB:66:FB:DE:AA:FF:F4:3B:96:50:B1:F6:CB:E4:F2:9E:DA:F5:8C
Certificate issuer: /CN=d2bb66fbdeaafff43b9650b1f6cbe4f29edaf58c
Certificate serial: 019D99627F88DBADBDD9D0330764A0BC1DF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0rtm-96q__Q7llCx9svk8p7a9Yw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 03:01:02 +0000
Manifest this update: Fri 17 Apr 2026 03:01:02 +0000
Manifest next update: Sat 18 Apr 2026 03:01:02 +0000
Files and hashes: 1: 0rtm-96q__Q7llCx9svk8p7a9Yw.crl (hash: /Do02CUWn+TQl6GeaERduC1YzxTrJvjRmHqOP9VALeU=)
2: eqRZK_JGFaT4pOqnhAyJvjkUCoA.roa (hash: jItvJdxi3E9SOd6i/gjBeEHoNNhvY/8u3V8hrLU5X7c=)
3: pdBEIOtIWrJ0TSk32Jmh_QpJkK8.asa (hash: sxkJU3Q3LaQ8TF/6A6BbBQGeo7WMZ4PLTizqyUpaQgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0rtm-96q__Q7llCx9svk8p7a9Yw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:7f:88:db:ad:bd:d9:d0:33:07:64:a0:bc:1d:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2bb66fbdeaafff43b9650b1f6cbe4f29edaf58c
Validity
Not Before: Apr 17 03:01:02 2026 GMT
Not After : Apr 18 03:01:02 2026 GMT
Subject: CN=34ab8a31f8c10e206e6452dfb4061769552787cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:55:f1:97:fd:4b:43:f7:eb:ae:2a:dd:c0:e2:
16:94:ab:45:1b:cc:2d:1b:49:e9:45:17:74:ed:33:
d0:f7:8e:d6:5c:3c:a7:c7:ac:91:83:79:08:0f:c1:
18:bf:b3:02:8d:27:d4:e7:09:f7:66:3c:06:37:bb:
ec:16:e2:cc:61:0f:b8:5b:55:08:37:03:0a:a5:44:
f0:8d:e4:b7:a9:1a:7c:c8:59:5b:c5:f4:c4:89:3c:
16:46:51:8e:d9:b1:a1:97:fc:af:8b:9b:62:d8:f9:
15:08:b5:51:51:1f:be:92:c6:c4:9a:5a:88:bd:57:
ed:c9:5e:7a:8b:92:28:18:5e:8b:64:67:28:af:b7:
a3:ae:14:a1:a9:ea:62:3c:fe:53:ab:b8:9b:ba:c3:
72:e7:23:9a:26:9d:8b:a6:d9:35:fb:1e:5a:c5:a1:
23:c1:d1:be:1c:1e:5d:a0:72:1f:09:ea:ec:41:6c:
bc:cc:1c:c8:0c:ba:e7:0e:44:e4:04:75:ef:33:2e:
20:6b:d4:c5:01:e9:55:b9:20:3e:77:f3:c5:92:57:
79:0a:e2:b0:2d:42:0d:96:ef:b8:52:46:29:52:23:
a4:3f:a3:38:35:92:3e:e9:70:ad:d8:eb:7d:9d:d8:
1f:94:99:58:95:c7:75:d0:df:54:89:16:f1:dc:53:
5a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:AB:8A:31:F8:C1:0E:20:6E:64:52:DF:B4:06:17:69:55:27:87:CF
X509v3 Authority Key Identifier:
keyid:D2:BB:66:FB:DE:AA:FF:F4:3B:96:50:B1:F6:CB:E4:F2:9E:DA:F5:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0rtm-96q__Q7llCx9svk8p7a9Yw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:83:f9:b5:45:7f:ff:80:80:1c:91:09:9e:69:80:68:53:fb:
9c:fb:5f:f1:99:fb:aa:47:21:97:87:3f:d1:a6:b1:3d:d4:c7:
85:76:93:9a:ec:19:65:14:60:d9:4a:c2:d4:01:77:2d:1c:69:
bb:16:31:d0:5e:3d:44:68:01:f6:f7:d8:01:4a:c2:5c:d8:c8:
1a:b4:3d:a3:7a:95:86:3f:81:ff:aa:d4:37:c0:b8:b5:7f:ad:
3e:2c:f3:11:59:fd:62:bf:52:91:24:86:2c:80:fc:fc:f3:b7:
ef:30:9d:11:a7:53:4d:4a:96:29:e6:4f:12:eb:84:8e:12:bb:
d8:99:87:72:d5:ab:70:96:f3:3c:5b:f4:01:25:75:28:2c:a7:
36:32:bc:dd:25:e4:4a:a4:a7:92:11:95:22:24:29:09:f9:59:
26:e0:7b:d6:eb:3d:23:dd:f9:6e:cc:cc:d2:ce:f0:91:47:41:
d0:75:eb:d7:a7:01:b1:d1:34:16:54:4c:72:83:b9:e6:50:a4:
11:2e:59:40:1a:63:ca:ec:bd:da:d3:93:38:60:2e:32:a7:47:
60:12:c7:b8:bb:7b:5d:33:58:0b:5b:66:16:86:ee:94:88:52:
2f:5c:5f:54:ff:82:44:9c:c2:03:90:eb:b8:1c:40:d6:82:ed:
29:07:84:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:58:36 2026 by rpki-client