Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft
File: urIywdctwcq72hbIcOyUHUWKn9w.mft (raw, json)
Hash identifier: 2bHiQ9C/TjG0zWrVqR/vg4DB5YJce9XBGQhAHkETbRg=
Subject key identifier: 3D:74:C9:B2:05:3D:AC:18:5F:53:F6:EC:D9:3F:13:D0:6C:9D:67:81
Authority key identifier: BA:B2:32:C1:D7:2D:C1:CA:BB:DA:16:C8:70:EC:94:1D:45:8A:9F:DC
Certificate issuer: /CN=bab232c1d72dc1cabbda16c870ec941d458a9fdc
Certificate serial: 019D9D3F35B133ADB3CA2D26CF75E38D8A37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urIywdctwcq72hbIcOyUHUWKn9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 21:00:58 +0000
Manifest this update: Fri 17 Apr 2026 21:00:58 +0000
Manifest next update: Sat 18 Apr 2026 21:00:58 +0000
Files and hashes: 1: PzKWoUJeFLqjUWS7LgF4BdwM7PI.roa (hash: OsmHic4Ai/0j0JqDsk2Y5rGOjUKPGoeMip/8Vo2h1CM=)
2: UsG3baUGIxj41J_YNnv0F0uvJ9g.roa (hash: Ou9qv1YwHjFroWI++/0y93X1Q7gw8mUqZv7cZxbQ++U=)
3: urIywdctwcq72hbIcOyUHUWKn9w.crl (hash: zmfZAI73bylNxsFLUvirp847WT0pf/BWoBjnk37ken8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/urIywdctwcq72hbIcOyUHUWKn9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:3f:35:b1:33:ad:b3:ca:2d:26:cf:75:e3:8d:8a:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bab232c1d72dc1cabbda16c870ec941d458a9fdc
Validity
Not Before: Apr 17 21:00:58 2026 GMT
Not After : Apr 18 21:00:58 2026 GMT
Subject: CN=3d74c9b2053dac185f53f6ecd93f13d06c9d6781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1d:b9:e5:0c:13:2e:75:f7:85:e0:f5:af:2e:
c6:4a:d3:80:cf:8a:e0:86:e4:9c:88:05:ac:b4:b9:
bd:ad:fd:31:9a:95:45:7c:dc:54:75:9a:16:1b:6d:
4b:c9:ba:8e:05:6a:0a:8c:b2:2c:4d:0b:4d:5c:8b:
ad:4b:0b:7e:49:47:d5:4e:06:64:1d:4f:b8:fa:e8:
12:a5:45:ab:f9:35:f2:72:6c:6f:f3:68:2f:42:32:
c3:da:90:c8:a2:5d:db:ed:f4:7c:bf:77:6a:e1:44:
12:78:6d:b4:76:45:9a:25:33:97:b3:cf:5e:cd:5c:
b2:df:ff:5f:f5:1c:21:af:19:80:52:fb:51:a4:93:
18:a4:0c:2f:57:ca:c2:cd:b1:40:67:93:f5:a0:4c:
07:1e:f0:4e:dc:8c:32:8c:b0:16:bb:af:ad:84:79:
e6:e8:f1:03:a7:5f:f0:1b:65:eb:c6:b7:b9:4f:fa:
3a:1a:8b:bf:73:8f:a7:ea:22:a1:3d:ed:be:ca:92:
74:ad:c4:c1:3f:c9:66:d3:5b:27:59:cb:49:ca:d8:
2d:64:b0:43:a3:99:e4:be:72:77:38:7c:3f:7b:e7:
6a:eb:9b:3f:70:af:6b:08:14:e4:36:eb:a1:22:76:
a2:70:e4:4b:70:d5:78:62:4f:2f:8d:ec:50:64:c9:
70:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:74:C9:B2:05:3D:AC:18:5F:53:F6:EC:D9:3F:13:D0:6C:9D:67:81
X509v3 Authority Key Identifier:
keyid:BA:B2:32:C1:D7:2D:C1:CA:BB:DA:16:C8:70:EC:94:1D:45:8A:9F:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urIywdctwcq72hbIcOyUHUWKn9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:ce:0d:e9:5d:82:8c:8d:e8:4e:e4:ca:d5:30:4d:08:e4:6b:
9e:3d:da:e0:75:f5:05:05:f2:a7:ca:9d:1c:d8:5a:59:6f:d7:
46:1e:ae:c3:7d:2c:f8:08:e4:ae:a4:23:93:b4:7a:7d:60:cb:
61:92:11:d0:1d:63:a9:c7:4c:75:9a:66:87:55:00:c8:51:07:
53:b0:9f:e7:c2:82:fb:db:57:28:8d:45:0d:e8:a0:73:b2:01:
55:68:6f:bc:88:92:fd:52:68:a1:c0:53:4a:4e:e5:ec:d0:ac:
8e:40:3f:3a:f7:d1:13:07:3a:8b:a5:35:0f:ff:1e:58:c7:1a:
60:da:54:1b:5c:2b:15:61:8e:47:97:e1:49:d5:22:b2:9d:21:
56:87:bb:3a:c0:bd:26:2b:46:53:47:59:4d:fb:a0:c7:cd:dd:
e9:8e:42:22:73:76:32:25:42:15:d7:67:e5:87:18:d6:fc:a5:
75:a7:5d:6a:ab:cc:ea:bd:c9:64:71:3f:db:6b:cc:f5:d3:60:
14:6b:c8:e7:f0:f3:7d:2a:af:8e:88:d3:94:ec:9a:7c:ed:aa:
03:bf:55:ee:d4:27:49:3f:df:8e:ac:3e:18:41:05:85:21:5a:
9c:e5:3b:2c:5e:d5:9a:79:82:27:f2:cd:b4:58:7d:e6:08:44:
90:ee:df:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:06:24 2026 by rpki-client