Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft
File: urIywdctwcq72hbIcOyUHUWKn9w.mft (raw, json)
Hash identifier: 5JZYgylpJBAwVYNSf1WrU5udPzyAgVrdTtndsAMxnXY=
Subject key identifier: 0A:7B:30:74:12:CF:FE:F6:AA:CE:01:65:2E:F1:EA:6C:5B:C3:2C:B5
Authority key identifier: BA:B2:32:C1:D7:2D:C1:CA:BB:DA:16:C8:70:EC:94:1D:45:8A:9F:DC
Certificate issuer: /CN=bab232c1d72dc1cabbda16c870ec941d458a9fdc
Certificate serial: 019D9B50D386D08F0FC09546C1B8091532D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urIywdctwcq72hbIcOyUHUWKn9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 12:00:58 +0000
Manifest this update: Fri 17 Apr 2026 12:00:58 +0000
Manifest next update: Sat 18 Apr 2026 12:00:58 +0000
Files and hashes: 1: PzKWoUJeFLqjUWS7LgF4BdwM7PI.roa (hash: OsmHic4Ai/0j0JqDsk2Y5rGOjUKPGoeMip/8Vo2h1CM=)
2: UsG3baUGIxj41J_YNnv0F0uvJ9g.roa (hash: Ou9qv1YwHjFroWI++/0y93X1Q7gw8mUqZv7cZxbQ++U=)
3: urIywdctwcq72hbIcOyUHUWKn9w.crl (hash: 7jAZR7dEebF5i13F0JTVVNJo8ObkFFQr4Wak80IBbRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/urIywdctwcq72hbIcOyUHUWKn9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:d3:86:d0:8f:0f:c0:95:46:c1:b8:09:15:32:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bab232c1d72dc1cabbda16c870ec941d458a9fdc
Validity
Not Before: Apr 17 12:00:58 2026 GMT
Not After : Apr 18 12:00:58 2026 GMT
Subject: CN=0a7b307412cffef6aace01652ef1ea6c5bc32cb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:81:07:6a:67:81:fa:cb:a3:c0:6b:d3:d7:37:
31:9f:ba:c6:0d:fc:a4:d1:8c:ae:be:05:07:03:72:
df:b3:0b:6c:6d:e0:90:88:0e:5d:f9:97:f7:ee:ea:
14:bd:2a:97:48:a2:d3:6c:55:e6:25:ef:b6:b7:ab:
18:06:f1:fc:41:6f:d5:dc:ae:b3:b4:93:b5:fd:82:
a1:2b:0a:6d:57:1f:41:8a:3e:a6:18:bb:a3:d7:d8:
29:8c:66:68:85:ef:3b:9c:14:ed:15:da:c0:08:d2:
71:3c:b4:19:1b:4d:b1:e9:3b:d4:6e:8b:e3:23:61:
8c:6e:b8:33:57:6c:d8:78:df:20:c9:d9:8d:38:b9:
4d:78:0f:53:67:d4:8d:a3:08:87:dd:f7:92:0f:fd:
a0:35:22:e4:89:02:d9:13:c3:b9:a3:b0:5f:00:95:
4d:12:25:03:88:4f:20:b4:e2:76:6f:f5:33:ff:9c:
67:ef:11:38:eb:89:44:a9:bf:7e:e9:34:95:46:98:
5c:40:53:a5:a3:54:83:42:60:e5:1e:3f:30:0b:e6:
9c:53:ab:53:96:c4:2a:a9:a6:60:63:da:76:f5:87:
46:bb:e9:f8:cc:39:87:3b:70:6d:b2:93:ae:47:ca:
77:71:42:d3:96:7f:1c:7e:ad:67:ea:94:b7:03:c6:
f1:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:7B:30:74:12:CF:FE:F6:AA:CE:01:65:2E:F1:EA:6C:5B:C3:2C:B5
X509v3 Authority Key Identifier:
keyid:BA:B2:32:C1:D7:2D:C1:CA:BB:DA:16:C8:70:EC:94:1D:45:8A:9F:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urIywdctwcq72hbIcOyUHUWKn9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:59:b1:0c:da:f3:f0:0b:f7:6d:25:dd:97:28:3e:16:ac:f6:
8f:81:fc:c6:d9:52:f8:44:dc:13:99:b1:2d:da:8a:04:18:ad:
19:47:77:95:5d:a9:c3:bf:b5:83:5f:d7:16:f8:2b:b0:85:3c:
cc:b1:61:b9:1b:dd:93:b0:a9:74:8e:06:80:eb:04:44:15:44:
1e:e0:7e:41:5a:71:26:73:6d:66:a9:45:5c:6e:df:81:d3:3c:
65:39:bc:95:c6:ee:7f:d5:ff:80:eb:b8:76:ba:8e:4f:e3:55:
b7:70:c4:a6:2b:44:7d:af:35:12:f4:17:ef:7a:bc:04:a0:8e:
84:d9:f3:cc:cd:9a:b6:b0:f0:d0:f6:5b:96:58:a6:35:d7:34:
a3:a8:c5:4d:dd:4d:22:07:1b:d9:b3:16:7d:34:98:0a:63:e2:
c5:6a:1d:f9:e7:e2:ad:4b:e1:1e:5d:5a:19:6c:c5:67:74:dd:
94:f3:85:94:a0:b1:18:30:cb:e2:89:36:99:7d:c4:c8:84:39:
e4:f4:d6:b7:f8:43:74:1c:ab:c2:05:e4:a6:5d:69:b6:6b:96:
2c:71:1d:0a:27:fb:1a:8d:fb:52:58:41:55:fd:fc:34:31:03:
f1:55:a5:31:65:7c:b3:8c:9e:0a:61:2b:c3:64:6b:43:43:5f:
b8:e4:cc:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:30:23 2026 by rpki-client