Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.mft
File: cXHYtM9nc7WfBzLg6ejSWpt3P64.mft (raw, json)
Hash identifier: 7eVnS+yGtZYULMMtjASc8AlPdI8IQYvM5CfIgmJAPik=
Subject key identifier: 4D:BD:63:A2:97:BC:EC:AC:06:72:37:07:BA:1B:7F:F5:E6:BC:74:26
Authority key identifier: 71:71:D8:B4:CF:67:73:B5:9F:07:32:E0:E9:E8:D2:5A:9B:77:3F:AE
Certificate issuer: /CN=7171d8b4cf6773b59f0732e0e9e8d25a9b773fae
Certificate serial: 019D99D062049E06AB1CAA1AAF4206B3060E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cXHYtM9nc7WfBzLg6ejSWpt3P64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 05:01:03 +0000
Manifest this update: Fri 17 Apr 2026 05:01:03 +0000
Manifest next update: Sat 18 Apr 2026 05:01:03 +0000
Files and hashes: 1: cXHYtM9nc7WfBzLg6ejSWpt3P64.crl (hash: As8RBQdsxX28+d7XavBQmGmrXTb9t4sSlsQV7pPX4FI=)
2: mbuE0G4tXcvxYI0m6o1MnCuIyBo.roa (hash: Nc7NtzvPla6o9BhIFsNEzrhAOEqN5rOwpnDgkrScjgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.mft
rsync://rpki.ripe.net/repository/DEFAULT/cXHYtM9nc7WfBzLg6ejSWpt3P64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:62:04:9e:06:ab:1c:aa:1a:af:42:06:b3:06:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7171d8b4cf6773b59f0732e0e9e8d25a9b773fae
Validity
Not Before: Apr 17 05:01:03 2026 GMT
Not After : Apr 18 05:01:03 2026 GMT
Subject: CN=4dbd63a297bcecac06723707ba1b7ff5e6bc7426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c6:f7:45:6e:a8:15:08:5b:96:9a:b5:5d:3d:
9b:76:47:01:e4:85:0a:e8:ae:a5:91:fd:1e:02:ae:
29:94:3a:df:5b:85:94:50:79:10:b6:73:39:78:a3:
64:26:13:55:ed:bc:f0:c6:1d:f7:19:1a:90:51:04:
79:97:a3:58:e6:23:8e:92:47:9e:84:7d:7e:44:e7:
66:be:63:d0:f8:e4:d9:e6:97:0f:20:37:11:0e:89:
55:52:a3:07:50:22:57:80:06:71:96:f9:34:70:b3:
7e:d4:db:2a:fb:ae:c5:ba:5c:21:e7:82:63:dd:7e:
95:e1:6a:57:50:48:48:02:df:6d:5a:d1:e0:62:77:
52:1a:ab:1d:34:05:c3:de:cc:c3:b2:41:d6:a4:65:
b6:a0:19:ed:40:2e:65:bd:a8:48:3f:f8:59:a4:7b:
aa:e8:62:fa:36:e2:a5:e7:3f:dc:ff:37:8d:ed:53:
f8:4b:dd:dd:56:51:88:fd:37:24:b3:26:d0:44:6b:
c2:ed:e6:54:2e:76:b0:e6:9b:12:ac:c9:cc:df:0b:
92:76:73:db:a8:f0:3a:ba:ac:89:19:aa:e6:9f:75:
35:bc:fc:44:d7:7c:07:b9:10:95:16:62:96:03:49:
89:da:78:62:3b:45:99:78:f1:87:22:90:94:a0:6f:
76:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:BD:63:A2:97:BC:EC:AC:06:72:37:07:BA:1B:7F:F5:E6:BC:74:26
X509v3 Authority Key Identifier:
keyid:71:71:D8:B4:CF:67:73:B5:9F:07:32:E0:E9:E8:D2:5A:9B:77:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cXHYtM9nc7WfBzLg6ejSWpt3P64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:4c:5c:dc:bd:4c:e6:19:d4:1d:4b:d2:dd:ce:c3:00:11:37:
11:50:73:9b:88:bb:c4:82:ae:d3:7a:c6:9f:c5:85:70:cc:ca:
30:a0:2f:a3:fb:64:0b:50:4f:6a:fb:60:ea:51:1a:2f:07:e1:
ab:6c:cd:3e:66:a6:df:b2:2e:9f:af:0b:93:97:82:ee:4e:08:
03:73:fc:4a:f3:86:0a:c2:63:a5:52:2d:73:10:60:9c:a4:eb:
eb:6e:dd:b7:a2:51:a4:60:94:b4:51:72:cd:d3:a6:32:03:9d:
36:6b:ec:e6:db:b2:49:5e:ae:d2:86:8a:6b:0a:e6:62:e9:a7:
40:65:cf:c0:8f:7e:55:c2:18:bf:9d:2f:e8:99:a8:25:d9:78:
ac:07:47:cc:b4:25:58:99:04:f2:80:47:dc:d9:78:06:c2:60:
1a:91:2a:5c:65:0c:4a:4a:53:eb:fe:9f:18:5e:65:2e:0d:53:
af:95:26:98:aa:60:ec:0a:5e:15:a0:9f:5f:15:73:9b:a6:bd:
d6:17:0d:fb:9f:db:89:ea:47:61:70:18:2d:a8:63:e4:f4:50:
42:dc:26:8f:fd:81:ba:f1:70:45:3e:be:36:bb:dd:ff:d2:e4:
64:13:6b:39:28:3f:aa:5d:4d:79:94:02:65:4d:18:e3:78:87:
21:f7:40:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:39:22 2026 by rpki-client