Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.mft
File: CW4pO6OA3MdfABBkQ2aPUQAlVbc.mft (raw, json)
Hash identifier: lZAd2NodtyQ/Uo1tRfQvGUT3waf3xzQP91dTGSIZRKo=
Subject key identifier: 38:44:B6:58:9A:39:5C:D5:79:6D:99:4B:BA:44:6E:FB:E4:4A:17:5E
Authority key identifier: 09:6E:29:3B:A3:80:DC:C7:5F:00:10:64:43:66:8F:51:00:25:55:B7
Certificate issuer: /CN=096e293ba380dcc75f00106443668f51002555b7
Certificate serial: 019D98F42ED5AC84E09450F56ACEEA6FB67E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CW4pO6OA3MdfABBkQ2aPUQAlVbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 01:00:32 +0000
Manifest this update: Fri 17 Apr 2026 01:00:32 +0000
Manifest next update: Sat 18 Apr 2026 01:00:32 +0000
Files and hashes: 1: CW4pO6OA3MdfABBkQ2aPUQAlVbc.crl (hash: UNaLh1RzG5oN8OO0ZMved+ExEGvgWwveCDB39PJwLpU=)
2: eEPTZT6Cu9Z_P3_raMWIwWmS4XU.roa (hash: QSgLB7ALo1ZtZRISbHuHkO61FWxfLx7/83BtDc+Ihaw=)
3: vlffUXbbe03bAModfKshSSav8vw.roa (hash: ZWDKGd58/YtOBOKnYCn4Dv/eX+Na3BO0QhlUmQSZ39w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CW4pO6OA3MdfABBkQ2aPUQAlVbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:2e:d5:ac:84:e0:94:50:f5:6a:ce:ea:6f:b6:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=096e293ba380dcc75f00106443668f51002555b7
Validity
Not Before: Apr 17 01:00:32 2026 GMT
Not After : Apr 18 01:00:32 2026 GMT
Subject: CN=3844b6589a395cd5796d994bba446efbe44a175e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:99:9a:10:81:c7:b5:0e:b5:c8:5c:34:d4:71:
5e:e6:a4:4d:e0:a9:a7:6e:d8:f4:85:3b:f8:4c:d1:
19:3b:91:3f:f7:31:a1:66:f2:04:c8:16:51:86:d7:
20:15:46:c7:07:1c:ed:18:54:aa:79:3a:c5:1d:3f:
de:2f:28:1f:1e:c8:73:68:e4:32:f6:77:75:c3:49:
ba:ef:fc:b5:dc:ed:73:0f:08:a0:50:6a:e6:ae:fc:
8c:18:75:db:75:63:60:64:88:47:3a:3c:6e:d0:36:
86:7f:8d:df:ed:ef:7b:0f:0a:92:aa:4d:1a:5c:6e:
ed:9c:65:20:b4:50:d9:ce:f1:29:f7:91:8d:11:f8:
a6:2d:0f:4d:5f:e3:c8:5a:e4:3d:28:ae:e0:2c:93:
16:2d:1b:0b:87:1f:1a:dd:37:80:f9:8e:ea:ab:07:
1a:52:c5:78:26:3f:0f:6f:38:b0:f0:d0:7a:85:c7:
00:a0:c2:9a:1c:db:89:cb:77:29:84:18:65:63:fe:
ef:2e:b2:8e:b9:88:33:55:8d:d1:1e:c8:be:e7:fa:
fd:49:2c:ff:7d:af:c5:6d:08:a0:a7:46:7b:74:55:
61:81:24:3e:94:77:bb:05:69:eb:5d:1e:ae:70:96:
c4:d2:dc:d1:32:0d:95:1f:7f:61:a7:0f:ec:61:7b:
14:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:44:B6:58:9A:39:5C:D5:79:6D:99:4B:BA:44:6E:FB:E4:4A:17:5E
X509v3 Authority Key Identifier:
keyid:09:6E:29:3B:A3:80:DC:C7:5F:00:10:64:43:66:8F:51:00:25:55:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CW4pO6OA3MdfABBkQ2aPUQAlVbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:84:e6:90:4d:9e:3d:13:73:5f:44:d9:1e:9e:24:4b:18:f4:
a5:fc:38:2d:f2:6c:2e:cc:be:ce:e3:db:20:6c:c1:08:84:14:
2f:d0:52:dc:12:31:2b:d0:4c:33:8b:54:d6:4c:83:ed:e3:8e:
8e:15:a2:49:87:d4:17:bd:83:0c:43:ef:47:98:25:0a:41:ae:
39:35:63:e7:63:7e:ff:4c:ae:c1:a2:5d:28:22:44:61:de:29:
a0:b6:17:d1:cc:2e:c2:fa:05:3b:78:af:4e:50:10:07:7b:b9:
ab:da:f2:61:ce:ec:0a:2b:2d:51:18:bd:a7:40:cf:5a:2f:ba:
f9:bc:55:a5:86:a1:12:18:0f:61:47:9d:66:fb:e9:16:f4:6d:
98:81:05:8c:49:a3:48:af:06:af:6f:9b:27:d3:ab:fa:84:40:
59:1a:a9:61:ec:8d:6f:43:1f:63:0e:eb:7f:01:0e:6f:8e:3e:
c7:62:41:39:18:a6:8d:b9:fb:14:a7:8b:93:49:64:5d:33:e5:
fa:e2:42:7a:83:49:93:4c:c8:2d:16:97:7b:58:e7:34:71:1d:
63:4e:5f:de:bd:7a:b2:42:47:2c:21:57:a9:d4:bf:33:ad:fe:
ab:01:9b:c5:f2:0d:8b:98:ba:91:3b:cb:11:ef:e4:cd:1e:d5:
df:c4:b5:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:20:03 2026 by rpki-client