Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.mft
File: _74lZWXhwnxLJlYBkOmXgoaoK1I.mft (raw, json)
Hash identifier: F6+OTIFh2yQMKjOymfsVDxCU7NVEmLKMzKMzXq4MqFA=
Subject key identifier: DC:2F:27:00:2F:67:90:F9:3B:2D:03:8D:02:40:DB:80:41:DF:83:95
Authority key identifier: FF:BE:25:65:65:E1:C2:7C:4B:26:56:01:90:E9:97:82:86:A8:2B:52
Certificate issuer: /CN=ffbe256565e1c27c4b26560190e9978286a82b52
Certificate serial: 019D9AAC09F355A809D4D2860BB36BEE2C31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_74lZWXhwnxLJlYBkOmXgoaoK1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 09:00:59 +0000
Manifest this update: Fri 17 Apr 2026 09:00:59 +0000
Manifest next update: Sat 18 Apr 2026 09:00:59 +0000
Files and hashes: 1: GvNFYyBUTZVKqfxGJ29AQ8ybUOI.roa (hash: uZnUMOZEaipYyz6w+Q0CeYwOVjF6E1oqOIzqR9nYZ4k=)
2: _74lZWXhwnxLJlYBkOmXgoaoK1I.crl (hash: no2JptW4li0XWAr/hOia2Ge54+X7EYK2TjpveC3Pz9I=)
3: nFyJiI2QEmXq35fuiG_EUZU-0Tw.roa (hash: cLxbEZlxAIqYS86le/aYrGcroGy0E1YAeKBMSi+G8Y8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/_74lZWXhwnxLJlYBkOmXgoaoK1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:09:f3:55:a8:09:d4:d2:86:0b:b3:6b:ee:2c:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffbe256565e1c27c4b26560190e9978286a82b52
Validity
Not Before: Apr 17 09:00:59 2026 GMT
Not After : Apr 18 09:00:59 2026 GMT
Subject: CN=dc2f27002f6790f93b2d038d0240db8041df8395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:af:5d:0d:4b:7b:24:25:f2:f6:db:87:a1:1d:
90:6f:6f:b1:ff:5d:78:d4:3b:92:1f:62:1d:e6:7d:
a0:30:22:50:24:4e:0e:9a:06:1e:d4:2f:9e:be:af:
8a:50:3d:62:80:73:c0:ec:f4:a1:e1:db:ca:87:ee:
0e:ca:33:87:f5:5c:87:26:e5:a3:2d:13:16:f5:72:
0d:e7:a1:0f:c7:cb:20:c6:4a:fe:59:66:1d:1b:a5:
ae:ca:f1:0e:e6:a1:f2:0b:4d:af:09:ac:7a:78:99:
42:9b:12:43:09:7c:6d:68:0b:e4:86:4a:47:bd:60:
7f:3e:9f:8d:e2:8d:c8:7a:1f:8a:23:b3:1d:ca:26:
02:1d:bf:2c:8a:3d:30:4f:e9:24:8a:41:a2:69:53:
91:72:e6:1d:c3:3c:ae:00:38:7c:1b:bd:73:1c:b3:
d5:d7:d5:ff:9f:10:31:02:5a:e7:7e:fd:fe:4f:66:
c8:77:84:e0:03:b6:29:56:e7:ec:af:ac:90:87:e1:
8a:f6:e7:25:aa:e9:e9:8e:ef:63:c2:61:ec:12:15:
26:29:f5:06:95:e7:f4:c3:e5:86:5b:74:cd:52:db:
1d:34:1d:00:a7:de:84:ce:27:9d:83:cf:a9:fe:ba:
2a:1f:ac:89:25:77:aa:f5:b5:ee:28:a6:e1:f2:a9:
00:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:2F:27:00:2F:67:90:F9:3B:2D:03:8D:02:40:DB:80:41:DF:83:95
X509v3 Authority Key Identifier:
keyid:FF:BE:25:65:65:E1:C2:7C:4B:26:56:01:90:E9:97:82:86:A8:2B:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_74lZWXhwnxLJlYBkOmXgoaoK1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:a5:1f:b0:4d:8a:be:4d:ee:c8:77:7d:44:b0:58:1e:61:1f:
d4:2a:2b:85:b3:70:6c:58:3e:1f:9b:c2:7d:db:1c:48:82:34:
5c:25:03:96:60:02:9c:5b:a3:be:60:9b:98:53:75:a2:1f:d4:
a8:09:be:3e:d3:28:72:a4:b4:a4:38:90:9f:ab:74:96:4d:62:
8a:61:69:00:64:74:95:38:39:01:66:ee:31:da:25:78:77:b3:
d7:18:9a:cb:9b:83:52:b6:76:6e:71:dd:9a:f9:40:90:0a:60:
64:45:f6:0d:df:17:0e:5d:26:37:1a:f3:9c:e7:36:7e:56:7f:
7e:23:8c:59:0d:58:4a:7d:14:9f:99:ec:42:f5:2d:87:f5:24:
c9:f4:2c:d4:0b:40:19:51:07:7b:61:7f:ba:38:91:a0:52:5f:
39:6a:04:b4:29:78:dc:86:ea:80:53:f8:ce:2b:2a:4f:a7:00:
2b:62:83:a9:b6:e8:98:03:e5:9f:93:78:3c:f2:47:16:1d:cd:
7e:e9:f8:a0:5d:7a:56:96:95:bc:1f:e3:54:49:1d:c1:02:92:
ac:4a:cc:03:c0:05:c4:18:cf:19:2d:ea:e9:a3:33:e8:1a:dc:
2e:95:19:21:3e:19:e4:a8:13:2b:77:6f:d0:c8:3d:94:58:3c:
e6:06:24:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:26:01 2026 by rpki-client