Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.mft
File: C_K7rLR03WED6JEXpjZ0VpZN8xk.mft (raw, json)
Hash identifier: /DFEFvdRnmx7yk4XYFnLisaYqGKnY2aWcb66AC7p1XA=
Subject key identifier: 17:41:57:00:B0:B0:DF:2A:C3:CF:67:BB:93:09:CC:0E:2D:61:B9:96
Authority key identifier: 0B:F2:BB:AC:B4:74:DD:61:03:E8:91:17:A6:36:74:56:96:4D:F3:19
Certificate issuer: /CN=0bf2bbacb474dd6103e89117a6367456964df319
Certificate serial: 019D98BD69FC62FB8C02667306D65214BB40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_K7rLR03WED6JEXpjZ0VpZN8xk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.mft
Manifest number: 18C0
Signing time: Fri 17 Apr 2026 00:00:43 +0000
Manifest this update: Fri 17 Apr 2026 00:00:43 +0000
Manifest next update: Sat 18 Apr 2026 00:00:43 +0000
Files and hashes: 1: C_K7rLR03WED6JEXpjZ0VpZN8xk.crl (hash: F1QiIoQEZVErHJMYXL3DGUHseT7Xnky4wipzILTVN4k=)
2: NVXaED00Tks0cffjpQE1Y8p8He4.roa (hash: dC5/5uYQHiqKfAa0wK/7KjwQ7hQBtAToi6muCDxU9EI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.mft
rsync://rpki.ripe.net/repository/DEFAULT/C_K7rLR03WED6JEXpjZ0VpZN8xk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:69:fc:62:fb:8c:02:66:73:06:d6:52:14:bb:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bf2bbacb474dd6103e89117a6367456964df319
Validity
Not Before: Apr 17 00:00:43 2026 GMT
Not After : Apr 18 00:00:43 2026 GMT
Subject: CN=17415700b0b0df2ac3cf67bb9309cc0e2d61b996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1d:b6:19:d7:bf:f4:2f:e1:08:da:77:ce:0f:
da:52:a0:ce:c1:b8:45:da:fe:7b:06:ab:e6:97:ef:
be:fd:2f:d0:b3:e0:08:5f:cb:42:52:ba:00:e9:e1:
ed:07:00:d9:ee:5a:e9:90:0f:1f:35:39:d4:3e:2e:
39:f6:38:9f:e9:e4:e8:b3:53:b6:5a:4a:1c:8e:45:
9d:d1:65:94:91:29:a2:6e:bb:0d:14:ab:e6:08:ce:
f2:1a:f4:e0:86:ae:a9:9d:6e:40:67:29:14:b5:3f:
d1:b5:db:f6:b9:48:f7:0b:fe:e4:7e:a1:6b:25:15:
3f:6e:f7:1b:44:3a:c1:26:9c:db:f5:fe:a4:48:89:
2a:c7:19:fb:89:13:9e:f2:08:57:d4:d3:39:77:d6:
a5:96:96:09:05:8f:8c:e8:06:8d:d2:95:8d:b2:bf:
0a:f1:a2:36:8e:5b:9d:df:dd:e5:a6:7f:8e:61:3e:
11:5c:4d:c3:48:97:7b:1d:40:54:71:ce:6d:2a:99:
7d:63:d6:c5:1b:fa:5d:d4:6c:49:01:8e:f9:4d:66:
2c:50:7b:72:5a:4e:00:f8:8b:fa:f0:93:2c:31:c6:
1a:7a:b2:95:24:e2:3b:c7:b8:36:bf:4f:a0:01:07:
98:b2:f7:de:b7:56:ab:9a:ed:c2:a9:49:95:76:9e:
5a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:41:57:00:B0:B0:DF:2A:C3:CF:67:BB:93:09:CC:0E:2D:61:B9:96
X509v3 Authority Key Identifier:
keyid:0B:F2:BB:AC:B4:74:DD:61:03:E8:91:17:A6:36:74:56:96:4D:F3:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_K7rLR03WED6JEXpjZ0VpZN8xk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:d2:4d:5e:40:06:83:8f:6d:5e:48:fe:8a:b8:10:2a:06:f3:
51:f0:cf:f3:e5:a8:dd:48:0b:68:2d:f0:81:ff:cc:86:cf:b1:
00:38:58:91:47:b6:a3:44:ed:6f:9e:9e:47:05:39:7c:14:fc:
fb:29:0a:ff:be:1f:5f:51:b0:d5:98:94:7f:b1:15:8f:e7:c7:
db:94:cf:a7:ee:e3:20:7f:2e:82:89:5e:fd:ad:02:9f:5b:d9:
c8:d9:57:be:0f:e1:2f:38:b9:d9:cd:68:62:1d:a6:29:24:06:
92:69:1d:de:22:e4:3d:15:02:99:93:bf:1d:c5:7e:2b:d6:6f:
c3:6a:c6:51:49:33:78:15:90:a5:fe:5c:42:8b:f9:b7:b1:f8:
45:60:e6:2c:ad:8c:e4:31:86:08:58:b9:db:a9:79:10:7a:c5:
56:ea:31:81:9c:6f:b2:8e:c5:8c:36:39:f9:e5:71:d3:2b:4e:
85:23:f7:4b:9a:c6:37:4a:5f:b3:b1:48:0c:24:81:08:57:2a:
d1:5a:a2:1e:1b:bf:a8:96:6f:fd:dd:e4:b4:0e:bd:56:29:5c:
d5:ba:bf:82:53:45:a3:87:12:00:01:77:79:5a:df:2f:ca:21:
9b:cc:a0:ab:80:19:98:0d:44:79:d1:cd:46:6d:c5:16:3a:c6:
42:3d:f5:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:52:16 2026 by rpki-client