Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.mft
File: 0lE5LNfm5ApFwbikR5iA7vlg8zA.mft (raw, json)
Hash identifier: WrJC4+giwfngcPBTEvAKgi3GWpwxWgNYuGjwpCbXqTY=
Subject key identifier: B2:84:35:53:AA:73:3B:E0:2B:96:FA:82:5C:AF:D4:2F:62:0F:89:E7
Authority key identifier: D2:51:39:2C:D7:E6:E4:0A:45:C1:B8:A4:47:98:80:EE:F9:60:F3:30
Certificate issuer: /CN=d251392cd7e6e40a45c1b8a4479880eef960f330
Certificate serial: 019D9A3E37BDEB29201890B422F7B2CC3FB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0lE5LNfm5ApFwbikR5iA7vlg8zA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 07:01:01 +0000
Manifest this update: Fri 17 Apr 2026 07:01:01 +0000
Manifest next update: Sat 18 Apr 2026 07:01:01 +0000
Files and hashes: 1: 0lE5LNfm5ApFwbikR5iA7vlg8zA.crl (hash: dQwuwNXLP1tzCeryNsyaaQppz3xP5Gq0sazXDCvbSXg=)
2: 12mV3ZosY8cTKWpFfBQEfwnx0BM.roa (hash: sqnV6smhnureA54M31ulMVSP8a9WYb/7AIpEIZop+fE=)
3: w-By4YicrBafnG_nw52slsPB7Mo.roa (hash: EbrbjE7k8b3TDf5vDoluKgnOO0qKqQeCgXWBufBzO7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0lE5LNfm5ApFwbikR5iA7vlg8zA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:37:bd:eb:29:20:18:90:b4:22:f7:b2:cc:3f:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d251392cd7e6e40a45c1b8a4479880eef960f330
Validity
Not Before: Apr 17 07:01:01 2026 GMT
Not After : Apr 18 07:01:01 2026 GMT
Subject: CN=b2843553aa733be02b96fa825cafd42f620f89e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:74:b1:c4:a6:64:b8:0f:16:4a:93:64:45:8e:
c5:f4:10:1c:b2:ea:f2:66:ef:93:0d:ed:35:9d:cc:
b6:ce:98:25:58:1e:fc:d7:93:c3:2e:bf:5d:45:e5:
8f:43:00:da:1f:b5:e0:10:f3:e8:9c:53:5d:8c:64:
ca:ab:b0:5a:b0:d7:0e:25:85:ce:0c:8a:0f:6b:2d:
14:ed:93:2c:e1:79:e1:5a:d3:f4:10:94:a5:ec:4f:
95:8c:99:3d:93:e4:e9:2f:7f:3f:29:d8:72:85:94:
d0:e2:7a:8a:15:0b:4a:89:91:18:60:bf:84:c2:8d:
54:f0:c7:ad:64:ad:bd:56:55:00:17:03:5e:b0:78:
74:28:28:f3:e2:93:7a:d1:e8:3d:cb:64:3a:67:59:
0b:9c:e7:67:12:11:7a:6a:c5:89:08:3d:36:0a:6f:
b5:67:d1:bd:39:98:ee:8d:59:0d:8c:fe:1b:a6:6b:
50:ea:2e:91:32:73:90:24:8d:35:ba:18:c8:2a:af:
31:7e:e3:f3:0f:64:99:c6:85:d9:1d:77:ce:51:91:
0b:8e:d4:c9:16:78:9e:56:8d:64:31:e0:af:8f:89:
f3:38:b9:18:bb:28:fb:46:6b:5a:af:bc:0a:ac:96:
7c:f7:e7:82:63:7e:e0:d5:7b:5b:d7:c9:94:03:ae:
f2:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:84:35:53:AA:73:3B:E0:2B:96:FA:82:5C:AF:D4:2F:62:0F:89:E7
X509v3 Authority Key Identifier:
keyid:D2:51:39:2C:D7:E6:E4:0A:45:C1:B8:A4:47:98:80:EE:F9:60:F3:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0lE5LNfm5ApFwbikR5iA7vlg8zA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:11:7f:53:4a:18:67:89:34:29:39:45:1f:dd:cc:17:47:48:
79:94:04:35:c8:b1:76:b2:51:48:55:3a:b6:95:ee:bc:ec:27:
9c:b9:4d:9c:64:72:92:12:b5:1a:e6:ca:ce:dc:b6:d2:94:12:
e0:c3:1e:30:c2:a0:55:04:23:ea:b4:ea:eb:33:ed:86:26:88:
60:6f:db:c4:7f:24:dd:d5:5d:fb:44:1c:67:58:e2:76:b9:e8:
63:8d:d2:1d:c6:60:03:e2:79:1e:fe:4d:2f:4e:87:49:81:4a:
a0:b9:8f:00:4a:ca:64:e4:41:e5:bb:59:0f:77:18:e6:9f:a7:
23:77:55:61:54:fc:8d:c0:2f:33:a2:70:89:cc:a8:86:9c:52:
c4:3f:fa:d9:84:7d:6d:77:2a:99:03:da:b7:3d:53:68:d0:7f:
e4:05:ae:fa:65:be:f8:eb:d8:f1:e8:8a:10:a9:6d:e3:49:6b:
98:64:c1:40:6e:1b:86:97:6c:9b:2e:c8:b0:2c:16:11:91:da:
bb:fa:1b:8f:dc:64:0b:b6:d0:79:1d:cd:7e:a1:4f:2f:28:cc:
30:6e:72:57:a4:a4:79:b8:e9:6d:b2:ed:2b:c9:18:da:4f:0e:
9c:42:1a:e0:6e:68:7e:4e:87:76:69:a5:aa:5c:7a:2a:58:80:
be:1a:26:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:16:10 2026 by rpki-client