Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.mft
File: deBbwhsqbxAzcR_8pkkcbDDOWko.mft (raw, json)
Hash identifier: pgtlHYWWo0WiT0ZP/orsVeDgjFawy/EFWgJYQmcNCtU=
Subject key identifier: 0B:9E:44:0F:A9:F2:00:CD:31:A8:D6:AE:86:87:57:75:62:DC:A2:B2
Authority key identifier: 75:E0:5B:C2:1B:2A:6F:10:33:71:1F:FC:A6:49:1C:6C:30:CE:5A:4A
Certificate issuer: /CN=75e05bc21b2a6f1033711ffca6491c6c30ce5a4a
Certificate serial: 019D98BD81963B19C01CA998D76FBC0B6CFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/deBbwhsqbxAzcR_8pkkcbDDOWko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.mft
Manifest number: 18CC
Signing time: Fri 17 Apr 2026 00:00:49 +0000
Manifest this update: Fri 17 Apr 2026 00:00:49 +0000
Manifest next update: Sat 18 Apr 2026 00:00:49 +0000
Files and hashes: 1: IKecYpJsyQoCMXhzFQm8qwezc6Q.roa (hash: AyBWoAIIW8QVXSZmJhv+7IehUMdxfXtLu4x8wnOD+Zo=)
2: Niz0xaF_UJO5sK6yvy3cMVF07nA.roa (hash: l65DOQXiJc/vw8R7nLx1kl+6tdgkTZuIaNzOHJm95Zo=)
3: WFTfI5tspGo4Ss0OCZAL-JGWw3k.roa (hash: ygHs+fWVxGVJnQRLr2/Xp2LQTIWtPolhwTvnQdcJhwg=)
4: Wrrx-J8255kGZZQo2Z_lshL_g94.roa (hash: RJwUNDcFiRkR23EOeiZYpldoRJTn3DHSqOqjyT0fbkQ=)
5: cKp2OZnMQ6gfuVdFBIpAAe-tLzE.roa (hash: mbO9zdERKtIWiDiD8x4e0EjpaANpcC71gfDZ39R7GH8=)
6: deBbwhsqbxAzcR_8pkkcbDDOWko.crl (hash: m6c3yi/FGy15KN4txXjQYZ4oBGPk+mCGgfdmADJqJVU=)
7: p6DmQaVdSnpO0418vCwa-3h5IyU.roa (hash: oLcwvSqddOQ2Ul0V7nGknSGHPS/F0P9Nc73tzvsSSQ4=)
8: r2Y6Npuwz2fSFJGlB1IqT0Y2GL8.roa (hash: lnldbd2L1Ux8PYgmjwCpHbxAbqqtYXmXImm+n59vkVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.mft
rsync://rpki.ripe.net/repository/DEFAULT/deBbwhsqbxAzcR_8pkkcbDDOWko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:81:96:3b:19:c0:1c:a9:98:d7:6f:bc:0b:6c:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75e05bc21b2a6f1033711ffca6491c6c30ce5a4a
Validity
Not Before: Apr 17 00:00:49 2026 GMT
Not After : Apr 18 00:00:49 2026 GMT
Subject: CN=0b9e440fa9f200cd31a8d6ae8687577562dca2b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:04:f5:f1:75:d1:e8:01:29:47:d3:0e:93:42:
7a:e1:84:2f:fa:85:56:bf:9c:ff:11:66:ec:fe:8f:
b5:a3:2a:08:52:7e:77:0f:70:38:cb:4c:ca:9d:a6:
83:56:19:62:eb:55:36:f5:27:a6:9a:1e:04:4f:11:
19:40:b7:18:2b:21:af:b0:cc:9a:55:f4:cd:54:e2:
05:6c:ca:1c:dd:cc:57:bc:c6:9a:4a:0f:44:7d:4b:
e7:84:0e:2e:de:b1:26:92:92:b6:4b:41:b4:98:f7:
cd:4c:4e:7a:5b:98:f9:73:b1:22:09:7d:a2:d4:84:
fe:12:8f:f1:f8:f3:1f:cf:d5:08:02:17:99:bf:e8:
a0:59:68:1a:9c:37:d1:fd:da:df:01:fc:1b:fe:2f:
57:3d:be:5b:15:db:5d:cb:91:4b:2f:79:b3:f4:72:
4b:99:b9:01:61:a5:86:ca:6e:b8:ce:d7:ac:b4:1d:
ff:62:c4:85:72:5a:6d:f0:f7:19:12:3c:7f:e5:9a:
f3:28:f7:92:c8:fb:bc:3b:07:bd:7b:d0:0c:17:69:
76:2c:88:01:65:f0:6d:a6:1b:65:18:95:b3:cd:90:
fc:cd:58:26:36:67:50:05:9a:e1:40:c4:52:30:1c:
73:95:55:f2:8a:a7:07:a5:7c:6b:e4:15:60:75:0e:
4d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:9E:44:0F:A9:F2:00:CD:31:A8:D6:AE:86:87:57:75:62:DC:A2:B2
X509v3 Authority Key Identifier:
keyid:75:E0:5B:C2:1B:2A:6F:10:33:71:1F:FC:A6:49:1C:6C:30:CE:5A:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/deBbwhsqbxAzcR_8pkkcbDDOWko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:74:a9:42:1a:ae:d4:01:c3:ee:4e:95:23:ef:20:76:d7:d6:
5b:33:96:da:e1:5b:f0:23:97:24:e9:4d:75:1a:a5:a0:02:59:
ee:d4:ce:96:63:ac:28:93:40:1a:e8:14:b1:b8:30:1d:7e:22:
be:34:ec:8e:f7:76:ce:38:16:44:a2:f7:55:9b:15:f1:f6:e0:
91:34:db:16:11:03:50:9d:8b:00:e9:a5:8e:eb:bf:55:b1:05:
23:6d:71:9b:91:f8:c9:bc:2d:f5:88:6d:a9:a9:2d:06:a8:e6:
fa:62:a2:a4:5e:74:d4:83:cf:bb:6f:59:5d:cb:97:22:bb:94:
c2:04:6e:41:9e:5b:d1:c2:1e:e2:d7:c7:cb:2f:25:30:65:b9:
3c:52:94:df:f2:20:25:fe:56:da:d4:61:65:15:e4:96:ed:47:
c6:23:95:dd:ef:80:69:35:d8:af:77:b2:b4:9d:24:1c:ca:6b:
7f:d4:bd:8d:ae:ce:08:27:6c:ab:43:90:d9:f4:b4:a5:b5:64:
5b:a6:7c:be:9d:31:09:03:09:71:13:28:64:11:ae:d7:e6:57:
50:73:6d:aa:81:f0:fd:7d:c9:0a:cd:45:2c:6d:a4:f6:e2:0f:
ae:a0:73:30:91:a1:0d:ac:13:0e:cb:06:a5:75:4a:4a:2a:a7:
53:9d:63:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:21:28 2026 by rpki-client