
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/1925e7-1694-43ed-8fbc-43685887436c/1/eU9VHpehMlQuOwVukF3o89uiTJw.mft
File: eU9VHpehMlQuOwVukF3o89uiTJw.mft (raw, json)
Hash identifier: Kc13+iCJwAk+ENeYED5UywNlLGZ0W3SgdM7YdV56IQU=
Subject key identifier: 54:0C:8E:45:84:BE:D2:AC:25:B6:4D:C0:67:2B:AB:37:2B:0B:37:13
Authority key identifier: 79:4F:55:1E:97:A1:32:54:2E:3B:05:6E:90:5D:E8:F3:DB:A2:4C:9C
Certificate issuer: /CN=794f551e97a132542e3b056e905de8f3dba24c9c
Certificate serial: 019D9961EA709CB3BA0AA9A220DF57E2002D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eU9VHpehMlQuOwVukF3o89uiTJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/1925e7-1694-43ed-8fbc-43685887436c/1/eU9VHpehMlQuOwVukF3o89uiTJw.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 03:00:24 +0000
Manifest this update: Fri 17 Apr 2026 03:00:24 +0000
Manifest next update: Sat 18 Apr 2026 03:00:24 +0000
Files and hashes: 1: eU9VHpehMlQuOwVukF3o89uiTJw.crl (hash: 8i89EHiudSLp0gW+Aptotva1zhcEPosHSSHRkJO6XKc=)
2: k6X22bQfluylqHARD-L5Ikhx1sQ.roa (hash: dFpw1lhqCaKbzT3oHGvLx20tpk89gIoCNO+pACDK98E=)
3: sqIqbG5-nG1e9zfCeQu_o5Cvh6g.asa (hash: zJTKqjeO7h7C95S8GlHsLV4A/G2qaaF0osBDhe62kaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/1925e7-1694-43ed-8fbc-43685887436c/1/eU9VHpehMlQuOwVukF3o89uiTJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/1925e7-1694-43ed-8fbc-43685887436c/1/eU9VHpehMlQuOwVukF3o89uiTJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/eU9VHpehMlQuOwVukF3o89uiTJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:61:ea:70:9c:b3:ba:0a:a9:a2:20:df:57:e2:00:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=794f551e97a132542e3b056e905de8f3dba24c9c
Validity
Not Before: Apr 17 03:00:24 2026 GMT
Not After : Apr 18 03:00:24 2026 GMT
Subject: CN=540c8e4584bed2ac25b64dc0672bab372b0b3713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:88:35:ba:49:1e:1e:b7:6e:35:5b:b6:99:70:
cf:00:fb:f4:d4:06:09:c6:8e:8a:d4:17:61:6a:70:
0a:f2:30:f0:47:c5:67:da:86:88:ff:86:68:c3:32:
1f:0d:1e:07:ab:14:29:45:4f:dc:df:f6:e7:99:28:
af:3b:5b:6a:5d:77:ba:ff:aa:6f:2c:06:91:bf:8b:
2b:a7:4c:29:7a:f4:05:44:8a:3a:9e:0a:a7:8d:b0:
2c:c3:fc:1e:78:a2:83:0d:4e:cf:3e:f9:07:5e:99:
6a:8e:c0:f7:bf:f2:fa:09:da:15:ab:d0:fa:08:eb:
aa:29:24:04:ab:0d:e8:68:15:b6:57:56:0f:2c:77:
a2:f5:91:b2:be:83:b4:dc:3c:d9:ac:59:fb:5c:61:
05:92:67:1c:d5:ed:02:e6:5a:82:8f:31:d6:0e:33:
21:af:e7:51:4b:fa:a6:ea:8c:26:68:28:b4:bb:54:
05:49:16:7b:e4:7a:67:bc:65:97:99:cd:e6:e1:7e:
f8:46:d0:8e:80:9e:6d:43:0e:42:98:d5:25:73:59:
f3:8d:9e:2e:ee:5f:11:8a:6c:26:5f:ff:95:92:3f:
ae:8c:eb:87:33:1d:c0:14:66:a5:3a:38:cc:6e:5c:
af:01:d5:eb:55:13:86:e2:32:53:1e:ec:23:b3:49:
c6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:0C:8E:45:84:BE:D2:AC:25:B6:4D:C0:67:2B:AB:37:2B:0B:37:13
X509v3 Authority Key Identifier:
keyid:79:4F:55:1E:97:A1:32:54:2E:3B:05:6E:90:5D:E8:F3:DB:A2:4C:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eU9VHpehMlQuOwVukF3o89uiTJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1925e7-1694-43ed-8fbc-43685887436c/1/eU9VHpehMlQuOwVukF3o89uiTJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1925e7-1694-43ed-8fbc-43685887436c/1/eU9VHpehMlQuOwVukF3o89uiTJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:40:a4:5c:10:a2:e7:2e:76:3b:22:bd:2d:02:81:03:ea:fd:
40:8a:4b:c8:2e:e9:78:42:8a:1e:24:dc:5e:7e:2b:d7:dd:f4:
99:a4:b0:9b:31:43:6c:d3:9d:0f:51:71:17:cb:17:ed:7a:78:
33:3e:90:ac:ac:b9:81:02:0b:a4:3f:86:39:45:c6:1b:25:5e:
8c:ab:3a:ca:09:1d:c1:dd:d6:37:d0:a1:ed:0f:c8:89:d3:e9:
37:36:53:50:90:f0:07:6d:e1:ea:9a:6a:5e:eb:bd:2d:17:a8:
d1:2d:ed:13:80:9d:b9:b2:03:a7:bb:59:42:84:62:39:40:1f:
0c:ca:1b:2e:76:1a:78:e1:6c:31:1c:26:b2:fa:11:c8:28:03:
af:a6:a2:38:a9:9c:16:d7:bf:8f:20:87:c9:dd:e2:57:f5:b3:
83:a0:c3:66:31:a6:9f:be:d9:bc:0c:f3:d9:4c:9e:94:e9:ca:
ed:8c:17:c5:5d:21:d1:32:7e:73:7e:8e:f6:97:2f:64:0c:9f:
cf:83:38:bf:8e:78:a4:2d:d0:52:d1:85:da:2f:ec:01:30:65:
d5:f9:74:dd:98:2e:48:55:cb:3b:c3:00:f8:e9:7e:e8:ec:d7:
6b:34:dd:e3:79:c0:f0:26:76:b0:85:30:7c:25:a3:31:38:b9:
b1:ca:12:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:49:48 2026 by rpki-client