Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/2b83a1-748d-4f55-8b3b-d9df45dbbadf/1/In6Vgaaaz4EZMg4TeYV6UTvSONs.mft
File: In6Vgaaaz4EZMg4TeYV6UTvSONs.mft (raw, json)
Hash identifier: 0/QJjtH2KhoCiPvg1vOz5FWITmC1FrCfG112ALPoOXw=
Subject key identifier: 0C:17:63:74:54:12:F4:35:F3:17:67:B6:10:F4:F9:36:BB:0E:39:E3
Authority key identifier: 22:7E:95:81:A6:9A:CF:81:19:32:0E:13:79:85:7A:51:3B:D2:38:DB
Certificate issuer: /CN=227e9581a69acf8119320e1379857a513bd238db
Certificate serial: 019DA3785A02AABD8A3B6550ABC849D4D497
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/In6Vgaaaz4EZMg4TeYV6UTvSONs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/2b83a1-748d-4f55-8b3b-d9df45dbbadf/1/In6Vgaaaz4EZMg4TeYV6UTvSONs.mft
Manifest number: 18C9
Signing time: Sun 19 Apr 2026 02:01:06 +0000
Manifest this update: Sun 19 Apr 2026 02:01:06 +0000
Manifest next update: Mon 20 Apr 2026 02:01:06 +0000
Files and hashes: 1: In6Vgaaaz4EZMg4TeYV6UTvSONs.crl (hash: bR/d/qmLf3U9XZ2T8g3pJ5M6hqTzPqdx1dOTYwVrny4=)
2: mscwxPZcPbLJOKy1J-8IvjK-dMA.roa (hash: SehCRKbcK0pMfEDJLBg+4FVLJTa+tBwqRk0UywbNktM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/2b83a1-748d-4f55-8b3b-d9df45dbbadf/1/In6Vgaaaz4EZMg4TeYV6UTvSONs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/2b83a1-748d-4f55-8b3b-d9df45dbbadf/1/In6Vgaaaz4EZMg4TeYV6UTvSONs.mft
rsync://rpki.ripe.net/repository/DEFAULT/In6Vgaaaz4EZMg4TeYV6UTvSONs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:5a:02:aa:bd:8a:3b:65:50:ab:c8:49:d4:d4:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=227e9581a69acf8119320e1379857a513bd238db
Validity
Not Before: Apr 19 02:01:06 2026 GMT
Not After : Apr 20 02:01:06 2026 GMT
Subject: CN=0c1763745412f435f31767b610f4f936bb0e39e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3a:d0:24:38:93:6e:89:0e:9b:89:82:2c:5b:
f4:39:c5:42:9f:e8:ba:2a:44:f9:20:5c:ff:65:ab:
2f:66:f3:94:01:8b:68:7f:80:c0:e9:99:c5:04:6f:
71:2e:da:72:7d:9f:e6:bb:02:85:1c:d7:e3:c3:da:
b5:f3:c0:41:2c:91:9e:2a:96:66:7b:c9:8b:73:71:
8d:89:a4:28:79:e2:72:5a:58:4b:f9:d3:53:30:a3:
5f:5b:1b:3e:09:57:46:20:8b:6a:d0:e8:a3:d2:e7:
4b:a7:11:86:a2:2e:fa:4e:d3:6b:ba:bb:a6:64:20:
51:a5:c8:14:bb:f3:15:5f:42:9d:57:e7:c1:1d:f4:
12:ea:2c:aa:3f:2b:9a:8f:f6:54:08:5a:73:12:f1:
a7:2b:c6:79:88:fc:cf:e0:9b:dc:c1:03:ad:43:e0:
7e:c3:f7:79:b7:2a:a3:e5:37:74:a1:c0:52:14:31:
51:74:0e:3c:90:d3:07:be:cb:6e:6d:52:7c:99:3d:
81:52:ff:c2:b1:ab:ab:25:f9:f3:90:10:2d:c8:ae:
fd:ef:60:a9:a6:e1:e8:b4:8d:df:ff:da:33:08:f8:
a7:1a:5d:29:23:50:6c:80:43:1e:38:34:7b:30:b6:
f4:bf:21:c3:e6:9f:60:c7:87:87:22:64:c8:a9:f7:
39:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:17:63:74:54:12:F4:35:F3:17:67:B6:10:F4:F9:36:BB:0E:39:E3
X509v3 Authority Key Identifier:
keyid:22:7E:95:81:A6:9A:CF:81:19:32:0E:13:79:85:7A:51:3B:D2:38:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/In6Vgaaaz4EZMg4TeYV6UTvSONs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/2b83a1-748d-4f55-8b3b-d9df45dbbadf/1/In6Vgaaaz4EZMg4TeYV6UTvSONs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/2b83a1-748d-4f55-8b3b-d9df45dbbadf/1/In6Vgaaaz4EZMg4TeYV6UTvSONs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:de:50:ee:42:f8:e9:69:51:55:c0:34:a4:49:3d:d9:41:6a:
e9:51:6b:86:8b:87:9a:96:74:87:35:63:79:3b:65:9c:57:f2:
f4:d9:6e:df:2e:a9:5d:4e:f5:15:62:73:c9:e2:7f:5f:46:0e:
3b:bd:bb:16:6f:4a:7a:17:40:79:63:19:51:99:12:5d:31:86:
83:81:c5:7b:34:ed:31:74:36:a9:0e:2e:16:a4:bd:e8:a8:3f:
34:b7:95:bd:e1:8f:f4:ba:d0:4e:63:d6:88:49:37:2a:45:b7:
12:26:e0:3b:7b:45:c3:37:b9:2d:50:b5:d2:4f:9d:dc:eb:43:
1c:e9:c4:67:60:7e:2c:d4:df:ba:38:6f:08:e9:fb:f9:98:32:
c2:a1:d1:70:bf:67:03:a1:00:01:5a:7e:02:dc:4a:f2:59:9d:
4b:6f:ff:55:6d:8c:3f:c7:a7:e2:7d:0f:bd:07:1b:d0:05:5f:
0e:59:d1:43:19:e7:a5:c3:ea:47:15:76:cb:53:6b:de:52:bb:
67:b2:69:60:93:58:9f:f7:b8:ba:81:4c:13:44:0b:ef:5b:03:
29:59:5a:f6:88:e9:c6:be:2b:dc:b5:38:4f:9f:b9:84:74:01:
e8:5c:07:3f:76:08:98:3d:03:7b:43:a3:aa:23:b3:a4:e3:6b:
b2:f3:3b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:27:47 2026 by rpki-client