Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.mft
File: cMnQbFGt1oKQY_G2exddDAAB5zY.mft (raw, json)
Hash identifier: voViubErMaPavIpZOwSy5beVfwFO1fPdFQ7jMcmUHcM=
Subject key identifier: B2:37:AA:1F:40:BF:EB:14:AC:BF:08:76:04:3B:6E:1D:BA:6B:E2:BE
Authority key identifier: 70:C9:D0:6C:51:AD:D6:82:90:63:F1:B6:7B:17:5D:0C:00:01:E7:36
Certificate issuer: /CN=70c9d06c51add6829063f1b67b175d0c0001e736
Certificate serial: 019D9A06FADBC809AAE9C243AE469992208A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMnQbFGt1oKQY_G2exddDAAB5zY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 06:00:41 +0000
Manifest this update: Fri 17 Apr 2026 06:00:41 +0000
Manifest next update: Sat 18 Apr 2026 06:00:41 +0000
Files and hashes: 1: 1-WshWzag49fgBIIVS2C0Ln43YnY.roa (hash: UrL7K+EtrLLqE/i5EAvmTal0bqvr0HWJvCJ78tbp0jM=)
2: cMnQbFGt1oKQY_G2exddDAAB5zY.crl (hash: 8GgFmnu8Q9N7oaejKv5EBu3sJHHZdw0yJ8HMcRBBfks=)
3: vBdouYkRW9ci3JYZ30IDKLuHdds.roa (hash: WJUobDpZaCY+TaeHhazACg6LZ8z6jzGQfsE7W/uWZPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMnQbFGt1oKQY_G2exddDAAB5zY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:fa:db:c8:09:aa:e9:c2:43:ae:46:99:92:20:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70c9d06c51add6829063f1b67b175d0c0001e736
Validity
Not Before: Apr 17 06:00:41 2026 GMT
Not After : Apr 18 06:00:41 2026 GMT
Subject: CN=b237aa1f40bfeb14acbf0876043b6e1dba6be2be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:20:b0:eb:59:8b:33:d2:1b:6f:92:3b:b9:a5:
43:43:9f:97:32:1c:b4:b1:0c:ee:46:a3:3d:a5:4d:
54:70:24:c5:16:33:15:89:e7:21:62:ab:86:17:bd:
d9:ce:ab:9a:e6:e9:c1:25:d9:04:2c:66:d4:71:53:
f8:2e:4a:1a:48:03:d1:5c:b0:fe:ca:71:b9:d4:07:
14:dd:6e:2e:30:5b:68:a8:18:77:06:f6:a2:4a:42:
98:ea:12:71:a3:07:27:23:80:94:06:4e:88:90:ee:
ed:c2:97:8e:b7:59:51:78:9d:55:2e:e8:b5:42:d7:
43:55:43:ed:89:63:f0:9c:1e:15:04:91:df:81:40:
c5:52:c2:0c:b8:55:ba:0b:5d:b6:02:70:91:8f:69:
e3:fe:97:4c:2a:42:e5:3d:ea:ba:73:29:a9:94:36:
2f:e1:f6:46:ef:25:ee:a2:65:e3:1b:6e:92:47:88:
a1:42:17:91:83:ad:f9:5e:fd:7f:2c:f9:c9:75:25:
21:07:e9:87:80:e6:04:bb:6c:74:a2:6e:27:6b:3d:
ce:88:4a:5c:3f:20:f9:ba:ee:69:9b:f9:4a:23:bc:
ea:c0:fc:72:5c:6f:b3:05:83:36:83:fc:d9:df:35:
6b:83:1f:c3:7f:2c:6b:b1:33:e2:24:d7:a5:09:43:
bb:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:37:AA:1F:40:BF:EB:14:AC:BF:08:76:04:3B:6E:1D:BA:6B:E2:BE
X509v3 Authority Key Identifier:
keyid:70:C9:D0:6C:51:AD:D6:82:90:63:F1:B6:7B:17:5D:0C:00:01:E7:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMnQbFGt1oKQY_G2exddDAAB5zY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:c4:32:52:c1:69:13:94:75:4a:2d:10:a2:8b:eb:78:17:24:
87:9d:60:98:1d:c6:77:0c:06:13:c4:6f:42:c9:38:87:a9:57:
5b:b6:17:24:81:df:67:e3:4f:e6:27:df:34:39:37:6a:74:58:
c5:fe:3b:fc:d7:59:9d:6f:83:56:bf:c3:5a:ae:19:48:0b:87:
82:00:09:5c:a1:3d:9b:ac:6c:d6:2b:d2:2a:ac:71:9b:b0:e2:
4b:f6:05:55:59:d0:16:2c:da:50:f5:ca:c4:0c:0a:50:ac:27:
64:f6:46:e0:cb:ef:b4:93:f4:e9:8a:2b:bd:7c:c7:08:19:e3:
c5:6e:49:cf:af:20:83:cc:22:53:39:1b:3c:65:a4:37:e3:9d:
81:98:32:5a:5e:41:02:3b:9b:70:6d:22:d1:86:85:0b:56:e6:
6b:a7:c9:cc:a1:0f:8f:86:9a:c1:a3:80:15:48:cc:9f:21:ed:
95:d4:f9:7c:7d:46:fa:c4:85:be:a5:b4:cf:f9:27:e3:c6:6f:
23:2d:c4:75:11:be:16:12:e8:36:3f:5a:cb:3b:f0:d4:65:c8:
af:e1:20:76:29:86:28:76:a8:bf:f2:06:1a:03:b9:81:dd:c5:
8a:83:0d:40:f6:8f:6b:b4:60:a3:93:df:c0:73:5f:cb:ba:2b:
8a:f8:42:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:19:44 2026 by rpki-client