Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.mft
File: pMk6s2TIeDLnd2Im7ubBMdvhU7s.mft (raw, json)
Hash identifier: eBqoQ3xDIt6c+rfEIZdpGNFjyD0tg3y4QRC9fJiB/Xk=
Subject key identifier: 13:71:F0:3D:AE:71:CE:83:24:BB:10:46:3E:3A:5C:22:0F:5C:5F:AA
Authority key identifier: A4:C9:3A:B3:64:C8:78:32:E7:77:62:26:EE:E6:C1:31:DB:E1:53:BB
Certificate issuer: /CN=a4c93ab364c87832e7776226eee6c131dbe153bb
Certificate serial: 019DA2D38A0FA011360E34E5224F03FC53F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pMk6s2TIeDLnd2Im7ubBMdvhU7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.mft
Manifest number: 18C8
Signing time: Sat 18 Apr 2026 23:01:05 +0000
Manifest this update: Sat 18 Apr 2026 23:01:05 +0000
Manifest next update: Sun 19 Apr 2026 23:01:05 +0000
Files and hashes: 1: lI1XK5SZ4unF2gsULOFdifpJAaI.roa (hash: rfS2OFj3wmP/4G5TYdNqf/vwvU8JRB0c9MwtD5rUi20=)
2: pMk6s2TIeDLnd2Im7ubBMdvhU7s.crl (hash: P1xI/sNU/UXbjtC1BUA3GHi7fdbCWUrRzWKpqjVrEh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/pMk6s2TIeDLnd2Im7ubBMdvhU7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 23:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a2:d3:8a:0f:a0:11:36:0e:34:e5:22:4f:03:fc:53:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4c93ab364c87832e7776226eee6c131dbe153bb
Validity
Not Before: Apr 18 23:01:05 2026 GMT
Not After : Apr 19 23:01:05 2026 GMT
Subject: CN=1371f03dae71ce8324bb10463e3a5c220f5c5faa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:84:0f:06:bb:1a:b7:f4:1e:c7:d1:6b:8f:a7:
e8:5d:21:c2:83:b3:8f:ff:f9:fe:4d:01:09:62:1e:
2a:52:b6:b9:1d:27:81:a6:ab:aa:6f:d3:e6:e7:bb:
15:ab:3f:7a:3f:e7:eb:3e:dd:f1:ff:b3:4b:23:a7:
f6:3b:1a:76:17:c4:8a:f8:f4:fa:50:e8:24:0b:34:
af:e2:95:d6:5b:90:e7:42:e5:9b:4b:fa:7a:7d:4c:
c9:43:ad:35:64:74:3a:84:d3:ef:77:e2:dd:14:ec:
db:2a:86:97:a3:85:f4:1b:cc:f3:1b:f4:06:f8:02:
a6:5f:b4:f6:f8:78:3c:79:44:d0:f9:b4:0b:b5:a7:
dc:01:7f:ed:1a:41:6a:e6:9c:5b:c1:7c:aa:a3:56:
2d:be:bd:fb:5d:20:f7:ed:4c:2a:8e:54:2b:ff:9a:
97:8b:ad:71:b2:09:34:68:16:89:7c:d4:25:dd:6c:
38:fe:72:4d:c2:f3:b8:34:c1:d9:4a:68:6b:d0:59:
f0:a5:3e:32:cd:f3:fe:83:dc:86:3a:3a:37:57:37:
cc:3e:75:31:9e:09:79:dc:94:28:72:71:cf:ad:08:
e3:93:cb:64:93:38:4f:76:08:b9:b7:8c:8c:a6:38:
60:4a:e2:56:18:ac:b8:7d:b4:0e:a3:2e:23:ea:26:
3f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:71:F0:3D:AE:71:CE:83:24:BB:10:46:3E:3A:5C:22:0F:5C:5F:AA
X509v3 Authority Key Identifier:
keyid:A4:C9:3A:B3:64:C8:78:32:E7:77:62:26:EE:E6:C1:31:DB:E1:53:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pMk6s2TIeDLnd2Im7ubBMdvhU7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:ba:2e:44:e6:7c:cd:72:20:3a:cb:c2:a7:76:3a:76:01:f3:
2e:9d:b0:b5:2e:0a:c4:5d:68:80:9c:93:91:56:fc:30:5e:ed:
4d:59:be:f3:12:8b:5f:6d:0e:dc:9f:29:39:fa:d5:60:c6:40:
8b:b0:49:85:73:52:95:9e:c2:b3:fc:1f:7a:32:31:37:16:6a:
d3:0e:d2:4b:f8:ac:bd:43:0d:1c:67:60:50:38:01:86:b7:bf:
fa:56:d3:fb:21:16:67:74:57:bf:5c:19:4f:5e:0f:c3:5f:ca:
82:61:c8:96:e5:83:17:61:cd:cc:87:8c:eb:7c:b4:17:d0:c8:
f5:81:b1:85:c8:aa:e9:a6:43:3f:b3:95:86:12:6b:9c:6e:c3:
6f:8e:ff:b4:db:37:3a:86:63:4b:00:16:5e:a8:4f:2e:37:c9:
95:60:01:51:fb:69:9c:97:5c:43:15:9a:14:c6:cf:08:87:7e:
ab:33:9f:14:cf:2f:32:ea:f8:e1:3b:ab:d0:47:24:7b:82:1c:
58:ef:e6:31:30:0e:11:5f:bb:b9:d7:ad:7e:94:f7:e0:0f:45:
3e:0c:34:0b:3f:12:96:7c:92:7c:63:b6:43:4a:f6:64:0f:85:
a2:d5:5a:fc:cf:3a:f9:9b:d7:ea:e6:cc:15:26:00:ce:35:96:
55:4d:f0:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:27:49 2026 by rpki-client