Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.mft
File: k47pUc2rw86AXsjfC_NAO9-pxlc.mft (raw, json)
Hash identifier: A95ZUPkoKNJOU9c9RQauTK4iZQWSlyY/ZZgOsfbuN88=
Subject key identifier: 36:A3:26:96:24:B0:54:8B:BC:F8:47:6C:E1:7C:4D:D6:51:A6:44:BE
Authority key identifier: 93:8E:E9:51:CD:AB:C3:CE:80:5E:C8:DF:0B:F3:40:3B:DF:A9:C6:57
Certificate issuer: /CN=938ee951cdabc3ce805ec8df0bf3403bdfa9c657
Certificate serial: 019D98184C72902DDAB0C6C3AB189A11F1DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k47pUc2rw86AXsjfC_NAO9-pxlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.mft
Manifest number: 18C1
Signing time: Thu 16 Apr 2026 21:00:22 +0000
Manifest this update: Thu 16 Apr 2026 21:00:22 +0000
Manifest next update: Fri 17 Apr 2026 21:00:22 +0000
Files and hashes: 1: Q_ee8py1cZcXFZRaXUkP3TowZDc.roa (hash: w/aCOcSaWrdKUscNCfCU/09gr8uTxVVmhx8jtZuT2dI=)
2: ReMMCAErUt1VBD8DVEIFL-Hpask.roa (hash: wWfg4EEHh6Y+sLSB59zGm12sGRwnX3Xts8Wy3xO33k0=)
3: k47pUc2rw86AXsjfC_NAO9-pxlc.crl (hash: TVky+OIySthHodGZD8su1S9+gOxIelsPSB4frMa15k8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/k47pUc2rw86AXsjfC_NAO9-pxlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:4c:72:90:2d:da:b0:c6:c3:ab:18:9a:11:f1:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=938ee951cdabc3ce805ec8df0bf3403bdfa9c657
Validity
Not Before: Apr 16 21:00:22 2026 GMT
Not After : Apr 17 21:00:22 2026 GMT
Subject: CN=36a3269624b0548bbcf8476ce17c4dd651a644be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e9:88:77:a7:96:c9:7d:84:09:b6:c8:fc:09:
0f:a9:53:95:17:0a:9c:2e:33:20:cc:f0:c0:1d:3a:
2e:ea:30:bf:53:cf:9c:15:b2:b4:c4:d3:da:f3:09:
2a:f3:f4:86:41:5b:18:9d:5b:74:79:13:15:67:ac:
c8:ca:e0:e5:1b:51:77:e0:2e:ac:4c:69:70:e7:d0:
2b:80:ec:1e:f2:3b:a9:80:74:b8:cd:f2:22:21:b3:
4a:0b:dc:6a:84:49:35:91:7c:d4:dd:1b:0c:2e:0f:
d0:ce:a0:bf:98:0f:d3:48:71:2f:6b:24:5a:f2:1f:
ef:9c:c1:7e:03:a7:3a:f1:c1:12:79:22:c4:f5:8e:
f4:bf:f8:25:03:35:64:30:83:60:6c:56:0c:d2:4c:
7b:06:fd:e7:11:17:29:c5:8a:e5:d4:4e:5f:7d:b2:
11:e4:9b:e0:0b:8d:aa:88:a4:db:71:89:06:d9:23:
11:bf:40:e2:ba:3c:68:c4:eb:6f:f1:20:c3:36:63:
6d:55:cd:ed:9d:7a:35:90:e8:ad:01:86:75:e9:c0:
37:9b:10:83:dd:fd:b3:0c:fe:8e:d5:d9:e3:af:ef:
72:e1:59:f1:a1:70:55:96:b8:44:2a:41:58:83:8f:
0b:61:30:d5:8c:e1:9b:a3:31:f6:ca:93:e7:56:05:
97:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:A3:26:96:24:B0:54:8B:BC:F8:47:6C:E1:7C:4D:D6:51:A6:44:BE
X509v3 Authority Key Identifier:
keyid:93:8E:E9:51:CD:AB:C3:CE:80:5E:C8:DF:0B:F3:40:3B:DF:A9:C6:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k47pUc2rw86AXsjfC_NAO9-pxlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:95:3c:fc:98:20:41:e3:82:fc:ca:39:3c:41:f8:82:dc:ca:
35:f7:b4:8e:ba:50:94:d9:93:24:dc:85:84:c4:8f:32:34:ea:
a9:3d:f9:f6:5d:d1:8b:48:da:ce:79:79:29:9f:e1:60:fb:00:
82:f7:5c:d3:ae:1e:37:11:e6:83:c5:25:f0:cc:36:7c:74:b7:
63:a6:63:bc:cd:16:05:fd:92:40:43:5c:0d:ca:aa:da:96:75:
77:da:23:52:82:d6:0f:c0:76:93:7f:2b:6a:bb:61:94:c0:76:
eb:fb:54:1e:ec:3d:8e:c7:ee:72:8c:69:43:2d:e9:37:ef:1b:
61:8d:54:26:52:32:37:79:42:74:9a:c9:fc:94:67:2b:00:e2:
55:52:b2:e6:71:36:e0:9a:28:8e:0d:37:22:7a:4a:7b:4f:0c:
25:a1:26:0f:fa:23:67:91:39:1e:02:83:39:19:82:4b:34:55:
37:96:e1:99:11:3a:90:8d:03:2c:b1:a8:91:9d:c0:3f:c4:bf:
e7:1b:58:24:67:87:5f:02:1c:b2:7b:34:0f:ae:6c:74:11:9b:
7e:3e:38:36:1d:a8:60:ec:14:1b:8c:25:f8:17:0e:e7:5a:01:
c9:64:01:b8:5d:bd:c6:74:47:b9:d6:0b:fc:f9:e8:58:98:b4:
1e:ad:f1:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:21:40 2026 by rpki-client