Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/cbe8e7-5a78-4558-9951-84accecc51f0/1/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.mft
File: Ay05zpG-hnz1zhtgCdUmLCi2Ugk.mft (raw, json)
Hash identifier: t7dfB0BCLzP4fIbuWXbBnnQwKkwvfc0hzjzBeWpAy8A=
Subject key identifier: E4:D0:8E:2F:86:3E:04:B9:0F:73:49:E4:9E:E3:DB:90:45:2E:F3:CD
Authority key identifier: 03:2D:39:CE:91:BE:86:7C:F5:CE:1B:60:09:D5:26:2C:28:B6:52:09
Certificate issuer: /CN=032d39ce91be867cf5ce1b6009d5262c28b65209
Certificate serial: 019D9AE2BFF15E3B4453360E0052C50F7A00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/cbe8e7-5a78-4558-9951-84accecc51f0/1/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.mft
Manifest number: 18C0
Signing time: Fri 17 Apr 2026 10:00:44 +0000
Manifest this update: Fri 17 Apr 2026 10:00:44 +0000
Manifest next update: Sat 18 Apr 2026 10:00:44 +0000
Files and hashes: 1: Ay05zpG-hnz1zhtgCdUmLCi2Ugk.crl (hash: TS/PCS+FdpllBWjN6GldnJiqdFm6pyHbWprfxRQExDE=)
2: eCyziES9pqG-mQfeLtr0n6C5-NA.roa (hash: l6vsyJV9WvrG97VV98IwTWvWh3E/Ue4n2AyaMsNRcxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/cbe8e7-5a78-4558-9951-84accecc51f0/1/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/cbe8e7-5a78-4558-9951-84accecc51f0/1/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:bf:f1:5e:3b:44:53:36:0e:00:52:c5:0f:7a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=032d39ce91be867cf5ce1b6009d5262c28b65209
Validity
Not Before: Apr 17 10:00:44 2026 GMT
Not After : Apr 18 10:00:44 2026 GMT
Subject: CN=e4d08e2f863e04b90f7349e49ee3db90452ef3cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:51:32:ae:8d:44:00:7e:1f:29:f5:ed:f7:25:
59:82:e2:54:e0:51:b2:4b:78:27:4c:27:59:74:42:
93:0b:9c:36:40:22:50:1e:15:ce:6c:12:6d:06:ec:
d0:41:f7:52:b5:01:95:38:23:52:ab:ca:25:ff:c0:
52:b4:b5:9d:c9:44:d6:f9:cd:00:c2:e1:22:47:0a:
12:dd:af:13:7f:9d:5e:b0:36:ec:83:b3:ad:19:e4:
7f:b7:65:99:df:01:7d:7a:c2:0c:93:2d:63:e6:a6:
9c:07:6e:a3:e2:11:2a:7d:82:11:98:28:6c:cf:3b:
a7:4f:11:64:5e:45:6e:09:f9:65:66:37:59:81:0d:
b1:0e:14:0d:b6:1b:22:c2:e7:b5:42:6c:69:bd:d3:
29:40:cf:fe:22:95:fc:3a:09:d0:1f:6c:8e:05:fa:
25:5c:8c:97:0e:27:53:ed:62:05:49:55:76:48:37:
85:44:4a:c3:dd:33:0a:e1:1c:68:1f:d4:20:9f:89:
04:5c:0c:74:74:48:d2:d7:46:26:63:5c:aa:5b:fb:
39:35:3f:1c:50:ad:91:9b:21:21:9a:20:bf:e7:54:
39:b6:13:2b:c5:65:d6:74:3e:71:af:98:02:72:24:
18:6c:ec:c3:e3:dd:04:2b:32:29:3f:c8:a5:ab:ab:
20:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:D0:8E:2F:86:3E:04:B9:0F:73:49:E4:9E:E3:DB:90:45:2E:F3:CD
X509v3 Authority Key Identifier:
keyid:03:2D:39:CE:91:BE:86:7C:F5:CE:1B:60:09:D5:26:2C:28:B6:52:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/cbe8e7-5a78-4558-9951-84accecc51f0/1/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/cbe8e7-5a78-4558-9951-84accecc51f0/1/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:3e:e6:f4:82:6c:f5:a9:fe:b5:70:67:ee:b1:d2:f9:5a:2b:
99:32:dd:1d:8b:d7:d2:13:31:4d:24:92:16:61:43:c7:d9:d0:
57:68:27:55:d0:e6:d0:4b:b3:46:c4:1e:f8:c5:32:89:8e:0a:
89:7a:7c:73:7a:c2:4e:67:85:98:2e:84:a1:93:b4:24:11:29:
6c:81:57:93:44:1d:39:fd:78:31:cf:2e:f0:f5:3d:0d:fe:20:
d1:33:2d:be:79:7b:c1:fa:ea:a9:c1:99:18:94:5b:41:64:22:
9c:dc:4b:e3:ba:7f:b9:56:c9:e4:6b:92:1b:89:74:11:4e:45:
59:c5:c7:c2:9d:ab:07:69:32:d4:83:e2:49:4e:3a:7e:02:c8:
d5:79:54:36:e5:34:e6:cb:0e:7e:1f:95:d4:d7:15:46:2c:90:
80:33:d0:94:2b:ed:a9:ff:26:da:9a:fd:a1:2d:24:c4:b4:cf:
17:2e:1c:74:66:00:e7:a3:87:33:b3:86:f3:0a:0e:ef:05:ef:
c8:33:41:51:ee:34:01:e3:80:fd:1f:9f:be:2e:98:61:53:5f:
44:94:34:0b:e3:89:64:af:c3:40:8f:b7:ce:23:de:99:67:01:
f3:aa:c6:5f:7b:fd:03:76:64:df:75:b4:b8:ac:7f:ea:36:cd:
bb:e0:82:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:25:16 2026 by rpki-client