Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.mft
File: c90olFaK69Ba1kMtU89w4s14jm4.mft (raw, json)
Hash identifier: XRnEpRhhzjfD9GbqV1K17DPh4YTTbvfDk4N9+8DKDjk=
Subject key identifier: 11:DF:3A:16:EF:1E:E9:7D:0C:5E:72:92:81:50:4B:38:83:EA:4D:E3
Authority key identifier: 73:DD:28:94:56:8A:EB:D0:5A:D6:43:2D:53:CF:70:E2:CD:78:8E:6E
Certificate issuer: /CN=73dd2894568aebd05ad6432d53cf70e2cd788e6e
Certificate serial: 019D98F4D3E90EBE2EEB5AFD95CD225A7180
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c90olFaK69Ba1kMtU89w4s14jm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 01:01:14 +0000
Manifest this update: Fri 17 Apr 2026 01:01:14 +0000
Manifest next update: Sat 18 Apr 2026 01:01:14 +0000
Files and hashes: 1: c90olFaK69Ba1kMtU89w4s14jm4.crl (hash: 1uundtKM2T2EABt8ra3YiViTVE3m+ifn992e5/sLNeU=)
2: tz2e93GZ_VkXqwiin5UrF6tTl-E.roa (hash: fs9g5+VLu3OTriRVnlbcf2rwqdoNP2oMRyLa0WT622w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/c90olFaK69Ba1kMtU89w4s14jm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:d3:e9:0e:be:2e:eb:5a:fd:95:cd:22:5a:71:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73dd2894568aebd05ad6432d53cf70e2cd788e6e
Validity
Not Before: Apr 17 01:01:14 2026 GMT
Not After : Apr 18 01:01:14 2026 GMT
Subject: CN=11df3a16ef1ee97d0c5e729281504b3883ea4de3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:be:8c:03:4c:3f:c9:0e:8f:f5:34:04:d2:13:
79:20:42:cd:07:da:f1:1e:cb:64:3f:ee:21:bd:9e:
2d:10:20:c6:e0:2f:a0:e7:57:48:69:30:53:b1:97:
e4:e2:69:e7:d6:ad:86:aa:d9:cb:fe:13:24:d6:13:
91:69:42:b9:7f:f9:4e:2b:66:97:ab:07:68:ab:a4:
e5:c9:ee:ce:56:6d:51:0a:5d:b3:60:07:eb:6c:81:
c6:b8:6e:47:1a:6f:12:57:b1:78:f4:ee:de:4c:f8:
ae:06:c7:d3:02:4f:7f:27:22:93:6b:d1:67:b5:9e:
58:88:ea:e7:b8:ae:87:d3:3f:e3:91:c1:1a:b4:44:
98:e8:8e:66:15:a7:b0:43:ba:6c:e0:b4:8d:29:56:
50:a9:90:2d:73:61:de:d6:86:32:ee:29:1c:25:58:
88:12:25:63:37:7e:26:76:58:d5:eb:27:80:47:7b:
47:30:a6:02:34:02:2e:4f:d0:80:3c:ca:e4:b9:a6:
ef:0f:53:da:57:6e:1f:14:7c:90:66:38:bf:bf:a3:
e8:b3:80:b2:02:4b:0e:80:17:71:2c:94:8f:fb:85:
ad:fd:80:ab:2a:62:99:b0:dd:5b:45:1d:e6:df:2b:
a3:b7:26:c0:9f:79:b9:0c:4f:ed:30:92:d9:89:cd:
33:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:DF:3A:16:EF:1E:E9:7D:0C:5E:72:92:81:50:4B:38:83:EA:4D:E3
X509v3 Authority Key Identifier:
keyid:73:DD:28:94:56:8A:EB:D0:5A:D6:43:2D:53:CF:70:E2:CD:78:8E:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c90olFaK69Ba1kMtU89w4s14jm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:10:27:fe:4a:c6:3a:f1:6d:7d:14:92:5c:69:ec:d0:83:8d:
89:b6:07:aa:8f:1c:40:18:8d:28:31:4c:ba:6b:23:16:f8:c6:
03:56:0f:e3:d0:2a:33:b6:c8:47:be:b9:88:f6:7e:6d:b7:5a:
59:6f:b4:74:cd:95:c2:5e:70:eb:46:1d:92:ee:1a:2d:01:24:
70:1f:57:fa:66:a0:7a:a9:6e:05:a0:1a:88:8f:8b:34:d0:c1:
21:61:f6:2f:f1:1a:69:59:e1:40:34:4c:03:2e:a1:35:0d:d1:
d9:29:aa:5f:f6:64:18:d6:c5:67:f9:db:66:2a:65:31:39:a8:
a8:6b:01:3d:ad:55:49:cf:6f:f9:09:ae:10:33:a3:7d:68:fb:
f1:29:33:c0:5f:ec:84:9f:00:dd:5c:e0:11:67:a3:35:d9:f1:
62:f6:17:22:03:cf:78:e8:d7:7a:e9:32:55:bc:3a:df:8c:53:
88:64:ac:6a:78:f4:ce:02:30:f2:b4:1d:e3:8d:05:31:22:0a:
fb:d3:a8:96:32:6f:3e:27:f7:11:d0:3e:08:a0:fc:67:1f:6d:
58:d4:68:06:f8:87:2b:e6:e0:33:98:8b:a0:44:5e:c5:60:ee:
a7:4a:71:ce:24:86:37:d1:99:ab:78:72:7a:47:00:21:ba:f8:
63:a3:b0:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:32:42 2026 by rpki-client