Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.mft
File: rGfJO4Il0Ew3YcE87-5fgyk1jiM.mft (raw, json)
Hash identifier: nSkS4/Tm/3lMv5fgAfYr5tCdzU1nvTHFmgGSoUnvj3o=
Subject key identifier: 87:ED:65:1E:2C:1E:15:38:87:0C:68:8A:52:34:C4:30:2C:29:EB:13
Authority key identifier: AC:67:C9:3B:82:25:D0:4C:37:61:C1:3C:EF:EE:5F:83:29:35:8E:23
Certificate issuer: /CN=ac67c93b8225d04c3761c13cefee5f8329358e23
Certificate serial: 019DA34120910F15B18839ADCC95DB129B45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rGfJO4Il0Ew3YcE87-5fgyk1jiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.mft
Manifest number: 18DA
Signing time: Sun 19 Apr 2026 01:00:47 +0000
Manifest this update: Sun 19 Apr 2026 01:00:47 +0000
Manifest next update: Mon 20 Apr 2026 01:00:47 +0000
Files and hashes: 1: 9yXjetA_9LZJZxTsSX9y22ZXwZI.roa (hash: lMfThegQdVTCBwkXRaAXX4LmXRlXKEgH0ZgEcCTMjEk=)
2: WcITaUECKrRS-00UJB2toA0EWBA.roa (hash: 7Dbd0N6O8xlvKSw9ngaRpgSG6WpLRxBISHsmkzDSkD8=)
3: ldmxJAkKvmlHgUpkQnhFLSPjlKg.roa (hash: f+2m7+QBQ2xNK66onBBuHDLsOd1zJ2s1AavJSLAavCU=)
4: rGfJO4Il0Ew3YcE87-5fgyk1jiM.crl (hash: Sd6fumqugaJMqRAGfmL66dCFTwEfFkTuSN4gYcE2TR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/rGfJO4Il0Ew3YcE87-5fgyk1jiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 01:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:41:20:91:0f:15:b1:88:39:ad:cc:95:db:12:9b:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac67c93b8225d04c3761c13cefee5f8329358e23
Validity
Not Before: Apr 19 01:00:47 2026 GMT
Not After : Apr 20 01:00:47 2026 GMT
Subject: CN=87ed651e2c1e1538870c688a5234c4302c29eb13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:14:60:fd:1e:a1:0c:a3:3d:5f:c1:e0:81:e3:
f1:a7:23:c9:8c:db:f0:1f:b7:c7:30:7a:ef:7e:69:
ef:9a:95:9a:57:d1:5e:36:c0:c7:52:25:1c:ab:f8:
df:87:fc:c7:c6:39:1e:87:fc:e1:0d:fa:4c:cf:b1:
3a:ff:b6:3f:0f:0f:9c:d5:48:27:cb:10:5a:02:ed:
aa:03:ac:e6:3f:0e:17:8c:bf:a9:34:6b:95:80:f5:
11:c8:7c:9e:c4:ca:2c:f4:ba:17:b7:e1:06:6a:c4:
33:6e:35:eb:28:0d:97:47:02:39:7b:56:c0:86:55:
12:9f:86:33:38:82:2b:59:ef:ec:3a:8f:57:fd:01:
a6:d3:2a:9c:40:68:9b:a0:8d:e3:80:b0:67:90:0a:
23:08:c5:e6:04:85:6a:f0:9f:05:d6:cb:fa:57:81:
6c:5c:a9:a3:d6:29:eb:35:91:50:c1:aa:fe:ea:bd:
8d:85:68:e2:b3:fd:03:e5:1c:0a:6f:2d:4f:05:67:
cd:e4:29:bb:29:3c:36:95:05:bf:2d:16:6c:e5:e0:
74:43:db:f6:cd:c8:b6:41:ba:9d:da:77:ca:30:e3:
72:3a:73:45:10:46:ff:34:7f:04:e9:d3:28:20:58:
f9:61:dc:f0:dc:46:51:21:fe:66:e4:4a:b1:b2:42:
49:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:ED:65:1E:2C:1E:15:38:87:0C:68:8A:52:34:C4:30:2C:29:EB:13
X509v3 Authority Key Identifier:
keyid:AC:67:C9:3B:82:25:D0:4C:37:61:C1:3C:EF:EE:5F:83:29:35:8E:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rGfJO4Il0Ew3YcE87-5fgyk1jiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:25:cc:3d:22:e4:6a:eb:8b:8a:95:de:f3:d9:54:59:b2:f3:
59:c7:12:6b:8c:5f:a2:4d:40:5f:e1:6f:7a:c5:18:4c:ba:a1:
59:b2:d7:5f:95:52:1b:fd:7b:82:a2:23:47:77:34:75:35:ce:
e8:1c:31:3c:c4:8d:f0:b4:f3:b0:17:01:83:78:5e:40:7b:6c:
d2:80:6d:a1:0b:61:bb:9a:c5:18:6e:85:c2:a2:36:c2:3a:a3:
53:f8:fe:71:0a:17:59:c1:74:8c:61:a8:7c:ca:fd:1c:e2:bd:
a9:2f:84:e4:9b:4b:be:02:99:46:0c:4b:f6:10:95:98:1c:01:
11:b7:a7:39:7e:b9:e0:7b:4b:e7:82:95:53:ee:e3:cf:94:6c:
8d:ef:ea:a9:6a:93:45:e8:de:73:c3:f8:fd:a8:16:36:90:6e:
91:5b:74:7d:f3:a5:7f:9b:13:fa:30:ce:f5:cf:44:2c:9e:6d:
b3:5c:77:7c:57:a4:fa:c6:3a:c7:ee:db:fb:fb:d0:32:44:dd:
2e:b2:35:d2:6a:49:a0:b5:21:e5:ca:2a:58:93:2a:93:87:68:
c7:7c:ee:32:17:56:76:c4:56:78:d7:1a:a5:e8:42:3d:39:63:
9b:dd:d1:74:af:62:84:cb:d1:f2:02:4b:84:7d:9a:96:c2:8c:
88:1c:01:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:56:18 2026 by rpki-client