Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.mft
File: MAsvRrpXChZ3v9WExygirZ2f5bA.mft (raw, json)
Hash identifier: WNfx13azJKgbNQfCdMwhFWVaDWJVQtjMLP4l1LdJ22U=
Subject key identifier: 6B:CC:19:65:62:2B:95:64:F4:D5:81:B2:20:88:DA:70:06:C7:DB:8F
Authority key identifier: 30:0B:2F:46:BA:57:0A:16:77:BF:D5:84:C7:28:22:AD:9D:9F:E5:B0
Certificate issuer: /CN=300b2f46ba570a1677bfd584c72822ad9d9fe5b0
Certificate serial: 019D99628BA5BE916C2E9BDA29EA16F92000
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MAsvRrpXChZ3v9WExygirZ2f5bA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 03:01:05 +0000
Manifest this update: Fri 17 Apr 2026 03:01:05 +0000
Manifest next update: Sat 18 Apr 2026 03:01:05 +0000
Files and hashes: 1: KaT0sW3jh_PPKcDRHkAr_6LGbFg.roa (hash: 4tEmgwJp5TqeJVAPv5jHwB4A533Y/KCzgRQwAZ4AUmA=)
2: MAsvRrpXChZ3v9WExygirZ2f5bA.crl (hash: 0SHPi6mxcmSwUhzlosy3kvzAdPBgNPL8WBVNpMhbCrk=)
3: YpeHyUrRfHsUTh5A1_lsn9ecLdI.roa (hash: 54/I0U+2gsfxDHjTGitToFh36OuJx0rhyc8ObFsTIiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.mft
rsync://rpki.ripe.net/repository/DEFAULT/MAsvRrpXChZ3v9WExygirZ2f5bA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:8b:a5:be:91:6c:2e:9b:da:29:ea:16:f9:20:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=300b2f46ba570a1677bfd584c72822ad9d9fe5b0
Validity
Not Before: Apr 17 03:01:05 2026 GMT
Not After : Apr 18 03:01:05 2026 GMT
Subject: CN=6bcc1965622b9564f4d581b22088da7006c7db8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:74:7c:f2:a6:29:1b:6c:6b:a3:20:40:12:6d:
4b:1b:0e:c6:56:83:05:35:af:5d:85:8e:a5:66:28:
df:23:98:f9:c6:be:93:11:da:aa:5a:75:9c:fd:96:
fc:a4:49:46:58:3c:9a:b6:08:dd:6e:36:e4:8c:f4:
a7:ea:e9:24:ec:be:c9:4f:6e:c6:44:80:4f:f1:aa:
22:dc:6b:d2:9f:fe:8c:9e:23:16:24:c3:7a:4e:3b:
bd:06:fb:2c:4d:b5:2a:09:57:e4:33:53:29:4c:f4:
3a:4f:04:ce:52:19:51:5a:fe:d6:3d:45:93:99:cb:
3f:fd:56:6f:b7:0f:5f:d3:1d:8a:91:46:3c:92:99:
df:e7:9b:ce:cc:4e:27:da:5e:08:af:2e:be:65:5d:
4e:6f:d7:62:cc:d3:59:97:d1:cb:8e:f2:07:4f:bb:
0f:37:80:8b:ce:93:bc:62:b1:18:5e:5e:38:01:9f:
70:4f:8f:01:a6:da:bb:08:0d:a4:b2:45:75:e2:98:
68:09:17:6c:12:71:24:0f:ba:b7:9a:d8:bb:77:26:
0d:4b:83:65:43:94:9b:0b:67:35:04:6c:0f:a0:ed:
55:4f:2c:95:7b:24:8a:c6:e7:54:ed:1c:39:84:0e:
96:33:7e:e8:d1:7a:03:7a:98:6b:d5:16:b1:de:a6:
b5:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:CC:19:65:62:2B:95:64:F4:D5:81:B2:20:88:DA:70:06:C7:DB:8F
X509v3 Authority Key Identifier:
keyid:30:0B:2F:46:BA:57:0A:16:77:BF:D5:84:C7:28:22:AD:9D:9F:E5:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MAsvRrpXChZ3v9WExygirZ2f5bA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:26:f6:11:4f:01:cd:d5:96:69:63:ce:bd:b8:b3:e5:da:4d:
95:22:2c:d9:db:2a:f3:17:58:c6:b7:92:ef:7a:3c:5f:67:b8:
dc:46:46:50:9f:bf:80:05:f7:c7:f6:bd:28:3b:42:bf:e6:4e:
d6:46:c1:0a:0b:7e:14:d5:01:b1:a4:05:e4:78:eb:57:a4:22:
d0:5b:2e:1f:94:5e:27:94:f0:7b:0f:89:27:d2:16:cf:17:8d:
18:74:8f:d8:35:57:42:fe:91:e9:cd:07:f0:89:db:7c:6b:74:
95:d9:c0:31:fa:e9:21:85:45:f0:20:80:b3:1f:8e:f6:f8:72:
3a:06:33:be:49:1a:c9:d8:27:65:dd:f1:ef:cf:5a:a6:ee:72:
46:26:8a:0c:61:9a:b9:7f:53:7f:cd:93:d2:c2:53:e0:b8:d3:
14:5c:c1:e0:68:11:fc:67:5b:b3:62:9b:c2:c8:2c:2a:10:26:
30:10:6e:45:31:56:1f:87:2b:8d:f0:23:35:65:6b:dc:09:83:
69:94:d2:9b:81:f2:23:2b:d8:35:b9:c3:cf:2b:44:b5:db:19:
96:a8:6a:4e:6f:21:87:75:6d:d5:70:ff:d6:91:d2:f4:db:ca:
44:2b:52:1a:4b:41:6a:06:a0:80:01:1f:70:5c:33:db:2e:5a:
b9:ee:27:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:28:02 2026 by rpki-client