Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft
File: pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft (raw, json)
Hash identifier: J1EY0PHTI5Tbg5qn99rcikfYlB0wVr3GBTujxhloRzs=
Subject key identifier: CB:39:54:FC:72:98:4E:E2:97:85:CB:FA:5D:1A:14:22:7A:B4:DA:14
Authority key identifier: A4:F5:23:D9:48:38:7D:8C:5F:CD:F7:52:E0:A1:CC:40:8C:FE:83:95
Certificate issuer: /CN=a4f523d948387d8c5fcdf752e0a1cc408cfe8395
Certificate serial: 019D9B197133105ECE6AE5388DD7B75A25C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 11:00:28 +0000
Manifest this update: Fri 17 Apr 2026 11:00:28 +0000
Manifest next update: Sat 18 Apr 2026 11:00:28 +0000
Files and hashes: 1: ZMTWhcJ1e7tvXHUUl4ANoGMrIWk.roa (hash: 9yOiqGJYeL5bi8PHF9fNeVVcmhOJdy6bDsiWR0m6Ve0=)
2: pPUj2Ug4fYxfzfdS4KHMQIz-g5U.crl (hash: 9wjdx5GeWMXww05PI6HbQos1MrCpxezdFLm65GZr0yI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 11:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:71:33:10:5e:ce:6a:e5:38:8d:d7:b7:5a:25:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f523d948387d8c5fcdf752e0a1cc408cfe8395
Validity
Not Before: Apr 17 11:00:28 2026 GMT
Not After : Apr 18 11:00:28 2026 GMT
Subject: CN=cb3954fc72984ee29785cbfa5d1a14227ab4da14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:94:21:5a:97:fb:20:e0:70:ba:55:52:81:78:
7f:42:38:ee:db:ee:ea:e4:b4:fd:e5:8c:c0:22:f7:
53:94:5d:35:82:36:0b:4e:3f:72:4d:58:2a:06:94:
9b:a5:53:f5:9f:ec:ca:7f:76:1c:b1:67:f9:3f:37:
00:a1:78:d2:c4:97:3a:cf:ae:e3:05:e5:61:ed:5e:
e2:6f:84:cc:a6:7c:2e:be:b4:f4:40:53:65:4d:52:
7d:dd:d9:0e:ae:9c:91:52:24:32:e2:98:16:a2:fa:
06:d2:5d:ce:7d:73:1c:1c:4a:f2:e1:4f:b7:70:38:
a4:e6:26:8d:5a:97:53:af:5a:90:9f:ad:f7:7f:8d:
0b:3d:9e:0d:3d:61:fc:b1:12:8e:6a:81:8a:f0:ee:
d2:3c:5f:30:2e:d0:fb:c0:13:65:81:1e:d3:c8:13:
b1:51:26:f4:49:31:8a:90:c5:f2:b6:9c:5c:6e:19:
f1:56:60:cf:b0:c9:ad:41:fb:3b:7e:e6:c4:bd:96:
2d:c5:ed:24:f3:0b:3d:35:6c:45:db:9a:af:0e:a3:
8d:a2:bb:64:0c:a7:e9:5d:6d:a0:bf:48:0b:32:62:
51:98:4d:fa:58:6e:3f:b8:a7:06:41:31:5e:bb:4e:
b3:a5:20:44:33:f4:50:8f:46:06:4d:31:90:c4:5e:
30:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:39:54:FC:72:98:4E:E2:97:85:CB:FA:5D:1A:14:22:7A:B4:DA:14
X509v3 Authority Key Identifier:
keyid:A4:F5:23:D9:48:38:7D:8C:5F:CD:F7:52:E0:A1:CC:40:8C:FE:83:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:02:fa:be:39:35:07:26:b7:26:56:aa:31:27:7d:df:8a:94:
4c:d5:f2:4e:e1:bf:7c:a4:38:6f:92:b9:8b:95:09:b2:78:7c:
e2:1b:62:8a:43:f6:2c:09:20:c1:a8:4b:6a:93:5e:a2:14:8a:
04:83:e2:1b:61:ad:af:c1:b4:fe:57:91:64:f7:30:f2:5f:e6:
2b:21:93:c7:ba:b8:15:29:19:9d:aa:76:84:0b:39:ed:e9:55:
c2:b3:d0:4a:43:0d:d0:af:93:79:30:0c:7a:1f:c7:1b:a0:05:
f2:24:59:78:a3:c5:54:a9:da:0a:b4:1f:49:81:ad:c9:9f:14:
8d:5f:c7:81:da:d6:9f:bb:6d:3e:c3:71:05:8f:8b:6c:e7:a6:
93:7d:f4:66:9e:3e:37:95:65:72:26:89:9a:f7:95:3c:93:9e:
4c:78:9c:7f:1f:8c:65:a4:90:cc:e6:2b:24:e0:e3:c9:1a:42:
d4:f0:66:37:51:9c:23:30:ec:57:52:e1:03:f3:19:25:d6:02:
e4:be:1d:e3:bc:a1:36:c5:ea:8b:e5:61:8f:e3:bc:ed:e6:0f:
4a:51:f9:b4:14:63:24:94:77:6f:e4:2f:ec:65:f2:6f:10:05:
b6:ba:97:64:3a:30:38:ed:d0:27:40:6d:85:88:75:0b:96:ec:
a3:f8:cf:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:16:26 2026 by rpki-client