Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/e81755-4592-4f20-af70-caf951e1531d/1/cw4Zvy8v23MCMtosRVGjEro-LuI.mft
File: cw4Zvy8v23MCMtosRVGjEro-LuI.mft (raw, json)
Hash identifier: XqwVcadiaUa3tzHIxV38LtaR16qsUA95V1TGktJORlY=
Subject key identifier: EA:70:0E:73:8A:1C:57:2F:3B:C5:9C:FE:60:FA:25:4E:CA:EF:7C:AB
Authority key identifier: 73:0E:19:BF:2F:2F:DB:73:02:32:DA:2C:45:51:A3:12:BA:3E:2E:E2
Certificate issuer: /CN=730e19bf2f2fdb730232da2c4551a312ba3e2ee2
Certificate serial: 019D9AE2FB948C9D54C22DF3A455CCB99E20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cw4Zvy8v23MCMtosRVGjEro-LuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/e81755-4592-4f20-af70-caf951e1531d/1/cw4Zvy8v23MCMtosRVGjEro-LuI.mft
Manifest number: 18CA
Signing time: Fri 17 Apr 2026 10:00:59 +0000
Manifest this update: Fri 17 Apr 2026 10:00:59 +0000
Manifest next update: Sat 18 Apr 2026 10:00:59 +0000
Files and hashes: 1: 6TWVbOo0aRZmcX_sp3lPD9CiZdI.roa (hash: gPmBms7Ee3F+CBTlSi6nlg1BBxS+Ey8K66xwmLZe70g=)
2: Nzu07THw6Tky2XNtILrXxTbGAF8.roa (hash: EeS9tyAj4w8h1PE9Nvgak38E714oDDd68R5eMJ76c6A=)
3: Q5LeXJAR5nv8pnxIZARZWuAM-YY.roa (hash: W5ivVLyzbxcE+HpeC9koFj+JQtU4yM66sZ1hanJqHv0=)
4: cw4Zvy8v23MCMtosRVGjEro-LuI.crl (hash: HJ7Q+Um/luwwJUVs76bADRFzgSaWPGjRRtbXzw+dGKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/e81755-4592-4f20-af70-caf951e1531d/1/cw4Zvy8v23MCMtosRVGjEro-LuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/e81755-4592-4f20-af70-caf951e1531d/1/cw4Zvy8v23MCMtosRVGjEro-LuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cw4Zvy8v23MCMtosRVGjEro-LuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:fb:94:8c:9d:54:c2:2d:f3:a4:55:cc:b9:9e:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=730e19bf2f2fdb730232da2c4551a312ba3e2ee2
Validity
Not Before: Apr 17 10:00:59 2026 GMT
Not After : Apr 18 10:00:59 2026 GMT
Subject: CN=ea700e738a1c572f3bc59cfe60fa254ecaef7cab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:01:e2:c4:9f:cb:01:b3:a8:20:9a:87:44:65:
72:42:5a:ab:cc:3e:ce:a6:70:80:ee:ab:ce:ac:71:
59:52:d5:51:18:70:c6:4a:87:15:36:72:bb:ae:d5:
df:46:14:68:7b:56:61:0a:72:4c:44:d1:c5:8f:49:
89:67:d9:e6:78:6f:ea:0a:6f:f6:ef:1b:d4:5d:f7:
67:43:96:00:0a:26:88:54:c7:8a:a4:93:28:52:6c:
b7:f8:57:63:b5:05:19:e9:9a:56:af:64:f4:95:4a:
2f:30:9f:6a:e1:60:f7:02:1b:28:cf:d1:d5:ca:10:
5f:47:8a:0b:af:96:f8:94:05:1f:93:4e:57:f6:ad:
ec:5f:66:ee:c5:21:e0:c9:37:7a:a2:7c:ac:6a:a4:
a6:93:04:a1:87:e2:af:4a:e7:8d:ec:31:1f:8d:7f:
ce:04:c7:c3:81:86:a8:34:5f:40:42:4d:5b:98:5d:
43:0c:94:47:96:8d:ed:5b:4b:23:e6:ce:dd:93:3c:
28:83:f9:bf:74:60:46:b6:ee:16:b2:c4:61:00:12:
f7:bb:6b:79:7e:12:91:03:99:71:b1:43:82:c4:de:
6e:ed:23:69:dc:0f:ba:b8:39:e1:ca:b8:f1:66:87:
f9:dd:18:fc:0b:06:2a:e0:17:9f:51:94:c6:12:0b:
65:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:70:0E:73:8A:1C:57:2F:3B:C5:9C:FE:60:FA:25:4E:CA:EF:7C:AB
X509v3 Authority Key Identifier:
keyid:73:0E:19:BF:2F:2F:DB:73:02:32:DA:2C:45:51:A3:12:BA:3E:2E:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cw4Zvy8v23MCMtosRVGjEro-LuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e81755-4592-4f20-af70-caf951e1531d/1/cw4Zvy8v23MCMtosRVGjEro-LuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e81755-4592-4f20-af70-caf951e1531d/1/cw4Zvy8v23MCMtosRVGjEro-LuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:b1:bc:39:09:f7:46:fa:15:ab:6b:a6:4c:d8:75:56:ed:46:
28:0e:51:c0:8a:c9:22:33:d6:0b:52:42:d1:f1:5c:2c:93:9c:
e3:3d:fb:7f:14:5b:79:cf:ec:e4:4c:09:e2:0d:66:2a:98:6d:
fb:ac:8c:e7:8e:c6:eb:b4:b0:68:ac:29:a3:ca:9e:ad:3d:9d:
da:2b:0d:ea:60:70:c8:2a:89:42:e2:c2:e6:d2:28:78:16:f1:
46:83:c6:16:b4:32:f0:24:ae:0d:39:9a:d2:d3:26:bb:5c:f4:
bb:7a:7e:31:4f:09:f0:d5:b6:b0:b7:6d:43:d7:67:83:02:6a:
2f:6c:b6:1b:d4:86:06:5b:f6:53:4b:df:b3:6f:c9:83:3e:e0:
d5:41:76:bd:b6:46:3b:e3:e3:60:36:02:83:68:89:b5:1a:a4:
6c:9a:84:c2:7e:53:44:65:95:83:f9:c7:6e:25:f1:c4:06:15:
d7:a1:8d:b6:fc:7b:89:55:59:39:59:eb:7c:84:c1:92:27:8f:
a6:88:da:1c:28:4c:3f:6c:3c:62:fb:b6:64:a1:75:17:a4:91:
5e:aa:be:b1:54:df:20:38:36:d9:7b:a0:a1:31:87:46:6d:61:
25:5c:9e:1e:93:e0:2e:9d:39:08:d4:b9:8b:06:1c:41:d5:20:
6e:e0:4c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:40:04 2026 by rpki-client