Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.mft
File: cHjnVjWgncwD9iWoC_pVKyLjZiw.mft (raw, json)
Hash identifier: mnGKJA02cVDp4q68Lw3133ixoIbNV0Y8KVeqz/CT5Iw=
Subject key identifier: AE:53:26:16:1C:9C:BA:C1:8D:45:9E:27:30:3E:E0:C5:48:92:5D:99
Authority key identifier: 70:78:E7:56:35:A0:9D:CC:03:F6:25:A8:0B:FA:55:2B:22:E3:66:2C
Certificate issuer: /CN=7078e75635a09dcc03f625a80bfa552b22e3662c
Certificate serial: 019D9B198286B7B168E85EF2078EB507C752
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cHjnVjWgncwD9iWoC_pVKyLjZiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.mft
Manifest number: 0D01
Signing time: Fri 17 Apr 2026 11:00:33 +0000
Manifest this update: Fri 17 Apr 2026 11:00:33 +0000
Manifest next update: Sat 18 Apr 2026 11:00:33 +0000
Files and hashes: 1: SP1oOwp0hXl1L0PpjGJ2uhrOHbQ.roa (hash: VQoqVeb1sfiFZgtcNVlhBYDN5Dw/Su2w/ppnhIR9KAU=)
2: cHjnVjWgncwD9iWoC_pVKyLjZiw.crl (hash: /foNBVqLhjDMjHmZbatn/qiFL5aAMKvuDY5U5v+nPes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cHjnVjWgncwD9iWoC_pVKyLjZiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:82:86:b7:b1:68:e8:5e:f2:07:8e:b5:07:c7:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7078e75635a09dcc03f625a80bfa552b22e3662c
Validity
Not Before: Apr 17 11:00:33 2026 GMT
Not After : Apr 18 11:00:33 2026 GMT
Subject: CN=ae5326161c9cbac18d459e27303ee0c548925d99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ad:63:7b:d4:d3:4a:fb:b1:50:64:1f:0c:ac:
99:f1:b9:b4:37:50:30:32:d1:9a:57:4a:e8:bd:12:
ac:c4:97:23:70:e2:a0:08:6a:e8:57:63:5e:a1:04:
ec:3a:7c:46:78:09:83:d7:2b:31:3e:17:9a:de:77:
7c:9d:86:3b:e3:f8:6f:38:f7:47:5b:86:43:f4:60:
68:71:02:35:ec:88:db:f2:42:04:14:a4:8d:a0:40:
ac:39:05:bc:47:31:e9:7a:f1:4b:ee:ff:66:50:a5:
59:62:7e:85:bb:04:02:ab:66:c3:c9:e7:d1:60:8e:
f1:3c:5c:fa:d3:e1:a0:e4:ed:aa:ea:24:21:a9:87:
aa:95:d2:f4:78:ce:20:ae:f6:92:29:8c:6e:12:52:
b1:49:37:39:52:30:0d:a6:44:b6:a6:8d:a1:ec:0e:
20:aa:f4:68:23:1a:cf:c5:e7:8d:37:6d:38:22:92:
79:65:91:e8:c7:63:52:1f:e5:64:fd:22:97:da:6d:
b9:61:64:d6:c8:fc:3b:b3:6e:c2:04:c7:42:b7:c5:
92:ca:57:f5:51:0d:b2:ea:c9:2f:ce:7f:9e:30:ed:
7f:84:59:ce:cd:15:52:10:10:16:a1:89:f5:05:91:
a3:14:18:1a:b1:d9:7b:7e:d5:2c:97:e7:55:7a:41:
b8:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:53:26:16:1C:9C:BA:C1:8D:45:9E:27:30:3E:E0:C5:48:92:5D:99
X509v3 Authority Key Identifier:
keyid:70:78:E7:56:35:A0:9D:CC:03:F6:25:A8:0B:FA:55:2B:22:E3:66:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cHjnVjWgncwD9iWoC_pVKyLjZiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:cd:2c:c7:82:3b:6b:37:e5:70:c7:34:69:00:e3:04:8f:95:
54:49:a6:b9:91:f8:80:3b:5b:70:49:cc:43:5b:b9:d4:ff:43:
15:78:d4:94:4e:dd:08:a5:25:6b:ad:da:00:4f:9a:db:c5:1d:
2b:90:ae:0b:81:bc:32:63:9c:f4:e5:90:ac:8a:3e:50:5f:d0:
61:7c:87:e9:f0:1d:3f:23:d2:68:e4:ef:d2:a3:3b:21:bf:e5:
b0:cc:c2:d0:7f:a0:89:8b:da:66:f1:3f:98:88:05:91:c4:60:
c0:5e:b7:e2:44:40:b3:3a:5d:5e:4e:36:56:93:84:72:24:9c:
89:07:28:81:01:f2:f3:b8:ef:f6:ab:21:a8:59:40:6d:fc:7f:
57:3d:51:23:9c:ff:e4:36:69:8f:e1:eb:8d:95:a0:0b:97:a5:
43:b6:e6:0d:a5:f4:a2:96:54:7b:aa:d0:20:b5:3d:8a:a7:63:
6f:75:b6:62:02:bb:80:44:f1:21:d7:4e:f2:d2:57:4d:08:13:
66:2e:86:6d:49:53:70:00:05:38:05:2d:2e:ac:30:cb:3b:d3:
13:47:e0:16:14:89:58:2f:82:22:79:2e:db:05:f1:3a:43:06:
cc:66:ac:a7:74:ca:6b:26:b5:35:62:6e:50:d0:c7:0c:3e:47:
ea:e7:9e:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:43:58 2026 by rpki-client