Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
File: U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft (raw, json)
Hash identifier: AkkehbA+SYMnxGB4iwSzik662DiUUc64Zk7I9Q8E1uo=
Subject key identifier: 76:9D:CA:A7:A8:E6:E8:03:D5:73:4A:A0:F8:62:00:56:5E:E0:56:7F
Authority key identifier: 53:76:46:7E:F0:92:1C:51:19:0E:2E:A6:0F:2A:BB:3B:D6:E9:C1:9F
Certificate issuer: /CN=5376467ef0921c51190e2ea60f2abb3bd6e9c19f
Certificate serial: 019DA3784947727CB3B99B5943C7CA7E54B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
Manifest number: 18C8
Signing time: Sun 19 Apr 2026 02:01:02 +0000
Manifest this update: Sun 19 Apr 2026 02:01:02 +0000
Manifest next update: Mon 20 Apr 2026 02:01:02 +0000
Files and hashes: 1: IvGUn_2-YX3IhLfXSvYGkrdm6NU.roa (hash: tNs9qrcIboBy4IbyGsAG+6ZLzNLrX28RoLdHaH5fRLc=)
2: LJPLYMO5vOxs_MtRPfGWysA-2S4.roa (hash: RrDOCY1v4Pi574dcipWzNUzibj7ERd9ByP6OHQKcs1o=)
3: U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.crl (hash: 7wrALSgj/XohfuouiDLYV94NWnvoIgEni3wBCNRum8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:49:47:72:7c:b3:b9:9b:59:43:c7:ca:7e:54:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5376467ef0921c51190e2ea60f2abb3bd6e9c19f
Validity
Not Before: Apr 19 02:01:02 2026 GMT
Not After : Apr 20 02:01:02 2026 GMT
Subject: CN=769dcaa7a8e6e803d5734aa0f86200565ee0567f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:52:78:80:5f:bb:d6:96:37:24:04:8b:64:7f:
fa:7d:18:96:de:36:63:cb:55:e3:21:01:1c:c3:b2:
e3:b6:09:2f:3b:46:12:74:c6:54:45:aa:ba:e0:f5:
f4:9d:7c:18:79:b3:7b:3a:82:d2:64:63:18:ad:60:
b7:c2:7e:53:e9:45:47:21:a3:67:c8:80:e8:25:59:
13:c8:88:2c:81:9d:4b:a0:93:b6:a6:ec:13:45:4b:
6c:ce:93:6b:6e:0a:3a:76:8d:e2:86:6a:a7:a5:04:
95:df:00:de:9f:33:9f:9e:22:71:44:6a:6f:b2:67:
c2:24:3b:9b:72:d3:18:a6:50:7b:70:39:b9:15:a1:
9f:8b:b5:83:60:8c:79:3b:b6:fc:0e:19:ee:6f:f3:
91:70:e7:d5:24:61:b5:ad:e9:9b:b1:31:1a:50:9d:
5a:a4:68:5f:7f:7a:93:56:43:a9:c2:6e:76:c2:f7:
b9:a8:a2:78:8c:bf:86:5b:e8:46:19:ac:64:e4:7e:
d8:95:dc:85:14:6a:34:b3:e9:38:b3:40:c0:1c:e6:
b7:c7:d0:c7:fd:12:18:03:09:59:e4:d7:8e:a1:69:
63:bd:97:b4:75:b4:59:6f:63:c4:9a:4d:17:b8:41:
83:97:e5:8e:66:93:98:99:cc:99:30:a3:0b:a7:35:
9c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:9D:CA:A7:A8:E6:E8:03:D5:73:4A:A0:F8:62:00:56:5E:E0:56:7F
X509v3 Authority Key Identifier:
keyid:53:76:46:7E:F0:92:1C:51:19:0E:2E:A6:0F:2A:BB:3B:D6:E9:C1:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:7a:12:a5:19:ac:4f:aa:6a:fe:8c:70:3f:a4:80:36:c2:62:
c5:81:7b:50:2b:0b:1b:ca:d9:a7:92:31:58:e2:73:e6:ee:ba:
3f:b7:3b:81:5d:09:95:1d:fe:24:45:06:e2:8d:ef:da:3e:3f:
cd:a2:ec:d2:a1:90:5a:9a:89:0b:9e:d9:f3:45:78:20:e4:90:
91:f0:70:1e:e4:eb:19:39:43:07:a3:0c:52:a4:c6:c6:11:29:
7f:8c:10:ab:fd:26:57:ae:a1:b3:ed:67:2f:3e:9a:72:01:9c:
6c:75:32:88:ee:78:81:43:c6:22:46:71:7d:f2:bf:7d:18:49:
03:97:8b:51:24:a3:96:fc:2f:96:d3:17:60:13:25:68:4f:8e:
11:c5:c9:a2:fe:4e:00:8f:be:dd:56:71:c5:8e:41:0b:e6:77:
c0:63:b6:0b:48:14:21:e3:4b:3e:45:47:9d:79:59:bd:01:8b:
a3:cf:1c:65:b1:57:3f:ec:1c:52:a0:6c:55:a5:87:18:ad:a6:
8f:d2:ce:27:2b:66:4d:2a:c4:87:7d:60:a5:e7:18:a7:64:5e:
62:27:af:7f:51:9c:a2:f2:a3:c7:18:06:2a:a1:90:80:45:dd:
73:75:7c:1f:e2:08:f6:d7:f3:a4:02:e9:e1:e3:f8:61:98:5b:
12:61:be:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:21:25 2026 by rpki-client