Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.mft
File: maLC7PWMRLNaDaKVf_TcouYLaGo.mft (raw, json)
Hash identifier: ON+xgaZPT36ek7N988epIBjVI+7rdz6am8GW5v7fcPE=
Subject key identifier: 45:C5:79:B5:B4:F0:61:CB:7B:6B:02:EC:E4:54:D7:EA:4A:A2:5A:BD
Authority key identifier: 99:A2:C2:EC:F5:8C:44:B3:5A:0D:A2:95:7F:F4:DC:A2:E6:0B:68:6A
Certificate issuer: /CN=99a2c2ecf58c44b35a0da2957ff4dca2e60b686a
Certificate serial: 019DA340CFEC7F09AFF8F784250CC6A6E18A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maLC7PWMRLNaDaKVf_TcouYLaGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.mft
Manifest number: 18CE
Signing time: Sun 19 Apr 2026 01:00:26 +0000
Manifest this update: Sun 19 Apr 2026 01:00:26 +0000
Manifest next update: Mon 20 Apr 2026 01:00:26 +0000
Files and hashes: 1: CQ22INHNBj4XjlCUrI5XIygZ-R0.roa (hash: XIhPQfL8JPX1XhK5bY8YDY2+uw01ecHaNFfLz05TOJ0=)
2: KJY5nxCnM8VflNqrt-fuQ6cuQes.roa (hash: CD+3ziwBgnP7/0qdqqYvm343nyyRQZA21pgLWpHPvXc=)
3: YoLNLyuosFKuT_-ema2hiJHs0ZY.roa (hash: hWuyH98+DzBIQmHmAmY9RDKZV1I45ddKJD4en0HvYcI=)
4: a4snBLGv5x9BUgTX8OqagmQxYq4.roa (hash: v28FpMO1x0oIkmNzipvZuAj2xt/sVOZTdJkWdv7M7/Y=)
5: iTdLQoa1ZZc0xRlTVb7cKdKcrqo.roa (hash: fRXMRZJi4kfSOE38kfwPxuehxymZ8uVjjmiNFMuJgTE=)
6: maLC7PWMRLNaDaKVf_TcouYLaGo.crl (hash: nVR6uXgQVVJJBkxRaDsfH/QnxP08XCk0OLEdYmrPfC0=)
7: pgw_vXBhOHyYYmolPmheFOInOlo.roa (hash: FBhZNS8WeqSQq7ASqmhTPAh4HzJGXnwv4pIHLO19zl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/maLC7PWMRLNaDaKVf_TcouYLaGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 01:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:40:cf:ec:7f:09:af:f8:f7:84:25:0c:c6:a6:e1:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a2c2ecf58c44b35a0da2957ff4dca2e60b686a
Validity
Not Before: Apr 19 01:00:26 2026 GMT
Not After : Apr 20 01:00:26 2026 GMT
Subject: CN=45c579b5b4f061cb7b6b02ece454d7ea4aa25abd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:09:b8:f5:8c:b5:7c:e0:78:7b:ad:a3:dc:ec:
f1:29:12:d1:58:12:0c:d6:69:80:38:20:74:e3:0f:
13:53:7b:aa:63:38:4f:06:06:65:ba:d2:9b:91:95:
17:cc:9f:76:14:32:54:c3:42:f5:3f:5a:45:56:60:
29:14:4a:02:39:ea:75:3c:6f:07:d5:32:22:3b:77:
87:bc:f6:32:db:76:2c:e6:0f:13:74:98:6a:38:15:
7a:9f:9b:b0:a9:3c:69:49:77:63:2d:6c:58:52:a5:
a6:4c:06:ea:a2:96:3f:f5:40:18:31:9c:75:f4:08:
fe:e1:3f:b7:66:82:7d:f6:d4:0a:06:e1:01:49:2c:
13:98:78:97:5d:e3:18:49:d8:05:d6:14:e3:cf:bf:
c9:9d:8a:f4:c3:ed:6c:d6:f4:e3:f9:c0:b0:ab:ed:
ee:d8:76:3d:8d:b7:40:3c:88:61:b3:9b:16:41:ac:
59:11:64:73:01:6d:20:d1:3b:ad:1f:68:db:4a:f7:
85:46:2e:b0:b9:00:d3:0b:f8:0c:bb:20:6f:5e:58:
30:fa:6b:36:e2:9b:bb:48:66:11:c0:8e:15:4d:60:
26:48:8f:7d:22:22:19:6d:e1:f7:f1:1c:a2:9a:86:
85:e8:97:5d:15:a7:84:f2:13:79:78:25:f1:e3:de:
e4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:C5:79:B5:B4:F0:61:CB:7B:6B:02:EC:E4:54:D7:EA:4A:A2:5A:BD
X509v3 Authority Key Identifier:
keyid:99:A2:C2:EC:F5:8C:44:B3:5A:0D:A2:95:7F:F4:DC:A2:E6:0B:68:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maLC7PWMRLNaDaKVf_TcouYLaGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:74:2f:e6:b7:39:66:de:b8:e3:90:e0:05:17:c1:14:92:4a:
64:27:32:7e:4e:88:d3:5e:16:e5:62:50:2f:69:cd:a0:5f:09:
8e:52:81:53:64:01:e5:ed:a8:37:66:80:af:77:8c:75:f7:31:
a5:14:00:f8:44:df:6a:d1:97:88:c3:28:70:ee:78:98:32:44:
fd:2d:e2:fc:b3:76:9d:4b:f3:7a:c8:06:f6:e7:7c:bb:f9:e8:
fa:09:e0:7e:26:9b:a8:f9:4e:06:d0:52:80:ae:2d:70:98:31:
68:d7:86:c5:a6:52:e5:bc:87:ba:51:9e:b1:82:91:76:c3:3d:
71:86:63:87:20:6d:23:f2:4e:c1:23:13:70:f7:de:e9:27:40:
b9:53:6a:fb:ff:6a:12:14:ea:be:a2:42:83:44:44:e8:e7:29:
36:a3:8d:a2:bd:bf:06:cc:5b:2b:ba:1c:ad:72:79:0b:38:2c:
1f:68:df:24:25:18:4c:6e:cb:65:14:27:bc:91:41:d7:b6:2f:
cc:fb:b4:9d:86:97:6a:60:17:0b:a9:e0:12:98:5e:02:c1:af:
b9:ff:3b:7b:83:87:e0:19:5e:b2:0b:f1:86:b3:5c:f1:08:03:
e4:93:7f:d6:0d:55:ae:93:50:07:1c:36:d1:79:2b:79:cf:56:
4a:93:bd:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:14:17 2026 by rpki-client