
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.mft
File: RpG_08_sWhEI8choVHZOK5A9eIg.mft (raw, json)
Hash identifier: OPpdjzHmzO867JxJ3eSz4gfcdueJtBWI2EdzC1ZCFKQ=
Subject key identifier: BA:28:68:5A:A1:AA:37:0B:C7:F2:FC:13:33:10:31:D6:1E:4C:1B:BB
Authority key identifier: 46:91:BF:D3:CF:EC:5A:11:08:F1:C8:68:54:76:4E:2B:90:3D:78:88
Certificate issuer: /CN=4691bfd3cfec5a1108f1c86854764e2b903d7888
Certificate serial: 019D98F4BE14FB32EAB3839397D3C0A782A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RpG_08_sWhEI8choVHZOK5A9eIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 01:01:09 +0000
Manifest this update: Fri 17 Apr 2026 01:01:09 +0000
Manifest next update: Sat 18 Apr 2026 01:01:09 +0000
Files and hashes: 1: 3gIp0do7jiNRekvTGYYcxp0N4KQ.asa (hash: NdEXhwinGvt8QXFqMCRPd1EsUHvL+9wNCdKJKLs61vs=)
2: 99lIgCZ8a0ei-5wRBXuee2SsGpY.roa (hash: 1ppSKjyGESECn+t5RQboX3iN+5A+rZBrqwtQSTJrj4A=)
3: RpG_08_sWhEI8choVHZOK5A9eIg.crl (hash: 88zXpbnsxFVQXSaBSVX8kYl8o20fOzrR6zQXivX+hJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RpG_08_sWhEI8choVHZOK5A9eIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:be:14:fb:32:ea:b3:83:93:97:d3:c0:a7:82:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4691bfd3cfec5a1108f1c86854764e2b903d7888
Validity
Not Before: Apr 17 01:01:09 2026 GMT
Not After : Apr 18 01:01:09 2026 GMT
Subject: CN=ba28685aa1aa370bc7f2fc13331031d61e4c1bbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:a6:09:01:d1:02:87:1c:03:df:1d:79:b5:a7:
42:99:d6:17:60:c3:3d:57:00:0a:b9:f7:ac:61:17:
da:da:e2:8a:70:1c:ec:93:f3:d0:1f:8c:79:55:be:
c8:b2:0e:49:5d:7d:34:04:3b:bd:14:62:d4:41:3d:
ea:bf:f4:a5:b7:4c:da:08:87:dc:05:4d:f9:4d:c1:
00:c2:5d:ea:b8:38:07:02:53:7d:32:ec:28:45:61:
77:34:a3:fd:20:46:1e:21:d2:c7:8c:84:f4:89:0e:
df:c4:57:1f:f7:a4:c5:1c:c5:fc:60:a3:c8:02:8f:
1e:44:e9:66:d0:17:10:d4:24:bd:e8:cc:aa:08:1b:
72:d7:ca:97:df:e9:f7:9d:52:1d:6c:dd:02:83:85:
83:82:f1:b8:53:c3:f4:07:aa:ec:65:a0:70:97:3b:
8e:ef:2b:15:b3:d0:57:6c:e4:d8:21:b6:b8:b8:44:
40:6f:e9:ac:e5:38:5a:b5:2a:e6:8d:a3:97:76:30:
b9:8d:a4:fc:7f:68:99:d4:f1:23:14:c5:71:04:cf:
ce:2a:7f:c6:8d:83:1d:56:e6:53:94:9b:66:6b:9e:
26:63:e2:cd:dc:8a:9d:59:41:0e:70:e0:a8:92:41:
05:ec:c4:83:4b:ea:04:88:9b:72:38:2b:43:c8:d8:
3a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:28:68:5A:A1:AA:37:0B:C7:F2:FC:13:33:10:31:D6:1E:4C:1B:BB
X509v3 Authority Key Identifier:
keyid:46:91:BF:D3:CF:EC:5A:11:08:F1:C8:68:54:76:4E:2B:90:3D:78:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RpG_08_sWhEI8choVHZOK5A9eIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:f6:7a:c7:92:62:31:32:e6:3a:7b:08:3b:64:11:46:4d:3d:
f1:af:a9:26:31:74:74:b5:60:68:35:b8:e4:a2:6b:c3:46:45:
3f:23:bf:fb:95:16:e8:79:2c:49:f0:1d:9a:3e:9e:b7:dc:c4:
43:51:cf:d8:8c:19:4b:71:32:53:04:89:d3:57:58:c6:68:f7:
ea:ef:bd:27:90:6a:75:89:a7:20:6f:5c:21:bd:d1:c0:e4:42:
aa:64:b3:08:cc:2a:b1:07:e3:fd:ce:0a:0b:ca:2a:9a:55:d6:
37:73:2e:1b:28:dc:1f:ce:2f:69:6b:ba:d5:34:97:8b:d0:65:
f2:90:53:fc:d0:c0:d6:69:7d:4c:10:04:9c:0e:7d:27:0c:78:
8c:d9:b3:47:fa:36:f7:b1:86:13:3a:d6:d9:eb:8e:7a:ca:90:
01:df:ca:75:a6:b1:62:e4:01:58:9b:f2:84:a8:d1:cf:49:c1:
f5:c6:62:9d:3a:42:db:b6:8c:1d:78:aa:45:09:c6:c2:0e:ed:
78:12:82:5e:d7:c7:93:db:da:c5:8f:7c:fa:62:d8:64:60:94:
c2:ce:19:e3:28:6b:e7:71:0b:4e:fc:35:1f:d3:80:4c:bd:ae:
af:54:41:ec:90:34:96:7e:02:cb:3e:51:13:81:62:09:e9:95:
96:4c:6d:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:32:34 2026 by rpki-client