Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.mft
File: R40kiY0c9S0j-VYdxqwPE2Pmx2A.mft (raw, json)
Hash identifier: y7StzfyPo/vIo+Ci9CpHRwehVh4ojE8Y+9eiwk64cB8=
Subject key identifier: 3D:B3:C6:A1:E3:CA:CB:3F:7D:1E:64:23:38:B9:0D:57:B9:F1:3C:2A
Authority key identifier: 47:8D:24:89:8D:1C:F5:2D:23:F9:56:1D:C6:AC:0F:13:63:E6:C7:60
Certificate issuer: /CN=478d24898d1cf52d23f9561dc6ac0f1363e6c760
Certificate serial: 019D9AAB8C1A1C4023E05AF227CD44EACA95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R40kiY0c9S0j-VYdxqwPE2Pmx2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 09:00:26 +0000
Manifest this update: Fri 17 Apr 2026 09:00:26 +0000
Manifest next update: Sat 18 Apr 2026 09:00:26 +0000
Files and hashes: 1: R40kiY0c9S0j-VYdxqwPE2Pmx2A.crl (hash: 15cssGQYfqct/sOXS3MA++q3YDzIg4qLLm8GgMUF2LQ=)
2: wkMmp6s5tIiVOMhQ-G1Z3odbkBA.roa (hash: E+8cABzHZlQUHHuKZ16h6fJZng3ckrzig4shYxP7eeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/R40kiY0c9S0j-VYdxqwPE2Pmx2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:8c:1a:1c:40:23:e0:5a:f2:27:cd:44:ea:ca:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=478d24898d1cf52d23f9561dc6ac0f1363e6c760
Validity
Not Before: Apr 17 09:00:26 2026 GMT
Not After : Apr 18 09:00:26 2026 GMT
Subject: CN=3db3c6a1e3cacb3f7d1e642338b90d57b9f13c2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b3:33:41:ed:8e:0a:bd:ee:9a:c7:42:c0:69:
86:96:9e:0c:c8:e7:54:df:25:86:01:44:a0:8c:4c:
d3:b1:7e:bf:f2:bb:96:3f:69:19:27:9d:4a:7f:3b:
d1:64:72:e9:bc:8d:52:ad:7b:5c:71:3a:ef:ae:63:
25:b5:01:0d:16:6c:f8:a5:ae:7e:8e:b7:0d:3b:da:
3f:61:27:70:37:3f:21:fc:04:83:f0:01:41:32:42:
d3:44:1d:28:69:af:8a:ea:f6:8b:0d:07:a4:67:51:
3a:c0:5d:37:36:61:0c:49:4d:98:ee:1b:1f:cd:74:
e3:26:af:29:12:cc:0d:39:df:a0:5f:01:72:bd:43:
c4:6b:8c:5e:8e:0d:59:fc:2b:71:e7:a6:82:f1:21:
06:66:4d:38:30:4f:ba:b4:56:9f:d8:c7:4f:23:d3:
27:eb:7b:84:2a:c9:1d:1c:8d:78:0f:a2:90:75:9e:
44:a5:41:81:db:f2:3e:c4:ff:85:94:73:2e:e2:26:
b7:50:7b:05:2b:3d:38:a5:db:06:9b:ab:f3:ba:c1:
d6:e6:99:01:5d:83:f5:73:1d:f7:58:d2:62:be:e2:
26:f4:48:ae:74:06:22:c5:32:18:4c:db:a6:29:86:
f0:e1:ad:c7:8c:d4:e8:c5:14:8c:32:04:17:8c:5f:
ae:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:B3:C6:A1:E3:CA:CB:3F:7D:1E:64:23:38:B9:0D:57:B9:F1:3C:2A
X509v3 Authority Key Identifier:
keyid:47:8D:24:89:8D:1C:F5:2D:23:F9:56:1D:C6:AC:0F:13:63:E6:C7:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R40kiY0c9S0j-VYdxqwPE2Pmx2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:3a:ac:f1:0c:8d:f9:51:80:c2:36:bd:d2:65:ea:99:b3:9c:
fd:75:4f:b6:21:28:db:70:2e:38:ad:c2:8a:1b:48:d2:0d:1b:
e0:2f:bf:fa:09:59:40:0a:f3:f4:bc:de:b6:92:08:e3:63:0e:
74:a1:99:6a:68:37:91:87:29:ed:a5:4b:d5:c5:f3:45:b9:a2:
2d:4e:fc:d4:89:9e:1e:71:7b:26:93:16:3c:18:43:7a:48:38:
fc:91:11:a2:9e:93:65:92:c2:b9:1d:98:52:fe:c5:23:39:32:
db:57:9a:a4:c7:18:93:47:a5:34:92:48:2c:ac:0e:23:33:89:
11:ac:09:06:fc:c9:b3:08:2f:63:f8:d4:67:ed:e1:e8:ba:40:
58:61:e1:e3:48:9a:d7:30:84:c4:a1:f5:d8:5e:f4:89:b2:de:
bc:91:a5:86:80:41:d8:9b:3f:fb:35:23:f4:39:8d:b5:4d:3a:
58:f2:2f:f2:7f:07:4e:e4:28:c9:5c:3f:74:2f:16:5f:64:bc:
66:d2:ec:cf:dc:c3:f0:6c:8c:6a:10:87:31:4e:76:6d:b9:ca:
d8:d8:40:9f:a8:1a:34:b8:4a:0e:cc:7a:f1:79:e1:42:ac:9a:
7a:58:6d:22:29:8a:4f:bd:a5:de:8e:1c:ed:ed:6f:55:e2:02:
d1:9a:7b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:42:06 2026 by rpki-client