Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft
File: d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft (raw, json)
Hash identifier: Anl3JobSsDBL0clWtiYGqaQgMKhWXUJZc5rwXLmpBJU=
Subject key identifier: 5B:D2:8C:56:CE:EB:60:38:5D:8E:42:E3:D7:D8:6C:9D:E0:8C:A4:31
Authority key identifier: 77:B0:20:30:88:65:C3:36:0D:AB:19:F3:A5:70:33:41:86:4E:9F:50
Certificate issuer: /CN=77b020308865c3360dab19f3a5703341864e9f50
Certificate serial: 019DA41CC163E7D638FD90DC8AE2467E656B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d7AgMIhlwzYNqxnzpXAzQYZOn1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft
Manifest number: 18D1
Signing time: Sun 19 Apr 2026 05:00:41 +0000
Manifest this update: Sun 19 Apr 2026 05:00:41 +0000
Manifest next update: Mon 20 Apr 2026 05:00:41 +0000
Files and hashes: 1: O0zdzMf69p1geR9BzbHj8H6216Q.roa (hash: gB3ykbY7Zy2yOIDfRVoU3HqEBAgziuKZvTGr//ZJWIo=)
2: d7AgMIhlwzYNqxnzpXAzQYZOn1A.crl (hash: AApUrcDvNEdGa0GalWLgdh86NfiY1uB7zuRGmzlcxHA=)
3: sYgcwFmXC21qQr4HaIkoLUDZGq4.roa (hash: o16QA0TxR5R2SVkQH4tgiDW7/Tyeif3rP5L2akN0sow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/d7AgMIhlwzYNqxnzpXAzQYZOn1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:1c:c1:63:e7:d6:38:fd:90:dc:8a:e2:46:7e:65:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77b020308865c3360dab19f3a5703341864e9f50
Validity
Not Before: Apr 19 05:00:41 2026 GMT
Not After : Apr 20 05:00:41 2026 GMT
Subject: CN=5bd28c56ceeb60385d8e42e3d7d86c9de08ca431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:9f:d5:8b:1b:e6:fe:c0:cb:d3:20:d1:21:36:
95:bc:5d:96:e1:99:00:2b:bf:77:ff:66:8e:bd:d3:
7d:35:9c:0a:29:a9:51:a2:5c:f5:7b:29:43:df:6a:
60:f5:e3:54:23:7b:16:fe:90:d6:9f:5b:9d:57:43:
48:c3:53:0e:d7:6e:3e:a2:41:d5:51:0f:ab:57:f9:
7c:12:8d:30:2b:9c:2c:13:fc:c5:26:54:3b:79:0a:
bc:74:34:fc:f2:33:5a:61:73:1a:99:5a:db:4f:9a:
dc:a6:2f:f2:ff:05:fc:e9:7a:bf:eb:c4:44:5f:b2:
25:04:6a:dc:fa:34:84:e9:c5:6c:d8:74:54:24:13:
47:1f:0d:6f:6e:a8:02:48:41:a7:e0:48:27:de:b4:
eb:5e:d0:03:2d:f7:e9:a9:26:3e:08:fc:d4:dd:3e:
94:7f:7a:f4:01:54:80:63:96:92:8a:5d:20:7e:18:
e1:4b:30:62:b8:74:17:95:13:11:78:3a:9d:00:55:
cd:68:d3:5a:b9:fb:17:57:45:ba:0e:d7:4b:51:7e:
11:f7:25:dd:6a:c7:ba:60:53:05:cc:5f:5f:c7:b7:
07:04:10:8c:f9:21:f0:74:50:b1:a0:9d:6f:c5:f2:
07:c7:1d:c2:88:0e:d8:34:27:2a:77:b7:f6:f0:27:
b1:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:D2:8C:56:CE:EB:60:38:5D:8E:42:E3:D7:D8:6C:9D:E0:8C:A4:31
X509v3 Authority Key Identifier:
keyid:77:B0:20:30:88:65:C3:36:0D:AB:19:F3:A5:70:33:41:86:4E:9F:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7AgMIhlwzYNqxnzpXAzQYZOn1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:a0:05:42:40:de:e6:f7:86:52:36:d3:2a:26:6e:95:cb:84:
f2:a1:39:8a:01:0d:84:4c:e9:2c:0c:47:33:09:e8:48:8c:16:
a5:74:22:ee:d0:74:3f:66:51:7c:2b:af:ac:1c:a0:d8:1b:b1:
11:81:45:12:7f:28:08:fd:41:16:13:70:47:5e:99:ea:47:f3:
97:8d:66:d0:dc:5b:67:04:75:04:73:97:7b:da:81:c7:be:8f:
86:db:74:81:ac:2e:08:f6:c6:b4:8c:83:3f:8b:d6:08:f3:b0:
27:7b:22:e8:b4:ba:16:58:fc:0c:16:35:13:f1:88:75:a8:69:
93:7b:a3:b6:88:17:45:bc:d4:0b:19:7e:6a:75:79:6c:d8:09:
39:ce:46:ac:85:4f:8b:38:b2:e6:7d:ab:89:2d:9f:f5:e8:eb:
f4:48:21:0b:da:e2:1b:30:2f:21:38:4a:70:21:fa:bb:d5:01:
b9:3b:45:3d:90:87:98:84:8f:ad:2c:03:b7:40:b4:ea:50:da:
2e:f9:48:5e:79:9d:43:75:2b:a6:a5:b7:54:9f:10:ea:66:e9:
91:5b:4d:3b:21:48:57:3e:01:96:9c:4d:69:4b:79:d3:f0:f1:
fd:fe:6d:91:2b:45:6a:14:42:6a:85:4a:41:6c:c6:b7:d2:78:
97:96:2a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:51:46 2026 by rpki-client