Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.mft
File: rnLkfVZpJJmnJr-ADqg4A2Letr4.mft (raw, json)
Hash identifier: M0e2m6jWEQHMZZVAZWZTZmPK8MdJCIYKknanpCFtrtQ=
Subject key identifier: AC:EF:51:FD:63:75:FE:02:33:FB:BC:FA:75:5E:CC:4C:ED:8A:E8:F9
Authority key identifier: AE:72:E4:7D:56:69:24:99:A7:26:BF:80:0E:A8:38:03:62:DE:B6:BE
Certificate issuer: /CN=ae72e47d56692499a726bf800ea8380362deb6be
Certificate serial: 019D988679A05406226889641324EA6E2B4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rnLkfVZpJJmnJr-ADqg4A2Letr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.mft
Manifest number: 18D1
Signing time: Thu 16 Apr 2026 23:00:42 +0000
Manifest this update: Thu 16 Apr 2026 23:00:42 +0000
Manifest next update: Fri 17 Apr 2026 23:00:42 +0000
Files and hashes: 1: 0tjlFCD9R3QvhuaUb8R98x3yaAA.roa (hash: QW/Cv+tz1AwpdParcrVZ17Ri4asuS8geM/KpLVI71iU=)
2: RYe-A-tcBgsvnTviE-ENg27AeMY.roa (hash: BIG9Ev2/ZDOm8EsC2U3aW/Qd5R8vFaAuiSgknEWjyDA=)
3: rnLkfVZpJJmnJr-ADqg4A2Letr4.crl (hash: +UlBmm7ivHFzoHOaC04BSe28Sc2oYf7lW0gRD3CQ69I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rnLkfVZpJJmnJr-ADqg4A2Letr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:79:a0:54:06:22:68:89:64:13:24:ea:6e:2b:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae72e47d56692499a726bf800ea8380362deb6be
Validity
Not Before: Apr 16 23:00:42 2026 GMT
Not After : Apr 17 23:00:42 2026 GMT
Subject: CN=acef51fd6375fe0233fbbcfa755ecc4ced8ae8f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:51:99:37:f2:68:96:b6:eb:43:8c:97:8a:e5:
2d:28:59:85:ee:f5:85:99:5e:72:b1:5e:b8:78:dd:
3d:0d:c3:30:c9:11:f7:fa:fb:92:2a:68:33:ba:1c:
ab:70:25:44:c1:e8:3f:02:14:09:93:f9:6a:a3:da:
98:f1:57:37:c6:b9:ec:0d:b2:7f:63:82:ca:e5:5d:
41:aa:3b:e6:ab:39:10:b3:40:c4:76:0b:6f:04:ab:
49:ee:40:64:e3:ab:43:4b:99:4a:9b:ed:5a:3e:39:
ef:e7:3d:38:3d:b5:2a:a3:6f:a2:07:5d:95:9e:f2:
2e:51:c1:96:07:84:8f:0e:cd:6c:d4:29:89:1c:79:
89:8b:ab:9f:3a:53:14:ab:f8:f5:f2:50:2d:ad:2f:
1c:b4:34:3a:8a:8c:45:27:f5:c3:79:63:8e:66:2b:
72:4e:33:ba:84:94:2f:7c:44:e0:47:47:3e:07:d8:
a6:c0:42:09:58:3d:a7:af:90:10:94:89:84:34:72:
68:37:91:2a:eb:19:b4:bf:38:64:97:30:8c:75:1c:
3a:33:2e:4d:9f:b7:e0:f1:b8:51:41:39:27:51:ad:
53:c7:bf:43:8b:ab:f5:59:df:3c:7e:dc:a2:64:c0:
88:8d:bd:1b:e4:24:d2:29:dd:07:1e:44:00:a2:db:
bb:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:EF:51:FD:63:75:FE:02:33:FB:BC:FA:75:5E:CC:4C:ED:8A:E8:F9
X509v3 Authority Key Identifier:
keyid:AE:72:E4:7D:56:69:24:99:A7:26:BF:80:0E:A8:38:03:62:DE:B6:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnLkfVZpJJmnJr-ADqg4A2Letr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:40:03:68:2e:dd:ee:dc:84:dd:54:4e:a6:0a:76:f3:c1:9a:
03:3b:bf:8f:51:27:5c:e7:0b:37:ba:11:b3:4a:d4:b9:2c:49:
2e:c3:02:c8:56:5e:03:76:68:27:93:da:9f:39:d3:ac:dd:a9:
74:a5:3b:00:76:05:6a:61:22:46:5f:b5:01:4b:1c:55:f7:e6:
39:28:31:01:96:ff:a6:3e:82:3b:8c:0a:d3:90:f8:24:da:1e:
39:12:f6:57:58:30:f7:1c:79:8a:4d:55:28:19:a2:94:47:94:
cd:78:83:7e:18:8b:36:d8:1c:b4:23:30:85:fc:8f:b5:da:24:
6f:db:29:05:6a:4e:7f:0f:0e:c9:df:b1:a2:5c:5e:ad:f4:db:
2c:a0:3c:cb:4c:55:a6:af:79:e5:97:a1:cc:5e:ca:3b:00:42:
32:ba:f0:26:8d:7d:68:c5:83:d9:0d:2a:4f:e0:d2:13:fc:7f:
5f:e3:71:9c:96:23:49:f9:a1:03:b6:61:8e:a9:93:fa:74:ba:
20:99:27:df:90:93:b5:0b:4b:74:3f:87:e9:3f:95:ec:e7:1d:
54:57:cd:77:e3:f2:5f:fd:22:80:fd:cd:15:d2:8e:a0:e7:8d:
19:3c:ad:25:3f:4c:01:51:24:d8:16:3a:ff:9b:26:1e:a7:44:
ce:86:a0:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:46:38 2026 by rpki-client