Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.mft
File: 448QoseS0NNlZ4o2yn9_FAnKOv0.mft (raw, json)
Hash identifier: 6aX3LYcifWIaMdiJHaPRYBkyIzD2NzwNEAmsNrNn6zs=
Subject key identifier: 17:4F:20:49:EB:D7:CA:07:8E:E7:0E:53:1F:D7:9D:71:12:BE:06:C1
Authority key identifier: E3:8F:10:A2:C7:92:D0:D3:65:67:8A:36:CA:7F:7F:14:09:CA:3A:FD
Certificate issuer: /CN=e38f10a2c792d0d365678a36ca7f7f1409ca3afd
Certificate serial: 019D97E2380876F27BDAA8FD922A57934771
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/448QoseS0NNlZ4o2yn9_FAnKOv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.mft
Manifest number: 18C1
Signing time: Thu 16 Apr 2026 20:01:17 +0000
Manifest this update: Thu 16 Apr 2026 20:01:17 +0000
Manifest next update: Fri 17 Apr 2026 20:01:17 +0000
Files and hashes: 1: 448QoseS0NNlZ4o2yn9_FAnKOv0.crl (hash: GpzQTUKw39m/RRGrTsujzTD6yc7V4BsaYsueWGjuUe4=)
2: sGfgaW1LiewBhrOBJvsdriioaTU.roa (hash: op9iNN949E3VNzRYyQTY+5GgLdt3CTSRD0WZrCE+fbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/448QoseS0NNlZ4o2yn9_FAnKOv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e2:38:08:76:f2:7b:da:a8:fd:92:2a:57:93:47:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e38f10a2c792d0d365678a36ca7f7f1409ca3afd
Validity
Not Before: Apr 16 20:01:17 2026 GMT
Not After : Apr 17 20:01:17 2026 GMT
Subject: CN=174f2049ebd7ca078ee70e531fd79d7112be06c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a0:77:98:1e:dc:d1:11:89:b6:0e:52:e4:df:
31:9a:1c:e9:f2:58:54:72:a2:9c:15:06:12:a8:7b:
ec:13:02:78:01:40:df:a2:0b:f6:37:99:b0:dd:e3:
d4:a0:06:0d:04:43:13:6d:af:e6:1f:a5:46:d1:46:
6f:d9:52:8c:f2:c4:78:b2:f2:f3:3f:9c:6d:ec:6b:
33:84:e4:8e:2b:19:c2:02:08:fe:cd:92:71:55:60:
78:8a:50:ac:b8:32:6a:18:77:2b:15:20:06:53:00:
6b:e3:ea:29:75:4e:f6:56:a9:19:7f:bd:33:bd:1f:
15:3b:95:8b:77:01:d8:43:1a:f5:10:24:00:4c:e1:
1d:83:bc:8b:5b:55:9e:ff:0f:97:c4:c0:cb:12:97:
08:87:74:48:cf:bf:60:a6:58:ea:e6:0b:8a:f5:0a:
74:10:1b:d0:ac:5c:82:4e:f0:4d:98:c2:4d:ed:51:
1c:a5:70:0e:2a:60:26:e4:47:eb:15:6f:d4:7b:58:
b2:02:9e:ac:ae:78:9f:b2:58:f1:9e:7c:af:fd:63:
56:d1:d6:d7:12:40:25:26:87:58:d5:a7:ff:64:65:
ae:e4:f4:34:77:c3:2d:5f:72:ee:16:b3:a5:ae:b4:
ba:bf:a1:84:df:73:ce:c3:cf:1f:cf:fb:98:84:28:
b9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:4F:20:49:EB:D7:CA:07:8E:E7:0E:53:1F:D7:9D:71:12:BE:06:C1
X509v3 Authority Key Identifier:
keyid:E3:8F:10:A2:C7:92:D0:D3:65:67:8A:36:CA:7F:7F:14:09:CA:3A:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/448QoseS0NNlZ4o2yn9_FAnKOv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:5a:e5:28:1e:db:5c:2d:90:07:6f:37:fe:af:01:1b:a9:3d:
b9:b3:8b:83:b4:e1:90:fa:a2:9a:60:13:9e:2d:54:4a:77:f4:
ec:36:e0:19:10:92:c2:33:cd:ed:57:4f:04:31:31:f3:8d:8a:
8a:9f:dd:ce:d1:dd:7b:d8:de:62:2c:bc:50:78:50:e7:a0:37:
e5:69:08:e6:08:15:ed:3e:48:01:73:3f:26:83:42:e9:70:a1:
02:95:9e:54:95:c7:27:4b:2b:60:cf:f1:30:62:17:09:69:30:
80:9d:47:77:d7:6c:73:02:c3:98:09:96:4d:b5:da:a3:a1:bd:
13:6e:88:84:ba:30:5a:9d:67:84:b0:f8:df:a2:7e:c0:73:0b:
dd:02:90:cc:0f:d1:e5:6b:b2:1d:2d:eb:5f:db:07:42:90:04:
67:10:b6:97:c4:3f:85:7f:ff:bc:e9:41:2e:42:9b:fa:2c:90:
d7:45:3d:6d:ed:3c:be:3c:10:f5:f9:65:84:d8:11:56:55:8f:
9a:18:54:25:c6:06:83:74:20:01:0b:39:30:e5:76:a1:62:40:
75:df:46:d0:39:4b:12:fc:37:b0:6e:9f:56:d4:5d:6a:b5:bf:
d9:ac:ce:48:a9:a6:8c:48:6f:fc:67:13:05:2e:aa:49:75:2a:
67:93:59:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:55:31 2026 by rpki-client