Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft
File: cZSbR98xPLq5RS2pj8xjdgipCb0.mft (raw, json)
Hash identifier: Dtwa5Rcg25ENXIIEzljfb8Wc3DHClKBvUhk9BdCkxLw=
Subject key identifier: 0D:CE:75:77:2B:AB:31:4E:DD:1E:A9:31:5B:87:F0:AC:01:05:43:98
Authority key identifier: 71:94:9B:47:DF:31:3C:BA:B9:45:2D:A9:8F:CC:63:76:08:A9:09:BD
Certificate issuer: /CN=71949b47df313cbab9452da98fcc637608a909bd
Certificate serial: 019D9A3ED3402B14E4A354549048EB4951D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft
Manifest number: 18E4
Signing time: Fri 17 Apr 2026 07:01:41 +0000
Manifest this update: Fri 17 Apr 2026 07:01:41 +0000
Manifest next update: Sat 18 Apr 2026 07:01:41 +0000
Files and hashes: 1: 4QGNMsc5EGKo58Zw8Ral2zodI2I.roa (hash: YULKFII3+bo9JTIVj/N+lbxzQak7k1SW83B1ho5/0B8=)
2: 7nQSU3KcKFGzNpk1S9m7Pg_R3QA.roa (hash: hhvez6L7iOSamemiziLCMKx9JI55MAZ7ghp/mQWgqbI=)
3: cZSbR98xPLq5RS2pj8xjdgipCb0.crl (hash: FJnN2nqGi5lyOgPGwil7cEWT0M1imA+rygqxDKVMg7c=)
4: iqsTReQX-wslFa4ZJjVVBZ1O16I.roa (hash: HHgLFIJy8JtakXSElLjUicZ/9YwRa/+1lz1+D14ujGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:d3:40:2b:14:e4:a3:54:54:90:48:eb:49:51:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71949b47df313cbab9452da98fcc637608a909bd
Validity
Not Before: Apr 17 07:01:41 2026 GMT
Not After : Apr 18 07:01:41 2026 GMT
Subject: CN=0dce75772bab314edd1ea9315b87f0ac01054398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:9d:36:fd:20:fc:4b:21:64:7b:ed:96:6d:d9:
6a:fd:e1:28:e2:26:2b:6f:63:87:bc:eb:d0:6e:3c:
c7:ab:63:85:63:b9:7d:a5:55:e3:96:78:d0:21:07:
44:53:60:4a:15:5f:29:c0:f2:43:30:79:1e:a3:16:
da:d7:a8:92:71:8d:ab:8a:9a:79:00:07:45:88:ae:
ff:d9:22:ca:c9:80:65:b2:70:c3:a1:f7:ad:9c:1c:
b7:85:59:3c:15:a3:57:d7:82:34:c0:51:5d:b6:2c:
8d:aa:b4:77:8d:78:cf:1d:db:f2:60:3d:fd:31:e7:
b3:13:46:41:0c:01:7a:cf:f3:58:d7:2c:f2:77:e9:
b7:8b:a8:4f:d4:03:3e:9e:6b:60:68:89:f6:38:81:
01:3b:9d:08:dc:e0:33:12:11:11:1a:78:5f:72:de:
d6:d8:b7:46:73:bc:2f:d9:9a:d6:73:81:15:77:02:
73:9a:80:6f:77:15:98:c7:2a:20:6e:e2:c0:7e:dc:
2e:ca:15:07:0a:73:69:f4:67:8d:fe:23:6f:a5:12:
1c:15:d3:38:69:5e:0a:c9:36:64:7b:52:d8:f6:90:
46:85:ac:88:b5:78:a7:af:98:5f:b4:62:94:bb:e8:
d8:18:ea:58:45:b4:1a:f8:c9:87:0e:b3:b4:cb:00:
05:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:CE:75:77:2B:AB:31:4E:DD:1E:A9:31:5B:87:F0:AC:01:05:43:98
X509v3 Authority Key Identifier:
keyid:71:94:9B:47:DF:31:3C:BA:B9:45:2D:A9:8F:CC:63:76:08:A9:09:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:f6:0f:ac:10:2a:c2:f3:72:e1:6b:fc:f0:8d:03:ef:0c:b4:
99:0e:f6:ec:b7:e5:a8:60:25:65:3d:6d:2e:77:11:df:72:5a:
cf:11:1f:8f:51:47:b8:8c:77:53:b0:36:90:f0:1b:51:b6:bd:
92:ca:75:a4:10:6c:16:f1:50:05:77:15:db:2f:82:71:b8:0f:
3a:d1:b4:7b:11:79:84:41:91:93:1d:52:3b:02:d5:24:7e:8b:
70:2b:71:3f:fc:04:b2:09:90:11:cf:e4:3b:90:db:2f:14:41:
21:59:2b:29:11:82:02:8d:33:de:49:dd:76:f6:48:46:ca:1d:
61:30:d6:1c:64:6f:bc:fd:5b:e0:b0:86:ee:21:b6:f1:e9:d4:
a5:2b:26:7a:14:7b:8a:d4:12:d1:2a:09:f3:f5:a9:83:1b:43:
bc:a3:b4:ad:de:e6:fb:49:da:46:72:84:a5:e4:df:e4:a3:f7:
ed:d6:44:f7:1e:d5:89:9e:5f:56:bc:bd:6d:0a:c9:b0:9d:c1:
9f:54:ba:f3:cd:00:44:16:c4:2d:1a:34:1f:76:32:71:32:ae:
c2:f0:35:d8:71:5e:e7:5e:b8:da:02:0b:f7:4a:3b:45:d7:dd:
9f:c8:4b:3a:8f:c3:3b:53:b5:b1:5a:24:da:96:54:b5:5f:2c:
f5:ae:de:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:22:01 2026 by rpki-client