Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p2qQ5xZTDxX3OZt6w-DSk5ohohA.mft
File: p2qQ5xZTDxX3OZt6w-DSk5ohohA.mft (raw, json)
Hash identifier: epjVL9ztoxprP6s61FfZA4FpCEWQ6axrrfuzc0KYRBU=
Subject key identifier: 30:A2:FD:0B:1D:2A:A4:10:5B:D7:43:F8:81:60:AA:4F:63:75:17:9E
Authority key identifier: A7:6A:90:E7:16:53:0F:15:F7:39:9B:7A:C3:E0:D2:93:9A:21:A2:10
Certificate issuer: /CN=a76a90e716530f15f7399b7ac3e0d2939a21a210
Certificate serial: 019D99D08E858EE26E9C1200BBD157BBCB78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2qQ5xZTDxX3OZt6w-DSk5ohohA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p2qQ5xZTDxX3OZt6w-DSk5ohohA.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 05:01:15 +0000
Manifest this update: Fri 17 Apr 2026 05:01:15 +0000
Manifest next update: Sat 18 Apr 2026 05:01:15 +0000
Files and hashes: 1: Q9bW7DT8b-bilbM4okf2-4RumJ8.roa (hash: VGpo3RNyhjlbXzLjR04xOlVdZxQhemrEMPSoF4PPXPI=)
2: p2qQ5xZTDxX3OZt6w-DSk5ohohA.crl (hash: 5MPkj1C5Q2HOX0LEKqFUR8nZR5lx2nSWYZ49z+ckRXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p2qQ5xZTDxX3OZt6w-DSk5ohohA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p2qQ5xZTDxX3OZt6w-DSk5ohohA.mft
rsync://rpki.ripe.net/repository/DEFAULT/p2qQ5xZTDxX3OZt6w-DSk5ohohA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:8e:85:8e:e2:6e:9c:12:00:bb:d1:57:bb:cb:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a76a90e716530f15f7399b7ac3e0d2939a21a210
Validity
Not Before: Apr 17 05:01:15 2026 GMT
Not After : Apr 18 05:01:15 2026 GMT
Subject: CN=30a2fd0b1d2aa4105bd743f88160aa4f6375179e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:34:13:71:6f:81:0b:7a:66:d7:18:ed:07:87:
59:80:e9:e4:5e:7d:cf:e7:72:4f:27:a8:0a:47:d2:
27:c2:51:aa:b1:65:d2:73:72:d0:4f:64:14:54:45:
59:37:28:e2:ae:20:70:fb:70:3b:32:7b:d1:51:fd:
f0:a6:a5:42:39:52:48:ce:de:89:5f:7c:53:b1:3d:
9e:5a:67:ad:43:2a:50:58:d4:ae:f9:d2:1f:fd:df:
45:eb:76:ae:7f:66:72:f8:21:25:af:43:e5:c6:b5:
e3:60:d8:e9:84:16:9d:e3:96:11:5b:74:7b:68:b8:
6c:db:67:a8:0d:5e:ac:90:48:a2:34:d9:f9:93:55:
ad:16:e2:52:b3:a3:aa:26:f9:24:75:6e:f3:76:62:
9e:15:1e:65:bd:77:2c:fd:c7:49:df:c2:94:ad:f5:
45:e4:89:38:80:74:52:27:d6:9c:ad:fb:44:03:e5:
9c:c2:00:cb:b2:4f:47:c5:94:45:9a:1a:c0:72:44:
cd:3f:eb:0e:92:42:95:e7:ff:a9:8b:b2:60:3e:27:
a3:88:9b:3d:ee:72:23:1b:7a:69:b9:63:de:25:64:
a9:85:a6:dd:55:34:9d:d8:2a:48:a8:ae:9e:0d:fa:
4f:6c:6e:29:5f:02:c6:75:57:01:8c:72:90:3c:4c:
75:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:A2:FD:0B:1D:2A:A4:10:5B:D7:43:F8:81:60:AA:4F:63:75:17:9E
X509v3 Authority Key Identifier:
keyid:A7:6A:90:E7:16:53:0F:15:F7:39:9B:7A:C3:E0:D2:93:9A:21:A2:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2qQ5xZTDxX3OZt6w-DSk5ohohA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p2qQ5xZTDxX3OZt6w-DSk5ohohA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p2qQ5xZTDxX3OZt6w-DSk5ohohA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:37:75:97:c6:02:69:35:75:48:03:0b:2b:93:27:69:03:63:
41:b9:02:e6:ce:76:b2:ff:18:c0:37:1a:5d:01:a7:2b:df:e8:
86:5a:f2:ab:d8:ea:79:5b:a4:4d:97:ec:7a:77:42:03:d0:9b:
ff:58:41:95:ec:d0:a0:98:cc:9e:a4:d5:f9:94:2f:f9:4d:66:
4e:94:9d:d2:6d:42:7e:7b:3b:b8:35:42:1c:c0:1a:44:09:ca:
1e:84:2a:65:3c:b5:01:2f:ce:d9:d7:6e:10:2e:80:c3:9e:2a:
fd:ae:2f:77:8e:5b:66:54:1f:74:96:ee:88:21:76:df:e5:74:
a8:cc:29:73:c4:47:60:9f:7a:2f:2b:d8:35:02:af:01:aa:0f:
c6:dd:6c:86:16:d9:83:4b:7c:70:c2:36:5d:c8:64:77:0f:15:
49:90:2f:a3:d1:35:6d:94:4b:64:10:7b:af:63:01:2a:31:46:
8f:67:71:2b:59:31:b6:94:65:c0:3d:8c:eb:3a:53:d6:34:e2:
58:68:bd:e6:98:4b:69:bc:e3:3a:98:d0:71:2d:1c:38:8a:15:
d2:af:d7:f8:fc:d9:c7:41:da:59:71:80:2b:38:af:bf:ce:4f:
8f:35:76:70:c7:5e:fc:57:52:ba:33:53:1d:a9:31:ad:71:28:
4a:eb:a0:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:06:45 2026 by rpki-client