Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.mft
File: RbmFSwRFlObPCEb7Qd57CQj7X3I.mft (raw, json)
Hash identifier: GE6nQtmmDj6HgFkz9gcd3iVlRwHO5JfCS1YqcWpSOKw=
Subject key identifier: D5:D6:B7:E2:18:1C:AB:AA:0B:AD:DD:BD:94:44:C5:25:08:A5:E6:1A
Authority key identifier: 45:B9:85:4B:04:45:94:E6:CF:08:46:FB:41:DE:7B:09:08:FB:5F:72
Certificate issuer: /CN=45b9854b044594e6cf0846fb41de7b0908fb5f72
Certificate serial: 019DB20F8A2FDDFBDF573A9F7F446BBA6565
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RbmFSwRFlObPCEb7Qd57CQj7X3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.mft
Manifest number: 18DE
Signing time: Tue 21 Apr 2026 22:00:56 +0000
Manifest this update: Tue 21 Apr 2026 22:00:56 +0000
Manifest next update: Wed 22 Apr 2026 22:00:56 +0000
Files and hashes: 1: Hm9jDBLH-sqHFB-kWgpns9uuTu0.roa (hash: em9fSdCaWmu85DiyoLonhSdzPO36ZF77WoiFZ16jO0Y=)
2: RbmFSwRFlObPCEb7Qd57CQj7X3I.crl (hash: yeeZzbKmSygZM+nOQDm/6Woc5r5yj1aav7273rEZCwg=)
3: u-E8c_HIPJtAfwHxjdimDSR9iEU.roa (hash: Ssl8FJdCbKGVA9enj4PlMZpIMHgYMYA2rL+PziMx0XY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/RbmFSwRFlObPCEb7Qd57CQj7X3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 21:56:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b2:0f:8a:2f:dd:fb:df:57:3a:9f:7f:44:6b:ba:65:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45b9854b044594e6cf0846fb41de7b0908fb5f72
Validity
Not Before: Apr 21 22:00:56 2026 GMT
Not After : Apr 22 22:00:56 2026 GMT
Subject: CN=d5d6b7e2181cabaa0badddbd9444c52508a5e61a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:da:84:bb:e6:a8:ce:a1:3e:70:6c:79:82:37:
ea:f0:d2:63:c3:17:77:14:4a:c6:c1:f3:06:d2:17:
c0:46:cf:4d:55:76:82:5d:85:f9:3d:d9:e7:10:58:
fa:b2:25:2b:10:6b:26:0f:82:f8:0b:c6:0d:38:e7:
1d:19:21:21:79:99:8c:d8:50:77:83:d0:ea:52:3a:
8e:9b:f5:b3:46:f6:bb:e2:9e:35:40:bd:13:31:02:
10:8f:32:94:07:97:57:4f:16:a4:f4:06:5f:44:72:
d7:d0:7f:3d:f8:1a:2a:a6:2b:22:c0:fe:86:96:f8:
58:81:9e:a3:2e:67:0b:60:ec:0b:1a:b2:d2:4f:2e:
f4:f2:59:29:f6:61:72:f0:f0:2e:9a:f9:50:4d:92:
66:3e:4b:31:47:6b:41:f9:93:e7:91:4d:37:22:be:
9b:46:e8:27:19:42:34:48:61:99:87:ee:63:00:dd:
b5:7a:e8:ec:79:0e:51:2e:1f:44:03:36:26:0f:db:
bc:c9:3f:35:36:30:a3:e0:8e:51:9e:41:27:59:c2:
7c:ea:b8:7c:cd:da:a9:cd:38:e7:2a:84:f9:38:18:
59:0a:24:2a:11:22:e7:7d:62:24:dc:00:82:42:a5:
53:9e:4a:eb:82:5c:5f:d3:e8:c6:5a:46:30:86:e8:
ce:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:D6:B7:E2:18:1C:AB:AA:0B:AD:DD:BD:94:44:C5:25:08:A5:E6:1A
X509v3 Authority Key Identifier:
keyid:45:B9:85:4B:04:45:94:E6:CF:08:46:FB:41:DE:7B:09:08:FB:5F:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RbmFSwRFlObPCEb7Qd57CQj7X3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:aa:5d:5f:2f:87:84:3b:6e:ce:5c:ac:59:b6:5d:94:cc:64:
9b:a5:a0:ef:e2:19:63:eb:11:5b:df:46:77:9c:bf:d0:9b:92:
df:b3:db:ef:1a:f0:95:93:2a:19:bc:6c:21:28:29:ab:05:49:
c1:0d:d6:92:3f:f7:1f:9a:26:c6:ff:52:4f:19:e1:3b:6a:0a:
5e:0e:cd:89:71:57:aa:c3:7e:85:6f:38:a7:48:2f:cd:f9:dc:
e6:78:52:89:bf:20:0d:64:be:fc:62:e1:6e:f6:97:a4:6f:71:
6e:1d:6a:a2:f3:e8:15:96:9b:0a:7a:6d:05:33:31:58:84:32:
b4:fc:22:29:4c:9a:57:63:b7:60:cd:12:84:04:9b:06:33:a6:
81:f2:f4:3e:cf:6a:44:b6:d8:08:70:32:25:6b:f6:37:63:7f:
ec:f7:0e:a7:4a:35:20:42:3c:3b:63:3c:e8:86:3f:28:1b:00:
82:e9:03:20:8b:c9:ce:f5:2d:95:ae:b8:49:76:ea:2e:b7:1b:
80:ce:80:19:fa:d6:56:6f:4f:e7:5f:a1:72:86:fe:0e:e8:89:
f9:36:cd:47:1b:93:b1:22:f6:5c:79:b8:cc:4b:19:cc:3d:f3:
e5:78:26:e1:eb:fb:f2:3e:2b:0f:6c:9c:d3:4f:67:fd:a5:33:
e3:47:0c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 02:37:32 2026 by rpki-client