Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.mft
File: rmZLkk5OoCfBw6B3DfH_gLHVaPo.mft (raw, json)
Hash identifier: iQI+63Zi7cwahUfqjFciiQFyJKY7hULkGf7ERCQb6Qg=
Subject key identifier: 76:A9:CE:1E:4B:C1:F1:D7:4D:18:25:3B:56:C4:71:49:76:96:54:1D
Authority key identifier: AE:66:4B:92:4E:4E:A0:27:C1:C3:A0:77:0D:F1:FF:80:B1:D5:68:FA
Certificate issuer: /CN=ae664b924e4ea027c1c3a0770df1ff80b1d568fa
Certificate serial: 019DB1A1A3C402C448C179226A0603702F71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rmZLkk5OoCfBw6B3DfH_gLHVaPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.mft
Manifest number: 18CE
Signing time: Tue 21 Apr 2026 20:00:53 +0000
Manifest this update: Tue 21 Apr 2026 20:00:53 +0000
Manifest next update: Wed 22 Apr 2026 20:00:53 +0000
Files and hashes: 1: 1cRlTVeHuriEMSuZag34rfiSKZQ.roa (hash: OlYfnvQCajHgPtwJVq37KeK/wVE1TX6e1PHAiHTVPas=)
2: 2pok9xJkRmV7G5KjO3Ssd6tFcqw.roa (hash: KoLqQThDszC4VMDHG0N47iFOrNC8BwC1qVShpNw7N6s=)
3: JyOMnJgKMoFcNN43M_f5LI8XErA.roa (hash: SNoMZNzmCYdIoiwDjZbbibJBXJA6CdM7GlaPizZt3KQ=)
4: aa2Z_aSbNPyZ2UsmfSQtTJhHn_4.roa (hash: FtDK49Ysh1r9A0NZdb70mTg5pImu9NrACPcmS/OHayk=)
5: rmZLkk5OoCfBw6B3DfH_gLHVaPo.crl (hash: OEvAlHVWncU1sD+LqV6GGoYYV1z3/Zod37zQOYSQA/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/rmZLkk5OoCfBw6B3DfH_gLHVaPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 20:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b1:a1:a3:c4:02:c4:48:c1:79:22:6a:06:03:70:2f:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae664b924e4ea027c1c3a0770df1ff80b1d568fa
Validity
Not Before: Apr 21 20:00:53 2026 GMT
Not After : Apr 22 20:00:53 2026 GMT
Subject: CN=76a9ce1e4bc1f1d74d18253b56c471497696541d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ed:91:c4:dc:1b:39:1d:d4:dd:04:f1:a6:e8:
1f:1a:d3:9b:07:c3:fd:3b:4b:8c:91:61:25:d8:1b:
94:bf:26:09:df:b1:aa:f8:1a:76:a4:a0:28:6c:83:
45:18:26:b4:11:b1:fc:af:01:4d:dd:ee:cd:46:11:
14:9d:bb:ce:5f:4a:9f:5c:1e:9b:f2:17:89:97:d9:
7d:53:32:39:63:59:d0:4a:3b:de:9c:9a:ff:03:1c:
28:d4:44:a5:0d:17:f4:bd:cd:63:07:19:4d:00:ed:
bc:2c:13:1e:30:bb:ac:6c:a3:f9:1d:16:65:4e:c0:
14:b3:27:91:48:17:57:55:5e:30:b4:f3:a4:6b:03:
4c:dc:17:a1:31:0c:ba:c5:aa:77:20:bb:b1:c1:e6:
1e:73:8a:79:73:e7:57:74:8f:e1:54:28:f5:9b:37:
7e:66:67:6d:e9:ad:56:d8:13:b0:8a:30:19:ea:ec:
5e:39:9b:e3:8c:1a:32:9f:53:34:4e:13:bf:f7:37:
06:b8:90:99:c1:69:a5:cd:86:7b:57:ed:3d:45:7b:
c3:d0:dd:e9:fc:d0:04:c4:7e:c8:4c:ab:a3:63:a3:
1b:59:9b:b2:ba:47:bb:8d:d9:66:41:31:bf:09:12:
50:d7:44:46:98:b3:02:46:ef:f8:7f:11:49:67:39:
04:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:A9:CE:1E:4B:C1:F1:D7:4D:18:25:3B:56:C4:71:49:76:96:54:1D
X509v3 Authority Key Identifier:
keyid:AE:66:4B:92:4E:4E:A0:27:C1:C3:A0:77:0D:F1:FF:80:B1:D5:68:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rmZLkk5OoCfBw6B3DfH_gLHVaPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:48:bb:a3:a7:34:f1:c4:b9:cd:cb:13:f0:51:1c:0b:4b:09:
ef:99:c5:6d:a1:dd:d0:9a:f3:ba:3f:db:cf:4f:ea:ed:50:89:
66:f4:5c:e0:62:bd:3d:87:54:f0:68:e6:93:40:5b:f7:56:9c:
9e:c1:ff:a2:4c:64:22:8f:69:78:11:b2:1e:5a:42:e4:ef:5f:
c4:13:f3:39:0a:1e:c8:f9:52:72:4f:2c:bd:55:e1:12:9b:14:
e0:68:2d:d2:a2:f2:96:e9:cb:1b:88:60:57:be:70:31:c4:ea:
f6:86:1b:c4:5b:a3:a9:f1:32:bf:9c:88:b5:67:c2:72:39:24:
c6:02:07:f6:8d:17:52:98:85:cc:c3:ab:9f:2c:db:09:b1:4b:
50:f0:53:d7:db:37:59:2f:67:98:01:fe:e9:8c:6b:28:6b:7a:
ec:ed:0a:63:74:68:a3:12:15:bf:ac:1d:d1:14:ee:65:00:6d:
22:a5:78:7c:33:f4:0e:8c:4b:79:cf:4c:36:5d:75:98:71:2c:
04:64:ab:8f:2a:05:de:e5:a0:74:22:66:f6:3a:49:32:c5:e3:
81:b6:5f:33:de:ea:95:79:c7:ea:21:a4:e9:30:53:72:14:f1:
62:bd:63:d6:eb:ae:52:15:52:07:9d:a8:eb:82:f2:d6:94:bf:
71:9f:d1:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 01:43:17 2026 by rpki-client