Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft
File: RsmLLko-Bg3vRavGLA40X6qAtew.mft (raw, json)
Hash identifier: P2oTkzIbtKo+hp+Qyg+luiK3DoWpjju2xBWsYpZ6R4M=
Subject key identifier: 5F:6E:07:0D:AB:F1:20:24:64:31:C3:F7:C5:43:1F:58:F9:1A:97:ED
Authority key identifier: 46:C9:8B:2E:4A:3E:06:0D:EF:45:AB:C6:2C:0E:34:5F:AA:80:B5:EC
Certificate issuer: /CN=46c98b2e4a3e060def45abc62c0e345faa80b5ec
Certificate serial: 019DB57E782FB97303D7F43258EECA759640
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RsmLLko-Bg3vRavGLA40X6qAtew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft
Manifest number: 18CE
Signing time: Wed 22 Apr 2026 14:00:57 +0000
Manifest this update: Wed 22 Apr 2026 14:00:57 +0000
Manifest next update: Thu 23 Apr 2026 14:00:57 +0000
Files and hashes: 1: Ip7p_hL1VXdeRgj8FVGhTum4zB0.roa (hash: agYqlxFFSnuNhJD9cHkZJfqIOemy4XNVrJfaav2GJL4=)
2: MGqAhkKHBACRFaiNXYcP9SHiMFE.roa (hash: GZRYXJdlMwxnrdhoW6/XDsnMjgU/H78VBDuIRDqDxI0=)
3: RsmLLko-Bg3vRavGLA40X6qAtew.crl (hash: Hk0cnPwWsTS9BxuFZAxb//tLrOvSmSiUh+EBhHGPhlI=)
4: WjHsZr2LYotu7UixbhUPmyhufyM.roa (hash: UbFC6dvqvKaXgJmhKzkqauNjGk31aKocZ5d+hid0GEk=)
5: hL4nAbMjDcB0I8HfTfp0aJOETu4.roa (hash: HMgiqPXACPgRgXB4fWWx/eVqV6zK3UzAgCuz5lAzZEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft
rsync://rpki.ripe.net/repository/DEFAULT/RsmLLko-Bg3vRavGLA40X6qAtew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Apr 2026 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b5:7e:78:2f:b9:73:03:d7:f4:32:58:ee:ca:75:96:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46c98b2e4a3e060def45abc62c0e345faa80b5ec
Validity
Not Before: Apr 22 14:00:57 2026 GMT
Not After : Apr 23 14:00:57 2026 GMT
Subject: CN=5f6e070dabf120246431c3f7c5431f58f91a97ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4d:d2:99:7f:fc:fc:2a:36:2f:a4:d7:0f:a1:
ca:a7:e3:67:09:20:b7:f1:8e:25:10:c0:68:f0:14:
62:94:59:52:7e:28:04:78:ec:8e:df:be:c5:37:7f:
e3:c0:23:cf:50:60:c7:93:43:24:6c:1c:5b:07:0b:
bb:58:18:42:f2:71:60:54:fa:fd:ce:4a:31:95:a5:
dc:97:78:41:42:c5:f5:9b:cf:bc:92:a7:43:68:e7:
22:e5:05:bd:84:89:a1:b9:fa:95:f2:81:b3:c7:96:
aa:79:39:7d:c0:62:dd:cb:88:e4:04:3b:ac:26:da:
63:f8:f7:b1:69:5d:3d:33:2f:54:50:05:91:d9:11:
69:7f:93:d3:3f:d8:fb:a3:a3:15:d6:29:31:69:71:
66:36:b4:0f:7e:63:9c:f2:2b:92:8d:a3:5d:8c:1d:
9d:30:23:37:11:4c:e0:f1:f2:d6:ac:73:dd:64:78:
bc:db:e4:17:6b:25:65:9a:01:1a:c4:c7:39:0d:49:
82:a3:16:b3:cd:08:ee:49:f5:5a:1d:42:c8:8f:c5:
5f:58:dd:f0:a2:05:02:01:2b:00:69:5a:66:12:86:
57:74:27:58:df:b3:6c:67:da:4e:5a:35:bf:a7:38:
6d:16:12:da:e7:d8:63:ba:72:90:7b:1e:f3:2e:d7:
83:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:6E:07:0D:AB:F1:20:24:64:31:C3:F7:C5:43:1F:58:F9:1A:97:ED
X509v3 Authority Key Identifier:
keyid:46:C9:8B:2E:4A:3E:06:0D:EF:45:AB:C6:2C:0E:34:5F:AA:80:B5:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RsmLLko-Bg3vRavGLA40X6qAtew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:17:d9:ea:57:90:c4:ef:5f:41:c7:bf:17:f3:fe:67:ff:09:
47:9e:3b:81:f2:2d:80:fc:0c:e4:fb:a6:e3:c6:75:82:8c:6f:
1a:0c:ac:ab:c5:cf:03:42:4a:89:36:c8:c8:f3:92:8b:67:7c:
3a:f1:99:1c:67:9a:5c:c2:4a:bd:a1:5b:dc:8f:68:ff:fe:2d:
39:d1:d6:8e:48:ca:f5:35:e7:74:70:a1:4d:32:19:90:a2:89:
43:06:0a:70:93:8d:1d:bc:14:62:41:b6:ad:17:7c:b0:be:5d:
fb:d1:86:af:34:f5:25:c9:52:dc:c0:06:06:a8:7c:6f:ec:62:
4c:18:14:e4:75:27:0a:d1:72:a0:6f:29:62:c0:bc:25:bb:81:
5a:86:5a:33:4c:d7:f0:9f:d5:f2:93:4e:b9:32:cd:aa:9f:02:
e0:4f:a7:fa:a4:fb:3b:41:b6:02:58:2c:28:c7:75:df:ce:77:
93:34:2b:58:c0:a3:9b:07:02:9e:f5:1e:95:fc:9b:e9:79:f8:
47:d5:96:51:0f:26:37:16:2c:b9:ce:e4:09:0b:c2:61:15:78:
27:df:de:19:05:c1:54:69:9e:b3:28:79:59:67:82:78:e6:34:
b6:29:79:fd:68:3f:0f:b2:95:72:fb:17:34:d2:21:28:f9:76:
b6:b3:9a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 19:21:28 2026 by rpki-client