Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft
File: RsmLLko-Bg3vRavGLA40X6qAtew.mft (raw, json)
Hash identifier: asORYw7wuniPZ+ROdHdrbeHhhnlmYp0WiSvYglBPAQY=
Subject key identifier: 8D:89:FE:CD:0F:A8:45:26:F6:88:11:D8:57:B2:32:0B:08:7A:09:7D
Authority key identifier: 46:C9:8B:2E:4A:3E:06:0D:EF:45:AB:C6:2C:0E:34:5F:AA:80:B5:EC
Certificate issuer: /CN=46c98b2e4a3e060def45abc62c0e345faa80b5ec
Certificate serial: 019DC4F1896458777F0F37FB814918A0805A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RsmLLko-Bg3vRavGLA40X6qAtew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft
Manifest number: 18D6
Signing time: Sat 25 Apr 2026 14:00:56 +0000
Manifest this update: Sat 25 Apr 2026 14:00:56 +0000
Manifest next update: Sun 26 Apr 2026 14:00:56 +0000
Files and hashes: 1: Ip7p_hL1VXdeRgj8FVGhTum4zB0.roa (hash: agYqlxFFSnuNhJD9cHkZJfqIOemy4XNVrJfaav2GJL4=)
2: MGqAhkKHBACRFaiNXYcP9SHiMFE.roa (hash: GZRYXJdlMwxnrdhoW6/XDsnMjgU/H78VBDuIRDqDxI0=)
3: RsmLLko-Bg3vRavGLA40X6qAtew.crl (hash: hDC73i9xihrFj2oz+rUJP1J2W9DlCNlulCMkG02radg=)
4: WjHsZr2LYotu7UixbhUPmyhufyM.roa (hash: UbFC6dvqvKaXgJmhKzkqauNjGk31aKocZ5d+hid0GEk=)
5: hL4nAbMjDcB0I8HfTfp0aJOETu4.roa (hash: HMgiqPXACPgRgXB4fWWx/eVqV6zK3UzAgCuz5lAzZEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft
rsync://rpki.ripe.net/repository/DEFAULT/RsmLLko-Bg3vRavGLA40X6qAtew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Apr 2026 11:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:c4:f1:89:64:58:77:7f:0f:37:fb:81:49:18:a0:80:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46c98b2e4a3e060def45abc62c0e345faa80b5ec
Validity
Not Before: Apr 25 14:00:56 2026 GMT
Not After : Apr 26 14:00:56 2026 GMT
Subject: CN=8d89fecd0fa84526f68811d857b2320b087a097d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:85:a7:7d:45:91:5e:f5:91:b7:ab:59:3e:97:
03:1a:39:b9:58:45:72:9f:31:f5:38:5d:a3:c2:54:
87:13:a9:0d:33:ea:80:b4:06:db:3e:78:82:2d:90:
7e:c1:d3:a5:a8:2b:3d:82:27:d4:32:62:16:70:a5:
5a:58:4f:dc:84:79:1f:3e:e2:de:80:a1:54:01:4f:
8a:95:ce:8a:d6:a2:df:42:55:1d:9d:6d:fd:4f:10:
82:a5:4b:aa:f6:9f:9b:1d:eb:8f:1e:73:9a:c5:b1:
0d:07:7d:06:f9:0f:9c:2e:11:c2:81:2c:4f:d4:a1:
0e:fb:0f:b7:df:5e:0b:64:c9:c4:0a:47:92:fd:2b:
bc:85:cc:8e:b5:87:e7:1c:da:7c:5c:e3:a9:5c:02:
de:c3:10:bd:c5:66:b1:73:bc:e0:ae:d1:c6:84:a1:
ce:f2:6b:2e:7a:39:48:24:8a:29:40:da:f1:97:15:
43:bc:08:c6:ec:2c:d5:d0:23:d5:b3:f6:c7:dc:ee:
54:e7:af:1f:ff:d4:d6:f2:ce:15:53:bd:c7:f5:bb:
54:87:d6:49:0b:4c:21:be:a7:c7:2b:a3:92:93:9e:
2f:a2:42:b7:f0:04:e4:53:19:0b:2e:40:71:1f:9c:
f7:30:0d:42:af:0a:32:9c:fc:31:45:38:f5:0d:9f:
d0:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:89:FE:CD:0F:A8:45:26:F6:88:11:D8:57:B2:32:0B:08:7A:09:7D
X509v3 Authority Key Identifier:
keyid:46:C9:8B:2E:4A:3E:06:0D:EF:45:AB:C6:2C:0E:34:5F:AA:80:B5:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RsmLLko-Bg3vRavGLA40X6qAtew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:f2:dd:77:6d:f6:bd:00:74:1a:f7:66:0d:00:73:c2:32:ea:
c9:78:56:c8:f7:9d:eb:3f:fc:73:1a:b3:56:37:cc:5b:28:50:
52:35:32:1e:93:f4:77:8d:5f:43:3a:9a:19:ae:59:9f:8a:e2:
1f:26:b9:b3:b9:b3:cb:fd:a2:45:c8:33:0b:91:6b:2a:d6:51:
45:01:d1:7d:a6:28:8b:1e:f3:ac:f4:45:16:31:ad:df:fe:71:
2d:27:3d:db:d0:99:9d:d7:b0:b5:7c:ba:34:4e:20:14:15:f7:
8b:20:bc:63:a9:1f:b1:bb:f0:d4:f9:5e:f5:f1:2b:02:47:22:
f4:17:aa:6e:7d:85:32:46:7b:1e:b1:64:c0:5a:ef:16:fd:70:
94:b0:af:cd:af:57:66:75:d7:1b:90:19:0d:e0:a4:f0:53:27:
9b:f1:dc:2a:90:6e:6f:18:4a:fc:43:c7:31:b1:21:fd:b4:a4:
da:12:5b:5d:c9:64:7e:d8:07:84:ab:84:80:ef:d3:ed:cc:03:
40:bc:cf:88:20:88:42:ce:59:70:b8:28:88:b1:d0:4d:b7:86:
da:22:07:12:13:76:20:1b:81:8f:c8:51:6d:20:c9:f0:b4:03:
43:98:57:f2:a0:8b:ae:a4:fe:71:d7:61:51:00:87:a7:7e:66:
30:35:c9:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 25 19:21:15 2026 by rpki-client