Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft
File: S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft (raw, json)
Hash identifier: SEcoLhS2e+vpPuhi7JlD0ztsQRuGba3KfoxdE860DpA=
Subject key identifier: F6:4A:2E:58:3F:0A:E9:95:47:AF:99:7E:85:92:EE:A4:A7:DE:9E:BE
Authority key identifier: 4B:48:CF:14:6B:4C:73:D2:74:09:6D:70:57:08:D2:4B:72:93:29:F8
Certificate issuer: /CN=4b48cf146b4c73d274096d705708d24b729329f8
Certificate serial: 019D9DAD67097FDCB18FA2D14F79B61E1989
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S0jPFGtMc9J0CW1wVwjSS3KTKfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft
Manifest number: 18DF
Signing time: Fri 17 Apr 2026 23:01:20 +0000
Manifest this update: Fri 17 Apr 2026 23:01:20 +0000
Manifest next update: Sat 18 Apr 2026 23:01:20 +0000
Files and hashes: 1: 2km5CePTq7_BnWDbbdzBAnFRzXw.roa (hash: odLHriDBowdLruRMyp7oP30CTWfC4IMigBLHf3TCMXY=)
2: P3pMTXaPEJ3pF-gEwjCXB342FMw.roa (hash: ctsyJFlW0Oa24uSpietN5XHoRYpf4UiDm+Wb7QP+anM=)
3: S0jPFGtMc9J0CW1wVwjSS3KTKfg.crl (hash: V5l9uqRrJWLC3MY6mKVxZR3HdfhC2Ckj3r96KBbOd2Q=)
4: sncS8S2NsUSvaykCM37LNBlWYeU.roa (hash: qh0is7RUGO8WSotkmc+90Ufb2ZAu2P4HHEPVCF4ovi4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/S0jPFGtMc9J0CW1wVwjSS3KTKfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:ad:67:09:7f:dc:b1:8f:a2:d1:4f:79:b6:1e:19:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b48cf146b4c73d274096d705708d24b729329f8
Validity
Not Before: Apr 17 23:01:20 2026 GMT
Not After : Apr 18 23:01:20 2026 GMT
Subject: CN=f64a2e583f0ae99547af997e8592eea4a7de9ebe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:11:71:4b:92:1a:0f:ad:64:14:a9:33:4d:81:
b3:a0:e3:b3:d2:47:7c:68:37:cb:db:9e:33:24:e6:
9c:86:d7:48:a7:95:9c:14:0f:6e:40:37:2c:a3:53:
92:03:85:47:bf:28:06:7c:69:dc:ee:2c:2c:39:8a:
c1:0e:97:1b:79:2e:d7:7f:5c:58:2d:e7:d4:38:8d:
ac:20:29:99:2b:f6:74:62:ef:87:19:52:0b:02:83:
f7:d4:31:70:9d:8b:64:f0:15:c6:23:72:96:c5:fa:
4c:10:c6:8c:f8:d4:0d:7d:b2:7b:0a:dd:a8:61:33:
ff:bc:4d:9c:bd:62:eb:7c:62:9a:f5:56:c4:72:cf:
1c:9c:32:ee:53:5f:41:46:78:64:5e:e3:fd:77:95:
6c:90:c6:51:fb:3b:67:ec:84:5e:97:af:c5:83:3a:
e8:e9:84:72:ac:1f:bb:bb:b0:39:1c:d7:6d:99:23:
89:58:91:ae:75:82:e7:7d:b9:a9:b3:bd:14:aa:2f:
e5:b6:c4:a8:23:f5:f6:0b:c3:bc:9b:04:9c:33:5c:
fa:6c:29:48:bb:22:7d:e9:e4:5a:11:bf:75:1b:1f:
98:ca:6c:d6:04:3f:19:3d:f3:1d:9d:3b:bd:16:0b:
88:5b:ec:13:1c:dd:c2:f1:1e:97:57:2b:73:e6:8a:
0c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:4A:2E:58:3F:0A:E9:95:47:AF:99:7E:85:92:EE:A4:A7:DE:9E:BE
X509v3 Authority Key Identifier:
keyid:4B:48:CF:14:6B:4C:73:D2:74:09:6D:70:57:08:D2:4B:72:93:29:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0jPFGtMc9J0CW1wVwjSS3KTKfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:91:9d:a5:e7:7d:8a:e7:4e:ce:e1:b6:92:4d:c5:ff:ef:39:
a3:af:cd:5e:0e:b8:1c:60:56:71:3c:8c:be:60:f7:8f:64:9a:
80:ac:b4:9d:51:93:e7:5d:ac:60:30:3e:7f:23:1d:2c:ce:3d:
4f:45:c7:54:27:dd:f0:09:a4:3d:d4:2c:ce:6b:e6:52:f3:65:
ba:2d:40:82:07:bd:00:1c:dc:c1:26:3a:00:dd:36:f6:e4:d3:
61:9f:52:5c:39:4c:59:94:f6:13:24:3b:e2:99:80:b3:88:4e:
e0:d6:80:dc:b3:87:97:c9:d5:97:19:e1:c3:be:76:b8:d7:dc:
a9:e4:44:d7:51:be:a6:65:ee:20:72:d3:98:70:14:26:02:71:
1b:55:ec:67:ff:ab:a2:8d:4f:80:38:02:42:9d:d6:6e:9a:c8:
77:6e:df:29:10:07:32:b3:25:85:5a:c0:8e:f6:6d:0a:96:2d:
c0:5c:03:2e:41:b6:6b:39:cb:4d:4e:8b:6c:2f:7d:b8:d4:80:
b6:00:dd:58:ba:48:46:4e:d3:cc:cc:56:69:72:15:fd:07:fb:
0e:71:f8:8a:b7:f7:09:70:2a:17:42:cb:eb:6d:fc:5b:7c:5b:
e9:b6:e2:4f:2f:f6:b1:31:a2:cc:86:58:a9:0e:08:bb:2e:69:
f2:dc:38:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 05:36:25 2026 by rpki-client