Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.mft
File: 0Q1bMLRse5ey28RYnOo2Iq11YVY.mft (raw, json)
Hash identifier: QzMCFzrnlm/IByiML7++tPFrAjaVQh2g35oZdPd5VHI=
Subject key identifier: BC:6D:EB:18:A9:14:87:5D:BE:50:DE:99:23:3A:41:F7:D5:61:36:28
Authority key identifier: D1:0D:5B:30:B4:6C:7B:97:B2:DB:C4:58:9C:EA:36:22:AD:75:61:56
Certificate issuer: /CN=d10d5b30b46c7b97b2dbc4589cea3622ad756156
Certificate serial: 019D9C9A7B2C2679392CAF29E4179AB0C860
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Q1bMLRse5ey28RYnOo2Iq11YVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 18:01:02 +0000
Manifest this update: Fri 17 Apr 2026 18:01:02 +0000
Manifest next update: Sat 18 Apr 2026 18:01:02 +0000
Files and hashes: 1: 0Q1bMLRse5ey28RYnOo2Iq11YVY.crl (hash: gLSiSI4ZPaSEoGzs6FFf2mhqi4gp6ofrGHk3z0Y3hKc=)
2: KJO5SafutHdx989Y4beR-MDi2-w.roa (hash: DcoFrISYVHpYfF3qhUpQz0nKOtSKRePG4GmzBfnkvzE=)
3: aoIheKr9cfwdkfPnA8io2rwnzUU.roa (hash: bd8EK0ErpEEUoneRY3CDUEglnwrfEtlsUHg/CzYtrqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Q1bMLRse5ey28RYnOo2Iq11YVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:9a:7b:2c:26:79:39:2c:af:29:e4:17:9a:b0:c8:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d10d5b30b46c7b97b2dbc4589cea3622ad756156
Validity
Not Before: Apr 17 18:01:02 2026 GMT
Not After : Apr 18 18:01:02 2026 GMT
Subject: CN=bc6deb18a914875dbe50de99233a41f7d5613628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c9:f4:78:55:eb:5c:4d:81:51:73:02:c0:35:
25:0c:eb:ff:21:cb:b2:f1:c4:c6:ba:2b:b6:fc:58:
e0:76:db:71:b9:d9:42:11:32:71:ee:e4:23:15:78:
c0:b3:29:8f:95:8c:0f:d5:4a:a7:1a:e1:ed:3f:61:
ed:56:93:6f:3e:0d:d3:4b:8c:4c:ad:30:e9:e6:5f:
17:a0:62:0f:60:cd:52:b3:62:11:df:ad:3a:5c:1a:
e7:73:e5:86:2c:6c:4f:39:62:c0:46:86:cb:08:d6:
bd:30:05:6c:b1:a8:93:28:b5:02:1f:5c:b7:c9:01:
fc:dc:e1:61:df:d3:77:60:eb:f1:77:ff:46:29:df:
b7:1e:40:ad:f3:01:ca:22:28:f7:d1:0d:dd:41:da:
b3:ae:03:4f:d9:c9:0d:a8:43:7e:81:3e:69:b1:62:
77:8a:9b:6d:72:e1:d4:a8:cd:87:0e:43:73:10:5f:
51:27:37:37:ea:0d:ce:a7:59:0e:b8:43:91:69:cf:
f7:d2:2d:11:2f:b6:f0:9d:80:df:c4:c4:05:fe:df:
ff:6e:a5:a6:ea:37:58:c8:6d:b8:6e:c1:ed:d2:83:
14:e5:52:aa:eb:8e:3b:38:e3:68:e0:5a:e8:06:e6:
75:78:bb:cf:93:e1:a2:eb:d4:27:ef:26:de:e6:ae:
3d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:6D:EB:18:A9:14:87:5D:BE:50:DE:99:23:3A:41:F7:D5:61:36:28
X509v3 Authority Key Identifier:
keyid:D1:0D:5B:30:B4:6C:7B:97:B2:DB:C4:58:9C:EA:36:22:AD:75:61:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Q1bMLRse5ey28RYnOo2Iq11YVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:d7:00:47:5a:c3:a3:8a:2f:a6:21:57:06:55:c9:84:d2:c7:
e5:df:6c:24:65:39:a3:8f:30:da:49:39:59:7d:ce:61:cb:bc:
a3:36:72:5e:a9:6b:b1:83:f6:09:12:fd:5f:29:59:39:23:05:
ef:61:b9:d6:34:4d:b3:46:8d:3c:62:28:45:55:59:13:d2:91:
55:f7:00:04:b5:cc:d5:f5:aa:46:67:6a:e5:5f:2c:39:ca:bc:
64:28:5a:d7:d1:74:f6:5d:be:53:8b:97:50:de:c9:80:b6:48:
2a:cf:d6:6f:0a:60:ab:ca:72:61:3b:d7:82:58:89:20:8d:2d:
11:51:dc:3e:2c:0f:5e:ea:b6:4e:49:a6:d4:23:01:ee:44:7a:
b9:2a:89:08:b4:10:7a:03:3a:16:42:45:e1:3b:4f:65:40:8d:
0a:fa:b9:e5:f2:47:f5:80:c9:17:85:5a:98:44:8b:37:8e:b9:
44:3b:88:7e:e8:34:49:ec:12:aa:4f:f7:af:f6:1c:84:01:fe:
39:59:35:d4:d6:5a:9e:2b:5c:63:24:29:c0:c1:b1:4c:8e:30:
b7:c4:2d:f7:cb:b4:d9:2a:34:64:7f:58:a9:1d:7e:be:e8:75:
13:d3:e5:97:10:91:ad:fb:0a:9b:35:53:47:ec:0b:08:a4:01:
cf:e3:1c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:30:17 2026 by rpki-client