Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.mft
File: cK01PMGg0W1ejhSjdXWm89YFY_g.mft (raw, json)
Hash identifier: 0ub5Nli1/8xYVYwmrczHadszDLwtHzjzIXPyDEwXIMw=
Subject key identifier: 3A:51:44:8C:79:40:7C:EE:FE:13:45:E1:63:86:C0:03:7B:B3:07:A9
Authority key identifier: 70:AD:35:3C:C1:A0:D1:6D:5E:8E:14:A3:75:75:A6:F3:D6:05:63:F8
Certificate issuer: /CN=70ad353cc1a0d16d5e8e14a37575a6f3d60563f8
Certificate serial: 019DD0878430413F0BACB6373739D55838FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cK01PMGg0W1ejhSjdXWm89YFY_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.mft
Manifest number: 18DF
Signing time: Mon 27 Apr 2026 20:00:35 +0000
Manifest this update: Mon 27 Apr 2026 20:00:35 +0000
Manifest next update: Tue 28 Apr 2026 20:00:35 +0000
Files and hashes: 1: N4mZn2yk8YP_gXohWnBQWYlSt0g.asa (hash: RnHGDbrdo5NYjOwiFA/EE2zdRQ3mHt7+S/1unCOrs8U=)
2: NB9VsHBRBEiYw3McIpBpW336Ki4.roa (hash: RFYXt5Z4dlbdvwt6pd136hK2qoU5DGTk7ZrYTY6dsB8=)
3: YswYZYlKWOyRavy0ATCTvPfm9wQ.roa (hash: aGrODVPH+/3IzPSKFduvxP2Zeu3f9DRc9hp0rYqfO0U=)
4: cK01PMGg0W1ejhSjdXWm89YFY_g.crl (hash: 9Gsrb8SYTDtIoum51X7UroZqWjGRG5pBtUU6cMxvTVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/cK01PMGg0W1ejhSjdXWm89YFY_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:87:84:30:41:3f:0b:ac:b6:37:37:39:d5:58:38:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70ad353cc1a0d16d5e8e14a37575a6f3d60563f8
Validity
Not Before: Apr 27 20:00:35 2026 GMT
Not After : Apr 28 20:00:35 2026 GMT
Subject: CN=3a51448c79407ceefe1345e16386c0037bb307a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1a:3d:94:53:77:4a:c8:1f:fe:be:a0:ee:4c:
1d:71:61:a0:26:b6:0a:f0:d7:3e:0f:f1:c3:1e:06:
7b:dd:27:5a:c2:cd:bb:4f:09:ed:2c:71:ae:b2:32:
c5:46:50:c8:8b:99:4d:a2:47:18:c9:1d:8c:12:b5:
8c:b9:36:a4:47:9d:3f:64:6f:3c:a2:ce:50:16:75:
91:47:cf:7f:44:79:1b:10:36:1a:c3:70:88:81:8b:
cd:f8:18:ac:b3:54:c2:d9:ff:ef:0e:75:a9:0c:ec:
55:b1:cc:19:c3:50:34:12:58:f3:e7:1c:ae:24:ad:
9f:c6:83:c7:95:6d:ad:c1:74:30:17:67:ac:cf:e7:
02:10:06:04:64:fc:4c:4d:58:73:c8:06:34:4d:ca:
d9:a4:36:5f:2a:e6:35:b3:dc:8b:c6:52:31:65:a9:
8c:9a:38:ba:1f:5f:fa:47:f6:7b:a9:34:02:51:fe:
74:91:c8:74:8c:80:18:f8:83:d5:37:34:7d:c9:33:
5a:74:36:3d:72:ff:6f:06:cd:2a:c2:17:e7:ee:36:
0b:5f:5b:2f:01:c0:9a:43:b0:c2:d2:65:7e:2b:1b:
c2:3e:43:5e:34:2e:c2:d2:c1:46:78:ef:76:59:61:
29:53:25:c5:27:0c:8b:50:37:5c:34:28:f7:c0:ab:
2d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:51:44:8C:79:40:7C:EE:FE:13:45:E1:63:86:C0:03:7B:B3:07:A9
X509v3 Authority Key Identifier:
keyid:70:AD:35:3C:C1:A0:D1:6D:5E:8E:14:A3:75:75:A6:F3:D6:05:63:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cK01PMGg0W1ejhSjdXWm89YFY_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:1f:51:b3:b3:c5:82:2b:19:67:df:b7:dd:d8:ba:5e:18:79:
56:6a:e4:28:de:df:97:d1:88:5a:89:d6:f0:a2:72:23:58:bf:
e2:55:78:55:21:bc:b8:fb:ee:34:ca:d3:f6:6e:f0:5c:ae:87:
c7:78:58:f6:78:ab:6f:28:9b:aa:d0:59:84:5b:2f:71:0f:3d:
d1:c4:ac:ba:c8:8b:7f:91:2e:09:b7:56:d8:2a:70:46:7b:90:
4f:dc:27:df:5d:fb:1d:09:ea:e2:e7:a8:46:63:bb:9e:f7:5d:
d6:52:a8:e5:1f:c7:c3:23:49:64:72:9c:17:de:ed:9a:78:8e:
11:8b:83:43:58:40:79:07:0d:1b:48:70:76:e0:02:1c:ef:61:
ea:7c:b4:de:dd:c5:8e:67:6e:8f:ab:7b:44:a0:9d:30:03:18:
d0:b4:ba:2a:d9:a1:af:df:03:03:5c:33:c7:f4:96:e8:8a:85:
ea:26:8e:99:e1:9b:79:c8:b9:d8:94:ed:c3:2a:22:6a:ec:d5:
d7:4d:ea:ec:8e:e1:21:64:2d:30:fc:1d:40:7b:76:d3:97:1c:
8c:c6:84:bf:01:65:5a:ab:20:a4:fe:d0:fa:0b:ac:d7:d1:41:
83:7c:90:3d:94:bc:3b:ce:6a:07:2c:fd:68:dc:1e:4f:05:92:
f8:87:95:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 04:31:39 2026 by rpki-client