Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft
File: rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft (raw, json)
Hash identifier: sJ0Z+rAIpNVbPegcnBKKWQB2RkYqP2lXXvqAOHqJ3tU=
Subject key identifier: B2:1D:97:68:A6:08:AA:4D:E3:A0:C5:B3:B0:53:86:82:CD:30:BE:7A
Authority key identifier: AE:0A:5A:1B:38:61:7C:C1:61:F6:06:13:D9:8E:17:9B:53:60:C0:54
Certificate issuer: /CN=ae0a5a1b38617cc161f60613d98e179b5360c054
Certificate serial: 019DCCAAAD43F148ADE2B41429C6E0CBC26C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft
Manifest number: 18F7
Signing time: Mon 27 Apr 2026 02:00:30 +0000
Manifest this update: Mon 27 Apr 2026 02:00:30 +0000
Manifest next update: Tue 28 Apr 2026 02:00:30 +0000
Files and hashes: 1: L--nog6xEzatgFx0vve4F3aMfqg.roa (hash: bT7m47/vJSRP8Nb+CoGFbdUeEIOeotqAaMuhhj16mOg=)
2: UWUWF46MigK1a0cd003CguBbQdc.asa (hash: 8MF1DQrDAZ7AsSrFu9a41jWtJfGtyeySnSqbPCLIeLA=)
3: dCesxMMj3iimdYMAKtjCOo7VCaw.roa (hash: rBIdWhYFqNkTi4VSYSHXSoz7Tccn1BMFaCDizvKANgE=)
4: rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.crl (hash: C5mCQuh3Nb2sHquYCbQOyOUOVlDMxE1Z3hpBBY5NtQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 02:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cc:aa:ad:43:f1:48:ad:e2:b4:14:29:c6:e0:cb:c2:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae0a5a1b38617cc161f60613d98e179b5360c054
Validity
Not Before: Apr 27 02:00:30 2026 GMT
Not After : Apr 28 02:00:30 2026 GMT
Subject: CN=b21d9768a608aa4de3a0c5b3b0538682cd30be7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a8:70:f4:eb:ad:44:92:50:94:7a:4c:fe:22:
23:2e:e8:85:ac:ef:08:d2:90:e5:1f:fd:96:d7:7a:
9a:79:36:13:e6:1b:c0:2f:ea:dd:98:df:3d:b0:c7:
c0:88:0f:80:bc:78:c5:09:7f:04:e8:3b:02:93:04:
4d:ca:79:54:83:92:d3:2d:15:7b:13:40:63:79:ec:
8b:26:f3:ad:60:de:6b:d3:6e:9a:ce:62:31:b3:8f:
ec:c5:9f:4c:21:ba:fa:c4:e6:69:69:76:93:35:91:
05:e6:6a:b8:29:f1:f2:5c:e3:b1:82:6d:b6:b1:fe:
23:a4:1b:69:bf:a9:53:bd:33:20:c2:11:9b:31:d8:
35:66:08:73:dd:b1:c0:99:cb:82:35:d4:38:e6:6a:
22:8f:5b:63:3a:7b:a6:81:72:eb:05:83:77:75:d3:
98:b5:66:3d:7c:76:8c:48:da:01:8e:a7:0d:2c:11:
0e:d9:a6:7b:e6:ab:4a:e4:99:88:1d:e9:14:59:36:
d9:49:ef:6f:08:8b:29:15:5b:ec:25:15:11:d0:1c:
41:a7:c6:c8:3f:e6:43:cd:38:f4:43:1c:ba:d9:2a:
c1:a2:ed:4a:fe:03:86:5d:d1:7c:7a:df:18:8f:2e:
ac:17:f5:89:1a:68:ee:e6:81:96:d4:7d:26:51:25:
ce:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:1D:97:68:A6:08:AA:4D:E3:A0:C5:B3:B0:53:86:82:CD:30:BE:7A
X509v3 Authority Key Identifier:
keyid:AE:0A:5A:1B:38:61:7C:C1:61:F6:06:13:D9:8E:17:9B:53:60:C0:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:f9:51:20:d7:4c:37:ab:ba:ec:90:7a:48:16:ab:40:fd:52:
b6:ec:b7:bb:c2:fa:be:7e:96:f7:93:0c:39:16:4e:78:64:05:
18:2e:f3:75:49:c7:f5:9f:a3:7b:cf:35:45:11:43:ab:7d:ca:
27:1e:fb:77:bc:e5:53:75:66:6b:1c:3f:19:74:30:e8:ec:71:
e7:a3:64:07:c8:b9:a7:6f:3b:2b:29:47:5a:80:9d:6a:cb:7d:
a3:5c:12:a5:7c:d2:fa:93:16:5c:19:3f:85:26:b6:52:6f:6c:
29:ae:e3:b3:fb:c8:3f:b5:2c:f9:53:9e:32:fc:16:2a:fa:2c:
2a:ae:3e:da:7a:37:23:d0:b7:1c:d2:3a:a4:43:9f:e7:60:24:
8e:83:00:c1:e9:ce:66:c9:fe:06:1d:9a:a3:9f:a5:1f:37:be:
8e:aa:48:bd:27:fa:df:a6:9e:f4:22:6a:4f:71:06:a8:d7:10:
17:a8:18:ee:09:c0:4c:9c:a6:bc:f8:46:03:f5:01:da:4f:0e:
d1:04:55:05:33:de:ec:8e:95:15:e1:6d:f3:ac:4d:b4:0b:af:
29:cc:81:16:3d:9c:17:d3:79:f4:86:8a:44:5a:7a:74:b7:ae:
df:de:fa:5d:93:1d:7d:3d:a4:2c:03:bd:15:70:3b:2f:c9:88:
f0:1b:59:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:55:33 2026 by rpki-client