Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.mft
File: sN-v02cwOW_jOOdy2tvkw8hc2VI.mft (raw, json)
Hash identifier: M4Eu8ZtVQGomDyqHkJT6VwWQifS6H/U6SQGFzSHv+UU=
Subject key identifier: 60:34:12:D0:FA:D6:C0:94:12:E7:51:50:11:B6:64:63:4F:B5:D3:76
Authority key identifier: B0:DF:AF:D3:67:30:39:6F:E3:38:E7:72:DA:DB:E4:C3:C8:5C:D9:52
Certificate issuer: /CN=b0dfafd36730396fe338e772dadbe4c3c85cd952
Certificate serial: 019DCDBD7FC36FBFA4060D1BA5EF364B8534
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sN-v02cwOW_jOOdy2tvkw8hc2VI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.mft
Manifest number: 18E1
Signing time: Mon 27 Apr 2026 07:00:41 +0000
Manifest this update: Mon 27 Apr 2026 07:00:41 +0000
Manifest next update: Tue 28 Apr 2026 07:00:41 +0000
Files and hashes: 1: SQCsFnrjeuZiVY1_BfYgIg4qi-k.roa (hash: 5RBF/vlBHGxON2JarwGOKKIBZfcvo+qjnXq8BAVhPwI=)
2: dPW253uLNkMC6hq3xNGknvYUUCk.roa (hash: lFOPNOmhkr/l52mg27uVNBuUyHirwJeRRAr2NLCO680=)
3: sN-v02cwOW_jOOdy2tvkw8hc2VI.crl (hash: FbQrd1mx9PNFtnNn3L35JHe8dhkEzOjwdIdvfZ8+wMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.mft
rsync://rpki.ripe.net/repository/DEFAULT/sN-v02cwOW_jOOdy2tvkw8hc2VI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 07:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:bd:7f:c3:6f:bf:a4:06:0d:1b:a5:ef:36:4b:85:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0dfafd36730396fe338e772dadbe4c3c85cd952
Validity
Not Before: Apr 27 07:00:41 2026 GMT
Not After : Apr 28 07:00:41 2026 GMT
Subject: CN=603412d0fad6c09412e7515011b664634fb5d376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:95:34:9c:d5:7c:c1:e5:fb:f7:e0:ef:9d:8a:
2d:aa:c4:15:1d:f6:85:c8:1e:7c:b6:0b:24:af:c7:
c8:db:80:2c:b9:d5:bc:7f:c5:d2:46:cd:51:fb:65:
ec:0e:63:49:71:cc:29:05:e7:f7:b8:e2:4c:dd:ad:
15:6f:e4:af:e9:b2:86:39:86:1e:1f:f5:00:8a:05:
5c:eb:17:ba:4f:aa:6d:7a:28:24:04:7d:cf:96:b5:
ce:39:3f:75:40:a6:37:89:06:06:33:e4:6d:45:95:
38:2c:92:4d:3f:34:30:76:92:0c:b0:26:15:45:90:
ea:e5:9e:d8:64:42:48:70:f0:8a:f7:6b:21:cb:d6:
31:c1:8d:38:55:93:ee:f5:90:98:71:a3:5f:ce:ec:
52:f6:22:b4:3f:d4:13:ce:91:25:cb:fc:ce:1a:4c:
9f:ee:b6:00:57:15:ee:f7:d2:ed:54:03:10:f7:8d:
e1:58:ce:7c:79:c1:63:99:e1:0a:31:73:7f:a2:a9:
ba:06:94:1e:36:69:ba:4d:a3:1d:90:0f:df:46:2a:
26:31:1f:a5:45:04:5a:05:28:4c:3f:4f:a3:dc:6e:
ad:1e:75:d3:6d:cf:f6:7e:08:69:c1:86:a9:1f:e6:
b8:60:d3:b5:b9:5e:35:df:ec:f7:ce:cb:11:64:01:
11:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:34:12:D0:FA:D6:C0:94:12:E7:51:50:11:B6:64:63:4F:B5:D3:76
X509v3 Authority Key Identifier:
keyid:B0:DF:AF:D3:67:30:39:6F:E3:38:E7:72:DA:DB:E4:C3:C8:5C:D9:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sN-v02cwOW_jOOdy2tvkw8hc2VI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:74:26:8b:35:7f:6e:38:72:26:93:e4:02:1c:36:a3:48:cd:
4a:8d:4b:ee:12:03:d2:0f:24:06:da:61:74:67:65:2b:7c:93:
fd:03:33:78:73:90:50:b6:d2:7f:12:fb:5b:7d:c2:88:f7:38:
5a:ff:d7:31:2c:7d:74:6d:eb:8a:c4:a5:ac:6d:09:c9:e3:b0:
7a:9c:af:7b:1a:d7:b2:ea:3f:35:bb:09:06:9d:d9:f3:da:43:
ae:aa:ed:44:f5:9b:0a:92:a3:9f:37:48:a2:84:98:42:45:ff:
81:dc:47:fd:59:89:fb:ce:a5:92:b6:df:5b:5b:22:e9:f3:f2:
75:22:40:0b:13:4c:c5:ef:25:c1:af:2a:93:1e:93:ad:7c:57:
85:b2:16:6c:9d:30:ce:8f:9c:d7:11:dc:dd:10:fd:00:7e:86:
78:6f:f4:61:32:8e:3f:49:03:74:32:28:05:01:4b:93:5c:6d:
dd:c8:2c:69:07:06:0b:22:43:ae:75:44:92:78:f5:29:d5:2e:
ca:e4:d8:ab:35:86:5b:fa:c3:4d:73:65:c9:2d:19:b0:7d:57:
ce:72:58:97:f5:11:0b:9c:af:5b:a4:c4:e4:da:42:ad:32:b5:
df:6d:85:e0:a4:c8:38:98:40:52:14:dc:5b:e7:d3:87:b5:88:
7f:a5:58:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 14:54:00 2026 by rpki-client