Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/pMtQ54o6MeM3XPKquGXoRf8umcE.mft
File: pMtQ54o6MeM3XPKquGXoRf8umcE.mft (raw, json)
Hash identifier: +TgYLIDskjmB8jfbVG4c9iCPspnVe5ELzcEoJ9WOKnU=
Subject key identifier: 80:12:E6:36:12:5C:88:21:71:9F:D9:06:19:13:31:E3:8D:4C:34:28
Authority key identifier: A4:CB:50:E7:8A:3A:31:E3:37:5C:F2:AA:B8:65:E8:45:FF:2E:99:C1
Certificate issuer: /CN=a4cb50e78a3a31e3375cf2aab865e845ff2e99c1
Certificate serial: 019DCF06E443B1EA59D687E06CE277F437F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pMtQ54o6MeM3XPKquGXoRf8umcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/pMtQ54o6MeM3XPKquGXoRf8umcE.mft
Manifest number: 18EE
Signing time: Mon 27 Apr 2026 13:00:28 +0000
Manifest this update: Mon 27 Apr 2026 13:00:28 +0000
Manifest next update: Tue 28 Apr 2026 13:00:28 +0000
Files and hashes: 1: KeBHh_EXoo6vxPcJVgCWPFy_Qck.roa (hash: Lb6JJsVM1wJrwKLdOhRrqdN+kt/BOWmpYchxNlLSv+A=)
2: RgbTxSuQRNXFVhZjHsG1yRfbDcY.roa (hash: QEQTGxs8uKOEp8JVm8z26NyHbZ3CIT8Ts2wlZUqrfqw=)
3: fc-z64p9INgXqSlpt0wgmjnDjcM.roa (hash: iAvsJsJGvYYjjk6ye/5/KN/cmvlNuk2vjqxHBnhTILY=)
4: pMtQ54o6MeM3XPKquGXoRf8umcE.crl (hash: PL67MvMtfS7Pz8Wvn8wycp6wIHZyuKhYCsa2nKh9e8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/pMtQ54o6MeM3XPKquGXoRf8umcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/pMtQ54o6MeM3XPKquGXoRf8umcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pMtQ54o6MeM3XPKquGXoRf8umcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 13:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:06:e4:43:b1:ea:59:d6:87:e0:6c:e2:77:f4:37:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4cb50e78a3a31e3375cf2aab865e845ff2e99c1
Validity
Not Before: Apr 27 13:00:28 2026 GMT
Not After : Apr 28 13:00:28 2026 GMT
Subject: CN=8012e636125c8821719fd906191331e38d4c3428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ff:39:ea:20:4c:18:3a:52:7a:16:8b:52:ae:
26:a2:30:5d:26:38:2d:ac:54:f9:f2:ee:ef:25:b9:
49:6e:46:b2:b2:a2:c3:6c:e6:b6:59:2e:d8:8c:a3:
b7:2d:6b:0c:24:35:f6:45:53:d5:85:78:e3:b0:78:
88:24:90:b3:34:5d:86:cc:38:1f:9e:f3:03:c1:01:
46:bb:65:89:c2:a2:4f:3a:cf:c1:81:fc:0c:2c:83:
43:ba:f5:aa:52:69:cc:8d:32:20:9a:34:d9:20:f7:
f7:b5:f0:e2:ff:02:10:d9:70:58:56:d4:33:07:72:
29:32:39:1b:a0:db:62:a5:a0:5e:77:96:6c:db:e2:
b9:5b:ab:94:0b:d5:f5:a1:e3:39:3c:69:be:07:7b:
73:c6:90:ab:2a:56:18:d1:96:b1:c6:99:2b:5f:09:
59:67:2c:36:63:3f:d5:c7:d9:e7:0e:08:c0:ed:cb:
e2:29:8d:94:0c:d9:6b:7a:ff:c7:07:e1:04:a1:88:
fc:c3:d2:06:5e:0b:09:6a:e7:38:97:89:85:a7:cd:
11:ca:00:27:ce:7e:cd:ee:91:ed:5d:c0:fa:98:b2:
5a:81:87:e1:4a:1a:78:4a:64:79:af:79:66:73:ce:
dc:76:04:77:de:22:2b:99:3b:04:35:e1:b4:52:36:
8c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:12:E6:36:12:5C:88:21:71:9F:D9:06:19:13:31:E3:8D:4C:34:28
X509v3 Authority Key Identifier:
keyid:A4:CB:50:E7:8A:3A:31:E3:37:5C:F2:AA:B8:65:E8:45:FF:2E:99:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pMtQ54o6MeM3XPKquGXoRf8umcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/pMtQ54o6MeM3XPKquGXoRf8umcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/pMtQ54o6MeM3XPKquGXoRf8umcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:7f:67:02:31:ea:35:55:ce:3a:ad:b7:0f:ff:15:dd:24:fd:
e5:66:33:7e:b8:1e:35:26:b0:15:a9:73:db:73:80:cb:dc:d5:
7e:6b:3b:c7:2a:d8:f5:f8:8a:48:d8:9d:24:09:f2:f3:55:59:
aa:dd:56:a1:20:3f:5e:c0:6c:f5:85:d9:b0:2d:19:25:d7:a2:
de:c6:1f:80:85:e0:a2:03:5e:95:ef:58:14:f2:67:3e:15:22:
22:71:1a:dd:98:f2:eb:08:a1:62:29:2f:3d:16:a2:81:dd:a3:
0f:e4:76:5b:8c:e2:c3:f1:9f:37:db:a2:c2:1d:b4:61:4a:8f:
f5:25:05:b1:00:a1:92:f1:4a:bd:f7:e6:55:93:27:7f:27:07:
1f:c6:71:67:c9:85:21:fc:4d:fb:f5:37:a7:d8:af:e2:ef:71:
e4:70:98:ad:f4:86:0f:7b:cb:ed:a3:b0:ff:fd:16:34:15:a8:
10:88:27:8a:55:6b:05:3f:bb:75:ad:64:f7:21:4a:aa:ec:0e:
14:7b:50:1e:d7:73:e6:25:e5:cd:9d:ab:fa:d0:c7:fa:9d:b1:
fa:13:e0:be:70:6d:d1:33:5a:54:e5:1f:2a:96:f2:ee:99:c8:
6a:3b:9f:7f:70:2a:d8:94:75:2d:9b:ca:a4:e0:da:60:cd:cc:
3f:06:c7:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:07:04 2026 by rpki-client