Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.mft
File: cJ1plX0zNDKsysgQIx4ok4jjAuI.mft (raw, json)
Hash identifier: h8mzJELO+s50hT4n0GBfQAjo7rtSLVJXUFWfTd1d7c0=
Subject key identifier: 80:74:2D:0C:E6:A0:27:59:5D:F4:A6:A6:4E:BD:FB:59:D8:C6:4B:3C
Authority key identifier: 70:9D:69:95:7D:33:34:32:AC:CA:C8:10:23:1E:28:93:88:E3:02:E2
Certificate issuer: /CN=709d69957d333432accac810231e289388e302e2
Certificate serial: 019DDD3108B92E843722D2418E2B1A27BDDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJ1plX0zNDKsysgQIx4ok4jjAuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.mft
Manifest number: 18E6
Signing time: Thu 30 Apr 2026 07:01:11 +0000
Manifest this update: Thu 30 Apr 2026 07:01:11 +0000
Manifest next update: Fri 01 May 2026 07:01:11 +0000
Files and hashes: 1: 1-n1vM7Ljft18bock9zc_fcUgFqk.roa (hash: bU5dt5JIz7PjOVY108Gj3vTWvnqbHRDZ1HwvN9fFc1M=)
2: G6OyRmGGSlEkPDR314TXAEQi9rc.roa (hash: js9ydtB3OE/PEaAkA7z3NDnhzc/fPT98lQkdRYKZuV8=)
3: cJ1plX0zNDKsysgQIx4ok4jjAuI.crl (hash: bTakHmlt0nXCOhbjc7lSgMqsfdlzBaO6xZ5lZwKN98U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cJ1plX0zNDKsysgQIx4ok4jjAuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 07:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dd:31:08:b9:2e:84:37:22:d2:41:8e:2b:1a:27:bd:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=709d69957d333432accac810231e289388e302e2
Validity
Not Before: Apr 30 07:01:11 2026 GMT
Not After : May 1 07:01:11 2026 GMT
Subject: CN=80742d0ce6a027595df4a6a64ebdfb59d8c64b3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c6:69:32:67:f1:35:0d:98:bf:8e:97:59:e5:
ba:0e:21:33:39:78:7d:af:c8:c1:82:b1:c8:6f:9f:
f4:46:7d:4c:69:fd:6e:3c:68:ed:76:1f:5e:ec:9d:
53:6c:e0:b2:bd:b3:7f:4b:fc:75:67:b8:ff:db:b6:
48:28:2e:9f:ab:a4:92:fd:bb:d4:24:c1:9a:f4:65:
60:6a:37:7a:85:50:d9:05:85:51:3c:a6:2a:ef:ee:
f4:55:a6:cb:09:28:48:12:b9:63:e9:12:ca:f8:4b:
15:6a:a4:91:e2:b2:7e:b8:b2:75:68:f8:57:07:ab:
82:38:48:bb:90:00:14:25:d5:f8:d1:54:58:d0:d5:
f3:95:cf:67:d8:e0:65:37:91:ac:f1:bf:6d:14:13:
05:52:1f:81:59:e3:d5:5c:36:db:95:80:bc:a3:a3:
63:43:db:1c:4b:72:97:3c:13:b5:d9:11:19:4a:1c:
61:44:b3:8f:f2:53:7e:7f:a0:02:c0:0b:b6:cf:bc:
87:37:ab:de:ae:7a:66:40:46:42:bc:a6:47:aa:08:
37:55:d4:e1:7c:b7:5e:5e:84:1b:6d:19:90:aa:d3:
9f:2f:b9:b1:d7:1e:f9:66:16:9f:50:4b:42:52:47:
5c:51:c9:92:e2:bd:eb:44:4a:49:64:67:27:86:d1:
8e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:74:2D:0C:E6:A0:27:59:5D:F4:A6:A6:4E:BD:FB:59:D8:C6:4B:3C
X509v3 Authority Key Identifier:
keyid:70:9D:69:95:7D:33:34:32:AC:CA:C8:10:23:1E:28:93:88:E3:02:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJ1plX0zNDKsysgQIx4ok4jjAuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:eb:61:97:42:58:b6:13:8f:92:90:03:15:34:ed:f6:fb:24:
79:60:c6:68:94:f9:ad:04:13:f1:b4:71:f6:5a:05:46:76:75:
5c:68:14:d5:6b:f2:e0:5f:3f:2f:64:e6:27:1d:b4:6a:81:fd:
3b:14:49:d7:09:82:6a:dd:c5:25:e3:9c:ac:31:11:18:67:05:
d8:a1:a7:f2:e2:a7:63:c2:4e:4e:3e:71:8b:f6:fc:da:8d:e6:
a8:9b:b3:45:39:61:60:7e:09:25:9b:0b:fb:62:29:8e:bf:20:
6d:d0:da:95:0e:22:5b:99:8f:3e:fb:4c:bb:66:f8:48:a5:5c:
4a:9c:dd:48:33:26:ef:27:96:07:72:92:ff:3f:74:b0:11:d9:
38:8a:3e:a9:b0:24:8d:62:94:a7:c4:48:2b:09:cf:e9:86:81:
f7:59:60:26:4a:8b:6c:12:87:1b:23:27:00:d1:ca:0e:73:e6:
04:f3:3c:33:03:72:69:1e:39:c2:b6:28:53:0e:40:52:04:f4:
62:df:dd:1e:81:ee:12:87:4c:8f:6f:65:d7:f5:e9:b9:a9:f0:
81:73:6b:77:a6:68:ff:62:cf:56:b9:52:4b:61:e2:e0:c3:c3:
5c:15:a0:82:70:db:a7:ea:40:f1:b7:5b:a9:34:e3:5e:db:e6:
7e:f8:d8:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 16:34:12 2026 by rpki-client