Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.mft
File: _cNlqvvg5FoE3RXpwjESHp6uqPI.mft (raw, json)
Hash identifier: CPJe4Xmzc+5dv01gTPi4vDvmrlizUaq+aC0VOvKKbyA=
Subject key identifier: 3D:42:92:56:6D:FB:2C:54:AF:9A:6E:9D:3D:B8:01:3C:0E:93:69:E0
Authority key identifier: FD:C3:65:AA:FB:E0:E4:5A:04:DD:15:E9:C2:31:12:1E:9E:AE:A8:F2
Certificate issuer: /CN=fdc365aafbe0e45a04dd15e9c231121e9eaea8f2
Certificate serial: 019DCE99292240589697675C9793844EC055
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_cNlqvvg5FoE3RXpwjESHp6uqPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.mft
Manifest number: 0C25
Signing time: Mon 27 Apr 2026 11:00:37 +0000
Manifest this update: Mon 27 Apr 2026 11:00:37 +0000
Manifest next update: Tue 28 Apr 2026 11:00:37 +0000
Files and hashes: 1: _cNlqvvg5FoE3RXpwjESHp6uqPI.crl (hash: 6zpFZk8rAZflVE3SuCiqKLW435JEbrA3xRtnKaAd3Qo=)
2: ap4mFp5Ya-kxrNe_lxyXrrfAkKo.roa (hash: 9On1ASESGdKkJZcGpCsLA2Kb7s/ei4zrGMGE+Hcy6Qg=)
3: kXUNqa6NU2CIrEc-7iSS_F04l8w.roa (hash: dMuT5b6Qv7WJg47jG6wYoMPrghKZhlkojTQssXVjOAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_cNlqvvg5FoE3RXpwjESHp6uqPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 11:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:99:29:22:40:58:96:97:67:5c:97:93:84:4e:c0:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdc365aafbe0e45a04dd15e9c231121e9eaea8f2
Validity
Not Before: Apr 27 11:00:37 2026 GMT
Not After : Apr 28 11:00:37 2026 GMT
Subject: CN=3d4292566dfb2c54af9a6e9d3db8013c0e9369e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4d:78:b3:f6:c4:b4:03:ad:e5:a9:24:9d:db:
b2:e4:6b:00:ba:dc:90:c3:82:38:a8:64:34:70:66:
ff:9c:72:65:bc:f7:33:a6:fb:ef:a8:cc:1a:38:bd:
b0:a1:4e:0b:cc:01:33:0c:ce:00:f8:ae:e0:e6:a2:
82:4e:5b:1e:80:99:1f:7b:13:1f:48:46:17:b4:a7:
ac:54:4f:a3:e8:ac:78:d9:fc:8b:c6:9f:88:26:a1:
88:aa:8b:9b:c7:47:84:f5:c5:a6:ba:64:6f:ef:88:
9c:c4:d9:33:39:7e:eb:0d:78:03:ff:79:3d:1d:7f:
f0:ab:07:3b:0a:44:45:6e:61:60:73:93:c1:a5:13:
44:19:55:94:fe:23:49:3c:a2:d7:de:14:4d:97:ba:
4c:3d:18:82:ae:d2:0c:97:e7:fc:7e:d0:1f:10:d1:
69:83:c2:4e:aa:82:c5:8d:0d:c8:5d:34:23:c5:3d:
14:d2:e5:72:8c:f3:d8:51:77:1c:52:b8:56:6b:77:
a5:13:cd:c2:1c:d0:9a:35:89:7f:c0:ae:ee:97:23:
77:f6:20:70:90:5a:65:5b:21:77:0b:1d:ad:7a:d3:
6f:80:f0:1c:de:65:46:31:6d:6c:36:95:ff:68:3c:
74:88:70:7e:95:53:32:11:c8:5e:59:65:9f:fd:45:
ba:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:42:92:56:6D:FB:2C:54:AF:9A:6E:9D:3D:B8:01:3C:0E:93:69:E0
X509v3 Authority Key Identifier:
keyid:FD:C3:65:AA:FB:E0:E4:5A:04:DD:15:E9:C2:31:12:1E:9E:AE:A8:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_cNlqvvg5FoE3RXpwjESHp6uqPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:13:49:ed:12:32:f9:65:bb:3a:df:80:f2:b3:c0:a3:57:63:
f2:e7:c9:84:7c:fe:82:12:b6:55:cc:4d:77:ba:07:56:6e:e8:
b2:ff:85:89:c3:8a:ef:5a:8a:65:67:21:30:b9:7a:dc:35:81:
a2:91:9f:94:f2:a4:bb:b5:42:73:fa:ea:fc:2b:2d:37:96:4d:
3c:83:9c:11:a9:d6:8b:5d:93:e9:9c:79:46:d9:70:71:1a:89:
97:8d:c2:46:69:fa:dc:d0:b2:b0:9b:fc:d3:aa:f8:97:7c:e5:
c1:30:fc:3e:c0:24:a3:71:bb:84:d2:2f:e0:2d:2f:da:90:89:
94:dd:66:b9:b7:aa:30:ab:e1:89:2a:1e:69:3b:dc:04:e8:09:
6a:fd:72:4d:cc:66:1d:e6:14:52:a1:3a:36:79:42:01:3d:c9:
91:3f:e6:fb:14:46:fe:25:6d:1b:e1:79:9c:d9:3f:10:98:ab:
4f:dc:f5:46:31:36:e0:70:84:4f:12:b4:31:6c:6e:81:ca:b2:
34:0c:ee:93:f5:d3:6f:4c:42:dd:f7:c0:77:59:81:ca:16:3c:
de:4c:4d:c9:ba:8a:d6:b4:65:c0:77:46:15:87:a6:93:92:c9:
ec:21:01:57:03:4e:60:b5:6b:34:f7:ff:45:3b:e3:8b:06:7a:
2c:2e:26:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 21:05:41 2026 by rpki-client