Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/exSNtC-Q6WRHvX9j7dinzL7qqEI.mft
File: exSNtC-Q6WRHvX9j7dinzL7qqEI.mft (raw, json)
Hash identifier: N4P+WWoB8n2o5CiGxtbFtaOh4lpqGYpfZSgSkAFXujY=
Subject key identifier: BF:2A:E4:E7:98:BE:10:FD:FA:6B:B5:31:1F:11:F1:E6:90:D1:23:76
Authority key identifier: 7B:14:8D:B4:2F:90:E9:64:47:BD:7F:63:ED:D8:A7:CC:BE:EA:A8:42
Certificate issuer: /CN=7b148db42f90e96447bd7f63edd8a7ccbeeaa842
Certificate serial: 019DCF07851F59FFD8E22D8BBAD274602E28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/exSNtC-Q6WRHvX9j7dinzL7qqEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/exSNtC-Q6WRHvX9j7dinzL7qqEI.mft
Manifest number: 18E5
Signing time: Mon 27 Apr 2026 13:01:09 +0000
Manifest this update: Mon 27 Apr 2026 13:01:09 +0000
Manifest next update: Tue 28 Apr 2026 13:01:09 +0000
Files and hashes: 1: JVyJapkubi6hwpawUDVyCMGChmk.roa (hash: 9+Xk8J65pvF3WM1GTEgD30u0QtmBjUESAobq/ZpU38Y=)
2: dHzF4P3tNtzyJNFvhC01ek08kYc.roa (hash: bUI0+2xFTsseXiv/I8zBJZyi3U6hUXamNCOgX/NaEog=)
3: exSNtC-Q6WRHvX9j7dinzL7qqEI.crl (hash: 2q17v4FBcUjwyXDnjclXskCqwHaIaYcsHxqWqdrCgsM=)
4: qPSlTWuBwEhYZesqn2vIMokA97I.roa (hash: +VxHS7EmR7QvgmKrejlLV1ZOVtujydoNhAoPrqYBYks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/exSNtC-Q6WRHvX9j7dinzL7qqEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/exSNtC-Q6WRHvX9j7dinzL7qqEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/exSNtC-Q6WRHvX9j7dinzL7qqEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 13:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:07:85:1f:59:ff:d8:e2:2d:8b:ba:d2:74:60:2e:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b148db42f90e96447bd7f63edd8a7ccbeeaa842
Validity
Not Before: Apr 27 13:01:09 2026 GMT
Not After : Apr 28 13:01:09 2026 GMT
Subject: CN=bf2ae4e798be10fdfa6bb5311f11f1e690d12376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:62:ae:5f:08:04:39:9a:ff:5e:66:1b:75:22:
85:ce:5d:59:17:b9:e0:2f:10:63:3c:80:7a:bc:33:
83:78:c9:a2:1f:0c:ec:08:87:81:e5:0b:d7:01:10:
1f:0b:12:ae:6d:d0:89:be:ae:1f:62:f6:e9:e9:9c:
a7:bc:e3:ab:f7:6e:0a:da:ff:94:0c:24:91:9a:75:
a8:af:44:32:aa:ef:d7:82:b2:d5:90:b4:02:5c:c8:
26:70:8d:da:e4:07:3f:08:5a:ed:5b:03:f5:80:26:
87:5e:cd:97:fa:d6:23:92:3d:87:96:b5:12:bf:b3:
88:f5:20:f7:d0:01:ac:64:e4:12:40:0b:98:bb:6c:
ad:fd:24:64:24:ff:3d:4f:dd:f5:1e:7f:0f:22:44:
fc:a9:d6:63:66:f2:c8:f3:53:8f:1b:06:d1:06:77:
a7:ba:f2:66:05:27:a4:74:17:d9:e3:dc:28:06:7f:
e6:59:bf:3d:f0:d4:f4:6e:8d:de:13:12:5b:83:c3:
5a:6b:a1:76:11:7a:99:d0:3e:dd:81:fc:1d:40:1b:
1a:9f:44:57:d5:0d:85:55:ba:ff:64:d3:d6:5c:d6:
1f:dc:1c:bc:47:98:70:88:4d:7f:ac:b9:0d:92:89:
1c:78:f6:d3:28:2f:27:97:b7:4f:f2:0f:ba:df:f0:
0e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:2A:E4:E7:98:BE:10:FD:FA:6B:B5:31:1F:11:F1:E6:90:D1:23:76
X509v3 Authority Key Identifier:
keyid:7B:14:8D:B4:2F:90:E9:64:47:BD:7F:63:ED:D8:A7:CC:BE:EA:A8:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/exSNtC-Q6WRHvX9j7dinzL7qqEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/exSNtC-Q6WRHvX9j7dinzL7qqEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/exSNtC-Q6WRHvX9j7dinzL7qqEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:8b:05:ed:7e:0c:6b:2a:a3:75:46:0d:fd:07:50:1c:ee:01:
ae:41:81:e6:93:b2:d8:60:f8:59:eb:b6:a9:06:4a:d2:a0:e5:
fe:bd:9a:d9:16:ee:cc:a2:73:46:a7:2b:3d:9a:e0:02:da:fc:
f8:38:33:63:06:e0:52:a2:5b:da:e7:09:50:98:cc:12:5f:15:
98:8b:88:92:c7:4b:9a:e4:c8:6c:c2:69:02:ce:38:ad:91:7d:
3f:2d:33:65:4b:93:38:37:49:90:df:58:f4:3b:6c:4c:a2:05:
e1:0c:9a:36:b3:09:bc:06:cc:90:b2:70:52:00:1d:32:ed:24:
9e:25:ed:b7:49:02:c7:cd:15:a3:cb:7b:e8:d7:4f:36:ca:50:
2d:88:e5:00:cb:ac:71:75:21:b2:c0:54:af:b5:a2:1c:cd:45:
19:40:9b:7a:b1:70:4a:82:11:57:a3:1a:5a:e1:25:2e:94:67:
3d:09:1e:3b:06:3e:ce:60:78:8f:0b:28:38:a6:95:79:37:ad:
ae:60:90:37:79:89:08:45:b7:35:b0:03:ed:77:ad:e9:74:94:
ca:ed:42:87:27:ae:8f:a5:43:34:55:92:70:86:27:27:a8:e9:
31:56:16:be:0e:8e:dc:84:07:99:02:99:23:7c:b8:62:5a:ce:
7b:c2:5f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 21:05:12 2026 by rpki-client