Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.mft
File: m2fALef8jRGhr-euYsWFTRd2dVM.mft (raw, json)
Hash identifier: f6VGB3NEZGBFEbEXBpld3dwoQlsfMDAgfc3343zMVBE=
Subject key identifier: F3:CA:C2:89:95:5B:2F:B1:76:23:00:B1:C6:0A:9D:AD:0D:A0:1F:13
Authority key identifier: 9B:67:C0:2D:E7:FC:8D:11:A1:AF:E7:AE:62:C5:85:4D:17:76:75:53
Certificate issuer: /CN=9b67c02de7fc8d11a1afe7ae62c5854d17767553
Certificate serial: 019DA11C57887ED57301033CA6D370487BD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m2fALef8jRGhr-euYsWFTRd2dVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.mft
Manifest number: 18CA
Signing time: Sat 18 Apr 2026 15:01:22 +0000
Manifest this update: Sat 18 Apr 2026 15:01:22 +0000
Manifest next update: Sun 19 Apr 2026 15:01:22 +0000
Files and hashes: 1: N4MtS_rO7hT8RpY21Yy7Mk8WK6A.roa (hash: a7GxJ/DHXtzeo/5dQNp0athcwGWDpOFXNyta+KLkn5s=)
2: j0djN2P0pP4FekmDXul4LqL8vFc.roa (hash: Imh4k/3T8J0ucRVeJognqvvIOllYc40mbdeDTMcQJto=)
3: m2fALef8jRGhr-euYsWFTRd2dVM.crl (hash: Ox6TqKpEF2/XrQwNJvsHNAaML2VwVNyFkMLPqQ6wlPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/m2fALef8jRGhr-euYsWFTRd2dVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 15:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a1:1c:57:88:7e:d5:73:01:03:3c:a6:d3:70:48:7b:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b67c02de7fc8d11a1afe7ae62c5854d17767553
Validity
Not Before: Apr 18 15:01:22 2026 GMT
Not After : Apr 19 15:01:22 2026 GMT
Subject: CN=f3cac289955b2fb1762300b1c60a9dad0da01f13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:32:55:58:30:a3:76:b3:6c:a7:ba:f9:49:fb:
f5:41:43:13:85:e1:3e:f2:f8:1a:22:50:0f:f7:b6:
8b:34:a8:fc:f3:9b:98:e7:7e:27:89:db:dd:00:1f:
7c:8c:c8:d0:60:98:7a:53:b4:76:01:d1:ee:ed:b0:
0a:cc:c8:95:ac:2a:4f:c7:b2:0c:14:56:fe:7f:41:
1e:74:dc:5c:a6:5e:54:78:7a:d4:dc:e4:c1:43:af:
46:ed:ca:13:bc:63:69:4d:6d:99:ca:0f:3c:11:7b:
22:44:1a:2a:99:ca:67:ee:8e:68:d9:16:66:ab:77:
88:e5:dd:3e:ce:d4:19:27:ae:63:9a:8e:ad:87:50:
8c:38:7e:1b:1a:5e:68:35:ac:36:78:4f:c4:14:3f:
53:1d:7b:f2:b5:df:34:c6:c2:32:5c:32:d7:29:a0:
ba:6f:cc:e6:e8:75:1b:90:f9:a5:4c:21:4b:e3:fe:
39:79:9f:a3:27:f8:b8:13:fa:36:9b:a4:f2:dd:19:
48:cd:d1:7b:91:d8:87:51:03:7c:55:f5:12:61:83:
06:f2:5b:ed:ca:74:83:6d:b4:29:a3:4d:5c:0b:90:
83:28:ad:9b:fa:a8:07:0b:ea:1a:3d:94:c0:6a:eb:
ac:83:dc:31:a5:22:81:19:b7:54:fc:fd:ff:68:cc:
99:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:CA:C2:89:95:5B:2F:B1:76:23:00:B1:C6:0A:9D:AD:0D:A0:1F:13
X509v3 Authority Key Identifier:
keyid:9B:67:C0:2D:E7:FC:8D:11:A1:AF:E7:AE:62:C5:85:4D:17:76:75:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2fALef8jRGhr-euYsWFTRd2dVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:c8:19:75:48:74:26:13:04:4f:b9:51:b0:57:9a:1f:7b:00:
e4:b5:86:c4:37:99:c0:3b:ca:69:91:17:dd:4f:47:14:04:b0:
73:31:fc:16:df:c9:6a:21:71:0c:ce:d1:b9:72:45:00:6f:62:
1f:5e:44:fc:4c:c1:c8:c2:b6:a4:10:8d:bb:a8:1d:cb:40:9e:
e3:65:45:17:cf:0b:eb:0a:b1:22:89:ca:b1:c0:67:11:80:d5:
10:25:26:f4:17:75:2c:cf:a1:8f:96:a8:9d:d2:70:45:8f:2d:
d2:2f:2a:36:c9:2f:fd:16:3a:03:75:c8:8e:e0:2e:51:bb:c2:
a1:f6:2e:d9:5f:a0:0b:22:b9:8b:e0:24:f7:c7:48:56:cf:94:
a2:bd:3d:22:5d:89:22:58:5c:6f:0c:7f:00:8e:5b:fd:4b:06:
dd:9c:21:db:43:45:65:a7:2b:32:d4:e7:1d:60:d6:b1:92:4c:
75:d1:54:20:b3:fc:87:d0:df:f1:14:1c:47:f7:93:b7:c5:67:
43:8e:8b:c8:9b:a4:58:cc:21:8a:ef:55:f6:5e:67:b8:ad:2b:
94:fd:11:80:c6:95:77:16:84:7d:35:a5:5b:7c:1b:0f:ff:1c:
2a:8a:b9:5b:f4:e2:1b:13:ac:9d:b3:dd:23:6f:1e:52:84:d9:
e2:5c:2c:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 00:52:10 2026 by rpki-client