Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/66bd3a-5121-490d-8c92-6ea94a961d4c/1/T02gn7vpD7efDwiyB_g18PDaKf4.mft
File: T02gn7vpD7efDwiyB_g18PDaKf4.mft (raw, json)
Hash identifier: 0qWNUhjpFE34dXZqg3eUO9B+8nBv9sXf0DRIQw8a9s0=
Subject key identifier: 78:2C:3C:80:67:18:EE:27:5F:20:4A:17:A7:DD:29:4E:B4:05:67:AA
Authority key identifier: 4F:4D:A0:9F:BB:E9:0F:B7:9F:0F:08:B2:07:F8:35:F0:F0:DA:29:FE
Certificate issuer: /CN=4f4da09fbbe90fb79f0f08b207f835f0f0da29fe
Certificate serial: 019DCED0A9C7080D28F16EA1BA89A00EDD80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T02gn7vpD7efDwiyB_g18PDaKf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/66bd3a-5121-490d-8c92-6ea94a961d4c/1/T02gn7vpD7efDwiyB_g18PDaKf4.mft
Manifest number: 18E1
Signing time: Mon 27 Apr 2026 12:01:14 +0000
Manifest this update: Mon 27 Apr 2026 12:01:14 +0000
Manifest next update: Tue 28 Apr 2026 12:01:14 +0000
Files and hashes: 1: J-GnCjEevLnsSylTNN_DRQKgLxU.roa (hash: Ih+rPEkL3JjpnefkXhpQxgVK3VfQEJZ/zybpvC3KpeM=)
2: T02gn7vpD7efDwiyB_g18PDaKf4.crl (hash: 0FztFbQxhpSWO/8D9P4zVMsj0QUM5AVJsPE0b7I2mvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/66bd3a-5121-490d-8c92-6ea94a961d4c/1/T02gn7vpD7efDwiyB_g18PDaKf4.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/66bd3a-5121-490d-8c92-6ea94a961d4c/1/T02gn7vpD7efDwiyB_g18PDaKf4.mft
rsync://rpki.ripe.net/repository/DEFAULT/T02gn7vpD7efDwiyB_g18PDaKf4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 12:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:d0:a9:c7:08:0d:28:f1:6e:a1:ba:89:a0:0e:dd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f4da09fbbe90fb79f0f08b207f835f0f0da29fe
Validity
Not Before: Apr 27 12:01:14 2026 GMT
Not After : Apr 28 12:01:14 2026 GMT
Subject: CN=782c3c806718ee275f204a17a7dd294eb40567aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:6d:6a:b0:0e:25:5c:27:52:05:a9:52:61:d1:
b6:c9:78:61:4f:6b:da:29:a3:87:9a:51:c9:20:5d:
2d:5a:10:46:48:be:82:7f:79:36:7f:33:2e:e0:f4:
97:28:68:53:0e:33:f2:66:99:ab:09:2e:cc:67:13:
32:e6:a0:00:7a:e9:54:e8:6b:38:f0:83:ef:3b:b8:
67:b6:0c:dd:64:2b:3c:4c:d8:53:83:10:de:7a:52:
fe:dc:07:38:72:ca:8f:3a:3a:45:9b:d2:3c:66:0d:
05:46:5a:1a:5e:8f:e9:fd:d6:2a:8e:9f:87:29:7d:
44:76:20:ef:25:d8:21:3d:0a:07:f6:aa:f6:2a:52:
45:7d:4f:bb:10:70:97:ca:12:6b:2a:d7:d6:c5:54:
fb:96:e7:48:85:58:ef:9e:43:81:b9:9c:22:b3:a7:
5b:1d:da:34:b7:c8:0d:7c:09:fc:65:80:66:9e:a0:
af:63:d7:06:30:ee:40:20:23:89:91:21:2d:2d:56:
c3:e8:48:a4:ae:35:b0:d0:bb:50:a2:ce:7f:d8:9b:
c1:1c:3a:1a:fd:b4:d5:ea:d3:78:72:73:dd:38:d1:
c3:d9:ba:53:91:68:d3:89:1c:86:2c:1a:e3:db:b0:
d5:de:a8:23:3f:8d:84:0c:74:ac:77:cd:43:e1:a7:
43:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:2C:3C:80:67:18:EE:27:5F:20:4A:17:A7:DD:29:4E:B4:05:67:AA
X509v3 Authority Key Identifier:
keyid:4F:4D:A0:9F:BB:E9:0F:B7:9F:0F:08:B2:07:F8:35:F0:F0:DA:29:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T02gn7vpD7efDwiyB_g18PDaKf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/66bd3a-5121-490d-8c92-6ea94a961d4c/1/T02gn7vpD7efDwiyB_g18PDaKf4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/66bd3a-5121-490d-8c92-6ea94a961d4c/1/T02gn7vpD7efDwiyB_g18PDaKf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:44:a2:57:2a:82:0e:51:6b:f3:54:1b:86:04:cc:a9:43:77:
29:9d:a8:75:09:2a:d2:41:9b:6a:49:89:e6:11:41:ff:40:e2:
2c:f4:8e:ba:6f:4d:ce:ac:16:15:48:8b:46:b5:3c:8e:82:90:
ce:bb:71:ae:c1:71:f2:ba:02:f0:9a:9e:b1:44:fa:ee:5b:7e:
ff:c3:26:53:71:82:80:08:41:b7:ee:78:84:2e:5c:28:90:7b:
a2:a0:7a:28:0d:43:e1:fc:c2:a2:3f:44:63:bc:5a:d2:86:fb:
e9:a0:d7:74:9a:15:7e:fa:99:e2:a3:4f:ae:29:27:04:e8:41:
5e:23:7c:30:20:1b:e4:d8:b4:24:5d:d2:c2:1c:a2:b0:a0:dc:
e4:ad:fd:45:a7:4f:98:bb:2d:a1:fd:b6:a4:8e:22:c7:84:a6:
ee:84:db:b0:8f:d9:56:9d:4e:3f:f3:a0:3a:15:7a:97:e5:f5:
71:71:ca:78:ef:06:3d:dc:44:e7:b3:46:02:0f:ac:5a:52:82:
1a:29:29:55:2a:26:5c:69:b5:6e:79:ef:0a:4e:4a:8f:bc:f8:
27:c2:13:62:ed:18:1d:09:98:00:ec:68:2a:cc:89:5b:e9:7f:
bc:73:b8:cf:01:da:02:b2:eb:f5:3a:9c:2f:08:9b:fd:2a:b3:
5b:4d:dd:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 21:05:38 2026 by rpki-client