Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.mft
File: mdNWGe0hC-CsKdFwortc10VWk7w.mft (raw, json)
Hash identifier: UuNnkm5o3QPgsei7pI14Ha9wdxpuTbA5t8XMWnjathw=
Subject key identifier: C6:DF:94:07:F4:41:3A:91:D4:0C:8F:C8:51:00:D4:57:7D:3F:69:10
Authority key identifier: 99:D3:56:19:ED:21:0B:E0:AC:29:D1:70:A2:BB:5C:D7:45:56:93:BC
Certificate issuer: /CN=99d35619ed210be0ac29d170a2bb5cd7455693bc
Certificate serial: 019DCDBE3EAF39C37C136255B8BD503206A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdNWGe0hC-CsKdFwortc10VWk7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.mft
Manifest number: 180B
Signing time: Mon 27 Apr 2026 07:01:30 +0000
Manifest this update: Mon 27 Apr 2026 07:01:30 +0000
Manifest next update: Tue 28 Apr 2026 07:01:30 +0000
Files and hashes: 1: 1-1b9kIdAlblnsi3fi8wMUDdRXmQ.roa (hash: EHBhiVunuwqspkFW8sGSqvBOxHJnouc2J5HPWr1aeGw=)
2: 9aFjflm38MN581vnLtWpsCX-q7Y.roa (hash: yLjtSs5KlibIMz+VoXmAGRKRF617RWal83eBR+rXqCQ=)
3: mdNWGe0hC-CsKdFwortc10VWk7w.crl (hash: IcZqWP8CXDbJ2hZdUOq+KNgzHVmKyzC5uX8jmaSJjuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/mdNWGe0hC-CsKdFwortc10VWk7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 07:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:be:3e:af:39:c3:7c:13:62:55:b8:bd:50:32:06:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99d35619ed210be0ac29d170a2bb5cd7455693bc
Validity
Not Before: Apr 27 07:01:30 2026 GMT
Not After : Apr 28 07:01:30 2026 GMT
Subject: CN=c6df9407f4413a91d40c8fc85100d4577d3f6910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:a6:05:6c:41:7b:06:0d:d5:75:8a:cc:09:c6:
65:ea:91:c0:27:b4:7d:50:2f:53:58:f4:7d:1a:55:
be:a0:02:44:88:37:a1:8e:c6:2f:fa:63:81:4b:4f:
63:f3:d2:3a:0a:75:ea:9a:0f:73:dc:93:f8:ed:f2:
5f:0b:79:12:d3:a9:fe:8c:b3:8d:18:35:46:c1:07:
e5:a2:9c:ad:05:c0:69:8c:1f:5e:04:10:e2:07:ba:
a0:5f:c5:ea:5e:c7:72:0f:82:ba:19:25:74:0c:ff:
2a:02:11:32:f9:b6:da:ec:3f:2a:e8:a7:b6:ad:9a:
95:02:69:de:8a:19:29:7b:b5:b7:33:e2:04:84:4f:
8e:36:4e:ed:03:f1:4a:a2:7a:c2:7e:3b:91:34:6e:
77:64:8f:c7:c4:73:36:90:81:41:a6:14:66:dc:6c:
05:98:72:d0:a3:3f:dc:aa:c5:dd:ac:19:32:5a:44:
16:91:b7:4f:56:2d:7d:9c:8c:1f:a7:62:23:4c:3f:
b0:b2:1d:4d:d3:90:dd:0a:75:5d:cc:b9:c7:d8:0c:
d5:10:6b:62:d6:d2:fd:b9:6d:da:e6:68:e9:bd:24:
a1:d8:d3:28:36:d0:ef:04:d0:16:46:d2:1b:42:d8:
e5:5e:2e:22:af:d9:c6:21:3f:ba:29:01:0b:30:37:
32:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:DF:94:07:F4:41:3A:91:D4:0C:8F:C8:51:00:D4:57:7D:3F:69:10
X509v3 Authority Key Identifier:
keyid:99:D3:56:19:ED:21:0B:E0:AC:29:D1:70:A2:BB:5C:D7:45:56:93:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdNWGe0hC-CsKdFwortc10VWk7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:ed:e6:bc:0a:4c:b5:8c:ab:83:1f:6b:c7:e9:0f:5b:53:cd:
14:82:51:cd:11:6e:72:e5:4d:ef:90:57:7a:7e:c6:96:b0:07:
de:9c:91:cb:0d:88:64:09:c0:7d:d8:2f:26:2b:1f:5b:8b:ea:
96:ab:99:4e:b4:da:6e:93:e4:7c:8a:b5:ef:d4:00:ce:22:b0:
43:81:84:8c:ee:4b:7e:c1:00:a9:7a:e0:9b:6b:ed:df:0b:a3:
c9:be:70:31:f9:c3:76:d7:9b:77:6f:40:58:78:7a:31:fe:2b:
96:0b:54:01:98:16:e1:67:51:38:23:1c:1b:0d:79:74:10:3c:
a3:40:94:1f:b2:ea:46:03:42:7a:c8:52:61:77:4a:c5:81:c7:
b3:74:c6:93:01:62:56:4e:b2:da:30:57:bf:48:8e:d0:06:e5:
7d:6b:1b:35:f9:35:89:63:cc:93:78:5d:9f:12:59:ed:f4:a6:
8c:4c:0a:12:21:61:b6:ea:9e:f5:34:d3:94:66:0e:0e:9d:20:
ba:7e:8e:a5:41:6b:69:a5:1c:ba:d1:d0:d9:00:81:19:ba:40:
12:ea:58:87:e2:a4:b5:06:d1:9a:4f:db:f8:18:87:66:d5:81:
fd:b5:19:e4:8f:46:d2:76:b8:8a:7f:f7:7b:97:74:b3:84:a8:
1a:62:67:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 12:39:18 2026 by rpki-client