Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/_RGW2Y3s046wP18GtI5VbHTyMfQ.mft
File: _RGW2Y3s046wP18GtI5VbHTyMfQ.mft (raw, json)
Hash identifier: R77mfHlrC2uiUeCvPZ0xbMLQwdlJ3fi0Sd7dWCDo5Lg=
Subject key identifier: 64:16:C2:FB:7A:6C:3A:2B:4E:E7:7A:76:14:C0:07:3C:3E:99:22:58
Authority key identifier: FD:11:96:D9:8D:EC:D3:8E:B0:3F:5F:06:B4:8E:55:6C:74:F2:31:F4
Certificate issuer: /CN=fd1196d98decd38eb03f5f06b48e556c74f231f4
Certificate serial: 019DCDBD7C9FA9793348CD721FB79D8B02E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_RGW2Y3s046wP18GtI5VbHTyMfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/_RGW2Y3s046wP18GtI5VbHTyMfQ.mft
Manifest number: 14DF
Signing time: Mon 27 Apr 2026 07:00:40 +0000
Manifest this update: Mon 27 Apr 2026 07:00:40 +0000
Manifest next update: Tue 28 Apr 2026 07:00:40 +0000
Files and hashes: 1: 23kWo8WKu4VcVOYS6UAti6dc2wQ.roa (hash: RwlIBrzmFIZAZi0sEllzV9DHFTRSKDs5dj1Vung5ip4=)
2: _RGW2Y3s046wP18GtI5VbHTyMfQ.crl (hash: 6VlIyj9PQ5C808VStFoz1Ceoaxnoamy06pAZK5bFbMc=)
3: fG6TqZ7fHJZl4S616ULbaocBqsY.asa (hash: 8exjs0gVSg612pjMCL4awfpFELRZelmAPjB+NBKQbNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/_RGW2Y3s046wP18GtI5VbHTyMfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/_RGW2Y3s046wP18GtI5VbHTyMfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_RGW2Y3s046wP18GtI5VbHTyMfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:bd:7c:9f:a9:79:33:48:cd:72:1f:b7:9d:8b:02:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd1196d98decd38eb03f5f06b48e556c74f231f4
Validity
Not Before: Apr 27 07:00:40 2026 GMT
Not After : Apr 28 07:00:40 2026 GMT
Subject: CN=6416c2fb7a6c3a2b4ee77a7614c0073c3e992258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:47:14:a2:e3:09:c6:0c:1f:e9:cf:b8:3d:f6:
d6:33:25:6d:6e:11:09:34:d8:07:cb:ee:41:47:58:
31:09:f4:a1:93:a3:b4:8a:85:4a:15:2e:13:4c:c9:
a5:3a:69:ae:42:52:6a:40:db:92:cd:9a:2a:42:8f:
02:c8:e4:7b:ac:78:a0:b8:f8:17:87:aa:14:4c:ab:
ac:f1:77:03:e9:5a:af:17:09:cf:f6:0f:54:c1:06:
29:37:ad:97:18:29:73:11:9e:d0:a4:32:22:3d:4e:
c9:59:d7:b5:47:59:fa:0c:6b:12:5f:bc:7c:3d:77:
3b:8b:d9:27:5e:18:0a:ba:14:15:c2:6b:32:73:05:
95:48:0e:d7:72:91:ac:d7:94:bf:4d:c1:20:4b:6a:
c1:35:ba:ea:fb:54:f1:1d:f7:de:3c:6d:c9:af:c0:
65:9c:ca:bf:94:74:9d:0d:f0:03:59:8c:91:c8:b0:
62:a3:6d:db:9e:8d:ca:37:0a:a8:46:cf:f2:a3:da:
13:96:13:24:ef:c0:59:02:85:91:77:b6:12:e2:9b:
7c:14:7e:ed:fe:c2:3c:21:49:bd:66:27:21:4d:b9:
b0:59:a5:11:03:e8:73:f2:a0:b1:2c:64:4d:3b:e3:
39:16:9e:81:54:cd:d8:5d:35:cf:d0:84:ae:ff:16:
e9:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:16:C2:FB:7A:6C:3A:2B:4E:E7:7A:76:14:C0:07:3C:3E:99:22:58
X509v3 Authority Key Identifier:
keyid:FD:11:96:D9:8D:EC:D3:8E:B0:3F:5F:06:B4:8E:55:6C:74:F2:31:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_RGW2Y3s046wP18GtI5VbHTyMfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/_RGW2Y3s046wP18GtI5VbHTyMfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/_RGW2Y3s046wP18GtI5VbHTyMfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:bf:dd:79:07:ed:64:fa:06:3d:3a:15:fb:54:64:73:c5:6e:
5e:2a:23:75:fb:5a:a8:a3:1d:1a:f6:14:00:af:6c:c4:a3:9f:
a3:2e:5f:37:45:58:51:9f:04:28:6e:07:89:d1:a7:c5:31:0e:
df:11:df:64:f4:f2:6c:68:48:cb:14:7a:4c:e7:17:f4:d9:db:
9d:d6:fe:0e:f2:9e:2d:20:92:54:8c:c9:2e:3e:c2:79:64:8f:
14:33:cc:7b:c9:8d:58:0f:55:fb:74:73:c0:52:59:8f:1c:44:
15:b7:8d:6b:9e:fa:ed:be:59:a6:4a:25:10:5a:bf:91:8c:9c:
1d:6f:33:b9:ac:20:2b:08:2b:f8:27:bb:c7:5b:4b:6c:73:61:
ff:98:5d:58:3b:c0:de:d5:c0:77:29:7a:27:27:3b:f8:5f:c8:
23:b5:48:0b:c8:de:c6:60:fc:73:ad:05:3f:5f:b3:6e:19:0d:
59:85:64:f5:0f:12:71:0e:18:0f:cf:ab:94:98:2a:c8:81:51:
6e:bf:93:32:1e:23:27:c0:a8:ed:c5:32:f9:83:e7:3a:30:c8:
e4:06:2b:57:cc:0f:ed:bc:a9:36:22:e1:5f:1d:3b:e7:0f:2c:
fe:3e:6a:c8:e2:2d:d4:0b:d7:e1:93:6f:7d:70:da:ff:4b:9a:
7c:ff:35:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 11:56:56 2026 by rpki-client