Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft
File: p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft (raw, json)
Hash identifier: BccOsQFoGHEb2Mgbg6V4n825P9uOVOEQDnAB8HjS50g=
Subject key identifier: DE:8B:77:38:AC:4A:55:68:18:73:10:BB:E4:72:15:51:2B:F3:9C:58
Authority key identifier: A7:9B:BA:28:05:A9:88:95:4E:4F:EC:42:57:05:30:F1:6F:9E:70:93
Certificate issuer: /CN=a79bba2805a988954e4fec42570530f16f9e7093
Certificate serial: 019D9DAD9D5BAD172649F634475642957D81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft
Manifest number: 18DE
Signing time: Fri 17 Apr 2026 23:01:33 +0000
Manifest this update: Fri 17 Apr 2026 23:01:33 +0000
Manifest next update: Sat 18 Apr 2026 23:01:33 +0000
Files and hashes: 1: 4L_3KrprYTwmc6F0VK5YpQh7-ng.roa (hash: uekFvxE8fCG4iinAEMabm31AvzlJiPb5Eowm61DVMsU=)
2: cSElFw2-npFTxsWdmh_TS_DX1JM.roa (hash: uQXzfb9jOFxKjYKBJjLHpQzon0I+K9i1XFfrYpIMvJY=)
3: p5u6KAWpiJVOT-xCVwUw8W-ecJM.crl (hash: GzGWUZPXZ1bHUppkYJzu+x8msqz0Txv5fmLkqkxCpac=)
4: yU3X6K3B4JZT9bvq8QhnbjxPF2c.roa (hash: 2A76nDGpl64/49OxgRrM5/iYg+gEwhn7gAXzWZ5+Pfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:ad:9d:5b:ad:17:26:49:f6:34:47:56:42:95:7d:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a79bba2805a988954e4fec42570530f16f9e7093
Validity
Not Before: Apr 17 23:01:33 2026 GMT
Not After : Apr 18 23:01:33 2026 GMT
Subject: CN=de8b7738ac4a5568187310bbe47215512bf39c58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:73:d4:4f:eb:ca:70:26:cc:36:be:e2:96:14:
19:9f:b7:76:75:e0:90:6c:dc:ea:5b:90:7a:7f:68:
1b:82:87:f5:10:e9:07:ac:d1:7a:f8:5d:a8:99:c7:
50:70:91:89:a7:93:e3:e4:e8:ee:65:3f:77:49:61:
4e:86:ee:aa:d9:5c:40:48:32:6e:ed:20:be:ee:51:
db:d8:b2:cc:3e:15:d8:3d:eb:26:15:b1:62:fc:e1:
32:86:12:d5:ab:28:09:3d:57:83:90:2d:6c:71:c7:
cb:29:d0:c8:35:4b:63:9c:55:00:46:94:53:25:de:
89:77:0a:d3:89:7c:c4:a0:d5:8d:c7:cc:9b:8f:e8:
91:76:1c:24:42:85:69:3f:bb:74:6e:5a:3b:25:a1:
8d:48:98:dd:df:26:e5:30:17:28:5d:cb:a9:c7:73:
9f:15:88:6a:b9:03:34:8f:61:2f:46:f7:31:35:76:
b5:2f:fe:bc:10:97:9a:da:21:43:95:3b:69:ca:a5:
eb:f8:08:b5:ce:70:e2:0c:40:8c:11:79:e3:b1:77:
22:d7:1c:44:75:c8:11:c9:0d:96:07:a0:0c:64:f5:
d7:96:b1:63:56:68:28:fa:db:99:97:c2:f3:64:fb:
9b:4f:bd:64:03:ef:76:83:b7:23:8b:39:34:ea:c5:
f5:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:8B:77:38:AC:4A:55:68:18:73:10:BB:E4:72:15:51:2B:F3:9C:58
X509v3 Authority Key Identifier:
keyid:A7:9B:BA:28:05:A9:88:95:4E:4F:EC:42:57:05:30:F1:6F:9E:70:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:3f:b7:5e:fa:48:41:2f:b9:e4:58:e9:3c:50:36:f0:9c:2b:
2f:df:f4:ed:4a:fa:2a:e1:fa:b6:3c:0a:cb:94:04:ea:7e:3f:
4d:57:02:b5:11:a2:34:c6:ea:23:8a:f4:9a:c3:92:d9:71:57:
ce:ca:65:55:d6:e3:0d:3f:29:9e:29:e2:63:90:ae:ec:65:9f:
32:fb:7e:5e:a4:90:f2:ed:4f:84:dc:f5:dc:36:a6:7a:c8:85:
c3:2f:95:39:77:80:c5:be:da:65:a9:42:5d:e5:c0:71:0b:b1:
a6:a7:0b:17:44:bf:58:b2:9d:40:35:fd:01:a7:3d:cc:47:74:
6b:9f:9b:ad:9b:aa:53:ba:67:d0:9e:06:a8:aa:9e:8b:50:8e:
cc:54:a7:8e:06:ec:31:29:4d:42:e2:4f:6d:be:df:25:99:00:
21:26:2e:86:31:14:9f:f0:8a:8f:39:9a:d6:97:75:76:95:c1:
81:49:f8:42:8c:a9:87:b7:a7:ce:f0:92:a7:6d:f5:4e:23:b8:
74:34:cd:d1:02:14:ad:9a:ac:19:7c:88:ef:b4:dc:1b:e7:84:
7c:a0:1e:84:16:79:10:85:83:50:50:5e:ed:53:f4:92:22:e2:
49:16:39:4a:91:5d:6b:f9:cb:14:37:e9:06:a0:f5:79:f3:7d:
0a:b4:7a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:30:19 2026 by rpki-client