Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft
File: RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft (raw, json)
Hash identifier: B2VaG/zSp6I7s9kv1OAZoY+PBM08QuiOgymMNwSr2U0=
Subject key identifier: EF:21:27:9C:47:3F:97:15:14:1C:63:34:10:35:2D:60:E5:51:02:20
Authority key identifier: 44:AF:4B:76:31:26:80:E9:D4:0A:23:B3:CA:2F:19:AB:F2:F6:C7:3B
Certificate issuer: /CN=44af4b76312680e9d40a23b3ca2f19abf2f6c73b
Certificate serial: 019DCED01D93735F8B92E401AD98607BCC22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft
Manifest number: 18E1
Signing time: Mon 27 Apr 2026 12:00:38 +0000
Manifest this update: Mon 27 Apr 2026 12:00:38 +0000
Manifest next update: Tue 28 Apr 2026 12:00:38 +0000
Files and hashes: 1: GM2WJN9_ezB4uJBKr6KMD-BXxpU.roa (hash: 9qjsgV72QPwQBNdaD4BbTgE2UrBD6jAtMEwROmmWrt4=)
2: RK9LdjEmgOnUCiOzyi8Zq_L2xzs.crl (hash: /T7iknqr710JK9dGFFJptrZr35OLiz0NdlcdSrhagv4=)
3: j3zw_EB9Lg5lv5XhuHzhEXsd4JI.roa (hash: o6TreCVefDSXu+8rGe91JOOHIeWosH7WbE6szGGOzyU=)
4: qi5ZA3URPRKBFcrvMJgvff_lQec.roa (hash: pa4ExeDHOU0ec+F0w6UxxhQnL3A60YOMhjxZLKiRPHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:d0:1d:93:73:5f:8b:92:e4:01:ad:98:60:7b:cc:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44af4b76312680e9d40a23b3ca2f19abf2f6c73b
Validity
Not Before: Apr 27 12:00:38 2026 GMT
Not After : Apr 28 12:00:38 2026 GMT
Subject: CN=ef21279c473f9715141c633410352d60e5510220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:b7:49:ef:43:ea:9b:68:be:3c:ba:20:c5:12:
3b:55:4e:f1:97:8e:69:cf:3e:67:14:d3:2a:50:99:
12:bf:03:c9:6c:b6:0d:07:94:a1:6a:8d:37:c4:e1:
4a:42:2a:38:85:2a:66:88:33:d2:6b:d5:9f:e9:71:
f3:26:a9:33:67:cf:bd:0d:e9:15:39:4f:8b:d6:bf:
b7:bc:6f:55:21:19:cc:86:57:b2:e8:1b:57:03:eb:
17:d3:b9:4a:f1:24:6d:7c:f4:26:51:f2:ff:82:ec:
45:d6:f0:a8:22:5e:f5:53:79:18:f6:1c:7f:1e:bd:
6c:28:19:d7:3f:04:b7:4a:10:b9:8d:4a:43:f5:df:
26:d3:12:1e:51:46:4f:c8:ae:b9:14:c3:81:ee:88:
a3:5f:51:a2:e8:b4:74:e0:9a:93:66:e4:60:d6:cb:
91:19:dd:e9:ab:7a:f5:13:ba:f1:00:8e:ed:1c:a7:
59:60:09:6b:3f:5a:a5:75:de:7b:3a:53:f1:f2:98:
ce:cc:81:2d:16:7d:96:0e:92:d5:f5:4e:0b:f3:a9:
68:32:e1:8a:29:82:2f:97:af:af:74:84:07:98:81:
43:25:a3:81:bc:61:24:2e:05:09:f3:58:60:c0:02:
d6:e4:a7:92:10:ed:a3:91:fa:28:c4:0a:72:72:d7:
e3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:21:27:9C:47:3F:97:15:14:1C:63:34:10:35:2D:60:E5:51:02:20
X509v3 Authority Key Identifier:
keyid:44:AF:4B:76:31:26:80:E9:D4:0A:23:B3:CA:2F:19:AB:F2:F6:C7:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:49:bf:1c:70:9e:b3:d1:2b:d6:b7:1f:cc:20:3b:73:06:d5:
bc:08:85:df:ae:8d:a2:09:f7:77:c6:52:fc:e7:3c:72:a0:6f:
08:6c:0e:6f:e8:8d:77:50:ed:0d:0e:f3:b9:23:86:34:fd:b5:
33:81:4d:21:ad:cc:a1:e5:b5:00:8a:41:41:ea:66:d8:df:9e:
c1:b4:7a:a2:c1:fa:ba:5a:19:fb:17:2b:16:b2:24:a8:9d:a2:
0f:a5:d1:6a:81:26:04:87:65:73:31:97:db:58:2d:f6:ff:00:
a1:14:11:ef:ae:43:b2:ea:11:9f:83:31:3d:ff:44:d4:8a:48:
ec:b7:d9:0b:7c:d6:6e:e7:e0:75:fd:22:83:4e:bb:07:d8:0e:
89:c5:8d:87:0f:d0:36:b6:16:6b:b4:1e:1c:95:81:36:50:8c:
60:8d:98:42:4f:8b:df:24:63:25:54:2f:8f:16:0c:aa:5c:32:
09:29:56:25:f2:ae:94:c1:c0:2a:79:6e:2b:4b:b4:6c:e6:94:
0e:f5:f6:01:17:86:35:c0:b3:a3:68:34:08:23:8d:1f:a0:ec:
95:29:84:be:95:43:16:3e:42:b3:77:4d:dc:ef:0d:86:75:f3:
9f:bf:53:3d:54:25:46:75:53:23:a5:1d:73:9f:32:87:03:10:
04:5e:33:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 13:57:19 2026 by rpki-client