Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.mft
File: u41koNwhmWscmeaMyVFpTik-3v4.mft (raw, json)
Hash identifier: HociaWN4aiEMBKIMQXnRaYHxP8UWkIhKXNchCiZsO8Y=
Subject key identifier: 40:86:77:4F:22:77:AB:B4:07:23:C9:52:50:AE:9E:E1:F6:65:C4:BB
Authority key identifier: BB:8D:64:A0:DC:21:99:6B:1C:99:E6:8C:C9:51:69:4E:29:3E:DE:FE
Certificate issuer: /CN=bb8d64a0dc21996b1c99e68cc951694e293edefe
Certificate serial: 019DCF3DE71A1C09D9FBADA6206247074FDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u41koNwhmWscmeaMyVFpTik-3v4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.mft
Manifest number: 18E7
Signing time: Mon 27 Apr 2026 14:00:33 +0000
Manifest this update: Mon 27 Apr 2026 14:00:33 +0000
Manifest next update: Tue 28 Apr 2026 14:00:33 +0000
Files and hashes: 1: 6wCR-IXi-d6mFq9coQKBvKcWKb8.roa (hash: 3CTCR/QkDS3QC7l1TMcETE6DIffI4EDmk47oroP7Oco=)
2: Wve6Gpo7jKUoWkkK-ID2jmyV7c4.roa (hash: 1lWZa+k/0zeWIBYNmCvAje+cs/RGX75v0KzNg1cs52k=)
3: u41koNwhmWscmeaMyVFpTik-3v4.crl (hash: HRICgEu3GarwJGRPg77QL7y3y8i2JiC2wth8ivvszxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.mft
rsync://rpki.ripe.net/repository/DEFAULT/u41koNwhmWscmeaMyVFpTik-3v4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 14:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:3d:e7:1a:1c:09:d9:fb:ad:a6:20:62:47:07:4f:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8d64a0dc21996b1c99e68cc951694e293edefe
Validity
Not Before: Apr 27 14:00:33 2026 GMT
Not After : Apr 28 14:00:33 2026 GMT
Subject: CN=4086774f2277abb40723c95250ae9ee1f665c4bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c0:5b:2e:bf:0c:a0:a3:2f:b6:25:99:9c:dd:
70:81:30:e2:e9:82:33:3e:a1:91:d1:cb:90:0a:76:
f7:eb:16:e3:0f:fe:3d:f1:67:ce:56:40:57:d1:37:
14:1e:ff:d7:f7:4a:b8:61:a5:14:fe:73:a3:79:92:
31:0b:9e:14:d4:50:90:75:c2:3e:d9:4c:54:20:b8:
31:79:36:07:24:97:db:7f:67:63:b5:87:36:2b:b8:
c9:b9:b9:e2:6d:fc:34:01:0f:82:35:2a:c3:94:22:
d2:5d:d7:3a:98:ad:1d:6c:48:69:b3:59:f9:30:39:
b3:f1:b1:ae:04:8e:89:5e:39:e4:fc:18:3e:b3:e2:
04:b6:30:63:ff:bb:1c:86:95:16:6c:8f:0c:62:ab:
84:11:4d:2d:4d:d9:50:c2:cd:cd:74:e7:6f:2d:88:
78:b2:5f:87:90:18:95:9d:a3:40:e8:3a:ba:d9:55:
6f:11:47:ff:4e:14:db:46:bc:6a:fa:59:39:c9:ee:
60:89:cd:af:05:3d:d9:0c:94:49:9b:10:5c:bd:74:
20:19:ac:55:a0:ed:b3:99:a2:4f:f9:a2:ef:b4:0f:
f2:16:db:56:f3:85:20:20:ba:8b:97:c5:b0:46:99:
c1:0b:3d:e7:48:20:f7:54:d4:2d:e1:b4:09:c3:2e:
79:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:86:77:4F:22:77:AB:B4:07:23:C9:52:50:AE:9E:E1:F6:65:C4:BB
X509v3 Authority Key Identifier:
keyid:BB:8D:64:A0:DC:21:99:6B:1C:99:E6:8C:C9:51:69:4E:29:3E:DE:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u41koNwhmWscmeaMyVFpTik-3v4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:fb:48:df:d5:a6:5b:81:37:af:68:12:4e:be:0a:f7:08:dd:
8a:cb:1d:8b:fb:19:e5:2e:51:88:3f:83:6a:97:f4:01:45:ac:
f5:5d:1e:14:19:4b:cb:5b:d6:d8:a8:5e:03:a3:d7:96:e9:3f:
8a:55:44:f9:1b:9e:a3:97:36:02:5a:16:c0:1e:70:54:28:df:
e9:04:b9:51:c4:78:fc:58:31:1c:a0:eb:1c:f5:88:ba:c9:93:
0f:a6:0c:50:7d:cc:30:da:71:78:85:25:1f:8f:03:63:dc:e3:
2b:6f:4e:b2:f1:aa:4e:31:73:98:15:e4:1d:74:c0:17:47:ef:
a6:ed:92:52:9f:b3:36:91:7f:5a:a3:82:ca:cb:2c:18:74:26:
0a:f5:7e:f1:1c:a5:4c:a2:a0:7d:94:de:26:3c:90:8a:c1:70:
35:8c:38:a4:c6:65:d9:39:bb:bf:b2:59:36:19:8f:ec:e0:a5:
32:95:6c:94:a9:f3:f9:d5:54:e9:ee:f2:3a:eb:93:9f:24:8c:
35:e0:16:b4:df:65:f8:a2:25:b3:38:e3:49:b5:89:6b:94:19:
74:0e:58:49:5e:ed:b2:7b:ff:16:1b:08:5a:9f:a8:10:b4:0b:
55:56:0d:f0:aa:96:12:ff:f5:53:33:f7:98:ee:f4:e1:d3:77:
cd:7a:f4:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 23:18:30 2026 by rpki-client