Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.mft
File: cHjnVjWgncwD9iWoC_pVKyLjZiw.mft (raw, json)
Hash identifier: A2duOHZe+MV8k3xazlUaBP9ZgBef51Xh3Tq7E599fZk=
Subject key identifier: 4D:67:21:8E:5A:B1:6E:4B:13:E6:F0:84:28:AF:EE:F1:4A:1C:E2:77
Authority key identifier: 70:78:E7:56:35:A0:9D:CC:03:F6:25:A8:0B:FA:55:2B:22:E3:66:2C
Certificate issuer: /CN=7078e75635a09dcc03f625a80bfa552b22e3662c
Certificate serial: 019DCD4F885FA5D72DB881C2D1F709D0DEB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cHjnVjWgncwD9iWoC_pVKyLjZiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.mft
Manifest number: 0D1B
Signing time: Mon 27 Apr 2026 05:00:34 +0000
Manifest this update: Mon 27 Apr 2026 05:00:34 +0000
Manifest next update: Tue 28 Apr 2026 05:00:34 +0000
Files and hashes: 1: SP1oOwp0hXl1L0PpjGJ2uhrOHbQ.roa (hash: VQoqVeb1sfiFZgtcNVlhBYDN5Dw/Su2w/ppnhIR9KAU=)
2: cHjnVjWgncwD9iWoC_pVKyLjZiw.crl (hash: ykqlq9CbZirnolYI1m0eInMQzpICrFhWD5LtKGYH73g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cHjnVjWgncwD9iWoC_pVKyLjZiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:4f:88:5f:a5:d7:2d:b8:81:c2:d1:f7:09:d0:de:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7078e75635a09dcc03f625a80bfa552b22e3662c
Validity
Not Before: Apr 27 05:00:34 2026 GMT
Not After : Apr 28 05:00:34 2026 GMT
Subject: CN=4d67218e5ab16e4b13e6f08428afeef14a1ce277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6e:c8:bd:53:5a:4a:99:6f:2e:13:c8:e2:ad:
ca:a9:23:0c:ac:8e:9f:f7:f8:cb:fa:1c:d7:c8:49:
6f:e2:7b:59:8f:4b:e1:90:0f:fc:2b:5c:45:db:3b:
60:35:8b:6e:77:07:cc:bf:cc:d0:21:50:57:61:2b:
5f:cf:09:a4:b1:52:fc:d1:ae:6b:09:06:f8:ba:69:
b0:51:7c:72:47:08:be:49:85:c0:a1:f3:df:4a:57:
68:3e:62:be:61:7a:41:5f:fb:e3:d4:9d:81:9a:43:
bf:11:18:af:72:0f:ac:bd:41:26:c7:0e:c4:2a:95:
3f:66:c7:d4:cd:1e:86:39:bd:59:1d:d5:8b:10:03:
98:ab:1b:2c:2b:12:2a:b7:5b:e9:b3:fe:74:ad:fc:
55:3a:8e:03:f2:5e:0e:dc:85:2b:f8:0c:ca:71:d9:
63:65:9b:1b:33:81:5a:c1:fe:5a:8d:a8:13:5a:b2:
3b:b5:c7:ba:7b:50:b1:1f:78:d2:ae:41:9e:14:4c:
ba:3e:ff:bb:cd:39:ae:f9:e6:6c:b1:f1:9a:7e:48:
e6:80:da:c4:5e:da:f0:57:1a:35:81:f2:e8:dd:c4:
16:a5:28:a7:72:82:a0:3f:39:88:cd:4e:a4:ac:6f:
c0:ec:98:ca:6a:cb:50:4d:d5:98:b2:81:7b:ab:02:
20:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:67:21:8E:5A:B1:6E:4B:13:E6:F0:84:28:AF:EE:F1:4A:1C:E2:77
X509v3 Authority Key Identifier:
keyid:70:78:E7:56:35:A0:9D:CC:03:F6:25:A8:0B:FA:55:2B:22:E3:66:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cHjnVjWgncwD9iWoC_pVKyLjZiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:12:fd:4d:95:63:1b:3e:ff:58:30:88:a6:be:4e:19:64:7e:
d9:dc:2a:96:fe:0f:0f:d9:51:07:39:e0:e9:31:6a:92:0a:39:
8b:be:74:51:de:ee:5c:f9:9d:75:4f:94:99:66:24:ec:89:4c:
2c:7e:e5:1b:7a:8a:20:81:26:17:34:02:be:ac:c1:3c:13:fb:
d4:f2:47:6f:10:20:12:5d:a2:d6:6e:b1:39:83:0f:5a:5c:2a:
e0:e8:7a:c2:96:f2:56:11:05:28:87:48:d4:28:f8:e3:ca:f0:
91:ec:28:47:23:f4:65:8a:8a:e1:7a:f1:71:30:ac:1a:2e:80:
39:39:3a:f5:41:4b:58:fe:6a:ce:6e:3a:83:77:6c:91:3f:38:
12:89:00:d5:78:a4:1b:67:98:f1:27:94:7a:c5:cb:70:67:ab:
c0:f0:41:6e:54:1d:24:ab:26:ef:ca:02:d8:2c:b7:99:7e:7e:
5c:dc:31:1f:8f:59:12:6e:7e:bf:b5:c6:ed:95:5f:88:88:2e:
81:6e:69:77:62:8c:80:00:af:4b:30:e7:fd:e6:7b:98:95:c5:
6d:74:0b:6b:6c:cc:bc:b8:7d:c4:cf:c9:00:29:99:50:d1:8b:
38:7c:19:fe:92:e1:79:25:53:c2:91:b1:51:7f:ed:2b:46:cb:
35:4f:e0:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 10:45:50 2026 by rpki-client