Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.mft
File: rSzwPkTaKLcxnqe3tbEQubjLenA.mft (raw, json)
Hash identifier: N8C7f5CR/MQD5YTt4aKr+/NaBi5nXRCQwRdyqpzH3Uc=
Subject key identifier: 98:63:8C:9F:85:DC:96:FF:75:49:3B:9D:BB:2C:D3:AD:59:A6:97:00
Authority key identifier: AD:2C:F0:3E:44:DA:28:B7:31:9E:A7:B7:B5:B1:10:B9:B8:CB:7A:70
Certificate issuer: /CN=ad2cf03e44da28b7319ea7b7b5b110b9b8cb7a70
Certificate serial: 019DCD1944DF36B426F3A15DC6CAE43BCBEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSzwPkTaKLcxnqe3tbEQubjLenA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.mft
Manifest number: 18E1
Signing time: Mon 27 Apr 2026 04:01:18 +0000
Manifest this update: Mon 27 Apr 2026 04:01:18 +0000
Manifest next update: Tue 28 Apr 2026 04:01:18 +0000
Files and hashes: 1: X50-n9cVU2Zq24SDbQ05Dv_q5v0.roa (hash: S7zmoSUIsI4P7LLg9xapiyTzbeO1NkyzmEJQWzWpHOE=)
2: rSzwPkTaKLcxnqe3tbEQubjLenA.crl (hash: ZE+YtgU1I8QMfKSeV74NQF7/Y60C9seG6WIYo8ijvaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rSzwPkTaKLcxnqe3tbEQubjLenA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 04:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:19:44:df:36:b4:26:f3:a1:5d:c6:ca:e4:3b:cb:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad2cf03e44da28b7319ea7b7b5b110b9b8cb7a70
Validity
Not Before: Apr 27 04:01:18 2026 GMT
Not After : Apr 28 04:01:18 2026 GMT
Subject: CN=98638c9f85dc96ff75493b9dbb2cd3ad59a69700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:db:51:61:61:d1:ea:ac:7f:d0:43:74:98:1c:
90:f2:1b:5e:b0:ef:d6:a2:04:51:9e:ea:39:89:dd:
e6:33:59:5e:99:1c:73:c5:d2:62:ae:ac:f4:73:5a:
3b:cb:fa:ad:3d:a3:fd:24:b5:e7:5d:c2:69:b1:b3:
5a:90:d9:4d:65:9f:0b:75:e7:d6:f0:0c:1b:d3:31:
72:80:39:20:65:8d:a5:04:5a:8e:5f:82:c8:76:f0:
08:9d:f1:8a:1a:c7:72:e6:a5:76:f6:bc:10:68:fa:
cb:30:6e:77:37:90:f7:7f:ca:cc:37:a6:fd:74:dc:
e9:8d:f3:64:83:a1:36:2d:0a:0a:cd:89:db:2f:5f:
50:1d:93:0c:fb:79:63:e8:ba:3e:6b:a5:0f:2f:54:
dd:6e:24:2c:a5:43:bc:c5:46:f9:3e:68:20:27:75:
a7:1f:7b:eb:1b:8a:6e:96:ff:7c:b1:27:34:7d:a0:
5b:b2:60:91:7c:c6:36:47:2b:b5:de:32:6c:d5:f1:
71:31:8e:74:90:3a:ed:ef:2a:97:29:d3:e0:59:29:
61:90:87:6e:41:0b:22:f1:fa:e2:45:e8:ac:ae:1c:
25:02:5d:92:24:19:34:26:fa:e6:2b:41:ed:e1:f9:
46:77:36:4c:ed:4e:cd:60:c7:df:1c:fa:ae:7d:4d:
6a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:63:8C:9F:85:DC:96:FF:75:49:3B:9D:BB:2C:D3:AD:59:A6:97:00
X509v3 Authority Key Identifier:
keyid:AD:2C:F0:3E:44:DA:28:B7:31:9E:A7:B7:B5:B1:10:B9:B8:CB:7A:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSzwPkTaKLcxnqe3tbEQubjLenA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:b9:6b:57:13:38:fc:cc:23:8c:7a:e5:67:ac:68:be:a5:fe:
98:5b:f4:22:26:94:3c:07:72:d2:20:c9:59:05:2d:7f:c7:7e:
19:ec:df:7c:b1:a4:80:a9:6c:6b:c5:0b:34:66:cb:69:cb:9a:
69:05:59:14:e8:0e:b5:cf:c4:f8:31:86:34:e0:34:75:92:5c:
6c:eb:a5:c7:6a:51:01:8f:db:a8:b4:10:9d:fa:37:7a:5b:88:
dc:b6:ce:ab:86:85:f7:07:47:28:9a:07:fd:8f:6f:bd:17:16:
83:4d:d9:5c:13:ad:bc:51:7b:27:c1:cc:d2:dd:bd:e2:de:b7:
c0:44:32:5e:2f:be:c9:ea:18:0f:f0:12:f9:a4:c5:96:ba:07:
88:5a:c4:2d:5d:db:c3:71:b7:f6:95:04:54:49:d9:52:fe:59:
3d:80:4f:2d:a1:ed:66:26:e5:85:94:45:05:0a:9a:57:29:82:
25:59:dc:6a:8a:37:8a:7f:45:97:44:c6:fd:d3:78:f4:5e:c3:
c4:14:7d:51:8f:3d:74:b3:35:37:01:a7:e9:b4:c8:15:28:de:
bd:3b:07:bd:fc:1c:92:c5:18:90:2c:93:30:cc:2f:f5:0a:f9:
a3:fc:7f:ac:a3:16:e9:78:e1:9d:57:f3:b4:6d:c5:9f:5c:b2:
fa:0d:14:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 10:46:10 2026 by rpki-client