Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.mft
File: iRaqpdJS_ZAUX-2saDdi1uIHQVU.mft (raw, json)
Hash identifier: IxnKpW7/Z0dts63OIL6KHQ2NvC6yYv+WJIHn3P/8u6A=
Subject key identifier: CA:D9:8C:CD:A7:C5:3B:4F:D7:3F:77:70:7F:A6:0A:7A:EE:F3:1A:EA
Authority key identifier: 89:16:AA:A5:D2:52:FD:90:14:5F:ED:AC:68:37:62:D6:E2:07:41:55
Certificate issuer: /CN=8916aaa5d252fd90145fedac683762d6e2074155
Certificate serial: 019D999956E4C7B33A434CCAD3089C239E94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iRaqpdJS_ZAUX-2saDdi1uIHQVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 04:00:56 +0000
Manifest this update: Fri 17 Apr 2026 04:00:56 +0000
Manifest next update: Sat 18 Apr 2026 04:00:56 +0000
Files and hashes: 1: FjK0gZzIRFGA1r0HMqyZjh1eSaU.roa (hash: 5jTPa/LgCeRZQvqoHjBqfoQDZ2FKgfEuFxlRAqDizkI=)
2: iRaqpdJS_ZAUX-2saDdi1uIHQVU.crl (hash: MCGur7WBHQuPOnsDGvhpBi9vL7uhHRniN0XCqzNVx0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iRaqpdJS_ZAUX-2saDdi1uIHQVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:56:e4:c7:b3:3a:43:4c:ca:d3:08:9c:23:9e:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8916aaa5d252fd90145fedac683762d6e2074155
Validity
Not Before: Apr 17 04:00:56 2026 GMT
Not After : Apr 18 04:00:56 2026 GMT
Subject: CN=cad98ccda7c53b4fd73f77707fa60a7aeef31aea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5d:d1:9e:3b:bd:a5:f6:d1:d5:02:fa:a2:c3:
12:02:d3:21:82:3e:8c:cb:b7:15:93:6c:a3:2e:f0:
0b:eb:83:ee:dd:d1:6d:08:7c:72:09:28:66:76:8e:
e5:ec:68:6c:83:60:1f:c3:ac:fa:db:a6:1d:2c:17:
14:df:6c:f1:ff:b7:e1:15:f1:65:4b:9b:ea:9a:2d:
4d:da:11:2d:a4:8b:7c:42:8b:55:6f:eb:5a:0e:1c:
70:55:23:6f:df:31:15:bc:5f:2c:e7:52:f7:48:a2:
73:f9:44:c3:98:b2:9d:87:85:e9:45:27:1f:a0:37:
99:81:f0:d4:7d:7f:9e:9d:7b:61:81:a0:df:57:62:
d1:c9:b9:19:be:6d:e6:9d:ce:e9:c3:01:cc:77:f2:
ce:bc:1c:77:3d:e0:e2:ef:af:e8:1d:89:3b:27:0d:
11:b7:75:42:63:82:8c:23:da:5b:12:44:61:be:85:
de:bf:ed:11:69:93:2b:6e:c3:ad:8a:05:df:b5:d1:
7e:85:2a:5a:0c:6d:84:36:fb:72:90:c3:e4:61:34:
da:a4:b7:07:05:92:c9:bf:a5:e8:d0:3d:7c:11:f9:
fa:14:a1:7e:db:01:65:5a:60:28:a8:d0:53:3f:89:
08:31:8f:39:36:1d:19:42:9d:56:3b:ca:b7:9c:51:
dd:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:D9:8C:CD:A7:C5:3B:4F:D7:3F:77:70:7F:A6:0A:7A:EE:F3:1A:EA
X509v3 Authority Key Identifier:
keyid:89:16:AA:A5:D2:52:FD:90:14:5F:ED:AC:68:37:62:D6:E2:07:41:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iRaqpdJS_ZAUX-2saDdi1uIHQVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:4b:d8:76:2f:0f:35:0a:07:94:2f:c4:1d:1c:95:0d:c8:9a:
4a:7c:50:ad:22:35:08:d3:62:92:04:66:5b:dd:b3:0f:d1:5c:
d5:9b:7b:7f:0d:ea:1f:26:3e:df:71:9d:8d:e0:66:18:76:a9:
f1:61:4f:09:74:1f:c3:94:36:13:76:84:56:c6:19:82:9f:f9:
14:f8:a0:db:ad:6a:f4:5c:90:50:47:1e:4d:c2:45:90:ee:b6:
1d:5c:da:f4:d7:47:8d:e9:84:e7:97:62:00:6a:cb:1c:3c:99:
b5:01:f6:69:75:a4:50:d4:38:3b:33:05:52:81:ff:a9:57:55:
a4:ff:b2:8d:81:8a:9b:ed:b0:b1:60:81:21:7b:d1:2a:8b:d6:
ed:3e:ae:82:98:8e:f3:fb:10:69:f1:fd:d4:18:93:99:44:4b:
3d:44:fa:7f:88:4f:d9:97:47:6b:9d:c2:f2:66:46:80:56:ac:
2a:0b:56:61:8e:19:6c:2d:18:0f:a1:f5:b0:2f:bc:f7:34:5c:
c1:c1:97:a0:63:16:9d:f6:7a:0c:20:85:b4:c0:da:0d:74:6a:
2a:16:7e:6b:41:ba:04:a9:3e:87:d2:ed:63:d5:ba:d4:ba:e1:
00:31:07:6a:01:5b:6c:b1:09:0c:66:f0:7e:92:2d:1d:f2:bc:
57:80:7b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:03:45 2026 by rpki-client