Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/18022c-2d9d-4380-a15b-96a601bb6ba8/1/io-pkrwKYdssvnhuHFnTYMzlRIY.mft
File: io-pkrwKYdssvnhuHFnTYMzlRIY.mft (raw, json)
Hash identifier: w8h5Qfn1RWdGceD3Yu2/pKVrOXGM1IS6BYvFsCGYM30=
Subject key identifier: DE:04:11:5D:97:F3:83:CD:43:0E:68:CA:D3:33:87:29:7D:50:C9:D1
Authority key identifier: 8A:8F:A9:92:BC:0A:61:DB:2C:BE:78:6E:1C:59:D3:60:CC:E5:44:86
Certificate issuer: /CN=8a8fa992bc0a61db2cbe786e1c59d360cce54486
Certificate serial: 019D9A3EBE077FEA63E6DCF1896D066CEB3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/io-pkrwKYdssvnhuHFnTYMzlRIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/18022c-2d9d-4380-a15b-96a601bb6ba8/1/io-pkrwKYdssvnhuHFnTYMzlRIY.mft
Manifest number: 0A18
Signing time: Fri 17 Apr 2026 07:01:36 +0000
Manifest this update: Fri 17 Apr 2026 07:01:36 +0000
Manifest next update: Sat 18 Apr 2026 07:01:36 +0000
Files and hashes: 1: CoFj8wqKTvU7pOYnL2WgDpvdELY.roa (hash: SwwUsyZHkvE2PDZCEhOVTo7T7TrLwZ2CcQ1+6tgDIC0=)
2: io-pkrwKYdssvnhuHFnTYMzlRIY.crl (hash: oG865lLtJV5vobQkKj16eiQVIckvJcu3nDkLu1rV2ac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/18022c-2d9d-4380-a15b-96a601bb6ba8/1/io-pkrwKYdssvnhuHFnTYMzlRIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/18022c-2d9d-4380-a15b-96a601bb6ba8/1/io-pkrwKYdssvnhuHFnTYMzlRIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/io-pkrwKYdssvnhuHFnTYMzlRIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:be:07:7f:ea:63:e6:dc:f1:89:6d:06:6c:eb:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a8fa992bc0a61db2cbe786e1c59d360cce54486
Validity
Not Before: Apr 17 07:01:36 2026 GMT
Not After : Apr 18 07:01:36 2026 GMT
Subject: CN=de04115d97f383cd430e68cad33387297d50c9d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:b2:82:4a:e5:0f:6d:31:79:1d:6c:0e:43:29:
3b:2c:d0:60:e7:18:d2:eb:0f:0a:da:20:38:a3:76:
8b:48:fe:57:e6:fc:dd:f7:6e:51:02:8a:65:0f:7a:
d1:d9:f1:b7:dc:d8:75:78:71:ef:0b:41:09:90:3c:
e5:b0:7c:15:69:b8:1c:f5:9c:81:e3:1f:94:5c:1a:
82:59:5b:22:9d:ae:8d:2f:39:44:a0:33:d5:f5:a4:
c6:ef:16:0d:94:2c:72:a8:ba:30:dd:3d:4d:2a:5b:
38:e8:5d:6c:81:bd:19:60:86:e1:5f:b2:77:f4:74:
71:cc:82:3f:b5:fd:7b:d4:85:5d:99:aa:5a:55:81:
a4:ba:0b:06:59:79:c0:55:73:55:58:5c:8e:7f:ec:
be:7d:98:7e:84:e9:ed:92:af:ad:5b:87:ce:16:b0:
7a:90:e7:1b:86:11:ed:1a:4c:a6:46:7c:f4:82:90:
de:64:05:67:40:45:c9:b2:b4:a8:3d:6a:50:3a:04:
bd:ca:51:e5:80:14:d2:e3:d7:bd:7e:57:63:71:5f:
83:9a:24:1c:18:8d:7c:ac:9a:0b:3c:1c:70:a8:b5:
d4:94:d1:50:60:c6:a4:e8:31:e7:40:2b:5b:e7:7e:
d5:53:e2:f6:85:61:11:03:98:54:3e:3a:93:70:38:
2b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:04:11:5D:97:F3:83:CD:43:0E:68:CA:D3:33:87:29:7D:50:C9:D1
X509v3 Authority Key Identifier:
keyid:8A:8F:A9:92:BC:0A:61:DB:2C:BE:78:6E:1C:59:D3:60:CC:E5:44:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/io-pkrwKYdssvnhuHFnTYMzlRIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/18022c-2d9d-4380-a15b-96a601bb6ba8/1/io-pkrwKYdssvnhuHFnTYMzlRIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/18022c-2d9d-4380-a15b-96a601bb6ba8/1/io-pkrwKYdssvnhuHFnTYMzlRIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:8b:a2:94:36:8f:1b:99:b9:a3:16:4f:5b:bf:eb:0c:95:a8:
49:cd:90:b1:9c:1d:d2:b9:9f:2c:94:6f:96:4f:5d:33:85:ce:
6c:f3:9d:8f:b7:68:e6:58:c4:c6:96:3d:95:92:5a:39:84:01:
50:81:4c:93:3b:6a:08:b7:08:08:74:ca:cb:5c:f8:d6:54:35:
3d:f4:22:79:77:9c:aa:93:5d:83:33:cb:f0:f4:4b:85:05:75:
e9:4c:82:b9:e5:f7:2c:05:a9:00:2d:10:3d:27:0e:06:21:26:
fb:30:37:0a:4f:75:e0:99:26:32:cf:1e:67:ef:71:d4:76:28:
4f:f4:4a:19:e2:f4:db:2d:90:6d:05:69:30:b0:5b:d5:ac:f4:
3c:09:19:ee:27:7b:ac:a4:a8:c8:56:eb:a0:88:87:cc:88:33:
a8:dd:16:c3:05:4e:1c:2f:2a:3b:8b:2e:02:8c:86:dc:f1:98:
b1:48:9d:da:a4:12:18:d4:66:70:68:93:f6:91:0e:b7:3a:77:
f6:8c:ac:66:a7:24:43:60:74:ca:6b:54:22:56:b0:51:5c:3e:
c7:a4:66:eb:00:b9:cd:de:34:77:b6:c5:ac:9c:98:10:77:5e:
60:ba:c0:b0:99:2b:3a:9b:84:63:ef:4e:78:20:ba:6f:e3:48:
cf:d8:88:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPr4Hf+pj5tzxiW0GbOs+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhOGZhOTkyYmMwYTYxZGIyY2JlNzg2ZTFjNTlkMzYwY2Nl
NTQ0ODYwHhcNMjYwNDE3MDcwMTM2WhcNMjYwNDE4MDcwMTM2WjAzMTEwLwYDVQQD
EyhkZTA0MTE1ZDk3ZjM4M2NkNDMwZTY4Y2FkMzMzODcyOTdkNTBjOWQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5LKCSuUPbTF5HWwOQyk7LNBg5xjS
6w8K2iA4o3aLSP5X5vzd925RAoplD3rR2fG33Nh1eHHvC0EJkDzlsHwVabgc9ZyB
4x+UXBqCWVsina6NLzlEoDPV9aTG7xYNlCxyqLow3T1NKls46F1sgb0ZYIbhX7J3
9HRxzII/tf171IVdmapaVYGkugsGWXnAVXNVWFyOf+y+fZh+hOntkq+tW4fOFrB6
kOcbhhHtGkymRnz0gpDeZAVnQEXJsrSoPWpQOgS9ylHlgBTS49e9fldjcV+DmiQc
GI18rJoLPBxwqLXUlNFQYMak6DHnQCtb537VU+L2hWERA5hUPjqTcDgrHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN4EEV2X84PNQw5oytMzhyl9UMnRMB8GA1UdIwQY
MBaAFIqPqZK8CmHbLL54bhxZ02DM5USGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaW8tcGtyd0tZZHNzdm5odUhGblRZTXpsUklZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8xODAyMmMtMmQ5ZC00MzgwLWExNWIt
OTZhNjAxYmI2YmE4LzEvaW8tcGtyd0tZZHNzdm5odUhGblRZTXpsUklZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS8xODAyMmMtMmQ5ZC00MzgwLWExNWItOTZhNjAxYmI2YmE4
LzEvaW8tcGtyd0tZZHNzdm5odUhGblRZTXpsUklZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgIuilDaP
G5m5oxZPW7/rDJWoSc2QsZwd0rmfLJRvlk9dM4XObPOdj7do5ljExpY9lZJaOYQB
UIFMkztqCLcICHTKy1z41lQ1PfQieXecqpNdgzPL8PRLhQV16UyCueX3LAWpAC0Q
PScOBiEm+zA3Ck914JkmMs8eZ+9x1HYoT/RKGeL02y2QbQVpMLBb1az0PAkZ7id7
rKSoyFbroIiHzIgzqN0WwwVOHC8qO4suAoyG3PGYsUid2qQSGNRmcGiT9pEOtzp3
9oysZqckQ2B0ymtUIlawUVw+x6Rm6wC5zd40d7bFrJyYEHdeYLrAsJkrOpuEY+9O
eCC6b+NIz9iIbQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:00:49 2026 by rpki-client