Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft
File: IcOUybOja2n57l-JNqL1G5XqzrQ.mft (raw, json)
Hash identifier: dfwHo+hLcvgwp3bvED4nUBRQqDOCwu41sCsAHOavy3w=
Subject key identifier: 10:D2:8F:F1:8E:83:51:F3:8F:4E:65:95:D5:15:02:C2:37:82:32:6A
Authority key identifier: 21:C3:94:C9:B3:A3:6B:69:F9:EE:5F:89:36:A2:F5:1B:95:EA:CE:B4
Certificate issuer: /CN=21c394c9b3a36b69f9ee5f8936a2f51b95eaceb4
Certificate serial: 019D9C2C68537FB415A8C4E8CD3EE051F4F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IcOUybOja2n57l-JNqL1G5XqzrQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft
Manifest number: 18C8
Signing time: Fri 17 Apr 2026 16:00:49 +0000
Manifest this update: Fri 17 Apr 2026 16:00:49 +0000
Manifest next update: Sat 18 Apr 2026 16:00:49 +0000
Files and hashes: 1: 2vB0H2qYyz6SI0m9_Uc6vD9cNDE.roa (hash: nA5TN8D8VR57ajti92sbOf79Vloshs+N1jBn946xsJk=)
2: IcOUybOja2n57l-JNqL1G5XqzrQ.crl (hash: fsQyxTbMQtQzc5vR6ytns6vIaUIDK9ZHQdsEcCEkByw=)
3: O_6FFbhc4JZemzwdUopF30jTO70.roa (hash: YpXPwTYN0lUePsEcimr/XTryk56n06KBrcCoSPFO4DM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IcOUybOja2n57l-JNqL1G5XqzrQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2c:68:53:7f:b4:15:a8:c4:e8:cd:3e:e0:51:f4:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21c394c9b3a36b69f9ee5f8936a2f51b95eaceb4
Validity
Not Before: Apr 17 16:00:49 2026 GMT
Not After : Apr 18 16:00:49 2026 GMT
Subject: CN=10d28ff18e8351f38f4e6595d51502c23782326a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:20:9f:49:ef:cd:44:f7:06:d0:d7:57:75:ba:
5c:44:0c:63:5f:1c:5b:02:cd:b2:95:49:ad:aa:32:
17:3d:39:c5:07:de:34:98:40:cf:65:c7:50:a4:a6:
7b:cd:25:88:9c:5a:bb:19:d3:97:05:d4:a9:fe:10:
22:de:5f:c1:90:d4:da:14:7a:7b:bb:16:09:13:99:
3f:87:61:26:5a:ea:30:37:cb:64:4d:04:58:80:56:
dd:5e:66:f0:88:6b:f7:03:f3:cd:fb:2d:f8:07:2f:
c8:d7:ab:1c:35:23:0f:40:75:50:2c:fc:6a:9d:a9:
c7:57:48:f4:b0:1d:e5:fa:a2:0b:c6:0e:68:9c:b9:
d8:85:75:16:6c:94:12:13:ea:08:3f:44:d6:3b:b5:
75:74:10:6f:2b:01:6c:31:67:26:32:6b:d3:e6:5c:
09:1c:ef:ff:9e:a1:a4:cd:f5:59:f9:21:89:62:60:
cc:5c:f2:4e:11:dd:7a:8e:6e:f6:5e:47:96:f2:83:
22:89:27:89:7c:7a:48:b9:1c:b2:d0:0c:a1:4a:9a:
ba:dc:b9:10:26:f1:cb:98:86:08:37:90:1c:84:06:
10:44:9a:36:e2:b7:c5:a8:2b:86:fd:35:a8:b1:0c:
8d:be:18:ac:5d:59:23:cc:4c:36:eb:e7:8c:b2:fe:
a0:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:D2:8F:F1:8E:83:51:F3:8F:4E:65:95:D5:15:02:C2:37:82:32:6A
X509v3 Authority Key Identifier:
keyid:21:C3:94:C9:B3:A3:6B:69:F9:EE:5F:89:36:A2:F5:1B:95:EA:CE:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IcOUybOja2n57l-JNqL1G5XqzrQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:c9:ab:a1:d0:f4:c1:d3:bc:01:e1:5c:05:21:7d:3e:c0:67:
0f:df:eb:e0:a4:1d:45:c4:35:b8:24:8c:54:99:5d:06:cb:57:
5b:9b:e2:4a:86:ea:2e:e4:0a:37:db:76:da:81:25:65:1e:6d:
12:41:b6:2a:d0:56:9b:47:b3:ff:a2:87:48:1f:5b:c1:84:29:
31:7a:e6:5e:41:07:1d:a2:81:83:36:e0:7d:67:90:8c:ee:9f:
0a:0e:fd:66:8e:ca:ed:73:69:e8:6f:28:23:f6:34:d1:e0:fc:
a3:b1:79:c0:e3:7f:ff:9e:99:23:a3:18:99:ee:31:11:a6:b8:
5c:1d:45:af:dc:99:29:0a:a4:a0:81:62:e9:b8:74:5c:7b:1a:
66:bb:b7:fa:9b:fb:7d:64:a6:c7:b5:8a:b4:3b:65:7b:fa:b2:
82:64:54:95:a4:49:12:62:12:d1:13:09:4c:e1:c6:39:a1:73:
48:92:d1:66:f2:c5:c2:78:1c:59:8a:46:21:0e:99:6b:e0:af:
6d:bf:ee:0b:c6:ff:da:ca:77:02:f0:b8:bd:49:81:e3:5b:02:
53:45:f7:46:c7:54:3b:50:b0:58:61:ed:73:cc:81:79:d7:f7:
7b:30:b1:be:8e:df:a6:b1:ab:77:a6:df:c8:00:f8:da:a6:67:
18:e5:81:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:36:15 2026 by rpki-client