Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.mft
File: IoNxG9erE9o9EfJbtXpPSDwfmaw.mft (raw, json)
Hash identifier: BU5R5j6YnissAqHdrlt5WDGiNP1OjtQ4h5yxhyDcAaM=
Subject key identifier: 7F:35:1D:86:BF:59:20:79:9A:26:4E:E7:8A:3C:11:3C:7D:91:76:43
Authority key identifier: 22:83:71:1B:D7:AB:13:DA:3D:11:F2:5B:B5:7A:4F:48:3C:1F:99:AC
Certificate issuer: /CN=2283711bd7ab13da3d11f25bb57a4f483c1f99ac
Certificate serial: 019D9A3F1D696F41260568CCC290F8DB3068
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IoNxG9erE9o9EfJbtXpPSDwfmaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 07:02:00 +0000
Manifest this update: Fri 17 Apr 2026 07:02:00 +0000
Manifest next update: Sat 18 Apr 2026 07:02:00 +0000
Files and hashes: 1: IoNxG9erE9o9EfJbtXpPSDwfmaw.crl (hash: 78IqyXZoCjwnGZslxuZ5ES+BEtHNbLWPvudEGUsdsHs=)
2: M7U-ppZwsd4Y0hqrg3uFvL3fNF0.roa (hash: V5ZqVNY/FzC23usoRi5oNuuG/BK57r9pMG9x1bcd1BQ=)
3: ZD6ajEH0bv8mrB6nbh6DLa6EVFo.roa (hash: mzlpti+1V/oTEeIRtH/QUHo9IeJTt/iu7YBQ2fE92aA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/IoNxG9erE9o9EfJbtXpPSDwfmaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3f:1d:69:6f:41:26:05:68:cc:c2:90:f8:db:30:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2283711bd7ab13da3d11f25bb57a4f483c1f99ac
Validity
Not Before: Apr 17 07:02:00 2026 GMT
Not After : Apr 18 07:02:00 2026 GMT
Subject: CN=7f351d86bf5920799a264ee78a3c113c7d917643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3d:4f:3d:ef:8d:77:3e:f8:66:db:1f:18:47:
8c:16:ed:1c:1f:70:2b:68:a1:78:8d:47:a0:2d:3a:
b0:97:cd:e9:89:d0:1b:20:39:0f:2d:7c:57:b2:55:
06:5f:15:df:9b:0a:fc:ff:67:33:f4:84:92:58:4d:
c3:2f:65:42:02:91:b5:c5:8a:68:0a:b1:bf:6c:12:
c7:4a:49:5a:39:c6:e1:2a:9e:0f:27:53:4d:09:b6:
c9:5e:ff:1b:a5:2b:3c:e0:b2:9b:b0:3a:d3:31:41:
4e:b6:68:f3:ce:9a:04:8a:8b:f7:f9:b6:3a:43:05:
52:aa:f1:32:37:02:dc:b7:07:51:73:72:9b:91:e5:
39:f9:5e:38:03:73:60:57:7f:e5:90:48:f8:04:44:
7a:ad:9a:e3:d4:42:10:8e:cd:c8:05:77:cd:ee:63:
1c:34:1a:c1:8e:78:3d:65:9f:c2:3b:6c:1d:f7:96:
d5:ad:c9:ee:f2:b9:3f:85:e8:a0:76:0c:cd:92:d5:
5c:82:4e:63:11:6b:61:73:01:5a:07:44:7a:dd:6f:
fe:e6:d5:6d:c4:51:5c:81:f6:64:aa:b3:5b:78:af:
99:ac:28:71:e1:a7:fd:f1:f3:0a:b5:fb:7d:51:68:
c4:8b:c0:51:89:f8:a2:2c:31:ba:21:30:ef:bd:4d:
99:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:35:1D:86:BF:59:20:79:9A:26:4E:E7:8A:3C:11:3C:7D:91:76:43
X509v3 Authority Key Identifier:
keyid:22:83:71:1B:D7:AB:13:DA:3D:11:F2:5B:B5:7A:4F:48:3C:1F:99:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IoNxG9erE9o9EfJbtXpPSDwfmaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:56:77:07:2c:96:87:90:f6:26:94:65:d1:72:ad:a3:17:34:
10:81:90:32:25:8e:57:f7:04:92:35:7f:fc:21:56:c4:47:ad:
6a:2f:59:1a:1c:04:a5:a0:19:8e:06:b0:d3:e2:3c:e0:b0:d7:
98:53:70:ac:e7:e3:95:d6:c3:b1:05:40:2f:c8:e4:b7:11:c9:
c8:86:8c:e1:73:4c:84:0a:28:60:d1:62:af:80:e7:d2:64:7c:
db:a8:82:55:c9:60:94:15:56:28:15:b9:5a:25:89:35:c4:a3:
0d:f2:95:12:b7:5d:3f:aa:5b:2f:62:51:51:a5:42:b7:51:e8:
83:e8:4c:e4:f5:e2:4c:de:c0:35:53:71:d4:75:5c:b3:e6:6d:
b5:30:5b:c8:1c:44:55:73:21:a8:f7:2e:9b:c5:95:f1:38:52:
08:c8:67:d5:8a:47:de:89:2c:4a:22:2c:4d:01:f9:21:68:5e:
c7:70:6a:e0:a8:a6:0e:91:cd:c8:1d:11:88:ef:93:26:ee:66:
bd:63:a9:d4:34:af:0a:c5:1d:71:1e:32:89:d0:f6:51:c2:95:
b2:b6:25:db:f7:88:a5:4c:a8:73:81:1b:12:ab:bf:3d:cd:7f:
27:00:cc:de:0d:b0:d3:67:07:0c:79:b2:56:db:10:13:68:e3:
6b:3f:1b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:01:20 2026 by rpki-client