Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.mft
File: I_Hgnw5u2JGtF9bOSjxzKNdZtMg.mft (raw, json)
Hash identifier: 0bIy4MwSPM6RG3tQQ3uaopV3Ltvp53JKnyyt8xKAJM8=
Subject key identifier: 01:00:00:1F:1D:A8:E0:C2:D2:E9:35:F0:8E:84:DC:5E:B5:0A:8D:62
Authority key identifier: 23:F1:E0:9F:0E:6E:D8:91:AD:17:D6:CE:4A:3C:73:28:D7:59:B4:C8
Certificate issuer: /CN=23f1e09f0e6ed891ad17d6ce4a3c7328d759b4c8
Certificate serial: 019D98F4297E13CD421A3A9874AEDE37216C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 01:00:31 +0000
Manifest this update: Fri 17 Apr 2026 01:00:31 +0000
Manifest next update: Sat 18 Apr 2026 01:00:31 +0000
Files and hashes: 1: I_Hgnw5u2JGtF9bOSjxzKNdZtMg.crl (hash: 4txgDYeXbl6rZEYbZepAudU39e55posf6ylnj3Ea8WA=)
2: YH3qouyi9uf0Sjp7erwfbtdqIMY.roa (hash: XATxeFAkfU3QrOitUmq9zj3TBTO+Je2+3q8oJUZcsYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:29:7e:13:cd:42:1a:3a:98:74:ae:de:37:21:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23f1e09f0e6ed891ad17d6ce4a3c7328d759b4c8
Validity
Not Before: Apr 17 01:00:31 2026 GMT
Not After : Apr 18 01:00:31 2026 GMT
Subject: CN=0100001f1da8e0c2d2e935f08e84dc5eb50a8d62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6f:4b:c9:87:cc:87:8c:d6:4b:58:63:ba:dc:
a1:88:a8:6b:7c:b6:eb:89:34:fb:5e:5e:b8:51:e9:
2a:ff:c4:7b:95:14:36:88:0c:d8:0b:7b:ce:35:94:
06:44:3a:79:23:cf:62:94:f6:6a:70:63:8a:9b:c5:
0b:84:bf:09:4b:40:4d:f1:bb:79:3e:36:08:8c:60:
fb:e1:c6:f3:70:67:2d:99:2f:1e:e2:53:85:ce:ad:
ac:8d:4d:07:4c:11:44:10:a1:f1:aa:20:2e:ee:e7:
a0:78:d7:9c:a7:cb:e5:c3:c2:2d:07:4d:db:b9:57:
1b:75:98:58:8d:74:09:ec:40:98:a9:31:6a:06:d7:
19:1d:6d:8e:88:5a:6c:13:39:f2:54:0a:10:3f:0f:
8b:6d:81:e8:bd:79:be:3a:04:17:9c:37:ee:6f:53:
b0:52:8e:ef:25:6d:9e:fc:12:52:7f:0d:6f:b5:81:
fb:49:60:45:63:34:2e:49:0d:7a:69:dc:21:a5:76:
a5:07:17:3f:c8:f2:7d:92:c6:b8:2f:32:93:ef:28:
8e:57:6b:00:ca:ef:a7:07:8b:48:6d:cf:d7:d3:b7:
ba:cd:3f:28:57:11:8a:c4:01:6f:3c:cb:cb:1e:83:
5a:f1:53:86:7e:e2:66:6c:71:88:5a:53:ef:dd:6e:
2c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:00:00:1F:1D:A8:E0:C2:D2:E9:35:F0:8E:84:DC:5E:B5:0A:8D:62
X509v3 Authority Key Identifier:
keyid:23:F1:E0:9F:0E:6E:D8:91:AD:17:D6:CE:4A:3C:73:28:D7:59:B4:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:94:c5:b4:59:00:1e:e3:c3:01:2a:8e:ce:7b:31:ed:af:bb:
67:0b:3d:81:36:2c:0d:be:38:8f:69:5f:dd:0f:d6:fe:24:b6:
a7:2b:9a:f8:9e:0b:40:e1:06:b1:0f:ec:02:f0:bc:28:ef:58:
74:10:58:77:61:62:eb:88:d5:62:05:0e:b9:91:d8:8f:5f:70:
34:2e:d0:95:cd:05:44:65:a6:52:0a:1d:fe:24:f6:40:9d:dd:
47:8f:2f:cf:1d:47:83:74:f0:d3:c5:d8:c5:f2:d6:9f:3c:b6:
20:0f:f7:21:2e:92:30:08:03:0e:54:e2:f2:31:9e:f9:ad:fe:
ff:74:b4:9f:1a:75:63:27:08:bd:77:22:e6:14:22:14:29:00:
93:f5:a9:10:66:6f:81:69:41:02:16:4d:2f:bb:f7:6a:87:a5:
99:a2:e6:06:1f:e7:17:a1:6f:e8:9c:2a:cf:c4:4d:91:b5:74:
85:a2:d0:60:52:6e:e5:ec:92:67:d7:d7:fb:e4:9f:94:c3:9d:
eb:1e:4d:3d:3b:08:5e:ea:3a:23:60:6b:06:8d:58:60:9c:ec:
5d:82:3b:5a:f4:67:c6:ca:27:ef:dc:f4:8c:b1:66:0c:fc:5d:
a3:52:e8:f6:69:a7:9f:c1:05:89:72:51:e5:bd:8f:e4:b1:11:
e8:db:ec:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:35:09 2026 by rpki-client