Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e06d8b-c758-4b93-b9f3-897cb6a430d7/1/iPQfqz5j6vW98HFm31qmgWLq16Y.mft
File: iPQfqz5j6vW98HFm31qmgWLq16Y.mft (raw, json)
Hash identifier: FPIyYsXJETOYxl8xtWAW0lloQEFyDdHY9VETF8SHto4=
Subject key identifier: 86:55:AB:C0:A3:7D:89:DC:BC:4A:5D:66:F8:5E:30:17:2B:F7:E5:3F
Authority key identifier: 88:F4:1F:AB:3E:63:EA:F5:BD:F0:71:66:DF:5A:A6:81:62:EA:D7:A6
Certificate issuer: /CN=88f41fab3e63eaf5bdf07166df5aa68162ead7a6
Certificate serial: 019D9A3E3AACC8DEF591540FF9A445F14863
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPQfqz5j6vW98HFm31qmgWLq16Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e06d8b-c758-4b93-b9f3-897cb6a430d7/1/iPQfqz5j6vW98HFm31qmgWLq16Y.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 07:01:02 +0000
Manifest this update: Fri 17 Apr 2026 07:01:02 +0000
Manifest next update: Sat 18 Apr 2026 07:01:02 +0000
Files and hashes: 1: gjzgYMADmxh6Q8pdc-WWoEw7shc.roa (hash: 0P8JuvcWmnVuYZSLeNadkGvm4K+4XLNVcmqTDBqXszk=)
2: iPQfqz5j6vW98HFm31qmgWLq16Y.crl (hash: /P+SBGhYH0gFgGK1lIQ6UesoeZVvQnwg0mzh1XeE3Ds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/e06d8b-c758-4b93-b9f3-897cb6a430d7/1/iPQfqz5j6vW98HFm31qmgWLq16Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/e06d8b-c758-4b93-b9f3-897cb6a430d7/1/iPQfqz5j6vW98HFm31qmgWLq16Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/iPQfqz5j6vW98HFm31qmgWLq16Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:3a:ac:c8:de:f5:91:54:0f:f9:a4:45:f1:48:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88f41fab3e63eaf5bdf07166df5aa68162ead7a6
Validity
Not Before: Apr 17 07:01:02 2026 GMT
Not After : Apr 18 07:01:02 2026 GMT
Subject: CN=8655abc0a37d89dcbc4a5d66f85e30172bf7e53f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e4:2f:31:a4:fd:c1:c8:9f:33:4b:5b:01:ad:
5f:a7:cc:59:99:cf:2b:c1:4c:5f:01:3e:df:9c:a8:
2a:f9:9b:c1:64:47:67:ea:7a:6b:f3:7a:71:0b:8c:
57:86:8c:85:d3:21:e8:9a:ed:a5:82:20:55:c2:0d:
6e:34:fa:50:13:8d:94:a2:fe:20:d5:27:40:ca:69:
63:79:47:2c:1c:52:c8:ec:e1:51:87:7c:de:92:e9:
a6:39:02:24:fb:76:3f:df:67:7d:4f:90:9d:8b:91:
a2:4c:5c:50:0a:c4:2f:30:ec:24:56:4e:b4:1f:b6:
2c:47:c8:1d:17:e8:84:84:18:57:2b:a7:bd:6b:11:
67:11:27:08:9d:28:6f:e6:77:15:de:74:6a:8b:4d:
58:74:08:fc:89:a6:eb:46:3b:83:a9:b1:f3:f1:4f:
0b:59:91:8d:6e:58:91:27:6f:75:01:8f:33:d7:f0:
7c:0a:84:c3:d7:ef:7b:a4:ab:37:dc:5f:d5:43:9e:
b8:15:b9:7a:bf:84:99:d4:07:06:e0:94:db:56:bd:
34:37:7a:47:f1:c4:67:e9:cc:ea:49:59:2b:1a:55:
dc:cc:53:58:a6:69:34:83:32:75:b9:5c:86:24:eb:
1e:46:a6:cb:a0:61:ee:2c:26:3e:66:0c:fe:91:21:
ef:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:55:AB:C0:A3:7D:89:DC:BC:4A:5D:66:F8:5E:30:17:2B:F7:E5:3F
X509v3 Authority Key Identifier:
keyid:88:F4:1F:AB:3E:63:EA:F5:BD:F0:71:66:DF:5A:A6:81:62:EA:D7:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPQfqz5j6vW98HFm31qmgWLq16Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e06d8b-c758-4b93-b9f3-897cb6a430d7/1/iPQfqz5j6vW98HFm31qmgWLq16Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e06d8b-c758-4b93-b9f3-897cb6a430d7/1/iPQfqz5j6vW98HFm31qmgWLq16Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:4d:1e:59:3c:14:26:84:87:8b:91:1b:df:0b:5f:22:f6:9f:
8f:5d:af:af:71:86:15:06:71:73:8c:0c:72:43:85:58:b0:2f:
51:f3:7a:5a:f9:ed:53:cd:43:0e:76:c9:0f:70:1e:80:ad:c3:
d2:37:cb:8a:60:8c:84:63:ca:72:22:24:71:48:15:e8:98:e1:
54:21:b9:35:97:55:62:03:48:0e:2e:20:7f:34:71:31:30:d8:
a7:94:01:71:4f:be:0a:7e:8d:b3:d2:36:76:bf:8e:65:60:09:
95:f8:bd:a5:a5:0e:3d:2d:c3:45:16:80:6f:2f:bf:33:3c:b1:
86:c9:96:d2:7c:9e:c9:81:93:c7:33:4a:1a:00:d7:ba:7a:ca:
52:4c:5b:02:f6:45:5f:bf:1d:9c:17:87:fe:75:96:7b:3e:5a:
ee:6a:70:3d:a4:7b:fb:4b:67:aa:16:47:b6:0e:69:e6:67:7a:
f7:ca:0c:e4:b2:86:a2:56:11:83:80:85:bc:fb:71:3f:e8:b3:
9e:a5:fb:fe:e0:63:f1:71:09:62:5b:35:3d:fc:91:0f:69:bf:
f8:dc:ae:70:c9:d3:82:f4:af:78:f5:da:d0:2c:dd:59:c5:64:
a7:09:86:46:da:15:af:2a:f1:8e:66:2d:a1:dd:f4:b5:af:1d:
82:da:c4:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPjqsyN71kVQP+aRF8UhjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4ZjQxZmFiM2U2M2VhZjViZGYwNzE2NmRmNWFhNjgxNjJl
YWQ3YTYwHhcNMjYwNDE3MDcwMTAyWhcNMjYwNDE4MDcwMTAyWjAzMTEwLwYDVQQD
Eyg4NjU1YWJjMGEzN2Q4OWRjYmM0YTVkNjZmODVlMzAxNzJiZjdlNTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4eQvMaT9wcifM0tbAa1fp8xZmc8r
wUxfAT7fnKgq+ZvBZEdn6npr83pxC4xXhoyF0yHomu2lgiBVwg1uNPpQE42Uov4g
1SdAymljeUcsHFLI7OFRh3zekummOQIk+3Y/32d9T5Cdi5GiTFxQCsQvMOwkVk60
H7YsR8gdF+iEhBhXK6e9axFnEScInShv5ncV3nRqi01YdAj8iabrRjuDqbHz8U8L
WZGNbliRJ291AY8z1/B8CoTD1+97pKs33F/VQ564Fbl6v4SZ1AcG4JTbVr00N3pH
8cRn6czqSVkrGlXczFNYpmk0gzJ1uVyGJOseRqbLoGHuLCY+Zgz+kSHvrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIZVq8CjfYncvEpdZvheMBcr9+U/MB8GA1UdIwQY
MBaAFIj0H6s+Y+r1vfBxZt9apoFi6temMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVBRZnF6NWo2dlc5OEhGbTMxcW1nV0xxMTZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9lMDZkOGItYzc1OC00YjkzLWI5ZjMt
ODk3Y2I2YTQzMGQ3LzEvaVBRZnF6NWo2dlc5OEhGbTMxcW1nV0xxMTZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9lMDZkOGItYzc1OC00YjkzLWI5ZjMtODk3Y2I2YTQzMGQ3
LzEvaVBRZnF6NWo2dlc5OEhGbTMxcW1nV0xxMTZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP00eWTwU
JoSHi5Eb3wtfIvafj12vr3GGFQZxc4wMckOFWLAvUfN6WvntU81DDnbJD3AegK3D
0jfLimCMhGPKciIkcUgV6JjhVCG5NZdVYgNIDi4gfzRxMTDYp5QBcU++Cn6Ns9I2
dr+OZWAJlfi9paUOPS3DRRaAby+/MzyxhsmW0nyeyYGTxzNKGgDXunrKUkxbAvZF
X78dnBeH/nWWez5a7mpwPaR7+0tnqhZHtg5p5md698oM5LKGolYRg4CFvPtxP+iz
nqX7/uBj8XEJYls1PfyRD2m/+NyucMnTgvSvePXa0CzdWcVkpwmGRtoVryrxjmYt
od30ta8dgtrE9g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:23:52 2026 by rpki-client