Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft
File: I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft (raw, json)
Hash identifier: 6FPeh46OpFRRHVNIEO2ZqOfh/822M257EncNbLadGx8=
Subject key identifier: 12:55:33:BD:15:F1:17:F1:42:9A:7C:F1:E0:2E:04:93:31:49:17:1E
Authority key identifier: 23:88:57:66:0D:C7:FA:60:84:6F:76:5B:94:CB:69:57:62:55:AD:B6
Certificate issuer: /CN=238857660dc7fa60846f765b94cb69576255adb6
Certificate serial: 019D98BD67DF947F826B6D0AD63DA756A07C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I4hXZg3H-mCEb3ZblMtpV2JVrbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 00:00:42 +0000
Manifest this update: Fri 17 Apr 2026 00:00:42 +0000
Manifest next update: Sat 18 Apr 2026 00:00:42 +0000
Files and hashes: 1: I4hXZg3H-mCEb3ZblMtpV2JVrbY.crl (hash: bURhxfXWJIbrkJRllxX7Rk2TKCCd8n1Ax+54/jZe4gc=)
2: hc6aXK62WoI8LVWQXzH6eABWVV4.roa (hash: VubjcNf1CkPqEAAAxHPS2Rw1XmdvlVTyVEabkLIibOU=)
3: j_dlNBpw9nrxphVhyhTmP13d1VY.roa (hash: b2h18Cq9Or7dr/VEm7f4JBC1yManVn4ntGbbM1+L8w8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/I4hXZg3H-mCEb3ZblMtpV2JVrbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:67:df:94:7f:82:6b:6d:0a:d6:3d:a7:56:a0:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=238857660dc7fa60846f765b94cb69576255adb6
Validity
Not Before: Apr 17 00:00:42 2026 GMT
Not After : Apr 18 00:00:42 2026 GMT
Subject: CN=125533bd15f117f1429a7cf1e02e04933149171e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:b9:d4:c3:8b:07:80:cf:2d:e7:aa:30:53:aa:
32:f2:f3:32:d8:51:6c:86:62:72:f2:93:18:0f:bc:
d0:ad:1f:54:e4:93:02:2d:11:9a:64:c8:e0:31:3a:
a9:98:74:8b:77:f2:49:05:be:57:0d:99:bc:30:4d:
6e:6a:8a:1d:ef:26:22:c2:86:9f:cb:e5:1a:6b:5e:
58:f9:58:ef:75:75:53:b8:a1:fa:23:f3:9e:5a:ec:
b3:35:c0:cf:62:86:63:10:a3:f4:31:e6:72:00:40:
ce:68:6a:1a:f9:9d:bf:6b:6f:5b:99:9c:67:09:0b:
e2:06:bd:8e:53:22:23:fe:76:42:b5:f3:1f:a1:e6:
54:5e:ed:0c:8b:fe:82:08:78:99:2e:ee:99:71:5e:
1d:d1:f7:ef:d0:b5:9e:99:ec:5a:2f:ec:8f:8f:b1:
77:16:25:dc:5e:89:f1:1a:4f:6d:06:e5:45:fa:03:
fd:76:57:58:f3:bb:0f:47:2e:25:71:b3:4e:d3:35:
6e:b3:8b:d3:36:b6:71:b8:0d:2a:21:08:4d:1a:25:
fb:df:7c:3c:08:b0:5e:85:09:11:d2:f1:82:36:41:
a0:0c:39:7b:0b:66:62:ad:2c:b6:15:7d:e0:33:df:
16:52:e9:b9:12:64:bc:fe:48:d7:f0:b9:f5:e0:9d:
a4:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:55:33:BD:15:F1:17:F1:42:9A:7C:F1:E0:2E:04:93:31:49:17:1E
X509v3 Authority Key Identifier:
keyid:23:88:57:66:0D:C7:FA:60:84:6F:76:5B:94:CB:69:57:62:55:AD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I4hXZg3H-mCEb3ZblMtpV2JVrbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:6a:11:52:6a:5f:8f:68:08:cd:a7:aa:11:e6:6e:04:5c:79:
0e:6b:56:d5:65:99:50:38:51:00:d4:9c:48:da:ad:bc:f6:c8:
d3:70:b2:a0:8c:84:05:d7:6f:66:d7:ef:40:7a:b4:af:db:5a:
9e:28:c3:c5:80:84:ce:0a:73:2a:a9:ea:2c:9a:0e:26:a8:67:
14:2e:62:f9:f3:04:8f:71:a1:3c:5c:4a:57:a5:f3:77:4c:3b:
cf:10:92:0e:4f:93:71:8e:2a:fd:28:cf:b5:64:d5:4d:1a:bf:
55:f3:7a:62:1c:f8:78:e7:09:4b:0e:8d:66:88:89:2e:77:2a:
5e:47:7f:21:4e:9e:7b:9b:ba:4a:a2:4a:b8:31:42:c2:12:c8:
69:59:46:66:2e:7f:12:cf:4a:b5:3d:b0:61:0e:02:26:cd:03:
81:f7:76:89:e3:84:7f:d3:c5:45:68:2e:76:07:1a:be:b7:74:
eb:34:28:08:fd:9c:94:f4:c5:14:af:2e:9a:14:0a:5a:ac:5f:
9a:87:eb:db:59:33:31:36:b3:8f:cc:02:be:39:cb:69:f9:bc:
0f:3b:36:74:bb:82:14:f1:43:8e:d1:df:fe:58:8d:2b:10:b9:
2e:5c:fc:7f:44:3f:cd:bf:a2:bd:a9:69:fb:ef:f1:6f:63:d5:
25:15:3d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:11:26 2026 by rpki-client