Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.mft
File: iWqh8O1Flucz-LYtOeN7jeUIXtc.mft (raw, json)
Hash identifier: Hudr98m84R6HaJBQ3ZFsGTHuX5kisgBtswJe/vRsCw0=
Subject key identifier: 12:EB:0E:74:85:E2:5C:EE:7B:FE:4A:B4:C8:95:6E:57:A9:B4:84:A3
Authority key identifier: 89:6A:A1:F0:ED:45:96:E7:33:F8:B6:2D:39:E3:7B:8D:E5:08:5E:D7
Certificate issuer: /CN=896aa1f0ed4596e733f8b62d39e37b8de5085ed7
Certificate serial: 019D9B19CF9DB900094850E94618741FCF05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iWqh8O1Flucz-LYtOeN7jeUIXtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 11:00:53 +0000
Manifest this update: Fri 17 Apr 2026 11:00:53 +0000
Manifest next update: Sat 18 Apr 2026 11:00:53 +0000
Files and hashes: 1: 0wgf23tvdSjDuy36oum4E_5sBcQ.roa (hash: DMJE3y5rVfgLLy+PLJs0X0RhRoSjVQhQBLKFeetfmGY=)
2: iWqh8O1Flucz-LYtOeN7jeUIXtc.crl (hash: O8A0mvQWVvEApBhD9qk1wPVQs2QPTr6r+PWemNDNh2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iWqh8O1Flucz-LYtOeN7jeUIXtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:cf:9d:b9:00:09:48:50:e9:46:18:74:1f:cf:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896aa1f0ed4596e733f8b62d39e37b8de5085ed7
Validity
Not Before: Apr 17 11:00:53 2026 GMT
Not After : Apr 18 11:00:53 2026 GMT
Subject: CN=12eb0e7485e25cee7bfe4ab4c8956e57a9b484a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:66:a7:74:64:ed:c2:cd:33:37:7f:ce:bc:69:
92:04:39:da:4b:56:ac:b1:13:0e:60:e2:70:b3:57:
3c:0c:51:04:2b:be:21:cf:19:ed:a0:c8:5c:b3:cf:
26:47:0a:b8:a7:48:74:f0:c8:21:6a:a7:44:f4:33:
d7:2e:25:05:c7:4e:da:a9:81:1b:9b:6d:f8:ef:e3:
bd:ef:70:a4:a2:a0:db:63:07:71:d0:70:7b:1d:d2:
e3:86:27:ce:88:7b:d2:c4:8f:40:ad:15:90:d6:45:
e5:06:c7:5f:a1:a1:60:e1:c6:cc:54:3c:e0:93:61:
31:39:2a:4f:0c:53:73:a2:03:ca:fd:be:c1:96:d2:
e2:0a:c7:6f:ef:33:a0:2f:10:e1:aa:b2:60:af:38:
8b:db:18:3c:80:9f:71:03:53:08:61:f3:81:ee:50:
27:40:81:6f:59:42:ec:83:e5:a1:a7:39:4b:19:b3:
e6:f7:32:d8:60:a5:6f:4f:38:41:13:d9:8b:06:62:
26:6b:0e:73:13:a3:6d:d6:cf:ec:8d:77:11:17:33:
41:a3:43:c2:41:de:03:ce:d6:f7:02:b7:8d:1b:cd:
b0:33:9f:39:6e:3c:d2:6b:f0:81:92:9d:ce:69:c4:
19:f8:6f:10:bf:ec:1a:07:f9:80:dd:01:23:ed:84:
e1:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:EB:0E:74:85:E2:5C:EE:7B:FE:4A:B4:C8:95:6E:57:A9:B4:84:A3
X509v3 Authority Key Identifier:
keyid:89:6A:A1:F0:ED:45:96:E7:33:F8:B6:2D:39:E3:7B:8D:E5:08:5E:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWqh8O1Flucz-LYtOeN7jeUIXtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:fe:89:c2:4a:57:06:89:3e:3a:ad:58:b0:f9:7b:a5:1e:6d:
c6:59:7f:d5:55:4e:69:ed:72:46:14:7c:d2:de:a9:60:0c:b1:
e4:ce:7a:25:81:c4:79:c2:94:61:4e:65:08:94:4c:6f:05:ae:
9d:42:54:9b:af:ad:f0:85:b4:35:7b:20:2d:c3:45:83:61:a1:
90:eb:b6:82:90:67:18:77:d3:92:9b:2c:d4:b2:85:7e:b2:af:
71:93:05:40:df:b6:73:67:74:05:31:37:23:91:f7:12:a5:80:
a3:26:c6:6a:b8:1f:f3:5a:91:22:e8:41:52:b9:e7:0b:f7:20:
14:61:3f:1f:77:dd:bb:9e:ef:6e:90:1d:7b:e8:77:ac:0c:05:
b2:cd:53:d1:9b:f5:11:89:b6:0d:0f:7f:2a:7f:b1:52:80:cb:
4b:22:7a:5a:8e:84:66:71:a8:97:ff:cd:58:93:46:cb:1b:f1:
c1:6c:3a:ef:5f:5e:b9:93:54:4a:e1:4e:f9:aa:b0:87:18:fa:
6e:9b:1c:99:13:44:41:10:34:a2:6b:dd:34:08:b7:db:e3:64:
6b:f2:a0:22:b6:b2:a9:9c:9c:9f:95:7d:51:dc:ab:5c:bd:e0:
da:70:93:f7:2f:64:80:77:db:e3:a3:65:44:ab:30:36:1a:3c:
98:5c:a4:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:39:59 2026 by rpki-client