Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/538194-7560-4456-b45c-ca26c22cfafd/1/imlbOroepOZUeIxRZBRYzJlXgEA.mft
File: imlbOroepOZUeIxRZBRYzJlXgEA.mft (raw, json)
Hash identifier: nDZzibDh/lgvIPRWn3HJCmV78M7HdAr7EibWuRSzCeo=
Subject key identifier: 68:5B:0B:4D:51:8D:80:81:3F:92:19:AD:00:9E:F6:15:B1:FA:1F:49
Authority key identifier: 8A:69:5B:3A:BA:1E:A4:E6:54:78:8C:51:64:14:58:CC:99:57:80:40
Certificate issuer: /CN=8a695b3aba1ea4e654788c51641458cc99578040
Certificate serial: 019D9B872ECD3F57CDADB5200962DEA4F04D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imlbOroepOZUeIxRZBRYzJlXgEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/538194-7560-4456-b45c-ca26c22cfafd/1/imlbOroepOZUeIxRZBRYzJlXgEA.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 13:00:20 +0000
Manifest this update: Fri 17 Apr 2026 13:00:20 +0000
Manifest next update: Sat 18 Apr 2026 13:00:20 +0000
Files and hashes: 1: imlbOroepOZUeIxRZBRYzJlXgEA.crl (hash: 3+5Ci0AfMfKAmMZEBL2YI5Cvh3IfhL4px8WMDelELsc=)
2: kE5VlmslAvRcrZ42pGQyAHfoqrE.roa (hash: AmEozEHyDw1oYPPxW0JA4Yammx0So33uCTb4ELzWUD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/538194-7560-4456-b45c-ca26c22cfafd/1/imlbOroepOZUeIxRZBRYzJlXgEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/538194-7560-4456-b45c-ca26c22cfafd/1/imlbOroepOZUeIxRZBRYzJlXgEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/imlbOroepOZUeIxRZBRYzJlXgEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:2e:cd:3f:57:cd:ad:b5:20:09:62:de:a4:f0:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a695b3aba1ea4e654788c51641458cc99578040
Validity
Not Before: Apr 17 13:00:20 2026 GMT
Not After : Apr 18 13:00:20 2026 GMT
Subject: CN=685b0b4d518d80813f9219ad009ef615b1fa1f49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1b:58:c7:9d:65:a2:40:b0:09:8f:f4:e2:b5:
a0:3a:4e:b2:7d:e4:31:2f:af:cc:fa:8e:04:a0:ed:
9a:87:d2:45:3c:34:79:c9:61:41:b3:57:fc:00:17:
47:5a:05:02:5c:80:5d:4e:61:aa:60:f9:98:61:b2:
35:86:b0:b2:64:c8:d2:94:ed:cc:69:ac:be:59:13:
08:ad:ef:41:af:6e:b6:2b:27:35:8f:ed:e7:32:16:
b5:e8:ed:72:a7:1f:ad:ed:8b:e7:64:2e:2f:26:2a:
56:c7:4d:5c:f3:30:c4:4d:89:55:15:3f:cf:25:d9:
5d:d2:0e:69:6d:33:b2:ca:5b:51:54:a0:63:54:f7:
34:c3:33:68:ae:15:69:2b:d4:7c:43:9c:bc:5e:b9:
aa:99:b1:75:c0:2d:4c:a9:e4:42:6b:f3:65:db:c3:
e8:d3:d1:a6:24:9f:1a:3d:29:3d:e6:b0:25:57:a6:
ee:6d:16:c2:e2:1d:2c:84:db:7e:8c:5a:43:51:c5:
0c:86:24:63:e7:94:e6:b6:bd:5c:b3:36:15:20:26:
ab:32:c0:3e:c0:58:e3:0c:ca:55:df:1f:0c:4b:e8:
20:02:3b:03:61:56:85:7c:03:aa:e2:cf:d4:a8:b8:
51:83:95:76:b3:f0:79:07:c2:37:03:c9:bf:e0:4d:
ef:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:5B:0B:4D:51:8D:80:81:3F:92:19:AD:00:9E:F6:15:B1:FA:1F:49
X509v3 Authority Key Identifier:
keyid:8A:69:5B:3A:BA:1E:A4:E6:54:78:8C:51:64:14:58:CC:99:57:80:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imlbOroepOZUeIxRZBRYzJlXgEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/538194-7560-4456-b45c-ca26c22cfafd/1/imlbOroepOZUeIxRZBRYzJlXgEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/538194-7560-4456-b45c-ca26c22cfafd/1/imlbOroepOZUeIxRZBRYzJlXgEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:16:c3:a5:83:09:8e:f2:33:db:a6:41:0e:30:34:2c:eb:21:
1a:8c:25:5f:e6:7d:45:d8:7f:d8:e5:ad:79:01:3c:30:f5:77:
8d:c9:c3:d2:00:a1:7f:5a:09:8a:b0:3e:15:e9:45:52:51:5f:
c6:ad:e4:10:a1:a0:8e:4b:39:df:14:52:b8:c7:b0:36:46:99:
eb:9c:2b:60:b1:f0:db:41:0c:1c:32:67:79:ca:19:8d:ef:36:
8e:36:80:59:6c:5b:fa:a7:a6:7f:cf:4b:1a:84:28:d2:fc:1d:
14:cc:f7:6a:3a:1c:92:c4:e7:46:c1:a0:ea:e6:62:95:d2:39:
25:07:83:31:aa:82:f7:44:7f:85:33:85:40:c0:83:02:29:9f:
b9:82:91:53:c9:b9:f4:24:2e:fc:9c:8c:88:2e:b1:4f:68:83:
46:46:b9:34:f6:3f:dd:ba:e3:3f:1b:26:f5:0e:79:c9:41:c9:
2f:01:30:66:5c:82:45:3c:5b:f5:65:45:aa:cd:7b:19:ca:74:
64:cb:9f:62:b4:c7:b7:06:4d:e4:cd:c4:6c:44:08:32:77:c6:
75:72:1d:2a:a9:b7:70:4c:61:be:ff:56:c5:f8:33:fd:cf:08:
7a:91:0b:f2:c0:20:d7:15:74:eb:2a:cd:e1:94:2d:c8:88:90:
f5:14:23:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:54:13 2026 by rpki-client