Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/81b00a-f68d-44f4-8825-982736b45bdf/1/iMaZNJivBRiWLl9I1chG3BddGIQ.mft
File: iMaZNJivBRiWLl9I1chG3BddGIQ.mft (raw, json)
Hash identifier: y9CLdmYl3EOfIU9DRWFeaHjpVsWOIJZLCYKiHXuvmVg=
Subject key identifier: 43:9B:74:31:A9:43:F7:B5:1F:76:26:F2:10:67:B1:8D:D5:D2:6F:33
Authority key identifier: 88:C6:99:34:98:AF:05:18:96:2E:5F:48:D5:C8:46:DC:17:5D:18:84
Certificate issuer: /CN=88c6993498af0518962e5f48d5c846dc175d1884
Certificate serial: 019D996283FF211A2D5CB6F115046DE67BE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMaZNJivBRiWLl9I1chG3BddGIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/81b00a-f68d-44f4-8825-982736b45bdf/1/iMaZNJivBRiWLl9I1chG3BddGIQ.mft
Manifest number: 18BF
Signing time: Fri 17 Apr 2026 03:01:03 +0000
Manifest this update: Fri 17 Apr 2026 03:01:03 +0000
Manifest next update: Sat 18 Apr 2026 03:01:03 +0000
Files and hashes: 1: iMaZNJivBRiWLl9I1chG3BddGIQ.crl (hash: VoNYathPqFlxhcC6xKUVo/zIp23KL8mG1yfhlT30ExE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/81b00a-f68d-44f4-8825-982736b45bdf/1/iMaZNJivBRiWLl9I1chG3BddGIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/81b00a-f68d-44f4-8825-982736b45bdf/1/iMaZNJivBRiWLl9I1chG3BddGIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMaZNJivBRiWLl9I1chG3BddGIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:83:ff:21:1a:2d:5c:b6:f1:15:04:6d:e6:7b:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c6993498af0518962e5f48d5c846dc175d1884
Validity
Not Before: Apr 17 03:01:03 2026 GMT
Not After : Apr 18 03:01:03 2026 GMT
Subject: CN=439b7431a943f7b51f7626f21067b18dd5d26f33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7b:a1:2a:8b:86:04:a7:47:c4:65:d9:c8:16:
7c:f7:61:f5:5f:c5:ae:2d:2b:00:37:0e:0d:49:21:
eb:ad:f2:9d:52:98:a6:d6:b4:0a:84:8d:d8:71:91:
b1:bb:c0:0c:1b:1e:36:68:09:f9:8c:c7:b1:ae:8d:
a6:10:61:5f:b3:4c:35:d5:26:df:8d:a9:f7:dc:db:
cf:e9:91:cc:94:8d:9c:9a:18:cc:a2:0b:f6:34:4b:
ae:22:96:d0:a7:1c:6a:e8:b7:ae:c3:11:c3:4c:7d:
9d:02:c5:96:ad:e4:f3:58:76:80:1f:2b:38:8d:15:
5c:67:23:b4:93:e0:0f:67:c7:89:78:10:4c:05:6a:
66:c8:31:94:d2:8a:02:42:63:7a:2f:51:cc:eb:0b:
30:12:21:90:68:0a:a3:87:64:80:6d:d4:b1:71:ff:
a4:92:5d:95:ea:10:35:9b:ec:18:cd:c2:e2:7b:c1:
54:f9:52:c0:e1:dd:30:4b:cf:79:56:c2:03:9e:fd:
2b:4a:42:1c:1e:fc:ca:ac:6c:3f:3f:4e:f2:2f:d6:
7c:35:3b:07:6e:a2:e6:be:ae:f7:56:9b:6c:28:05:
8b:0c:6b:f2:cf:64:66:a5:4e:49:d4:44:db:7d:77:
5b:72:72:8d:7e:ee:ac:b4:5e:b1:5d:71:87:a9:03:
49:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:9B:74:31:A9:43:F7:B5:1F:76:26:F2:10:67:B1:8D:D5:D2:6F:33
X509v3 Authority Key Identifier:
keyid:88:C6:99:34:98:AF:05:18:96:2E:5F:48:D5:C8:46:DC:17:5D:18:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMaZNJivBRiWLl9I1chG3BddGIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/81b00a-f68d-44f4-8825-982736b45bdf/1/iMaZNJivBRiWLl9I1chG3BddGIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/81b00a-f68d-44f4-8825-982736b45bdf/1/iMaZNJivBRiWLl9I1chG3BddGIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:a4:c2:9a:83:df:f4:5e:4a:6b:93:8a:a7:65:e1:3c:00:dd:
7c:3e:d0:c5:3a:bd:ce:ce:d8:3e:1d:73:4f:2f:df:ae:33:9a:
70:7e:bf:64:98:a4:57:b6:ce:4b:ad:e1:86:65:7c:60:fd:7e:
6e:70:7a:b8:a6:3b:e3:81:56:cc:55:6f:0f:0f:bb:31:26:0e:
17:72:24:aa:ba:67:62:a5:eb:5b:46:79:92:5f:df:a3:29:ef:
7c:72:b2:bd:4c:51:97:f6:21:a6:d6:7c:1b:e0:59:71:69:8c:
0e:c5:f3:55:c6:05:02:3a:ec:70:f1:53:cc:9a:30:d8:cd:30:
65:ca:2a:f6:33:a0:de:81:35:c1:92:9e:93:87:c1:77:c5:6c:
0f:cb:55:5b:91:7c:32:26:4e:ae:a5:14:6e:23:ad:1a:70:14:
05:f7:fb:7c:f3:f6:e4:62:a6:99:d7:6b:8d:0a:3c:26:6d:87:
16:95:80:56:a2:4c:8c:e6:c4:ae:1c:17:84:51:ed:d9:30:4c:
e8:65:ed:0d:7d:8a:40:6d:1e:bf:7e:7e:c9:a3:02:ab:83:66:
01:ce:16:8e:7d:94:81:22:0f:d2:9b:fb:4b:5b:1f:aa:4d:7c:
48:c9:a5:98:4a:68:da:5a:a0:3e:89:73:29:4a:ec:50:22:fd:
7b:c3:62:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:24:29 2026 by rpki-client