Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.mft
File: CioVfwBRX5W2313A1S6xtdQ_3lw.mft (raw, json)
Hash identifier: H5IlcJ+RgnPYyLAR+VlOWHR5xIkH15Gyg7EizYXs0kk=
Subject key identifier: 96:8B:D2:59:20:E6:D7:83:3A:30:D6:49:02:CD:17:F3:37:98:FD:6F
Authority key identifier: 0A:2A:15:7F:00:51:5F:95:B6:DF:5D:C0:D5:2E:B1:B5:D4:3F:DE:5C
Certificate issuer: /CN=0a2a157f00515f95b6df5dc0d52eb1b5d43fde5c
Certificate serial: 019D98185CE7713059D6193C296ACE5D13F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CioVfwBRX5W2313A1S6xtdQ_3lw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.mft
Manifest number: 18BF
Signing time: Thu 16 Apr 2026 21:00:26 +0000
Manifest this update: Thu 16 Apr 2026 21:00:26 +0000
Manifest next update: Fri 17 Apr 2026 21:00:26 +0000
Files and hashes: 1: 6fN9h0BE8aQ9CkNz0FDDwJzJ1WI.roa (hash: lchc3zsBE0dtE9KZlnVKCzZkcOJOv0TaeNSl6grWrKg=)
2: CioVfwBRX5W2313A1S6xtdQ_3lw.crl (hash: m5c15TiQUPoXSoxleT+boY56BmjXNVpOf7dKxjtqWMU=)
3: DvkdV1ExA2552HGIzRMhCZK-OFE.roa (hash: qyrvDF/4Y9K7iv9NFa3njXZ6qQZMH2yHwSx8qwfZey8=)
4: I3QKFov--NDtK49UPqV2RMA_ZSs.roa (hash: 5bH+Qg+gTHLwp5S4Kx2BVafx6XVTZnjE39jOohvcHdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CioVfwBRX5W2313A1S6xtdQ_3lw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:5c:e7:71:30:59:d6:19:3c:29:6a:ce:5d:13:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a2a157f00515f95b6df5dc0d52eb1b5d43fde5c
Validity
Not Before: Apr 16 21:00:26 2026 GMT
Not After : Apr 17 21:00:26 2026 GMT
Subject: CN=968bd25920e6d7833a30d64902cd17f33798fd6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:01:16:c1:c2:da:f6:ed:22:95:6a:0c:56:a0:
95:ed:d7:d5:0f:6e:fb:1b:28:3a:e4:1d:44:90:4d:
e4:4e:45:29:3c:e7:65:ef:cf:b2:f9:55:66:76:6b:
b5:ae:c7:03:85:60:0d:c8:bd:f6:35:76:64:db:c4:
21:6b:3c:ee:f9:65:e3:a8:66:c4:60:52:c9:1b:71:
a7:f3:cd:dc:77:15:94:10:9f:d3:bf:28:6d:33:70:
34:2d:71:dc:fb:00:11:d3:b8:42:ef:75:97:88:db:
66:a5:fc:e7:81:d7:73:bc:41:11:b3:ee:0a:93:f8:
da:0e:a4:f9:a2:0c:c0:33:dc:7a:90:48:b4:98:50:
b0:e6:bf:39:80:d4:20:10:af:aa:48:5c:52:e2:9a:
4f:9a:98:bd:58:00:63:78:9f:a9:2c:9a:78:2d:ec:
bb:04:cb:f1:70:77:cb:cd:05:d7:4c:1c:89:80:ac:
d7:05:62:12:d0:08:1b:72:af:52:bb:28:06:14:d4:
33:95:4e:39:eb:fb:61:50:47:df:57:f0:68:2d:95:
cc:9f:d9:ce:72:37:12:e1:d5:fe:3f:a0:f8:1c:2b:
4a:74:ef:90:6e:1e:07:ec:0d:cb:d6:bd:2e:f1:d2:
7b:9a:df:9c:36:e9:10:77:ed:87:14:b3:ed:ad:6c:
1b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:8B:D2:59:20:E6:D7:83:3A:30:D6:49:02:CD:17:F3:37:98:FD:6F
X509v3 Authority Key Identifier:
keyid:0A:2A:15:7F:00:51:5F:95:B6:DF:5D:C0:D5:2E:B1:B5:D4:3F:DE:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CioVfwBRX5W2313A1S6xtdQ_3lw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:fd:e7:81:bc:e3:43:35:0c:92:7e:67:f8:fd:15:70:f2:94:
2a:1e:85:0f:6b:16:80:fd:12:fd:6f:f7:0a:32:62:73:da:98:
35:e7:25:2f:9a:60:fd:af:03:b2:26:0c:22:fc:08:6a:29:cd:
81:8a:8b:66:81:23:0c:1b:97:2f:b3:b6:ae:90:af:2b:44:2f:
4a:b6:30:67:87:67:e9:e7:8e:b1:b0:ac:ad:0e:f9:f5:bd:b2:
5b:2a:77:85:c0:4b:f3:a4:be:1c:22:ac:5d:d4:b1:ca:c4:88:
37:53:1c:76:dc:89:ed:51:23:b3:7b:6f:25:06:66:76:b5:af:
46:e4:84:3e:20:18:7a:db:bb:e3:a2:1f:82:34:0e:00:a9:0c:
6b:4b:ac:ad:18:cd:c3:6e:5a:fd:c0:60:67:c8:ed:f7:27:bd:
c7:a2:b3:89:e0:0b:11:2f:73:cb:3d:6b:b7:7a:e7:58:2c:87:
d6:5c:3e:26:17:d0:03:c0:40:46:07:61:8e:c2:73:a2:55:41:
4f:c1:68:77:eb:c7:cd:7c:c1:91:04:9b:6c:04:16:b7:19:8e:
df:7a:79:c5:57:b6:0b:48:90:44:91:9e:eb:0b:dd:ec:26:6a:
19:db:a8:f3:9b:1b:e9:8f:ab:86:61:ee:e4:43:ca:a4:e9:e5:
5e:7a:82:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:32:25 2026 by rpki-client