Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/440781-f614-450d-9d9f-2b8761d8a137/1/iDHWIdGS-S2wk9kzCSweI2tNSXs.mft
File: iDHWIdGS-S2wk9kzCSweI2tNSXs.mft (raw, json)
Hash identifier: h/53lOAUcdG1QHUe9fDVIgdbbFe+yY4tEItCcIFWC+U=
Subject key identifier: A0:F0:17:8E:42:5A:1C:AB:A0:F5:5F:DD:40:AD:DE:62:77:CD:B8:2A
Authority key identifier: 88:31:D6:21:D1:92:F9:2D:B0:93:D9:33:09:2C:1E:23:6B:4D:49:7B
Certificate issuer: /CN=8831d621d192f92db093d933092c1e236b4d497b
Certificate serial: 019D98F5052169F92BBCDE0C68E316FA6FC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iDHWIdGS-S2wk9kzCSweI2tNSXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/440781-f614-450d-9d9f-2b8761d8a137/1/iDHWIdGS-S2wk9kzCSweI2tNSXs.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 01:01:27 +0000
Manifest this update: Fri 17 Apr 2026 01:01:27 +0000
Manifest next update: Sat 18 Apr 2026 01:01:27 +0000
Files and hashes: 1: DpXD_qmAIFL_EpLe0GJAEUHvYxs.roa (hash: H5hh0chuQLZ9k4SOj22nhApIqV8qceTKzoblxLgW6NE=)
2: iDHWIdGS-S2wk9kzCSweI2tNSXs.crl (hash: n006/TVf++S3dwZR77TgMLokW9rF0Z+H4iL6KuBUO6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/440781-f614-450d-9d9f-2b8761d8a137/1/iDHWIdGS-S2wk9kzCSweI2tNSXs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/440781-f614-450d-9d9f-2b8761d8a137/1/iDHWIdGS-S2wk9kzCSweI2tNSXs.mft
rsync://rpki.ripe.net/repository/DEFAULT/iDHWIdGS-S2wk9kzCSweI2tNSXs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f5:05:21:69:f9:2b:bc:de:0c:68:e3:16:fa:6f:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8831d621d192f92db093d933092c1e236b4d497b
Validity
Not Before: Apr 17 01:01:27 2026 GMT
Not After : Apr 18 01:01:27 2026 GMT
Subject: CN=a0f0178e425a1caba0f55fdd40adde6277cdb82a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:89:1c:30:c4:70:27:1a:11:57:6a:aa:c6:06:
3a:11:6a:21:20:a7:73:48:6d:12:f7:c0:65:2b:c2:
61:25:94:e0:c6:29:bb:9e:00:1c:ca:ee:fb:9b:2b:
94:88:55:4a:a9:8d:e3:b2:f7:f1:13:38:0c:16:2a:
87:04:04:8d:62:69:3c:e4:9b:f5:7a:bd:d2:43:bc:
fc:bb:59:d2:10:33:1c:b8:81:17:70:d3:9a:a0:8b:
97:94:e9:8a:bb:e2:6d:d4:35:0c:00:65:55:5e:92:
47:d5:10:5c:43:a6:de:5b:18:ba:c0:f0:6c:82:ba:
71:65:59:47:5b:05:a1:61:26:47:83:6e:23:1a:dc:
83:d3:25:9c:6e:f6:2b:6c:7b:c2:a6:21:70:9f:02:
7f:b4:05:cb:a7:e1:a5:1d:a0:86:fc:56:b5:7f:17:
d0:4b:d3:f4:0f:3c:a3:5c:03:87:9f:7e:43:53:5e:
21:af:7e:43:ea:ac:46:67:9b:56:2a:22:fc:43:af:
4e:a2:53:7b:5e:17:52:48:f1:89:d5:d1:bf:a5:e7:
8f:1b:85:bf:b3:11:a3:7c:6b:2d:b8:69:0c:0e:73:
a6:db:cd:67:7b:3b:84:08:6f:a6:b8:7c:b9:6e:a1:
41:81:4d:94:35:4b:4b:37:2f:20:c6:2d:3a:fe:75:
69:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:F0:17:8E:42:5A:1C:AB:A0:F5:5F:DD:40:AD:DE:62:77:CD:B8:2A
X509v3 Authority Key Identifier:
keyid:88:31:D6:21:D1:92:F9:2D:B0:93:D9:33:09:2C:1E:23:6B:4D:49:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iDHWIdGS-S2wk9kzCSweI2tNSXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/440781-f614-450d-9d9f-2b8761d8a137/1/iDHWIdGS-S2wk9kzCSweI2tNSXs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/440781-f614-450d-9d9f-2b8761d8a137/1/iDHWIdGS-S2wk9kzCSweI2tNSXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:14:5c:c4:52:d3:79:71:6a:74:1e:d1:55:bf:d8:b6:49:c8:
43:21:44:a0:32:ef:64:5b:77:14:9f:72:a7:d2:43:0b:36:89:
e5:4e:e1:7b:02:1c:c4:b2:d6:3c:0b:32:d4:de:15:d7:2f:79:
a9:34:43:66:eb:1f:41:7d:73:9a:91:2d:6c:03:7c:f2:69:b7:
21:31:55:cb:4b:3f:53:56:3e:a6:56:3d:ee:cf:03:ca:6e:27:
7a:e5:45:0a:69:05:49:85:5f:b6:83:04:ee:95:cd:ea:44:58:
32:37:05:43:28:49:1f:0a:e0:53:13:79:73:9e:68:ed:e2:0f:
81:32:63:88:b1:c8:1c:c5:e9:29:18:2d:a1:5b:24:dc:84:86:
99:d9:d7:18:59:5f:dd:2a:00:76:c8:44:95:b7:d3:18:05:46:
c9:45:c9:fa:66:2f:6f:ff:9e:15:df:55:56:e9:44:1f:da:46:
60:5d:8f:c3:b6:b6:31:70:41:7d:a0:e9:7b:93:31:fd:c2:c9:
83:bc:f9:8a:b5:9c:34:c1:f1:09:45:fb:99:7b:c3:2e:ea:43:
1f:11:5f:a7:3e:cb:f3:91:0b:bd:be:b4:10:b5:20:81:6f:a0:
05:ab:d0:74:d6:2e:d6:7c:23:02:7f:49:69:c4:e7:df:3d:8c:
03:a8:6f:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:35:47 2026 by rpki-client