Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.mft
File: II3jrRjdCuFDYtDoTewEPTecwkI.mft (raw, json)
Hash identifier: HizA/Hr2I/sbJ4vlesgEI9CRVDtSPRcNL4NH4eo9dOs=
Subject key identifier: C9:FA:65:69:E0:78:BF:E9:8F:2D:41:3E:29:DB:17:0C:64:4C:69:B5
Authority key identifier: 20:8D:E3:AD:18:DD:0A:E1:43:62:D0:E8:4D:EC:04:3D:37:9C:C2:42
Certificate issuer: /CN=208de3ad18dd0ae14362d0e84dec043d379cc242
Certificate serial: 019DA378D1268DA568ACA0F229306DAB9068
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/II3jrRjdCuFDYtDoTewEPTecwkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.mft
Manifest number: 18C9
Signing time: Sun 19 Apr 2026 02:01:37 +0000
Manifest this update: Sun 19 Apr 2026 02:01:37 +0000
Manifest next update: Mon 20 Apr 2026 02:01:37 +0000
Files and hashes: 1: 7VJHWleGjQ3MA6xdUVWDIgaYvkU.roa (hash: +MmvrOl97e3DA2vv+SK8o06jDjKb06tuUhtauO+J0DA=)
2: II3jrRjdCuFDYtDoTewEPTecwkI.crl (hash: oYPt86nimI7NqY8vMgkhCDYTi9igcWURY/5+I/4lNeI=)
3: e73gsHaWTejzTyfXW5UdzDUTXQs.roa (hash: 9j92RNoJBabv7foYLIaPsDGRKKARMwRj5sIk41buBpE=)
4: nExWLodTy66s6nOpw-IuXiduwOc.roa (hash: xQ9/3XOQzACu7Vie8ibe6dTF70DY7qx3P6HKsR8oJRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/II3jrRjdCuFDYtDoTewEPTecwkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:d1:26:8d:a5:68:ac:a0:f2:29:30:6d:ab:90:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=208de3ad18dd0ae14362d0e84dec043d379cc242
Validity
Not Before: Apr 19 02:01:37 2026 GMT
Not After : Apr 20 02:01:37 2026 GMT
Subject: CN=c9fa6569e078bfe98f2d413e29db170c644c69b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0a:1c:9a:df:db:c0:02:60:e3:d7:b9:c0:62:
f3:70:64:8b:7e:3b:97:a5:07:be:ef:f0:c2:58:d9:
f6:06:0c:6a:65:e8:cb:af:5f:da:ea:35:9a:f0:14:
0a:1a:f7:3c:72:b6:89:a8:73:a1:11:c8:2a:cc:f4:
fc:f5:eb:c3:61:48:28:a2:ba:fe:b7:7f:ee:bd:1e:
bd:5d:55:bd:7c:3b:31:c0:67:74:b7:4f:61:4f:a7:
98:0a:b7:8a:02:32:8f:90:ed:ce:72:79:2a:9b:7f:
e4:78:14:fe:c5:7c:66:02:bd:12:cf:a5:84:0c:d5:
04:1e:76:d6:39:3a:73:5d:84:d7:83:b0:39:3a:3d:
7c:07:7a:ff:ba:24:03:03:89:8e:0c:68:99:6f:e3:
d9:02:53:7c:05:62:f9:2e:4a:63:c1:98:dc:a9:d5:
70:3c:dc:33:37:d0:af:76:43:90:13:ee:1f:f8:d3:
cb:ea:1e:e6:7f:08:b7:2c:b4:f9:3d:18:18:31:2d:
09:5e:36:3d:40:3c:1d:a0:64:41:a4:0b:44:58:27:
0c:e5:c8:6d:0f:15:24:67:fb:31:44:97:6c:d5:e4:
5c:43:ba:a1:df:ee:be:2a:6a:5a:16:ad:fe:8d:07:
4b:38:30:fc:db:4e:9c:ef:d9:96:a5:ff:ca:e8:1f:
c6:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:FA:65:69:E0:78:BF:E9:8F:2D:41:3E:29:DB:17:0C:64:4C:69:B5
X509v3 Authority Key Identifier:
keyid:20:8D:E3:AD:18:DD:0A:E1:43:62:D0:E8:4D:EC:04:3D:37:9C:C2:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/II3jrRjdCuFDYtDoTewEPTecwkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:2a:12:7f:c1:df:6c:af:ef:50:51:b6:cc:f4:c6:b7:dd:ee:
35:40:46:c2:23:e3:e9:16:e3:6c:03:7a:b3:ce:be:c6:a7:40:
07:1e:08:5d:a4:19:98:ab:14:4f:4c:a2:97:83:11:fc:8f:6c:
10:14:80:a4:4a:a4:b9:1e:13:48:0f:3d:6b:ec:69:60:17:79:
dd:e0:33:41:f7:af:b7:29:7d:71:a2:a2:1f:ac:40:bf:a5:22:
54:ee:1c:77:b2:4e:db:46:99:ea:40:d6:ac:4b:8c:03:fd:9e:
54:14:4e:55:b7:c2:67:44:7a:0c:09:0a:fc:e9:1d:9c:42:9e:
a5:30:7c:a5:62:0f:19:8f:44:74:62:13:22:fa:21:4d:0f:5d:
19:0b:ec:00:1b:2f:fc:9d:5b:2e:be:9c:fa:87:52:70:83:0a:
cb:1a:57:c4:3c:94:44:fb:6f:0f:f8:81:83:64:b0:cf:28:19:
f7:31:33:9d:d1:d3:44:11:87:c9:6f:df:41:34:26:65:27:b4:
a5:4a:97:de:2d:0c:ca:7f:7f:ab:be:cb:ed:59:66:96:f5:99:
0f:7c:f2:b1:7c:68:46:1f:be:29:65:8b:b8:ed:af:e8:45:a7:
b0:65:1b:7d:b7:81:8b:95:a3:99:94:36:9b:30:aa:21:d6:5a:
3a:79:87:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:52:30 2026 by rpki-client