Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/itkoGq_vyDda2LS35gSJlVWVIjc.mft
File: itkoGq_vyDda2LS35gSJlVWVIjc.mft (raw, json)
Hash identifier: mlyhWD2txN2jFH3z/Iqb4PptHyEMq5rm6A0fcLLIxDo=
Subject key identifier: 24:1A:0E:5E:FE:FC:0A:11:CB:7D:19:82:8F:DA:0A:CC:61:22:FF:6F
Authority key identifier: 8A:D9:28:1A:AF:EF:C8:37:5A:D8:B4:B7:E6:04:89:95:55:95:22:37
Certificate issuer: /CN=8ad9281aafefc8375ad8b4b7e604899555952237
Certificate serial: 019D9A3F0B6A8E9DC13839BACCE85324C2E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itkoGq_vyDda2LS35gSJlVWVIjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/itkoGq_vyDda2LS35gSJlVWVIjc.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 07:01:56 +0000
Manifest this update: Fri 17 Apr 2026 07:01:56 +0000
Manifest next update: Sat 18 Apr 2026 07:01:56 +0000
Files and hashes: 1: 3ysBshLGfFUkO4R9WFntyTKDLJg.roa (hash: o/4zJLtevorj8ig3Iu9MQ3MlmidPOIfdoU+Dc49NbUo=)
2: EbE_4FlcTeGEtF61cdD338tmF78.roa (hash: UyLGRhRXp3uuZDt1rn1PuLux78VD/m3miAA3O+vEphU=)
3: KrSk2jRU2oEHfGvgx800e5GKxhA.roa (hash: Kyx+62+FYOcUJqo2tHJtaKxWwFEQu2NCl98mkWMufAs=)
4: RMVjby5XmGEGFEWAsZ-rMJCgUuI.roa (hash: 8V+ZY4rClYbDacZGSf5P4gTGWDrq9UPHV6tcofi/O1Q=)
5: TQRQUvnH1PO5qcuLM2kiPL408f4.roa (hash: 1Z+GYULrtYzOcdfSIr9RZ1XILJVYjGdvmENAEPPng/M=)
6: itkoGq_vyDda2LS35gSJlVWVIjc.crl (hash: 06WSCoNT3lnfDaoKj3wfZJexfXPzhytvlcYbU5RGd7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/itkoGq_vyDda2LS35gSJlVWVIjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/itkoGq_vyDda2LS35gSJlVWVIjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/itkoGq_vyDda2LS35gSJlVWVIjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3f:0b:6a:8e:9d:c1:38:39:ba:cc:e8:53:24:c2:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad9281aafefc8375ad8b4b7e604899555952237
Validity
Not Before: Apr 17 07:01:56 2026 GMT
Not After : Apr 18 07:01:56 2026 GMT
Subject: CN=241a0e5efefc0a11cb7d19828fda0acc6122ff6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:68:bd:85:5e:29:d7:30:22:f5:93:4f:84:33:
95:e2:48:16:52:1f:7a:84:75:da:ba:6a:6a:a4:22:
01:f2:4d:de:e6:b5:d5:dd:0a:99:45:3b:0c:ec:d4:
c3:9a:4d:6d:d6:cf:12:f4:17:3f:e9:3b:5c:45:9d:
85:9c:89:3c:1d:38:29:03:d7:f3:ee:b2:69:8d:f4:
b9:25:2b:af:1d:17:70:96:a7:0e:be:19:75:d7:1d:
3e:5c:13:1c:b8:bf:8d:ae:c2:c9:fc:4c:17:ca:1c:
c1:8d:67:3b:0a:09:3d:71:33:80:42:2f:a9:45:a1:
87:5a:56:a4:93:3c:0e:c6:aa:46:ed:50:d6:1f:40:
79:7f:38:d3:fb:2f:17:4a:b9:09:22:da:0e:73:04:
11:90:55:0f:cf:32:31:40:d2:00:97:6e:a0:4d:2f:
d8:fc:51:70:f9:81:10:38:91:e1:2e:23:09:71:f6:
10:3d:e9:a4:d3:f4:88:62:ce:a4:a0:77:3a:13:d9:
13:f2:24:af:c1:05:48:df:b1:ca:52:17:87:81:f1:
10:43:3d:a3:5b:34:ad:de:d3:5a:d4:7b:34:e0:ab:
d6:b8:0a:b4:46:86:61:f4:40:02:09:a6:4f:7e:fa:
d5:35:dd:70:7c:b3:48:fe:22:80:cd:73:39:6b:c8:
24:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:1A:0E:5E:FE:FC:0A:11:CB:7D:19:82:8F:DA:0A:CC:61:22:FF:6F
X509v3 Authority Key Identifier:
keyid:8A:D9:28:1A:AF:EF:C8:37:5A:D8:B4:B7:E6:04:89:95:55:95:22:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itkoGq_vyDda2LS35gSJlVWVIjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/itkoGq_vyDda2LS35gSJlVWVIjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/itkoGq_vyDda2LS35gSJlVWVIjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:11:2d:fa:c3:84:b5:dc:a6:13:e5:7d:21:fa:44:d6:52:58:
9d:b5:20:c4:07:be:e1:2c:84:55:d4:e5:0a:5e:d0:81:d5:56:
6b:8c:f2:54:e8:11:8f:26:91:31:33:73:33:39:98:40:fd:c7:
54:07:00:b5:4b:09:47:95:42:15:41:bf:1c:71:9b:b0:72:00:
76:73:f7:60:ba:26:7a:af:71:8e:9f:6f:43:35:14:45:ec:8c:
3a:64:32:ab:2e:55:ef:4a:35:eb:ea:45:4f:da:0a:3d:2b:c4:
89:f4:53:5f:0b:21:91:3f:b4:94:89:a8:2f:53:a6:af:fe:f4:
a0:34:4f:eb:84:e8:4f:d5:ae:d5:81:32:88:58:fe:6f:0b:c3:
e5:8d:0f:7f:ff:74:14:a4:29:57:ee:60:1b:78:b7:90:56:96:
65:ad:b4:99:49:12:1a:f4:27:72:de:27:96:c1:26:9b:8d:b5:
13:66:93:6c:0e:91:f0:d0:33:d8:e0:c3:e7:21:9d:e9:4b:4a:
c5:15:8d:6f:c6:e9:3b:67:73:d6:8e:35:10:ec:84:b5:ec:4d:
e1:9d:fc:e2:ec:a8:55:2b:80:8c:db:7f:c8:b6:41:83:31:91:
dc:10:6a:51:8d:40:52:eb:f4:f9:12:c9:c4:36:7f:7a:8c:5a:
e5:de:9e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:28:32 2026 by rpki-client