Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/265769-354e-4a8b-9542-94f97b3a2ce2/1/iu8WONCRG6mIZOl5yEJrpPQaJy4.mft
File: iu8WONCRG6mIZOl5yEJrpPQaJy4.mft (raw, json)
Hash identifier: 92pUlgKxzEMRbHfShjSbaHTW8CvRtHRDoHzml10D91c=
Subject key identifier: B5:14:8C:8D:8D:F6:5F:20:79:6B:08:21:B5:F0:10:E6:DE:98:37:D9
Authority key identifier: 8A:EF:16:38:D0:91:1B:A9:88:64:E9:79:C8:42:6B:A4:F4:1A:27:2E
Certificate issuer: /CN=8aef1638d0911ba98864e979c8426ba4f41a272e
Certificate serial: 019D99998B95F4C2A719E6D13DF4EFEBFAD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iu8WONCRG6mIZOl5yEJrpPQaJy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/265769-354e-4a8b-9542-94f97b3a2ce2/1/iu8WONCRG6mIZOl5yEJrpPQaJy4.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 04:01:09 +0000
Manifest this update: Fri 17 Apr 2026 04:01:09 +0000
Manifest next update: Sat 18 Apr 2026 04:01:09 +0000
Files and hashes: 1: AjtEoktOSuBDBX_1V0FjXtFV21E.roa (hash: FD8hrHR+KRU8ianiGjkPHddLvgxoDCtLslx9ho1BrsI=)
2: iu8WONCRG6mIZOl5yEJrpPQaJy4.crl (hash: dIE3yna4FR1XVSeH0q8eElowflC+/6MBrD+yn/OgNKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/265769-354e-4a8b-9542-94f97b3a2ce2/1/iu8WONCRG6mIZOl5yEJrpPQaJy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/265769-354e-4a8b-9542-94f97b3a2ce2/1/iu8WONCRG6mIZOl5yEJrpPQaJy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iu8WONCRG6mIZOl5yEJrpPQaJy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:8b:95:f4:c2:a7:19:e6:d1:3d:f4:ef:eb:fa:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8aef1638d0911ba98864e979c8426ba4f41a272e
Validity
Not Before: Apr 17 04:01:09 2026 GMT
Not After : Apr 18 04:01:09 2026 GMT
Subject: CN=b5148c8d8df65f20796b0821b5f010e6de9837d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fe:b7:d6:12:41:a3:36:ca:4a:5e:0d:b9:b8:
f9:0e:f8:e1:c1:2e:81:82:80:35:14:a5:2b:08:f4:
c3:04:71:4f:47:b1:46:c9:c7:02:4c:74:52:92:26:
f8:27:ba:bb:69:ab:9f:e4:90:8b:55:19:5c:0f:db:
50:12:1d:3e:b4:d9:b8:a9:d9:79:1d:2b:8d:aa:79:
03:2a:7a:c7:cd:21:a6:4f:00:3b:2d:59:21:cd:a0:
ee:93:44:17:3e:e4:5e:10:6e:82:46:f0:5b:29:44:
42:14:63:7f:a2:f8:13:95:62:53:da:53:23:59:26:
37:53:4e:1d:71:41:aa:38:03:06:0d:d4:41:96:19:
7a:17:f2:12:c0:64:6d:f4:bd:7c:dd:d5:89:61:4c:
82:44:a6:85:1c:d5:77:d4:8f:88:52:50:ae:b8:c6:
36:57:52:9b:20:06:cf:03:27:f2:a9:45:6d:19:4a:
71:7e:dd:fe:ed:69:02:23:80:ee:b4:11:7a:04:ef:
86:73:ec:56:f4:73:c2:09:ea:fb:86:e1:70:87:f0:
95:55:53:3c:d8:10:16:c6:d7:20:76:53:12:6c:03:
ee:e5:28:29:3b:9c:e8:63:8b:bb:a2:59:c7:cb:fb:
d2:0e:af:86:d2:32:c7:22:fb:58:3d:32:79:f8:b7:
1d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:14:8C:8D:8D:F6:5F:20:79:6B:08:21:B5:F0:10:E6:DE:98:37:D9
X509v3 Authority Key Identifier:
keyid:8A:EF:16:38:D0:91:1B:A9:88:64:E9:79:C8:42:6B:A4:F4:1A:27:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iu8WONCRG6mIZOl5yEJrpPQaJy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/265769-354e-4a8b-9542-94f97b3a2ce2/1/iu8WONCRG6mIZOl5yEJrpPQaJy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/265769-354e-4a8b-9542-94f97b3a2ce2/1/iu8WONCRG6mIZOl5yEJrpPQaJy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:f9:fd:6a:28:0e:2a:7e:e3:c1:e1:e9:c1:07:e3:dd:a9:52:
02:c5:a3:d3:53:13:52:4e:14:41:92:06:9b:9a:d6:cc:b2:1a:
08:f5:01:98:35:57:c4:4b:fb:76:b1:92:d1:af:f6:1d:71:40:
17:c7:2f:a7:93:6c:5e:80:92:ef:44:0b:7a:20:8d:f7:c8:8c:
38:4d:25:5d:11:5a:1e:3b:e2:0f:07:90:3b:12:18:0d:31:d1:
76:ba:21:4a:bd:75:65:a9:b3:a1:7d:64:9c:0f:f6:54:59:41:
94:1e:93:fd:bc:b7:9c:b4:fe:ef:35:72:f2:d6:64:95:4b:0d:
35:6d:cd:b5:aa:8a:cb:7f:72:28:31:66:c2:a5:b7:ac:2c:48:
21:0a:b8:30:e1:4a:e1:35:45:87:02:3c:8e:38:7e:1a:6d:70:
fc:76:4a:30:a3:9a:9a:89:8b:08:29:f6:b6:a6:cd:97:b2:21:
d5:80:15:e9:5b:a2:90:18:74:85:64:2a:24:a4:9f:94:ef:ac:
df:19:63:e5:e7:94:c8:84:84:92:85:07:70:e7:1f:ea:03:dd:
7d:3b:b5:8a:d0:e9:53:ce:c8:87:73:7e:31:5a:b6:26:15:f4:
ac:6c:30:69:0a:ca:63:bb:78:83:30:dc:5e:4a:13:4e:10:09:
cb:a2:29:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:06:47 2026 by rpki-client