Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.mft
File: iBr4X4HdPzskqxTtH0LHzEZlAvA.mft (raw, json)
Hash identifier: Oy40wbm3amJqE1sb+7gdOp6XE0S4+wnEmAriY2E5Ynk=
Subject key identifier: BD:32:55:B6:78:BA:75:73:E0:A7:13:D0:73:FF:B7:18:30:4A:71:0F
Authority key identifier: 88:1A:F8:5F:81:DD:3F:3B:24:AB:14:ED:1F:42:C7:CC:46:65:02:F0
Certificate issuer: /CN=881af85f81dd3f3b24ab14ed1f42c7cc466502f0
Certificate serial: 019D9B198297D181E959045164B7388CA01F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBr4X4HdPzskqxTtH0LHzEZlAvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 11:00:33 +0000
Manifest this update: Fri 17 Apr 2026 11:00:33 +0000
Manifest next update: Sat 18 Apr 2026 11:00:33 +0000
Files and hashes: 1: iBr4X4HdPzskqxTtH0LHzEZlAvA.crl (hash: eX4hcY0uOcCF9FsiGl12y63T3WIrmbqho5O4gbr9UIU=)
2: unrdcZbrdHFGkYI2NvQ0Uuo8iuQ.roa (hash: CvLqQM5rLi1faTdwSBeTlBwQCQBbSATUvwP2tHqg/FY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iBr4X4HdPzskqxTtH0LHzEZlAvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:82:97:d1:81:e9:59:04:51:64:b7:38:8c:a0:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=881af85f81dd3f3b24ab14ed1f42c7cc466502f0
Validity
Not Before: Apr 17 11:00:33 2026 GMT
Not After : Apr 18 11:00:33 2026 GMT
Subject: CN=bd3255b678ba7573e0a713d073ffb718304a710f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:97:1d:37:68:7f:67:19:f9:1f:01:47:13:e8:
e1:e4:5a:c9:21:ea:07:a5:8e:fb:d6:75:cc:08:6e:
c1:b9:41:ac:a6:c0:a9:b6:4d:53:88:4a:7d:84:b3:
02:3b:9d:c6:e7:e7:d5:db:11:15:b6:ce:49:bc:9d:
58:3f:62:cb:8f:05:d5:6a:3c:c1:0b:48:ae:50:0d:
d8:16:e8:76:19:71:f8:be:c0:25:f1:72:ba:19:61:
f8:5a:e2:d4:de:f7:60:62:de:a9:df:85:14:60:e4:
31:d2:fe:6b:76:58:a6:87:2e:b5:d1:ae:a5:60:d4:
30:e5:8c:a5:12:8f:26:ba:e8:05:1e:f8:c4:26:fe:
6d:0c:1b:34:be:eb:a8:79:6f:84:38:3f:fd:e3:bf:
61:b8:ae:44:29:23:27:5b:16:41:62:96:5f:3b:ed:
4f:2c:76:80:de:72:ae:52:71:05:e1:ab:45:5b:2f:
df:d6:01:fe:a9:14:ca:6b:be:66:bc:c4:e4:2d:37:
f0:46:f4:15:f9:cf:05:82:ce:50:34:1b:0b:2d:99:
c0:01:89:27:ff:8c:12:b5:d7:15:5f:16:0f:8a:fb:
2b:df:1b:5c:e2:5b:c3:e7:3d:f4:21:21:ff:58:6d:
77:dd:96:bc:ca:5f:0a:c1:5d:48:a6:36:c2:d4:c8:
d1:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:32:55:B6:78:BA:75:73:E0:A7:13:D0:73:FF:B7:18:30:4A:71:0F
X509v3 Authority Key Identifier:
keyid:88:1A:F8:5F:81:DD:3F:3B:24:AB:14:ED:1F:42:C7:CC:46:65:02:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBr4X4HdPzskqxTtH0LHzEZlAvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:c7:f9:f5:8f:7c:0f:4e:a2:be:53:2a:fa:84:8a:9e:99:c8:
b2:10:94:3f:8c:c2:d8:8f:58:c4:2e:5b:a2:c0:75:e5:77:b0:
b9:ed:7f:2e:21:55:b0:0f:ab:43:52:30:ff:8f:c8:4c:e4:d7:
4d:a1:af:6b:69:d5:98:65:ee:5a:17:dd:fb:2e:0f:05:d8:1a:
a8:5b:7f:0c:5f:f5:bb:a3:7f:3c:8f:a6:2a:06:27:d8:19:fb:
30:b7:b6:7c:cb:05:b0:5d:4d:ec:79:9a:db:da:e0:12:98:cb:
5e:57:a7:33:75:6d:f7:52:b1:f6:d0:95:95:d0:62:73:51:39:
80:49:5a:42:c2:f4:6b:fc:99:52:79:9a:13:2a:b1:78:84:a1:
ce:a7:bd:e3:b1:55:bc:8b:68:14:b7:d7:c1:53:9d:ab:1d:99:
15:3e:2c:9b:fd:ff:a8:63:1c:66:f4:f8:6d:7d:d4:8f:78:da:
19:e7:3f:10:21:bb:e3:90:9e:f6:15:8b:da:30:42:ad:cc:96:
51:8e:dd:51:7e:c2:c1:19:22:3e:57:5e:4e:c2:4b:11:a5:29:
ad:3a:38:5c:5e:a7:26:63:bd:5a:d7:da:92:8b:7e:b8:c4:09:
ce:ca:1b:a5:b6:39:06:9b:6f:6a:59:1d:ec:eb:d0:83:03:24:
b7:b0:1b:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:37:50 2026 by rpki-client