Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/eb3e03-3968-4db2-bf80-43f6ae520b1a/1/iXwaiMnImulCVOIkHHiOl8H_Pkg.mft
File: iXwaiMnImulCVOIkHHiOl8H_Pkg.mft (raw, json)
Hash identifier: kKJqIoltN5u+7RuMwYZWK3ncm6HspXQKkuctLQ0zN1A=
Subject key identifier: 93:1B:44:49:EC:84:59:6A:1F:EA:DA:AF:A1:02:58:C6:B3:C9:80:AB
Authority key identifier: 89:7C:1A:88:C9:C8:9A:E9:42:54:E2:24:1C:78:8E:97:C1:FF:3E:48
Certificate issuer: /CN=897c1a88c9c89ae94254e2241c788e97c1ff3e48
Certificate serial: 019D9850640AFEF5A8F96A29612B91138859
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iXwaiMnImulCVOIkHHiOl8H_Pkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/eb3e03-3968-4db2-bf80-43f6ae520b1a/1/iXwaiMnImulCVOIkHHiOl8H_Pkg.mft
Manifest number: 18C1
Signing time: Thu 16 Apr 2026 22:01:38 +0000
Manifest this update: Thu 16 Apr 2026 22:01:38 +0000
Manifest next update: Fri 17 Apr 2026 22:01:38 +0000
Files and hashes: 1: ggAemkutc9Uj5OtMRscidUTfz_w.roa (hash: 2GT85Q2Z+evTjw6gSLFrkGmMogQndg6JWok6dkddHCY=)
2: iXwaiMnImulCVOIkHHiOl8H_Pkg.crl (hash: M21Xh44I4VkWayOH9vId8ctEAAT8SnsteUooVccMpeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/eb3e03-3968-4db2-bf80-43f6ae520b1a/1/iXwaiMnImulCVOIkHHiOl8H_Pkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/eb3e03-3968-4db2-bf80-43f6ae520b1a/1/iXwaiMnImulCVOIkHHiOl8H_Pkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iXwaiMnImulCVOIkHHiOl8H_Pkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:64:0a:fe:f5:a8:f9:6a:29:61:2b:91:13:88:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=897c1a88c9c89ae94254e2241c788e97c1ff3e48
Validity
Not Before: Apr 16 22:01:38 2026 GMT
Not After : Apr 17 22:01:38 2026 GMT
Subject: CN=931b4449ec84596a1feadaafa10258c6b3c980ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ca:ce:f0:65:d8:5c:41:bf:5b:ec:0f:43:87:
af:b7:84:38:8c:45:b3:dd:70:44:17:d9:3a:8d:cb:
1d:e9:1d:f2:cc:28:7e:b4:cd:b5:20:e5:92:69:9b:
ef:25:43:fd:63:80:a6:0d:b0:7c:78:0d:9c:50:88:
20:f8:6c:06:53:2f:53:61:06:01:62:d6:02:e5:f0:
6c:6c:b3:9f:29:32:df:a0:10:ed:3f:8d:86:28:c1:
9d:22:75:4e:3c:64:ae:de:7f:b4:03:e2:e5:c2:fa:
58:bf:d4:14:75:e4:01:05:d0:37:a9:f3:9c:9d:f3:
09:6d:a0:95:79:47:36:3e:b5:40:bf:8a:bf:51:de:
90:e1:7a:93:94:90:03:6b:db:df:95:97:91:3a:6d:
53:37:71:56:8b:fa:5d:c9:43:ce:23:dc:23:15:92:
3d:df:67:d5:c4:2d:20:3f:33:26:a9:ed:41:a1:96:
54:35:74:f0:2c:21:9f:b7:f2:69:ca:80:f7:4a:8d:
3f:5b:ce:21:68:ef:c8:9d:42:a9:61:63:73:28:3c:
9d:8c:08:e1:65:8a:86:a4:99:38:f1:62:74:55:59:
ed:e0:7f:29:e6:0b:b1:fc:b4:0d:c9:88:e7:97:c1:
de:83:f7:a5:70:02:39:2c:3e:7a:31:48:ea:02:82:
43:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:1B:44:49:EC:84:59:6A:1F:EA:DA:AF:A1:02:58:C6:B3:C9:80:AB
X509v3 Authority Key Identifier:
keyid:89:7C:1A:88:C9:C8:9A:E9:42:54:E2:24:1C:78:8E:97:C1:FF:3E:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iXwaiMnImulCVOIkHHiOl8H_Pkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/eb3e03-3968-4db2-bf80-43f6ae520b1a/1/iXwaiMnImulCVOIkHHiOl8H_Pkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/eb3e03-3968-4db2-bf80-43f6ae520b1a/1/iXwaiMnImulCVOIkHHiOl8H_Pkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:dd:39:c4:2f:ae:fa:7a:36:3c:6f:16:07:78:c6:31:b0:e6:
4d:d3:c4:56:16:b3:4e:da:9c:d5:39:22:2f:fd:05:3b:d3:2d:
29:3d:a1:0d:96:d2:fa:60:9c:e4:f3:98:28:65:4b:bb:3d:92:
ff:40:4a:de:55:d6:28:55:70:48:b6:44:03:53:b0:3d:77:82:
a2:17:cf:9f:a7:74:7f:27:da:79:df:24:3e:50:0a:37:08:64:
d3:ed:ec:7d:f7:6c:bd:f5:95:ed:dd:c1:88:e7:fa:e4:23:09:
16:8e:f2:53:df:ce:14:5f:d3:28:ea:4c:cc:31:99:c7:93:e2:
de:f6:c1:12:dd:35:4f:10:8e:35:a5:cd:56:6b:b6:84:a6:c0:
25:cb:d5:c0:38:33:e3:95:8f:5f:f5:b0:80:d5:b3:9f:9f:1e:
27:dd:3d:55:dd:31:19:18:d3:de:e3:e4:85:54:44:6e:96:19:
48:d8:93:27:e8:0f:5c:54:b3:f2:83:dc:17:55:a3:71:dc:d7:
ee:69:ee:ca:94:eb:9c:95:b1:e5:a2:90:3f:6b:7d:77:71:4c:
7d:76:6e:49:0b:5e:e9:24:1a:90:ea:a1:65:79:7d:70:0a:f0:
60:32:19:e6:d9:b3:bc:d9:86:d9:a2:58:22:4a:17:aa:09:79:
a8:a0:61:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:06:05 2026 by rpki-client