Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft
File: IQ2p568B3nVEj0kGqsQb0pZOiEc.mft (raw, json)
Hash identifier: nIOqycj/6AZZ5gKvovPskMbZ3kgBbnWrNla6gJvbZIk=
Subject key identifier: 0E:B7:9C:49:1E:6C:99:E6:D5:6C:8C:61:17:DE:99:6D:34:63:D9:BF
Authority key identifier: 21:0D:A9:E7:AF:01:DE:75:44:8F:49:06:AA:C4:1B:D2:96:4E:88:47
Certificate issuer: /CN=210da9e7af01de75448f4906aac41bd2964e8847
Certificate serial: 019D9AAC16E14A8B18CE3296B821566C0FF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQ2p568B3nVEj0kGqsQb0pZOiEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft
Manifest number: 18C9
Signing time: Fri 17 Apr 2026 09:01:02 +0000
Manifest this update: Fri 17 Apr 2026 09:01:02 +0000
Manifest next update: Sat 18 Apr 2026 09:01:02 +0000
Files and hashes: 1: 5qofx5kn-ofCIj9o3NGivX2oyoc.roa (hash: 7NfNoXJjBTrvr3E7539ztDCcU2EbYZAvEuO82OgvQXg=)
2: IQ2p568B3nVEj0kGqsQb0pZOiEc.crl (hash: bGj39AkPC7wlSJGHNBCA3Ioj4bj+HvXstwdyNUfkXpc=)
3: mWpfuNKr59RM8vs6VkBzUlnVMDw.roa (hash: NvT/WJHbjfkyULAS3B3qYEFqcvvfoazpHQgER185/rQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQ2p568B3nVEj0kGqsQb0pZOiEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:16:e1:4a:8b:18:ce:32:96:b8:21:56:6c:0f:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=210da9e7af01de75448f4906aac41bd2964e8847
Validity
Not Before: Apr 17 09:01:02 2026 GMT
Not After : Apr 18 09:01:02 2026 GMT
Subject: CN=0eb79c491e6c99e6d56c8c6117de996d3463d9bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1d:58:ba:ed:38:29:67:17:28:76:51:cb:6e:
d9:2a:dd:32:11:ba:77:b3:2f:e2:5d:de:9d:db:73:
27:d5:9e:c8:41:37:a9:3a:b3:99:04:a5:fb:02:87:
a3:b5:0f:3d:8e:1c:33:6e:6e:d4:31:fb:2c:d7:f9:
a0:8c:51:eb:67:63:66:0f:07:cf:2f:4e:1d:47:b9:
50:d7:e8:52:c4:9d:f4:6f:e9:16:d3:b8:1e:01:c6:
83:24:97:b3:e2:8f:85:ca:b6:7d:b5:ff:55:2e:c6:
3e:5d:7a:b1:28:7a:b2:a2:3d:cf:5c:d9:29:d2:46:
c5:d0:8f:5f:78:4d:bc:44:a2:cc:3e:04:54:62:ee:
af:04:86:85:2a:3a:e3:82:db:22:0f:87:11:cc:28:
a0:11:12:92:05:3b:9e:1b:d8:65:3d:40:26:a0:5d:
10:15:d1:0b:db:d3:e2:ec:64:9d:f4:3d:44:04:9b:
0f:69:dd:4d:a8:61:c5:7d:3a:f1:94:52:19:cc:61:
4d:d8:51:0a:dc:ca:8f:2c:a1:35:dd:1e:60:70:42:
8c:70:6b:03:a1:9d:d2:88:3b:3c:45:9b:35:82:a8:
d1:b4:d9:c6:4e:48:7f:73:25:5e:7a:14:e7:d6:44:
27:fc:9a:df:5f:d4:6b:f0:6c:e3:b3:b8:3b:41:8f:
79:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:B7:9C:49:1E:6C:99:E6:D5:6C:8C:61:17:DE:99:6D:34:63:D9:BF
X509v3 Authority Key Identifier:
keyid:21:0D:A9:E7:AF:01:DE:75:44:8F:49:06:AA:C4:1B:D2:96:4E:88:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQ2p568B3nVEj0kGqsQb0pZOiEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:b1:f3:ec:2c:8e:46:77:ef:17:0d:03:df:25:fa:fc:cc:c4:
64:08:34:10:5e:12:44:aa:43:07:56:7d:47:8e:62:b6:01:36:
a1:b0:5d:8a:00:74:fe:50:51:b2:95:cc:6a:67:e4:82:a7:a4:
53:d9:4d:ce:97:aa:bf:38:99:2a:7a:86:c3:a2:72:b5:6f:1d:
bf:78:c8:55:3c:dc:3f:dc:f6:ac:93:ee:01:0d:79:dc:9f:fc:
5f:b9:7a:f6:85:63:4d:e7:5c:2d:c6:fa:08:8a:84:c5:3c:6e:
e1:81:8c:88:3d:44:6d:ca:64:79:a3:c5:d5:7c:a2:53:bd:03:
85:c1:63:5d:d5:3c:1b:2c:44:e0:01:21:20:37:9d:85:f7:4f:
de:89:7d:3a:fb:e2:e8:a5:f6:d7:21:80:91:87:a0:26:51:a3:
96:1c:44:40:92:fd:77:fa:e6:04:e0:93:7e:b9:ec:36:5a:cc:
2a:a0:25:e2:86:18:0c:40:bf:b8:6a:6e:2a:af:98:b7:ee:f9:
f3:b4:3d:53:f3:95:5e:a5:c6:87:8a:d3:57:8c:bf:66:34:41:
04:24:49:4a:c9:54:cb:71:dd:f4:c2:46:d1:bc:43:f3:de:77:
7f:ea:e7:c0:a4:99:45:76:32:c6:5a:ff:4e:56:da:4b:63:7f:
2f:b4:36:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:58:06 2026 by rpki-client