Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.mft
File: i2E3lJJwULIlJatwCRg1QI7uTHk.mft (raw, json)
Hash identifier: nJBOrwU0FISSO6CXpTP2kQ20mLro+eMVgkKSvIAw/MI=
Subject key identifier: C8:B6:69:B0:4A:D0:DE:EB:CA:72:53:4A:CC:98:79:4E:E9:12:1F:91
Authority key identifier: 8B:61:37:94:92:70:50:B2:25:25:AB:70:09:18:35:40:8E:EE:4C:79
Certificate issuer: /CN=8b613794927050b22525ab70091835408eee4c79
Certificate serial: 019D9AABB6B8713DEF0C4ED8D620837FFEFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2E3lJJwULIlJatwCRg1QI7uTHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 09:00:37 +0000
Manifest this update: Fri 17 Apr 2026 09:00:37 +0000
Manifest next update: Sat 18 Apr 2026 09:00:37 +0000
Files and hashes: 1: JOkPA8hTaCex6PevZHvmCNxtsfs.roa (hash: 0uXj8pryRRozEl6lHQb46ndxpU/qwFl9p2os5lcSSok=)
2: i2E3lJJwULIlJatwCRg1QI7uTHk.crl (hash: 8nbfbg5vunhswW4ZrTRwh8zGe6bRdZ6Yknqpss/2zCA=)
3: w883UTvE9aAPM26F3jGQ91P2JH0.roa (hash: Zo+XYBLtWLmmmelaOVtJ2aF9Vo4DulRMeStZXPCZZiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2E3lJJwULIlJatwCRg1QI7uTHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:b6:b8:71:3d:ef:0c:4e:d8:d6:20:83:7f:fe:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b613794927050b22525ab70091835408eee4c79
Validity
Not Before: Apr 17 09:00:37 2026 GMT
Not After : Apr 18 09:00:37 2026 GMT
Subject: CN=c8b669b04ad0deebca72534acc98794ee9121f91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6e:53:eb:f2:10:ba:7a:7b:1d:8f:06:4d:3b:
ac:6a:e3:01:47:5d:7e:f7:b9:5e:1c:38:73:c2:36:
be:b1:17:da:f8:c2:03:a0:5e:13:e4:4c:28:fa:82:
b2:b4:83:3f:c6:ca:f1:16:b8:84:90:d9:3a:3c:9d:
fd:e3:2e:44:88:af:4c:e6:31:e7:06:53:f1:82:f8:
66:ba:86:1b:99:1e:d1:c7:39:e4:cf:3d:51:55:88:
44:bd:d5:a9:53:13:70:b2:6e:85:14:74:2c:a7:6c:
dd:0b:5b:b2:52:03:29:b3:4d:8c:0e:09:73:c3:b7:
43:73:44:a1:56:0d:9c:a7:9c:a5:a1:b6:dc:01:2d:
96:4c:5f:f2:20:67:63:89:b7:9c:35:b3:8f:29:2c:
d1:90:50:c1:74:9d:1e:f3:18:c6:46:ae:d3:5b:e6:
3b:83:5f:ce:7a:ab:7a:49:13:5d:b5:b1:9f:72:a4:
4d:99:e1:5d:23:4c:ed:ed:87:c8:b9:cd:38:eb:01:
c2:1b:31:ab:68:34:65:17:bc:c6:67:8b:03:ba:f9:
66:96:86:f3:b7:58:cb:0f:15:97:cd:a6:d2:67:da:
00:6d:5c:a5:e3:71:26:1d:2c:b2:5f:7e:29:ba:d1:
ce:4b:a7:8f:81:22:e5:3a:4a:cc:e3:42:7c:28:86:
a2:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:B6:69:B0:4A:D0:DE:EB:CA:72:53:4A:CC:98:79:4E:E9:12:1F:91
X509v3 Authority Key Identifier:
keyid:8B:61:37:94:92:70:50:B2:25:25:AB:70:09:18:35:40:8E:EE:4C:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2E3lJJwULIlJatwCRg1QI7uTHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:7c:9f:fe:20:65:21:9f:26:87:a6:a9:a1:ed:7d:1b:cc:5c:
85:b5:8a:f3:6c:23:c3:8d:98:d7:af:70:c3:48:9a:96:bd:a2:
b0:b6:e7:9b:51:f2:1d:52:c9:e2:81:a1:f3:20:d5:e8:76:7f:
4d:6b:e7:5a:18:cd:22:00:aa:85:b4:f9:49:a4:ae:e5:7a:73:
c7:f9:69:7f:d9:87:62:59:9d:b6:10:35:e9:66:53:d7:a0:22:
43:0e:82:34:17:cb:91:79:25:33:c8:d6:73:6e:cf:f8:13:a4:
3a:39:4e:da:f9:48:47:a8:c0:24:fa:ba:ff:87:95:42:1f:87:
de:6f:24:55:3f:98:f2:4d:6c:ab:65:7a:27:ce:68:3a:d3:01:
31:61:90:90:5f:da:a6:c8:33:2e:1b:7a:ce:b7:af:8c:06:e2:
55:27:52:be:1a:8c:cc:5f:a6:4e:68:80:a6:c5:82:df:e5:de:
0e:3a:30:ee:2a:35:02:d3:73:6e:1f:30:05:7e:40:33:c9:15:
07:bb:cf:6a:09:d5:8b:6d:25:55:96:11:1d:09:96:89:f3:b2:
0e:c6:c9:b4:39:a9:30:13:7e:e9:34:0b:cc:75:3e:ca:e2:df:
3a:19:cd:d9:95:00:5d:63:8b:55:93:95:a5:a2:85:99:ec:04:
a0:e0:c3:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:47:31 2026 by rpki-client