Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.mft
File: iH0wEZNRUA8lmlfi_2hQeX0bTho.mft (raw, json)
Hash identifier: 0IDhlsj+aedSaKXYWFRuNwvGCcIcALDtd9h3ABLHsZA=
Subject key identifier: 8E:89:C4:E0:6A:D0:A9:9B:C2:0E:B0:C7:FC:D9:40:19:1A:B3:F8:8D
Authority key identifier: 88:7D:30:11:93:51:50:0F:25:9A:57:E2:FF:68:50:79:7D:1B:4E:1A
Certificate issuer: /CN=887d30119351500f259a57e2ff6850797d1b4e1a
Certificate serial: 019D9C635A63B837DFC3F4FFF78FD52A7FCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iH0wEZNRUA8lmlfi_2hQeX0bTho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 17:00:49 +0000
Manifest this update: Fri 17 Apr 2026 17:00:49 +0000
Manifest next update: Sat 18 Apr 2026 17:00:49 +0000
Files and hashes: 1: cFtA2whI-5eSAd_xz6FflVfrfcA.roa (hash: rjwPdM8tVlnPByunwjAWM9HihlVqQjzJw824S3HbwPc=)
2: iH0wEZNRUA8lmlfi_2hQeX0bTho.crl (hash: 88w4OLwU/fRslMvKysDJK5rmNwwRpa9whncXo7LOr7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.mft
rsync://rpki.ripe.net/repository/DEFAULT/iH0wEZNRUA8lmlfi_2hQeX0bTho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:63:5a:63:b8:37:df:c3:f4:ff:f7:8f:d5:2a:7f:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=887d30119351500f259a57e2ff6850797d1b4e1a
Validity
Not Before: Apr 17 17:00:49 2026 GMT
Not After : Apr 18 17:00:49 2026 GMT
Subject: CN=8e89c4e06ad0a99bc20eb0c7fcd940191ab3f88d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fc:52:b7:e0:48:35:ad:67:54:6d:db:d4:ce:
80:bb:d4:0d:03:76:a0:02:85:3e:39:3d:34:00:88:
c3:87:15:9a:a5:eb:26:b4:bf:21:69:a3:32:f4:9c:
c0:ff:bb:c6:18:fc:63:9c:28:47:3f:bc:e4:e0:4d:
03:c4:6d:bd:a6:86:a7:bb:03:90:f7:0b:ff:78:c1:
41:f7:76:07:6c:1a:05:11:1b:9b:01:18:08:44:49:
c4:35:89:a2:cb:cb:f3:0f:61:81:97:64:d6:78:3f:
e9:5d:ba:43:87:bb:14:1d:6e:3f:3f:69:a5:d8:fd:
9e:7c:70:bb:32:c1:aa:18:c5:65:46:d8:8b:1e:9c:
f6:41:28:8e:c1:6a:fa:ec:73:a2:e0:c1:ac:e2:d2:
d0:5d:c2:3d:f4:72:2c:05:81:c3:25:d8:7a:62:f6:
a8:53:cf:ee:39:c6:f1:7c:c2:f6:b7:06:74:89:97:
72:84:b6:0f:a6:be:5e:33:ed:14:e0:24:66:0d:77:
af:79:e3:c8:0e:6c:f4:53:88:c1:ed:16:25:01:d2:
9c:e8:89:90:3f:1e:4e:a3:c6:02:90:a9:13:8e:79:
6d:bd:95:50:8b:85:5b:a8:b6:68:e8:e0:66:99:cc:
54:85:62:71:4b:cf:87:c8:e2:37:5f:30:f4:03:ac:
4f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:89:C4:E0:6A:D0:A9:9B:C2:0E:B0:C7:FC:D9:40:19:1A:B3:F8:8D
X509v3 Authority Key Identifier:
keyid:88:7D:30:11:93:51:50:0F:25:9A:57:E2:FF:68:50:79:7D:1B:4E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iH0wEZNRUA8lmlfi_2hQeX0bTho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:a6:12:8b:fe:f3:1f:1c:e1:2c:05:5c:94:4a:f7:f9:00:82:
9c:85:89:d8:24:6e:6b:3e:43:ff:fa:69:bb:38:10:bd:73:b6:
0e:27:9b:15:03:55:1f:67:f8:ca:09:a7:6a:ee:56:d4:94:50:
80:c4:11:39:9e:1f:82:30:75:ab:c2:87:f5:31:a0:93:38:0d:
de:50:2f:4e:60:66:61:67:e4:cc:2b:62:4f:cb:76:2e:c2:43:
4f:48:29:e9:83:3a:ce:1b:5c:20:f6:dc:c2:ad:a5:51:29:c0:
7a:7d:c3:4e:b2:25:d8:a8:00:11:80:94:23:fc:67:ef:ee:87:
1a:a2:92:d4:88:2c:40:aa:55:b5:81:51:0f:23:2e:ff:1b:c4:
a4:20:b2:2e:b6:f7:2f:fe:93:eb:af:2b:5b:64:a9:a0:f2:98:
de:c2:e5:a0:b8:2a:ba:4c:78:cf:b5:0b:c6:b4:f4:30:a6:ff:
f5:67:c8:ec:26:ea:39:01:15:6e:9c:a7:1b:e4:db:e7:0e:22:
d4:6d:a3:b1:47:da:ec:0d:4d:12:36:c8:80:39:05:47:fe:62:
cc:d1:80:8a:7f:72:e8:c3:17:77:f8:e7:b6:d5:cc:31:f8:4f:
da:01:80:2e:23:65:66:70:83:62:d4:3e:90:7f:88:7b:17:ee:
e5:0c:7e:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:44:32 2026 by rpki-client