Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.mft
File: iH0wEZNRUA8lmlfi_2hQeX0bTho.mft (raw, json)
Hash identifier: fGhFQiwvywLEhs0hsqCOIi2IvRqZ8wd+jeaaP1rWUbE=
Subject key identifier: C0:84:DE:80:46:DF:C7:A9:39:7E:50:D4:84:E8:C3:3D:6E:85:C7:94
Authority key identifier: 88:7D:30:11:93:51:50:0F:25:9A:57:E2:FF:68:50:79:7D:1B:4E:1A
Certificate issuer: /CN=887d30119351500f259a57e2ff6850797d1b4e1a
Certificate serial: 019D9A7494F461B16E0DBCF630BA725DED3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iH0wEZNRUA8lmlfi_2hQeX0bTho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 08:00:24 +0000
Manifest this update: Fri 17 Apr 2026 08:00:24 +0000
Manifest next update: Sat 18 Apr 2026 08:00:24 +0000
Files and hashes: 1: cFtA2whI-5eSAd_xz6FflVfrfcA.roa (hash: rjwPdM8tVlnPByunwjAWM9HihlVqQjzJw824S3HbwPc=)
2: iH0wEZNRUA8lmlfi_2hQeX0bTho.crl (hash: oay+NAnt+MKeGPQ6/9SpDar4YuULy1njMNrazw5XmBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.mft
rsync://rpki.ripe.net/repository/DEFAULT/iH0wEZNRUA8lmlfi_2hQeX0bTho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:94:f4:61:b1:6e:0d:bc:f6:30:ba:72:5d:ed:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=887d30119351500f259a57e2ff6850797d1b4e1a
Validity
Not Before: Apr 17 08:00:24 2026 GMT
Not After : Apr 18 08:00:24 2026 GMT
Subject: CN=c084de8046dfc7a9397e50d484e8c33d6e85c794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8e:fa:eb:ac:bb:44:96:36:65:60:e9:db:35:
cc:e5:95:8d:bf:54:3a:0a:ad:87:a3:5f:5c:23:26:
66:d6:2b:af:b5:62:a9:60:84:5c:bc:1f:89:1d:5b:
22:c9:a4:13:71:6b:3b:8c:52:b6:82:0c:7d:f7:a1:
d1:5d:7e:db:56:dd:ea:8b:e7:79:f0:85:e2:9c:6e:
bc:48:a9:eb:b8:52:b1:61:4d:bd:9a:3b:2b:99:84:
55:c7:74:c7:67:b4:d4:07:82:5b:60:a3:1f:4d:7a:
12:6d:bb:37:b8:c5:e4:be:11:77:22:da:2a:a2:69:
ed:23:2b:ec:21:a3:1d:fe:76:61:56:4b:43:e3:b1:
bd:e0:fa:3f:18:6c:c9:e9:77:e6:d0:99:20:24:81:
f2:51:c4:a1:df:eb:b0:45:61:25:2d:ff:a1:fb:4f:
1f:8e:34:f7:70:4b:7e:81:87:55:9d:62:45:c2:35:
cf:f2:7a:b9:a1:90:ec:dd:5f:6f:6f:58:e9:30:f7:
0e:ad:e2:e8:dc:88:f8:52:eb:7b:1f:57:a2:16:e9:
a8:3b:43:07:c6:25:b7:e1:88:db:2e:7c:62:c7:69:
93:26:33:8a:2c:56:92:cd:bb:53:f3:1c:11:64:1d:
9a:c7:ca:50:c4:b1:b1:f3:33:d8:80:d2:44:90:03:
3e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:84:DE:80:46:DF:C7:A9:39:7E:50:D4:84:E8:C3:3D:6E:85:C7:94
X509v3 Authority Key Identifier:
keyid:88:7D:30:11:93:51:50:0F:25:9A:57:E2:FF:68:50:79:7D:1B:4E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iH0wEZNRUA8lmlfi_2hQeX0bTho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:4b:df:48:4f:d9:80:82:76:00:a5:ed:0f:e4:77:7b:e3:2e:
eb:d6:8b:de:03:c4:f1:5d:13:25:5f:31:8a:95:49:bd:1d:36:
18:a4:ab:b4:31:dc:e9:ae:5e:89:86:50:d7:3f:9a:f4:37:b0:
63:e9:21:61:8e:70:ff:eb:5b:42:4b:21:60:e2:2a:c3:1b:2d:
97:f7:43:c5:04:c1:83:d3:6a:b3:b8:82:5f:d1:0a:9d:06:7c:
19:52:30:4e:2e:5d:16:67:3f:83:fa:0f:3a:7b:03:b2:c0:92:
17:4f:d6:5b:90:d9:4e:4c:f3:f8:eb:34:f6:65:f4:a2:ec:8f:
18:bf:b4:32:43:f2:8a:7f:1b:10:62:a3:9e:46:d8:d5:ee:8b:
96:30:4b:f4:5e:0f:cf:e7:3e:a7:c0:8f:e8:68:6b:6a:63:92:
2d:e0:e8:08:f8:3a:cb:16:03:b9:2b:1a:af:d1:e2:7a:66:de:
a3:43:de:8f:41:1e:7b:9d:4f:91:74:6c:94:02:9b:2a:26:bf:
09:86:e7:23:85:6a:04:ad:db:75:69:8b:63:22:80:a8:b9:a0:
ba:70:cb:c8:64:61:93:ed:6f:a7:e7:1a:40:0f:a6:3c:e9:24:
2a:0c:d3:aa:3f:46:09:a2:f9:d2:1a:5a:4d:e5:f3:fc:43:ad:
cf:67:36:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:19:16 2026 by rpki-client