Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/IfwUL311pxS5rMZT0LXO0zfKRJU.mft
File: IfwUL311pxS5rMZT0LXO0zfKRJU.mft (raw, json)
Hash identifier: U5XX4b0mxmn3y8BMOzeYFe3wJU/FCo3SkgqG0ecVfYM=
Subject key identifier: E6:62:4A:8D:B7:A0:72:63:2F:BA:AA:F5:0E:20:D3:52:65:C4:C5:99
Authority key identifier: 21:FC:14:2F:7D:75:A7:14:B9:AC:C6:53:D0:B5:CE:D3:37:CA:44:95
Certificate issuer: /CN=21fc142f7d75a714b9acc653d0b5ced337ca4495
Certificate serial: 019D9A06AB578F316A523735EFA00D412082
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IfwUL311pxS5rMZT0LXO0zfKRJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/IfwUL311pxS5rMZT0LXO0zfKRJU.mft
Manifest number: 18C0
Signing time: Fri 17 Apr 2026 06:00:21 +0000
Manifest this update: Fri 17 Apr 2026 06:00:21 +0000
Manifest next update: Sat 18 Apr 2026 06:00:21 +0000
Files and hashes: 1: Hbn8x0ebxYPZ2S4cZB-DuECWRIY.roa (hash: vgpms375ZNHUjcZk9fgkMXFPfvTYsPPbiXsTHzCrq6o=)
2: IfwUL311pxS5rMZT0LXO0zfKRJU.crl (hash: mV3guHFKDwY2QwijktrWjmpeoFb7C8Q3o7NXZYWCdE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/IfwUL311pxS5rMZT0LXO0zfKRJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/IfwUL311pxS5rMZT0LXO0zfKRJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IfwUL311pxS5rMZT0LXO0zfKRJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:ab:57:8f:31:6a:52:37:35:ef:a0:0d:41:20:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21fc142f7d75a714b9acc653d0b5ced337ca4495
Validity
Not Before: Apr 17 06:00:21 2026 GMT
Not After : Apr 18 06:00:21 2026 GMT
Subject: CN=e6624a8db7a072632fbaaaf50e20d35265c4c599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:79:8d:11:d2:8b:e1:07:7c:59:62:d0:19:9d:
3b:75:47:a0:14:52:0b:89:c8:1c:79:a8:9e:dd:96:
0e:26:83:57:2c:37:8f:44:32:a3:c9:7c:71:84:b7:
93:10:99:00:47:aa:2f:7d:fd:b1:e2:b6:c5:6c:53:
f4:49:09:73:a6:69:4e:46:ea:ac:1f:12:22:3c:f9:
ca:f3:c1:55:23:d0:ca:81:b3:c4:99:4d:93:7a:0f:
0b:3c:3b:a5:1b:a5:29:bf:a3:72:2c:d8:f0:90:ec:
31:14:f0:1a:a0:38:ee:53:1c:96:8a:83:4c:09:71:
6a:c9:1a:7c:d8:3c:62:8f:b1:11:a5:40:69:4e:e4:
c4:15:5a:69:67:8f:3f:6d:3c:ce:3a:17:8d:00:e9:
b2:72:a3:0b:14:c8:13:d0:3a:4f:a8:f0:c1:2f:40:
5e:98:54:92:59:9c:01:0a:49:b5:50:e4:57:51:ae:
6c:6d:50:cf:e4:3a:b3:04:37:33:dd:2d:3e:df:64:
59:5d:8d:00:f7:3b:ef:00:23:4b:54:b1:42:2f:12:
a0:2d:ad:88:93:28:8d:26:94:1d:61:0a:b2:91:5e:
3e:2a:51:db:13:10:ac:29:be:a7:4c:98:29:b4:b4:
54:17:47:a5:31:fc:fe:0e:b5:4a:6f:05:9f:24:ee:
07:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:62:4A:8D:B7:A0:72:63:2F:BA:AA:F5:0E:20:D3:52:65:C4:C5:99
X509v3 Authority Key Identifier:
keyid:21:FC:14:2F:7D:75:A7:14:B9:AC:C6:53:D0:B5:CE:D3:37:CA:44:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IfwUL311pxS5rMZT0LXO0zfKRJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/IfwUL311pxS5rMZT0LXO0zfKRJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/IfwUL311pxS5rMZT0LXO0zfKRJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:0a:79:dc:8d:6d:f5:3f:b9:ae:49:2a:de:74:13:c2:d8:2b:
34:03:7f:f6:c6:60:09:11:c9:ba:52:e1:b9:81:d1:d8:e7:bd:
92:6d:23:62:8a:65:5f:44:4e:f4:20:a4:18:d6:d1:80:25:e7:
d9:5b:e5:d5:e9:99:5e:01:53:37:02:c5:5d:e3:d5:35:c8:0d:
57:db:5c:49:58:b6:c3:99:99:83:fb:55:25:57:c8:06:e9:bd:
78:ab:dc:53:de:56:5d:c8:a5:fc:f5:71:29:21:60:db:f4:30:
f2:d1:c6:f5:a0:b2:93:09:5b:76:5c:c6:8f:80:55:34:c8:40:
b5:a5:d8:a0:0a:94:7e:3f:80:da:3e:18:15:3a:ce:fe:13:0d:
84:d6:3c:03:f6:83:1f:a8:f0:5c:56:2d:ab:44:b4:12:d2:71:
70:a6:c7:82:b0:24:d0:64:a9:07:c2:d8:46:16:c4:6a:98:07:
89:84:9f:ff:92:eb:ea:83:75:16:5e:76:ee:0e:75:b9:da:78:
69:8b:b5:64:87:83:04:80:78:81:80:39:a8:f1:59:1c:c3:19:
77:06:32:b0:9b:d1:ce:8e:df:ca:56:fc:a3:26:58:d5:b5:a5:
96:4d:ce:74:42:d8:9f:75:0f:f5:32:3e:02:c4:09:27:42:32:
c2:a4:a7:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:08:11 2026 by rpki-client