Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/e954b9-8738-4496-89ad-78a126bf0adc/1/ilUqhuMbaeXVMg7egdNLsSikXO4.mft
File: ilUqhuMbaeXVMg7egdNLsSikXO4.mft (raw, json)
Hash identifier: hskneaeffh+8/0nCAE16hq8PQJhiaC0UQcsoFz+CoSA=
Subject key identifier: 86:A9:30:0A:C1:00:22:74:17:A4:42:AA:B9:62:B7:01:E5:DC:B8:31
Authority key identifier: 8A:55:2A:86:E3:1B:69:E5:D5:32:0E:DE:81:D3:4B:B1:28:A4:5C:EE
Certificate issuer: /CN=8a552a86e31b69e5d5320ede81d34bb128a45cee
Certificate serial: 019D992B15F309E052BD3B7616DE4127CD11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilUqhuMbaeXVMg7egdNLsSikXO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/e954b9-8738-4496-89ad-78a126bf0adc/1/ilUqhuMbaeXVMg7egdNLsSikXO4.mft
Manifest number: 18BF
Signing time: Fri 17 Apr 2026 02:00:30 +0000
Manifest this update: Fri 17 Apr 2026 02:00:30 +0000
Manifest next update: Sat 18 Apr 2026 02:00:30 +0000
Files and hashes: 1: XxSdnjPnpzy5LyGftSstm6-fmZk.roa (hash: W+0II2qd7g6eEZycD1RXmyb9DYBIh88Zg19DWlRL1dE=)
2: ilUqhuMbaeXVMg7egdNLsSikXO4.crl (hash: PVsVhvMIRSSY6BuPXjzB1gvKct2KVl3AsVPHLePVKrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/e954b9-8738-4496-89ad-78a126bf0adc/1/ilUqhuMbaeXVMg7egdNLsSikXO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/e954b9-8738-4496-89ad-78a126bf0adc/1/ilUqhuMbaeXVMg7egdNLsSikXO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ilUqhuMbaeXVMg7egdNLsSikXO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:15:f3:09:e0:52:bd:3b:76:16:de:41:27:cd:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a552a86e31b69e5d5320ede81d34bb128a45cee
Validity
Not Before: Apr 17 02:00:30 2026 GMT
Not After : Apr 18 02:00:30 2026 GMT
Subject: CN=86a9300ac100227417a442aab962b701e5dcb831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:cc:4e:0d:e7:e7:a1:7d:77:19:ff:3a:30:88:
e5:1a:23:8a:f1:9e:56:3b:31:12:d4:98:ff:34:ac:
ec:06:a8:d2:7c:cd:a4:c1:2e:d3:17:7a:13:e2:c2:
cf:9c:f6:60:db:d3:13:68:b3:6c:17:38:00:23:1d:
43:bd:48:09:a2:d4:1b:62:e1:c7:e4:a7:c7:38:05:
fd:5c:21:20:2b:3b:57:ef:80:77:ae:19:2a:2c:ae:
9b:42:81:80:67:60:78:e3:e5:12:fd:e9:6e:7a:cb:
f7:5c:4e:60:33:ae:d9:fa:ac:34:94:d9:14:14:45:
fb:d1:0f:38:76:75:af:97:91:91:6c:72:7b:26:48:
03:87:a4:77:0a:2a:3c:0d:21:f7:e6:27:a3:22:72:
46:b2:24:66:fb:da:c4:b3:e8:31:4f:33:cd:33:71:
17:61:79:9d:ce:b5:53:9d:bf:f0:22:a6:82:11:c2:
e2:43:11:59:a0:62:5e:00:bc:1e:fe:a2:2f:3d:8e:
49:8f:3b:ed:a1:19:d0:aa:4e:e8:4c:23:ae:05:3c:
06:07:d2:70:f6:e7:06:92:85:f3:53:68:42:6c:2e:
3b:82:17:4d:09:e3:41:2f:28:9f:6b:56:16:2d:6d:
98:d1:74:ce:72:33:a8:b6:9c:58:7c:66:bf:7f:ed:
8e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:A9:30:0A:C1:00:22:74:17:A4:42:AA:B9:62:B7:01:E5:DC:B8:31
X509v3 Authority Key Identifier:
keyid:8A:55:2A:86:E3:1B:69:E5:D5:32:0E:DE:81:D3:4B:B1:28:A4:5C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilUqhuMbaeXVMg7egdNLsSikXO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/e954b9-8738-4496-89ad-78a126bf0adc/1/ilUqhuMbaeXVMg7egdNLsSikXO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/e954b9-8738-4496-89ad-78a126bf0adc/1/ilUqhuMbaeXVMg7egdNLsSikXO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:c3:3d:c7:d5:99:50:00:cc:74:6b:72:e3:a6:cd:cf:32:12:
14:1c:29:b1:ea:96:ae:80:e3:e5:98:c9:76:8a:86:a8:f1:3c:
98:1f:9a:8b:be:e6:ac:7c:ef:31:a1:3f:92:bc:5f:a9:82:0b:
33:90:df:e7:b0:a0:1c:26:59:77:3c:ab:38:6c:d0:29:1f:ef:
63:3c:9c:07:a7:24:ed:7c:e1:c7:23:ca:00:bd:f2:a8:84:fe:
1c:6c:26:56:69:ae:d5:c6:87:54:d6:98:66:68:a7:11:34:f7:
e7:2b:67:c6:5a:2c:65:ec:d7:e3:aa:6a:c4:67:38:5a:a6:d4:
aa:fe:6b:89:fa:ef:1e:9a:2d:3e:15:b0:c5:22:c9:05:3d:df:
79:bb:c2:7e:49:c1:67:62:2f:6a:40:01:9f:54:c9:8c:ec:54:
4c:bb:f1:ab:85:63:2d:80:7c:53:86:b3:5f:80:0a:c6:4d:ec:
a3:48:0a:d7:c5:b5:fa:ce:93:c1:5e:bf:9e:c2:b8:7c:72:1e:
1f:6c:f3:ac:0c:b1:a5:eb:f0:48:ae:d1:b4:8e:82:aa:02:2e:
a5:42:a3:eb:91:5f:35:ab:57:46:b5:f3:f2:f9:50:cc:59:f2:
77:3a:1d:b4:21:03:de:43:d6:3a:c5:d4:b7:14:f0:f8:4a:2f:
e4:4c:38:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:01:25 2026 by rpki-client