Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/ijH4vqM7AFZEbjMh7t46Fw-9fB8.mft
File: ijH4vqM7AFZEbjMh7t46Fw-9fB8.mft (raw, json)
Hash identifier: zlTKMIZ+wpI/lNkMrx2R3h7y3xvfUbd7lcqTVgZEORw=
Subject key identifier: 02:09:34:E1:EE:55:48:34:2B:D0:7B:A3:E8:BC:20:A0:B5:60:A7:BD
Authority key identifier: 8A:31:F8:BE:A3:3B:00:56:44:6E:33:21:EE:DE:3A:17:0F:BD:7C:1F
Certificate issuer: /CN=8a31f8bea33b0056446e3321eede3a170fbd7c1f
Certificate serial: 019D98F4467A863E4F8B5E5797185A28C333
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ijH4vqM7AFZEbjMh7t46Fw-9fB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/ijH4vqM7AFZEbjMh7t46Fw-9fB8.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 01:00:38 +0000
Manifest this update: Fri 17 Apr 2026 01:00:38 +0000
Manifest next update: Sat 18 Apr 2026 01:00:38 +0000
Files and hashes: 1: cAmtJXGnG8QQQB9duiFpy_AlVMA.roa (hash: cKqublREqa6cRbwA1qkBVAFhLjbHKxlFRKgMl8ubUgg=)
2: ijH4vqM7AFZEbjMh7t46Fw-9fB8.crl (hash: xPnQBXpSWobCllh5RVSBB2CUCSOBBRqLbWMM1aJRvw4=)
3: pbc8FOs2r0cKcmP0E7zfMwoAuYY.roa (hash: ct93H+RGleD4usNSOMWfcCTKS9VgX/zLNOdAP8LEHt8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/ijH4vqM7AFZEbjMh7t46Fw-9fB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/ijH4vqM7AFZEbjMh7t46Fw-9fB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ijH4vqM7AFZEbjMh7t46Fw-9fB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:46:7a:86:3e:4f:8b:5e:57:97:18:5a:28:c3:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a31f8bea33b0056446e3321eede3a170fbd7c1f
Validity
Not Before: Apr 17 01:00:38 2026 GMT
Not After : Apr 18 01:00:38 2026 GMT
Subject: CN=020934e1ee5548342bd07ba3e8bc20a0b560a7bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:92:65:fb:04:25:ab:15:4a:2a:10:36:d2:b1:
cb:cc:c5:76:7f:77:09:45:9f:0b:6d:2b:42:72:57:
bb:65:bf:92:ed:b5:45:a7:3f:d2:26:09:43:ec:c2:
41:d1:39:1c:b9:25:9a:ab:78:51:cc:32:94:84:5d:
53:4a:1a:0e:49:64:48:32:96:0a:53:c7:41:dd:4d:
9e:0c:dc:e7:fd:9a:5d:3b:15:64:d9:c4:4f:75:eb:
08:5c:34:e0:25:a2:32:64:cc:b1:da:67:16:c4:97:
b7:48:ca:28:56:ad:7f:ab:44:6d:f9:91:77:9d:77:
79:a9:43:97:7f:2d:59:fc:e4:32:bf:71:fc:8a:3d:
0c:ac:20:fe:65:df:93:50:95:c8:82:a5:49:c3:ee:
92:5f:56:88:6e:90:cf:33:85:42:65:15:6b:c6:dc:
8d:87:a3:3b:52:3b:13:61:c0:4b:58:69:d9:f4:e4:
dc:f7:3e:c1:54:d5:e7:1f:9d:d7:24:28:ba:98:a1:
19:3d:56:27:64:c5:86:fa:53:f6:6c:9e:b2:14:e6:
b4:2e:cb:a0:9b:4c:b1:1d:8d:30:c8:7d:cf:59:74:
ff:68:86:fd:37:c5:86:df:97:c8:97:1f:44:74:89:
d1:86:d8:37:5f:46:97:cf:ee:47:7d:39:d4:fb:da:
bf:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:09:34:E1:EE:55:48:34:2B:D0:7B:A3:E8:BC:20:A0:B5:60:A7:BD
X509v3 Authority Key Identifier:
keyid:8A:31:F8:BE:A3:3B:00:56:44:6E:33:21:EE:DE:3A:17:0F:BD:7C:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ijH4vqM7AFZEbjMh7t46Fw-9fB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/ijH4vqM7AFZEbjMh7t46Fw-9fB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/ijH4vqM7AFZEbjMh7t46Fw-9fB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:a9:03:ec:8b:dd:1c:80:a8:99:ce:31:58:3a:30:14:f3:55:
78:cc:d2:ac:4f:ea:13:5c:e9:57:35:96:92:20:85:6f:3e:92:
d4:d3:42:3e:84:8d:dc:fc:03:9c:e9:95:57:91:df:45:27:bb:
90:9d:0c:87:dd:01:6a:d1:d0:c2:4f:9b:42:58:ba:c3:4c:a1:
37:54:07:98:b4:ca:98:01:9e:2c:eb:9a:3f:ca:96:52:8f:22:
69:8b:65:d9:0b:a7:7c:a8:a5:fe:b8:04:8d:2d:b2:8b:06:b9:
ae:71:20:7e:a9:d5:db:d1:db:02:9c:90:9d:67:96:37:e6:99:
19:bf:93:bb:72:60:29:eb:90:b6:37:f9:d8:3f:15:76:f2:9e:
34:1b:5c:31:3f:db:20:91:1c:d8:1e:cf:af:e5:18:31:9a:a2:
3f:8e:3b:11:a5:f2:d7:dd:a9:34:42:1d:67:62:ad:38:cd:33:
53:45:9b:3e:40:e4:b3:1c:b7:25:18:79:fe:73:b0:97:9e:c6:
e3:04:24:e0:0d:d1:7a:9e:24:ab:88:54:67:52:c8:6f:58:e9:
5f:58:d6:c8:ff:82:fa:98:8b:9e:be:aa:46:28:39:07:c5:ce:
4e:f6:7c:f8:81:be:79:a4:43:c6:84:9c:8e:4f:1c:24:eb:01:
42:8b:98:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:30:36 2026 by rpki-client