Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/81068c-aed7-4127-88e4-62cb8aca9618/1/I8Aq9PWPETIK8xlpRuH86dBQyQY.mft
File: I8Aq9PWPETIK8xlpRuH86dBQyQY.mft (raw, json)
Hash identifier: +K++2xW/RbdT4UIT9ONjz3OHF9/oeRxF8Cf5AlrpxlA=
Subject key identifier: AE:BC:BC:3C:7D:F7:28:8C:1D:52:AB:34:48:73:C2:49:A0:CB:B8:82
Authority key identifier: 23:C0:2A:F4:F5:8F:11:32:0A:F3:19:69:46:E1:FC:E9:D0:50:C9:06
Certificate issuer: /CN=23c02af4f58f11320af3196946e1fce9d050c906
Certificate serial: 019D9A3EFCC08655D79502F94967A9AF731B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I8Aq9PWPETIK8xlpRuH86dBQyQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/81068c-aed7-4127-88e4-62cb8aca9618/1/I8Aq9PWPETIK8xlpRuH86dBQyQY.mft
Manifest number: 18BF
Signing time: Fri 17 Apr 2026 07:01:52 +0000
Manifest this update: Fri 17 Apr 2026 07:01:52 +0000
Manifest next update: Sat 18 Apr 2026 07:01:52 +0000
Files and hashes: 1: 1QjvKCsvTR0ccDdXAfoDfJPSyJE.roa (hash: qPTH0R4OHCDFXj8DShsOufuFq2W68jfp5X6XHwRILiE=)
2: I8Aq9PWPETIK8xlpRuH86dBQyQY.crl (hash: eZSqs4Zc8lQ+AMaCTrAhhghEDZLbBYJ8bXPF+yW/lqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/81068c-aed7-4127-88e4-62cb8aca9618/1/I8Aq9PWPETIK8xlpRuH86dBQyQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/81068c-aed7-4127-88e4-62cb8aca9618/1/I8Aq9PWPETIK8xlpRuH86dBQyQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/I8Aq9PWPETIK8xlpRuH86dBQyQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:fc:c0:86:55:d7:95:02:f9:49:67:a9:af:73:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23c02af4f58f11320af3196946e1fce9d050c906
Validity
Not Before: Apr 17 07:01:52 2026 GMT
Not After : Apr 18 07:01:52 2026 GMT
Subject: CN=aebcbc3c7df7288c1d52ab344873c249a0cbb882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d2:53:e5:68:c8:48:92:fc:36:1a:5c:b6:d5:
1d:b5:c2:92:b1:51:00:29:31:6b:ea:e0:d2:62:1c:
a1:9e:b9:4d:1f:8e:1b:7d:47:29:5f:7c:a9:1d:a6:
d3:14:cb:a2:b2:55:3c:a3:78:2c:99:50:15:61:da:
53:74:85:3b:a4:34:26:30:0a:30:a6:42:c4:ce:50:
91:27:fa:b2:dc:c7:fb:28:7b:30:68:a1:d8:8f:83:
0c:47:cc:8d:b1:00:cb:4a:6d:b9:93:4c:46:53:26:
f0:6d:14:be:cb:f9:9d:00:06:6c:33:de:74:d5:85:
20:62:9e:79:18:43:91:bf:f4:a7:e7:5f:3e:ac:c5:
f6:cf:5e:25:5f:6c:da:9d:56:b0:c6:a6:ae:3c:91:
df:65:50:78:00:db:8b:db:a9:84:a5:e3:7c:f1:7b:
b0:68:ca:00:20:87:28:c1:8d:a8:1d:d6:75:d8:a6:
6e:12:c1:1e:38:2b:34:e8:f3:34:8a:9a:21:db:4f:
cb:5a:05:52:33:88:49:da:9d:8f:42:19:5b:5c:82:
91:02:8a:7c:ba:8a:dc:14:20:c7:a5:79:ff:87:2e:
4f:16:17:87:2d:27:21:3c:59:95:17:26:33:77:b3:
27:0e:11:7d:93:41:b7:e9:c7:66:8e:6d:86:f6:b9:
04:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:BC:BC:3C:7D:F7:28:8C:1D:52:AB:34:48:73:C2:49:A0:CB:B8:82
X509v3 Authority Key Identifier:
keyid:23:C0:2A:F4:F5:8F:11:32:0A:F3:19:69:46:E1:FC:E9:D0:50:C9:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I8Aq9PWPETIK8xlpRuH86dBQyQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/81068c-aed7-4127-88e4-62cb8aca9618/1/I8Aq9PWPETIK8xlpRuH86dBQyQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/81068c-aed7-4127-88e4-62cb8aca9618/1/I8Aq9PWPETIK8xlpRuH86dBQyQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:90:68:18:a4:1d:cb:58:e7:83:1e:c1:c1:36:ca:0b:09:cc:
01:0b:df:8a:53:fc:3d:0b:76:e8:15:af:5e:b8:ed:62:33:2b:
af:77:92:76:ab:02:8d:85:6a:0c:f3:f5:8e:3d:96:a6:ed:36:
b2:25:2e:53:01:1f:04:28:43:13:ea:47:29:58:fa:bd:bf:74:
94:1d:87:98:42:39:64:06:44:b1:5d:0e:5b:1c:9e:8c:28:fc:
f2:68:f1:90:16:16:82:1e:27:7c:8c:a9:e2:80:32:ee:c7:fc:
a7:43:89:75:84:dd:58:9b:05:77:bd:96:af:47:41:cc:dc:48:
8a:d1:a9:d3:aa:00:52:87:5e:e6:98:30:f7:e0:ae:c6:46:3e:
a0:96:3d:42:de:ef:32:32:7e:f2:ed:6d:99:fe:b8:ec:04:72:
f8:88:2d:46:88:bf:2f:c3:65:f6:1e:c4:54:6f:e8:72:ce:e0:
f9:fb:4f:20:03:39:91:16:ad:b4:68:47:8a:91:af:04:2f:85:
7a:27:22:2a:87:b1:7f:35:a2:7d:de:b4:8f:61:71:af:ff:1f:
a4:04:8f:e4:fe:ad:6a:ff:1b:08:67:a9:7a:e8:cf:1f:10:cd:
d6:46:f2:2d:b4:c9:36:0d:18:30:ea:93:8a:23:e0:6c:fb:53:
c9:11:ab:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:43:10 2026 by rpki-client