Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/922bcd-f1ad-4d63-8243-294b1aa14866/1/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.mft
File: iVNk3Y_3MKkIsJtfmRPBU_wWqjw.mft (raw, json)
Hash identifier: NfMfBwXXE0Pj3Qo0Z2ffEy4cuL4M2zWTKMlffuJglac=
Subject key identifier: 9F:97:46:CA:35:7B:6F:56:D3:FA:D2:36:BE:DD:75:C7:4E:0B:9B:42
Authority key identifier: 89:53:64:DD:8F:F7:30:A9:08:B0:9B:5F:99:13:C1:53:FC:16:AA:3C
Certificate issuer: /CN=895364dd8ff730a908b09b5f9913c153fc16aa3c
Certificate serial: 019D9AABDB8BA2E4B87561CF3026004FCFEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/922bcd-f1ad-4d63-8243-294b1aa14866/1/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 09:00:47 +0000
Manifest this update: Fri 17 Apr 2026 09:00:47 +0000
Manifest next update: Sat 18 Apr 2026 09:00:47 +0000
Files and hashes: 1: VzL5RLnlQJ3wSeF6IZXD0hLHbzI.roa (hash: rYHDP0eMxniB9OvjMw+m6Idpm0cWRBfVpSJ7IC660D8=)
2: iVNk3Y_3MKkIsJtfmRPBU_wWqjw.crl (hash: eJ9aiVMOv5wb9dLJT/cQYR+sUZ/dmBHqynRIif7ee2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/922bcd-f1ad-4d63-8243-294b1aa14866/1/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/922bcd-f1ad-4d63-8243-294b1aa14866/1/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 09:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:db:8b:a2:e4:b8:75:61:cf:30:26:00:4f:cf:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=895364dd8ff730a908b09b5f9913c153fc16aa3c
Validity
Not Before: Apr 17 09:00:47 2026 GMT
Not After : Apr 18 09:00:47 2026 GMT
Subject: CN=9f9746ca357b6f56d3fad236bedd75c74e0b9b42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:53:70:70:34:44:57:90:02:b7:9f:d6:26:37:
50:6a:dd:3b:ae:65:7c:82:d6:d1:4f:40:d6:98:fb:
d5:d5:a7:36:28:71:66:d8:23:0a:ea:ac:fc:fd:03:
c0:5b:10:4f:ec:a5:42:0d:d1:44:d4:de:1b:01:68:
e9:cc:be:6d:47:e2:b1:56:ed:f5:13:7c:26:f1:b2:
84:15:7a:98:f7:78:dc:07:25:7e:49:b4:da:e1:bf:
18:19:7b:d2:1f:7c:a8:fb:12:9c:b4:74:14:8c:c7:
6f:1f:77:d6:1b:92:3d:ec:e8:23:1a:b3:76:3a:f3:
78:3d:66:e3:79:93:aa:0c:1b:80:5e:38:b5:69:63:
05:bb:76:01:18:f6:e7:d7:c7:50:60:af:72:f6:58:
a4:e7:81:78:0c:22:8c:c7:5d:7b:9f:2f:cf:31:50:
00:2e:c7:ae:c3:21:af:d8:ad:04:bd:8c:3e:5d:a9:
02:82:b3:db:6c:d2:eb:18:c7:1e:f6:6d:fe:96:ec:
d2:08:c3:6f:ea:4d:de:27:81:8d:43:ac:a7:88:c0:
65:3b:fe:5f:e2:1c:8d:ae:89:f0:a3:1d:7e:1c:15:
57:54:96:fa:85:e2:5b:8b:bf:53:a5:7a:f3:93:a7:
f8:0d:9c:bb:70:35:7d:0e:a2:07:0c:e8:83:4f:2c:
70:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:97:46:CA:35:7B:6F:56:D3:FA:D2:36:BE:DD:75:C7:4E:0B:9B:42
X509v3 Authority Key Identifier:
keyid:89:53:64:DD:8F:F7:30:A9:08:B0:9B:5F:99:13:C1:53:FC:16:AA:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/922bcd-f1ad-4d63-8243-294b1aa14866/1/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/922bcd-f1ad-4d63-8243-294b1aa14866/1/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:73:b8:39:e9:50:77:1b:76:b9:ef:05:d2:87:54:d5:1e:24:
43:50:77:06:da:69:41:31:30:92:12:ca:6e:4d:31:1b:9c:52:
f9:b2:ec:f5:fb:42:95:68:44:a0:17:05:cf:8c:b2:13:ad:64:
70:6e:cc:0c:2b:ab:f9:fd:5e:5f:a0:f1:eb:cf:6d:8e:47:14:
fd:75:43:85:6b:56:e5:7f:7e:45:41:e5:3f:7a:e5:a5:eb:00:
df:c2:0c:41:bd:50:be:ab:98:ba:a6:f8:68:0a:90:95:78:92:
4a:46:e2:9d:14:7a:fe:83:48:c2:65:eb:1f:38:fc:37:8f:5d:
bb:ef:20:11:a1:30:27:aa:7e:28:65:8d:db:2a:e4:29:3e:aa:
20:f8:68:b4:65:e6:e2:c7:a6:ff:9b:e6:2d:0c:ce:1f:29:5e:
f4:2d:6e:e5:f2:3d:c5:f3:9d:1a:e9:a2:3f:76:06:14:c6:8b:
77:c2:77:d3:85:3e:f2:59:bd:e5:9f:94:a6:d1:ac:27:f9:2a:
3f:43:f5:42:20:9e:e4:50:3f:7f:99:45:53:a8:a2:dd:16:99:
8b:70:ac:ea:2b:a8:00:5d:8f:41:64:bc:14:46:4e:f1:aa:46:
8d:19:7a:57:94:91:3e:e9:ed:9e:d4:57:d4:41:d5:4a:82:b5:
e2:75:26:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:29:21 2026 by rpki-client