Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.mft
File: iLda7v6O6hrFwhnYdQXS58XzL0g.mft (raw, json)
Hash identifier: /EgdB6v3gQLtBAPiGpHNvIMdgQSIgIk0BAhNh44jZtA=
Subject key identifier: 7E:C1:D4:4A:BB:20:44:A2:A1:FF:26:FE:AF:BB:DC:2B:78:B5:05:DB
Authority key identifier: 88:B7:5A:EE:FE:8E:EA:1A:C5:C2:19:D8:75:05:D2:E7:C5:F3:2F:48
Certificate issuer: /CN=88b75aeefe8eea1ac5c219d87505d2e7c5f32f48
Certificate serial: 019D9999B00CFC25E25EFFFE9464E8E43D3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iLda7v6O6hrFwhnYdQXS58XzL0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 04:01:19 +0000
Manifest this update: Fri 17 Apr 2026 04:01:19 +0000
Manifest next update: Sat 18 Apr 2026 04:01:19 +0000
Files and hashes: 1: XCD8aXlAzGnzxXRVOLV38VoENzs.roa (hash: nXyOSXVfXWMbU4dphXnH7dDUeGh2mNE9IwSEdv2yiZs=)
2: iLda7v6O6hrFwhnYdQXS58XzL0g.crl (hash: hcDwbi+roGUazL/Zy9G5tmNUGAVjDx/kN6kHXtbzL50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/iLda7v6O6hrFwhnYdQXS58XzL0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:b0:0c:fc:25:e2:5e:ff:fe:94:64:e8:e4:3d:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88b75aeefe8eea1ac5c219d87505d2e7c5f32f48
Validity
Not Before: Apr 17 04:01:19 2026 GMT
Not After : Apr 18 04:01:19 2026 GMT
Subject: CN=7ec1d44abb2044a2a1ff26feafbbdc2b78b505db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:38:17:9e:e2:24:0c:81:e0:00:d3:14:31:53:
00:9c:29:c9:cb:c9:50:1d:84:da:f3:61:90:c6:ee:
5c:1c:35:16:1f:ff:c9:42:fc:11:6d:0c:1c:1a:d7:
e1:51:f0:d4:20:fb:25:57:91:cd:05:54:03:12:0f:
6f:43:96:e4:55:01:9c:7e:cf:56:43:13:25:2c:24:
17:67:5b:be:bf:16:dc:97:5a:8d:16:0f:78:4b:1c:
d0:65:dc:1f:7f:e9:22:f6:a3:1a:49:18:2d:fd:e2:
98:8a:49:06:66:94:ff:d1:a6:dc:d6:45:f4:35:40:
e6:ac:8f:e0:b5:cf:c7:e4:f2:cf:d1:ac:08:0a:40:
3c:1f:cd:07:ce:cb:ac:12:1d:fc:51:a8:55:b9:57:
c3:66:dc:fa:fe:bc:6a:a2:67:28:21:fa:ab:21:ff:
d7:0a:8c:56:02:2f:17:4d:25:91:18:9b:fa:5e:75:
92:72:26:89:48:1a:01:6c:bd:ab:45:11:97:18:a8:
ae:a2:01:a4:0d:50:ed:35:46:4f:08:aa:0c:e3:72:
6c:f7:88:61:ec:2c:32:ee:2f:c5:10:6d:40:80:c3:
47:d0:9a:a9:cd:17:6d:be:23:32:e2:6c:01:20:27:
c6:14:0b:d3:21:08:9f:78:a2:eb:df:69:63:94:b9:
d8:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:C1:D4:4A:BB:20:44:A2:A1:FF:26:FE:AF:BB:DC:2B:78:B5:05:DB
X509v3 Authority Key Identifier:
keyid:88:B7:5A:EE:FE:8E:EA:1A:C5:C2:19:D8:75:05:D2:E7:C5:F3:2F:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLda7v6O6hrFwhnYdQXS58XzL0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:4a:97:d5:bc:cd:15:96:89:7b:58:eb:b9:ed:18:4e:f5:07:
3a:00:1b:f6:43:0b:c5:6b:1c:c0:28:34:d7:53:9b:c3:8a:61:
a2:3c:b2:21:0e:80:22:a0:35:ee:72:cd:1c:bf:85:c1:9f:fb:
7a:2c:f7:d6:38:bc:7a:25:13:27:ff:4c:90:db:e1:14:9c:31:
7e:f8:ff:ab:53:2d:e9:a6:8a:94:09:d9:b2:64:20:23:1b:68:
89:2d:2a:28:df:92:03:89:2d:8b:20:b7:a2:61:d4:51:c2:84:
8c:c2:d5:5f:16:84:5e:68:fa:ca:8e:05:76:84:3e:a6:e8:51:
58:56:79:9b:d3:d7:0b:a2:92:61:92:43:79:38:73:4c:42:c8:
16:01:87:3a:8b:11:55:f9:27:df:91:cd:08:0c:5d:06:bf:84:
9d:44:a2:34:1f:be:89:a0:7d:7f:ec:4d:d0:f4:54:5e:39:7f:
da:63:b0:8a:0d:a9:5b:97:70:af:e3:fb:e3:8d:b4:1a:e3:41:
eb:bd:52:4c:b8:f7:22:6f:dd:95:9d:f2:d9:79:ca:cc:e1:48:
a3:e0:25:91:41:2d:24:95:b5:0a:93:78:9d:5b:60:a4:d5:8d:
2d:af:0b:a2:cc:c2:78:d6:83:b4:22:c3:04:b9:0b:fa:44:3a:
06:ab:b4:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:28:02 2026 by rpki-client