Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/8c0f0c-19c7-4eaf-96f5-7d40c11a9500/1/idOpFFlzx5o-e5VTHj0N99KMSgQ.mft
File: idOpFFlzx5o-e5VTHj0N99KMSgQ.mft (raw, json)
Hash identifier: 9gdKHI3lbUxDIAZaGJZLogqAQiOGkXxVXA8o5IwEPHc=
Subject key identifier: 42:8E:0A:CF:2E:DA:27:30:00:CB:D9:09:05:F0:11:0E:FD:74:F7:22
Authority key identifier: 89:D3:A9:14:59:73:C7:9A:3E:7B:95:53:1E:3D:0D:F7:D2:8C:4A:04
Certificate issuer: /CN=89d3a9145973c79a3e7b95531e3d0df7d28c4a04
Certificate serial: 019D9A07587EC73650A66A1B7686EE3850AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/idOpFFlzx5o-e5VTHj0N99KMSgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/8c0f0c-19c7-4eaf-96f5-7d40c11a9500/1/idOpFFlzx5o-e5VTHj0N99KMSgQ.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 06:01:05 +0000
Manifest this update: Fri 17 Apr 2026 06:01:05 +0000
Manifest next update: Sat 18 Apr 2026 06:01:05 +0000
Files and hashes: 1: h9ZEFQ_M3eqG9SpeL-9Vf7khClE.roa (hash: F0ol1/t/MHG3rheVuTMinY7d1uEEc3ChRKFw6MqUlUk=)
2: idOpFFlzx5o-e5VTHj0N99KMSgQ.crl (hash: FP4s6aCf22AgASos68+2Nii6XawS3EBZl+KXPUtpFeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/8c0f0c-19c7-4eaf-96f5-7d40c11a9500/1/idOpFFlzx5o-e5VTHj0N99KMSgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/8c0f0c-19c7-4eaf-96f5-7d40c11a9500/1/idOpFFlzx5o-e5VTHj0N99KMSgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/idOpFFlzx5o-e5VTHj0N99KMSgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:58:7e:c7:36:50:a6:6a:1b:76:86:ee:38:50:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89d3a9145973c79a3e7b95531e3d0df7d28c4a04
Validity
Not Before: Apr 17 06:01:05 2026 GMT
Not After : Apr 18 06:01:05 2026 GMT
Subject: CN=428e0acf2eda273000cbd90905f0110efd74f722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d8:48:11:5f:ea:cf:d4:18:7a:51:d4:e8:11:
e2:67:81:1c:fb:8c:a6:3d:a1:0d:ea:a2:a0:4a:97:
95:af:13:92:30:b5:10:8f:24:ea:73:58:e8:59:7b:
65:7e:ea:d8:39:49:7e:0e:25:ca:10:fe:73:54:d2:
fb:67:34:bf:e0:70:e5:f4:ee:1a:4e:d3:b5:66:57:
d2:2a:de:9e:dc:9f:ce:89:0c:ba:db:e1:c0:c4:bd:
1b:64:3f:54:77:47:ea:ea:96:37:3a:02:4b:b2:b3:
7e:26:d3:95:03:b6:04:33:a7:44:d0:a3:69:d7:02:
ca:8a:6a:c2:0e:47:12:69:5f:f8:09:ac:03:5a:fd:
22:ab:a3:d0:44:82:8e:67:a8:b2:73:10:db:f6:00:
e1:c5:3e:af:ce:1b:ac:46:42:ea:ef:3e:24:3c:ed:
3f:d6:e2:d6:e4:79:b3:2a:89:2b:0c:35:9e:1d:5a:
a8:82:7c:de:4d:e2:e3:42:9c:b4:b7:f3:89:ac:23:
84:70:29:2b:f7:86:9d:af:ba:81:e5:28:78:3f:4f:
0c:48:11:11:67:c2:d0:9e:79:e3:ba:56:2b:08:1c:
a2:af:95:4d:e1:1e:bf:eb:1c:c2:2e:37:f3:49:10:
8c:37:7d:3b:c0:7f:e9:8b:a9:2e:cb:45:fa:a9:74:
5f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:8E:0A:CF:2E:DA:27:30:00:CB:D9:09:05:F0:11:0E:FD:74:F7:22
X509v3 Authority Key Identifier:
keyid:89:D3:A9:14:59:73:C7:9A:3E:7B:95:53:1E:3D:0D:F7:D2:8C:4A:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idOpFFlzx5o-e5VTHj0N99KMSgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8c0f0c-19c7-4eaf-96f5-7d40c11a9500/1/idOpFFlzx5o-e5VTHj0N99KMSgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8c0f0c-19c7-4eaf-96f5-7d40c11a9500/1/idOpFFlzx5o-e5VTHj0N99KMSgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:3f:fd:ad:97:2a:30:0b:cf:57:c7:84:92:73:07:23:f3:7e:
e6:6b:c0:86:83:cb:a1:0e:3b:9d:5d:f1:6b:10:3b:bc:e7:ce:
f1:f7:c3:ab:17:4a:b9:1e:42:f0:37:b2:98:c8:97:e7:26:0a:
d8:ce:c2:49:d5:74:9e:74:bf:9d:3c:51:fa:66:01:46:db:8c:
67:01:1f:f3:70:8a:3d:cf:06:e3:0e:89:66:78:34:33:c6:fe:
51:e4:b8:01:39:86:c7:f4:f6:21:cf:77:87:b6:7e:a3:2c:17:
f8:46:65:56:f4:bb:d3:a8:3b:fb:2b:78:bb:6c:01:31:17:75:
f9:b1:73:30:73:83:5f:5f:50:0d:75:22:8e:1b:70:f4:c6:c2:
7e:77:cd:de:d1:71:ae:be:c7:e6:48:f5:3f:c6:92:db:6b:95:
3e:99:30:91:a7:cb:18:53:a5:ac:8d:6b:53:d1:3f:81:bb:10:
77:e9:7c:c3:d9:fa:7b:3b:5c:e7:2a:58:fa:76:f7:7d:b9:29:
10:aa:77:90:20:9a:11:1a:4e:58:f8:f9:9d:91:99:61:d5:c5:
3c:03:24:aa:d2:35:4c:e4:ee:d9:fa:8a:a5:43:a5:1a:42:0d:
74:0a:3c:54:4c:9c:5f:bd:42:96:d4:02:de:b2:c4:f7:c7:f7:
d8:7e:b9:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:38:50 2026 by rpki-client