Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/528e21-23b2-4436-bc8b-8f5e997ab1b5/1/i58lgoNRffGYWTiOE7rRrgJopfs.mft
File: i58lgoNRffGYWTiOE7rRrgJopfs.mft (raw, json)
Hash identifier: e41i0gx07I6HtUbFWE4JvCvyj62Ta2pFm0Zk9tA+uJc=
Subject key identifier: 27:ED:07:33:A6:9A:5F:89:8F:C2:78:07:39:4C:CB:87:81:83:09:37
Authority key identifier: 8B:9F:25:82:83:51:7D:F1:98:59:38:8E:13:BA:D1:AE:02:68:A5:FB
Certificate issuer: /CN=8b9f258283517df19859388e13bad1ae0268a5fb
Certificate serial: 019D9AABA7A92AA3E551BE6F4A3E01C98CB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i58lgoNRffGYWTiOE7rRrgJopfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/528e21-23b2-4436-bc8b-8f5e997ab1b5/1/i58lgoNRffGYWTiOE7rRrgJopfs.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 09:00:33 +0000
Manifest this update: Fri 17 Apr 2026 09:00:33 +0000
Manifest next update: Sat 18 Apr 2026 09:00:33 +0000
Files and hashes: 1: EZQ3_1xtXNCMXaBpEjh3EEeHdRc.roa (hash: 2NqTeKgydYUb/eDxmxXBdOU0et+RFyYo7oibb0+harQ=)
2: i58lgoNRffGYWTiOE7rRrgJopfs.crl (hash: TZ6uKBQIXouSLSmo0IbNmsJepxcE9lGIqJksyPVa/Yg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/528e21-23b2-4436-bc8b-8f5e997ab1b5/1/i58lgoNRffGYWTiOE7rRrgJopfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/528e21-23b2-4436-bc8b-8f5e997ab1b5/1/i58lgoNRffGYWTiOE7rRrgJopfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/i58lgoNRffGYWTiOE7rRrgJopfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:a7:a9:2a:a3:e5:51:be:6f:4a:3e:01:c9:8c:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b9f258283517df19859388e13bad1ae0268a5fb
Validity
Not Before: Apr 17 09:00:33 2026 GMT
Not After : Apr 18 09:00:33 2026 GMT
Subject: CN=27ed0733a69a5f898fc27807394ccb8781830937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1d:0d:05:03:d6:25:65:ac:65:8f:33:36:4e:
3c:2a:74:dd:09:3d:57:8b:af:ee:b6:37:4f:7a:e0:
6c:c2:18:b1:97:38:84:39:b9:f8:07:af:b5:64:50:
78:d1:03:f8:86:e1:5a:48:b2:fe:85:69:f9:2b:59:
23:16:6b:81:b2:14:2c:d4:57:b9:e9:38:92:f4:46:
54:f1:55:76:bb:8a:7f:30:4c:42:2e:a5:94:54:49:
1a:76:23:20:6b:e9:9d:a9:42:ef:46:d3:31:a8:7b:
51:b8:c5:f9:cb:a3:4a:bc:03:da:47:0c:fb:3e:6d:
17:46:a4:2f:e5:2f:eb:ad:18:22:75:86:75:19:d0:
f5:ad:73:3f:62:f0:f4:52:09:31:e1:f6:a5:44:a3:
10:75:16:8e:7b:e9:f0:a1:c4:c1:f0:e8:11:13:73:
0b:be:44:fe:7b:c8:b4:11:87:24:f8:9f:50:0b:07:
d9:b9:bc:8e:25:dc:ac:5f:c0:3a:1e:59:4d:0e:1e:
0b:c2:3a:6f:43:9b:cc:ce:2d:97:8e:51:12:71:9f:
e4:d6:bc:46:eb:18:0e:ac:ef:25:37:c3:7c:b6:53:
84:ec:b7:44:a0:08:83:34:ba:28:77:8c:ab:41:42:
6a:58:75:42:38:a1:dd:b8:a0:91:ef:fe:3d:c6:22:
0a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:ED:07:33:A6:9A:5F:89:8F:C2:78:07:39:4C:CB:87:81:83:09:37
X509v3 Authority Key Identifier:
keyid:8B:9F:25:82:83:51:7D:F1:98:59:38:8E:13:BA:D1:AE:02:68:A5:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i58lgoNRffGYWTiOE7rRrgJopfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/528e21-23b2-4436-bc8b-8f5e997ab1b5/1/i58lgoNRffGYWTiOE7rRrgJopfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/528e21-23b2-4436-bc8b-8f5e997ab1b5/1/i58lgoNRffGYWTiOE7rRrgJopfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:84:8b:a1:99:5d:12:7c:25:40:36:9e:e1:7e:e2:b6:d1:28:
f8:14:9a:53:3d:0e:b4:68:0a:b8:ce:98:97:b7:33:eb:b9:a4:
52:6f:94:7a:d9:c9:9f:5e:3f:84:aa:bd:aa:53:d9:38:fc:e1:
a9:bb:bf:be:e0:c0:58:89:fc:59:a3:ef:aa:ab:be:aa:6f:ac:
0c:34:72:2c:43:dc:4f:88:5d:6a:b1:6a:17:6f:11:63:38:8e:
e1:1e:73:e6:b5:4b:c1:bf:ca:83:0b:83:47:f7:55:fa:50:f9:
88:e5:42:ce:e2:8e:0d:66:cc:ad:06:15:7f:4a:a7:77:cb:40:
cd:ac:ba:07:bf:32:b4:65:f9:8e:ea:9e:0b:d6:89:bd:03:ec:
3f:50:50:38:5b:78:36:74:1f:16:83:00:fe:49:37:91:74:8c:
08:82:62:31:35:76:b8:47:91:71:61:55:6d:75:6b:57:34:04:
f6:34:3d:ae:5c:70:8f:4c:e4:4e:90:c2:07:cb:56:bd:b4:0c:
bf:5d:d7:1e:5f:5d:e1:35:20:92:f3:cd:9a:1c:24:41:ee:45:
be:83:85:c4:67:bc:67:ec:45:d8:85:80:d0:95:c5:c8:fc:f6:
21:17:db:d5:60:7f:87:f4:0f:f5:8c:9c:d1:98:e0:ac:26:6f:
19:b4:a8:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:46:50 2026 by rpki-client