Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a31b82-d7ea-4f0b-863d-61605b26f82d/1/I6xIaAc5isHO7Akh0E1Amk9_R5s.mft
File: I6xIaAc5isHO7Akh0E1Amk9_R5s.mft (raw, json)
Hash identifier: QVnyBtUHxhOaNLLzMozSGRkbVYbNK/QClXhfVkR95mE=
Subject key identifier: 28:51:C5:29:78:F7:C6:CE:42:26:1B:45:03:3D:53:F2:C0:3D:AB:5D
Authority key identifier: 23:AC:48:68:07:39:8A:C1:CE:EC:09:21:D0:4D:40:9A:4F:7F:47:9B
Certificate issuer: /CN=23ac486807398ac1ceec0921d04d409a4f7f479b
Certificate serial: 019D9850E638864688CCBEC8A5BFFF22A543
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6xIaAc5isHO7Akh0E1Amk9_R5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a31b82-d7ea-4f0b-863d-61605b26f82d/1/I6xIaAc5isHO7Akh0E1Amk9_R5s.mft
Manifest number: 18C3
Signing time: Thu 16 Apr 2026 22:02:11 +0000
Manifest this update: Thu 16 Apr 2026 22:02:11 +0000
Manifest next update: Fri 17 Apr 2026 22:02:11 +0000
Files and hashes: 1: 4OtylCmVUOQ1YUFtglhWgqf0IYA.roa (hash: WWTOLHqEiZ6EYrBZLenBHdV2VidIQmH+ASGlD1/87NA=)
2: I6xIaAc5isHO7Akh0E1Amk9_R5s.crl (hash: +xiXInCtEBKkLK3+AleS284UKsDvP7B6b5k00T9U2cM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/a31b82-d7ea-4f0b-863d-61605b26f82d/1/I6xIaAc5isHO7Akh0E1Amk9_R5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/a31b82-d7ea-4f0b-863d-61605b26f82d/1/I6xIaAc5isHO7Akh0E1Amk9_R5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/I6xIaAc5isHO7Akh0E1Amk9_R5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:e6:38:86:46:88:cc:be:c8:a5:bf:ff:22:a5:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ac486807398ac1ceec0921d04d409a4f7f479b
Validity
Not Before: Apr 16 22:02:11 2026 GMT
Not After : Apr 17 22:02:11 2026 GMT
Subject: CN=2851c52978f7c6ce42261b45033d53f2c03dab5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:6d:d2:b3:75:79:c8:75:c7:7c:ee:f7:ec:26:
b3:90:d4:71:8c:e8:76:89:c9:6a:2d:5e:f1:6f:de:
81:4e:07:da:6a:f2:b0:66:0e:ce:ad:67:0a:c6:1f:
ba:35:d3:af:56:c6:66:d9:6b:8f:2a:02:bd:a2:6c:
f3:94:6e:6b:92:88:5b:89:d0:c6:c9:1f:9c:2a:b5:
cb:e7:94:02:68:d4:3b:c3:e3:7b:14:80:13:0a:00:
05:8e:1b:7b:db:c8:de:68:34:4b:67:b5:f0:1f:37:
e9:5f:c9:9e:c0:97:6c:ab:5a:a2:15:6d:a4:0e:75:
d1:a4:a3:00:2e:67:e5:7a:e3:a9:cf:0e:d8:8d:33:
fe:21:00:d9:29:3b:10:8a:64:03:2a:e6:80:2d:3b:
be:53:49:3a:c3:bd:46:7a:79:4a:c6:a4:22:db:7f:
15:90:87:bb:9b:54:2d:55:9e:7e:02:3c:18:a8:ea:
ad:93:fa:9a:a7:54:99:c7:05:f5:19:1d:d9:76:3a:
4b:0e:64:60:30:c2:fe:f6:62:a0:ad:89:4d:ac:1f:
8f:59:57:09:80:31:ea:99:c5:2f:bf:fd:48:e0:ee:
28:6e:16:4d:81:92:2d:ff:39:67:90:48:c0:91:ef:
e4:92:70:8f:69:a2:2c:07:b0:20:7e:93:94:ef:e5:
c3:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:51:C5:29:78:F7:C6:CE:42:26:1B:45:03:3D:53:F2:C0:3D:AB:5D
X509v3 Authority Key Identifier:
keyid:23:AC:48:68:07:39:8A:C1:CE:EC:09:21:D0:4D:40:9A:4F:7F:47:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6xIaAc5isHO7Akh0E1Amk9_R5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a31b82-d7ea-4f0b-863d-61605b26f82d/1/I6xIaAc5isHO7Akh0E1Amk9_R5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a31b82-d7ea-4f0b-863d-61605b26f82d/1/I6xIaAc5isHO7Akh0E1Amk9_R5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:87:25:d4:0f:b6:8b:52:60:b7:d8:46:84:54:15:b6:87:15:
bf:ed:5a:6b:7b:c4:02:f9:26:79:78:01:ef:85:e0:11:35:b4:
4e:35:89:44:fa:fe:59:45:bf:4d:64:c5:a6:a3:42:23:37:0b:
cc:ba:89:7f:86:6f:62:11:ad:9b:e4:b5:9b:12:1a:7e:1a:3e:
1d:25:99:d9:b4:65:56:11:68:df:84:b0:38:33:25:b8:c9:f7:
83:7d:83:6b:f0:4d:d5:e1:28:76:4c:d8:85:19:d7:3e:2b:6d:
a7:65:47:a5:9d:38:74:66:14:54:0a:28:a9:68:80:dc:0e:70:
f6:06:3d:b5:ef:04:0c:3b:eb:85:3e:61:81:93:64:4c:e3:3a:
94:a3:46:b9:eb:4b:53:33:05:86:d8:72:cf:d7:b2:1b:fd:a7:
ff:4d:e6:00:6d:36:b9:9a:00:7b:c8:b5:be:27:b9:09:7f:04:
d9:75:2a:bc:27:d7:fe:78:fe:00:b2:32:4e:c7:c5:71:79:09:
28:78:6b:25:fa:4a:b4:4a:28:8f:6f:2b:c6:c9:8a:88:e3:36:
39:52:6d:e0:ae:37:59:e6:39:ee:5b:84:5f:b6:dd:5e:62:04:
4a:f9:d1:d1:57:73:2d:c6:13:df:e0:0f:71:70:6f:6f:18:b2:
3a:48:e7:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:02:51 2026 by rpki-client