Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/MZIbb_GsRJuj5_iSzwgy0c631GQ.mft
File: MZIbb_GsRJuj5_iSzwgy0c631GQ.mft (raw, json)
Hash identifier: xQPGLJNsZXUjUwKjc9mq2LBO/VKXF99wpVCkhOq1woA=
Subject key identifier: CB:81:A4:C6:A9:7F:88:DF:5C:7D:43:87:85:AC:BC:37:86:22:4F:4E
Authority key identifier: 31:92:1B:6F:F1:AC:44:9B:A3:E7:F8:92:CF:08:32:D1:CE:B7:D4:64
Certificate issuer: /CN=31921b6ff1ac449ba3e7f892cf0832d1ceb7d464
Certificate serial: 019D98BD3C04DD2D7E99EA16920D73E07BE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MZIbb_GsRJuj5_iSzwgy0c631GQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/MZIbb_GsRJuj5_iSzwgy0c631GQ.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 00:00:31 +0000
Manifest this update: Fri 17 Apr 2026 00:00:31 +0000
Manifest next update: Sat 18 Apr 2026 00:00:31 +0000
Files and hashes: 1: 8HOqsxKCS56C5l2TYH5vJenn9Uc.roa (hash: r5GuTgTO8u43SvuFo8e3I9Qx7FDg9zvojI1lw4JUs+Y=)
2: EuTvpzj_rBg4p9cpcF0sTGEJSQg.roa (hash: 2ycyJUxPv2cATlhlJrwI3vU1U2HjLZsDnb7MjY9bKXM=)
3: MZIbb_GsRJuj5_iSzwgy0c631GQ.crl (hash: ycttvCPsG7gF/oS46524r/B6OdyCRqXP7ZN81jmAFcw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/MZIbb_GsRJuj5_iSzwgy0c631GQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/MZIbb_GsRJuj5_iSzwgy0c631GQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/MZIbb_GsRJuj5_iSzwgy0c631GQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:3c:04:dd:2d:7e:99:ea:16:92:0d:73:e0:7b:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31921b6ff1ac449ba3e7f892cf0832d1ceb7d464
Validity
Not Before: Apr 17 00:00:31 2026 GMT
Not After : Apr 18 00:00:31 2026 GMT
Subject: CN=cb81a4c6a97f88df5c7d438785acbc3786224f4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:50:30:bb:fb:8e:e4:aa:dd:0f:51:85:61:62:
95:c8:ef:11:9b:e4:ea:f4:5c:13:4e:cc:10:86:7d:
85:be:b0:26:eb:38:0b:ff:37:bb:28:b6:7c:00:d6:
16:79:7c:32:5d:ff:a4:2d:3f:92:95:ba:be:69:ef:
6d:46:7a:18:0e:9a:b9:60:7d:8b:3f:3b:ba:b3:7f:
86:58:22:be:92:f5:56:a2:4a:6e:53:82:01:74:a3:
b3:de:90:e9:50:18:01:46:33:9e:2f:8b:52:72:6c:
7f:80:48:f4:f6:99:98:58:65:12:89:81:e6:ed:e8:
6b:c5:eb:e3:0c:06:0e:d5:25:19:be:c4:91:3f:fb:
c6:a6:34:d0:25:54:cf:fb:14:8c:a8:6d:bf:27:57:
9a:72:ee:8d:ec:2d:5c:d9:05:ae:79:9f:bc:79:f3:
2b:32:16:ee:15:27:81:7e:af:9b:3c:77:6c:85:18:
95:56:0c:df:44:ff:90:8b:73:16:91:95:34:43:30:
bf:83:ff:6e:2f:77:be:ab:60:9c:fe:42:6b:23:7b:
9f:c2:ad:25:d6:82:b3:ec:3a:1e:61:ec:e4:72:71:
96:f1:e9:62:4d:ae:7a:53:9c:ee:e3:e4:50:13:13:
22:14:60:9a:ca:37:03:ae:ec:09:c8:88:e8:22:ee:
c6:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:81:A4:C6:A9:7F:88:DF:5C:7D:43:87:85:AC:BC:37:86:22:4F:4E
X509v3 Authority Key Identifier:
keyid:31:92:1B:6F:F1:AC:44:9B:A3:E7:F8:92:CF:08:32:D1:CE:B7:D4:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MZIbb_GsRJuj5_iSzwgy0c631GQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/MZIbb_GsRJuj5_iSzwgy0c631GQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/MZIbb_GsRJuj5_iSzwgy0c631GQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:b7:b6:3e:18:72:ad:7b:0d:4c:b3:2d:e5:4a:8d:89:27:e8:
b1:8b:97:4c:6a:aa:17:ff:87:0a:94:a0:73:99:51:d0:7b:3a:
b0:68:02:45:9b:42:f6:a2:a1:1e:41:34:d0:15:ee:d6:e1:dc:
5d:74:42:f7:8f:2a:18:18:ad:06:07:d6:6b:c0:1a:ef:99:ae:
5e:bb:83:5c:6d:b5:7a:70:5b:2a:77:d7:9d:26:ec:8f:05:35:
9c:54:38:76:a8:38:28:3b:d0:91:29:64:32:4f:d2:59:25:cd:
92:27:2d:0a:3e:5f:1e:d1:06:29:fb:5f:71:f0:6c:7d:50:e3:
71:66:08:ef:d8:d3:33:ba:95:a7:2d:6a:99:da:6a:29:56:be:
3b:0a:1b:90:c1:c0:e5:9c:a2:b9:7e:2c:27:0a:0a:b7:67:ba:
41:01:7d:ba:38:50:22:6c:0d:c7:d7:36:41:7e:3f:a6:83:fd:
78:f4:a3:97:08:67:f7:2f:8e:2d:66:55:a1:10:cc:23:e0:45:
15:b4:15:8e:1f:76:e8:cf:7b:d2:1c:e7:82:51:2c:c5:4e:1e:
f3:cc:5c:64:d3:04:3c:d6:35:27:a2:18:31:64:94:50:2b:f9:
0b:f4:c9:88:44:d8:4e:93:47:4e:ea:63:14:9c:a0:04:3c:ba:
d1:98:61:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:23:06 2026 by rpki-client