Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/ba2857-c098-44d2-9c01-e720feb10103/1/I6Qkl5cNZVQd2xWWWOOwpuL1Frc.mft
File: I6Qkl5cNZVQd2xWWWOOwpuL1Frc.mft (raw, json)
Hash identifier: AnJi0j0uwgGz98oIm/PXayHrCkCiUCDYAZpAHe2Xs7U=
Subject key identifier: A1:89:C1:3C:53:8F:2F:72:32:E9:4E:61:E4:E2:A8:73:8B:09:EA:AF
Authority key identifier: 23:A4:24:97:97:0D:65:54:1D:DB:15:96:58:E3:B0:A6:E2:F5:16:B7
Certificate issuer: /CN=23a42497970d65541ddb159658e3b0a6e2f516b7
Certificate serial: 019DA30A9AEDE6CD940F4A2241D338863127
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6Qkl5cNZVQd2xWWWOOwpuL1Frc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/ba2857-c098-44d2-9c01-e720feb10103/1/I6Qkl5cNZVQd2xWWWOOwpuL1Frc.mft
Manifest number: 18C8
Signing time: Sun 19 Apr 2026 00:01:14 +0000
Manifest this update: Sun 19 Apr 2026 00:01:14 +0000
Manifest next update: Mon 20 Apr 2026 00:01:14 +0000
Files and hashes: 1: I6Qkl5cNZVQd2xWWWOOwpuL1Frc.crl (hash: DoLnx6lVpiv0iYq94Bct+JTJmj6H3TDmkrhgnBAIRlw=)
2: iJzZtljWIar5Fy83XWae5YmptnU.roa (hash: J8Td44gvEJyFMk2Q3nnnz2KQYHmuhOMCV+hhX1uovQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/ba2857-c098-44d2-9c01-e720feb10103/1/I6Qkl5cNZVQd2xWWWOOwpuL1Frc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/ba2857-c098-44d2-9c01-e720feb10103/1/I6Qkl5cNZVQd2xWWWOOwpuL1Frc.mft
rsync://rpki.ripe.net/repository/DEFAULT/I6Qkl5cNZVQd2xWWWOOwpuL1Frc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:0a:9a:ed:e6:cd:94:0f:4a:22:41:d3:38:86:31:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23a42497970d65541ddb159658e3b0a6e2f516b7
Validity
Not Before: Apr 19 00:01:14 2026 GMT
Not After : Apr 20 00:01:14 2026 GMT
Subject: CN=a189c13c538f2f7232e94e61e4e2a8738b09eaaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:75:b2:3a:74:cb:e8:c3:4f:00:fc:10:20:6b:
ac:06:f0:55:00:89:13:c2:3e:8d:4a:a7:f8:68:86:
c4:1f:f0:1d:37:bc:ea:19:a4:e4:ba:2f:6d:99:12:
0f:17:8f:6d:36:01:35:ce:4a:ed:24:74:ad:5d:81:
10:56:0a:cb:c3:8f:45:45:c9:e7:b0:a4:ae:ca:31:
8f:80:28:c0:96:43:70:d4:a6:09:8a:d3:f1:71:60:
b3:df:81:54:a4:a3:de:af:6c:00:50:40:45:51:ff:
5c:20:06:c0:fb:ad:4b:7e:01:be:01:28:bd:88:90:
99:02:27:8c:45:b6:82:6c:3b:cb:14:75:34:a9:d9:
74:3c:36:7f:d0:80:c8:78:b5:e5:36:4f:34:64:23:
d8:69:2a:40:3a:de:2c:12:90:13:0a:8e:46:97:0d:
65:00:7b:a7:91:0e:64:af:81:1c:08:03:bc:94:74:
31:05:18:6c:85:3f:91:65:31:12:78:9e:ec:5f:37:
41:94:44:f6:98:ea:06:07:19:56:83:c2:a7:dd:57:
c6:7c:a9:a8:ed:00:e7:1a:0b:14:2b:e8:d0:15:3f:
54:a1:f5:e8:14:12:57:87:3d:fd:c3:46:47:65:d3:
6c:fe:2e:7e:83:44:51:23:37:09:00:01:91:c7:5d:
d7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:89:C1:3C:53:8F:2F:72:32:E9:4E:61:E4:E2:A8:73:8B:09:EA:AF
X509v3 Authority Key Identifier:
keyid:23:A4:24:97:97:0D:65:54:1D:DB:15:96:58:E3:B0:A6:E2:F5:16:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6Qkl5cNZVQd2xWWWOOwpuL1Frc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ba2857-c098-44d2-9c01-e720feb10103/1/I6Qkl5cNZVQd2xWWWOOwpuL1Frc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ba2857-c098-44d2-9c01-e720feb10103/1/I6Qkl5cNZVQd2xWWWOOwpuL1Frc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:f3:a0:3c:e5:03:98:06:39:d5:26:03:5f:9b:a4:73:5c:b8:
c8:86:d7:2f:85:c0:0e:58:3d:52:82:e0:d6:26:b6:ba:10:1d:
19:95:b1:be:f9:fe:83:24:a1:8f:84:33:d4:b1:78:b8:50:66:
b9:5b:bd:51:67:d7:c1:77:25:b7:f7:ca:99:2f:0a:63:88:08:
9c:88:95:50:19:77:43:2e:09:b9:03:d9:5a:41:fa:cb:27:5f:
ba:11:3a:28:d1:34:b5:30:5b:d3:14:98:85:cc:4f:19:3d:f1:
30:33:5a:9f:28:58:bf:e3:5d:b1:be:76:c9:f7:0b:a1:d9:75:
f3:32:de:37:03:c0:bc:05:e5:5d:b2:b6:6a:85:9e:c0:9a:d7:
e9:53:13:d5:e1:46:c7:c4:3e:3e:9f:2f:da:90:5b:27:fc:6c:
2f:45:ca:60:9c:88:bc:73:29:b6:c5:17:67:ba:c6:38:3b:f2:
18:53:e0:d9:d3:2f:ec:da:84:98:92:4a:52:49:55:a7:d0:43:
5d:e4:35:df:c6:e0:e8:83:ca:a5:1d:82:8c:69:f0:6e:55:2f:
52:b1:2b:f6:02:f7:b0:f0:15:5f:18:0e:63:3c:7e:ce:d6:2b:
a1:55:a7:e0:25:15:16:42:37:22:93:f7:46:59:6d:2b:2c:df:
0b:9d:e7:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:27:44 2026 by rpki-client