Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.mft
File: i25luC_kAH6C_S2xNM9Cxq7E4Lw.mft (raw, json)
Hash identifier: qWqz2N2j/yfkUjWtlRSVWZkYjD908Bi/tp0J8BLSHG8=
Subject key identifier: 98:79:9A:F3:06:D5:8D:EF:FC:91:BF:34:5A:1E:7C:E7:04:03:D1:C0
Authority key identifier: 8B:6E:65:B8:2F:E4:00:7E:82:FD:2D:B1:34:CF:42:C6:AE:C4:E0:BC
Certificate issuer: /CN=8b6e65b82fe4007e82fd2db134cf42c6aec4e0bc
Certificate serial: 019D9A071A2A29931CA52BCA345D53DBF818
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i25luC_kAH6C_S2xNM9Cxq7E4Lw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 06:00:49 +0000
Manifest this update: Fri 17 Apr 2026 06:00:49 +0000
Manifest next update: Sat 18 Apr 2026 06:00:49 +0000
Files and hashes: 1: fe5q7Ym0eOTsgMAB1IUrjncVBXg.roa (hash: 5UUqkfEzMB1xSChuf7PbFjMq0H7jo6WK6DJ2it+YBAc=)
2: i25luC_kAH6C_S2xNM9Cxq7E4Lw.crl (hash: heXFAdYli4fei8px5vkMQIurjcboN4c4t0B/39f7T1c=)
3: tX7VJWazlnGg57nYx0SdqCcW42M.roa (hash: a4ThqNr+E56D9pM0rGPy4dnLeWvNfcYrPQOSDN6v3Ws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.mft
rsync://rpki.ripe.net/repository/DEFAULT/i25luC_kAH6C_S2xNM9Cxq7E4Lw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:1a:2a:29:93:1c:a5:2b:ca:34:5d:53:db:f8:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6e65b82fe4007e82fd2db134cf42c6aec4e0bc
Validity
Not Before: Apr 17 06:00:49 2026 GMT
Not After : Apr 18 06:00:49 2026 GMT
Subject: CN=98799af306d58deffc91bf345a1e7ce70403d1c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3b:63:26:12:a1:07:e2:46:b2:18:51:f7:fe:
ed:ac:5d:52:c3:37:ac:29:0c:02:b1:32:a9:15:2d:
0f:d5:78:ab:50:a0:16:8c:10:06:4a:44:62:26:4b:
3b:c7:32:80:10:5b:35:c7:cf:09:fb:ea:30:54:19:
bd:3c:98:f1:96:35:7e:e8:78:52:5e:f1:01:c7:87:
ec:61:e8:31:b9:ae:1e:ec:83:02:f2:81:74:dc:3b:
d4:be:5c:e7:7a:24:ac:17:45:95:32:80:8f:e7:0a:
09:51:e9:86:d3:9d:1b:c0:da:08:56:71:36:ad:06:
71:62:a8:0c:46:2d:3d:2c:21:49:2f:50:00:45:f4:
51:69:de:df:06:8d:7a:33:78:73:07:e5:58:ae:d4:
b9:c7:0e:3a:83:e0:65:2e:d9:cd:81:6e:42:2f:ba:
78:dd:80:d7:88:09:42:5f:8f:4c:a1:2e:56:2c:97:
35:66:c5:bf:c9:22:65:d2:8e:d3:b0:2c:dc:65:b5:
34:8f:bd:19:e3:27:10:6b:12:a6:b9:09:63:03:0b:
45:72:d3:dd:b5:30:ae:8e:4d:0e:36:53:49:e9:99:
74:1e:a6:c6:d1:0a:86:6f:7e:ca:4f:98:2d:c6:a0:
4e:a1:83:53:16:67:eb:8a:ca:dd:84:21:33:52:fd:
fd:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:79:9A:F3:06:D5:8D:EF:FC:91:BF:34:5A:1E:7C:E7:04:03:D1:C0
X509v3 Authority Key Identifier:
keyid:8B:6E:65:B8:2F:E4:00:7E:82:FD:2D:B1:34:CF:42:C6:AE:C4:E0:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i25luC_kAH6C_S2xNM9Cxq7E4Lw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:33:87:05:9b:cd:14:b6:9a:b7:dd:4b:92:96:09:04:eb:f5:
0a:cd:7c:4e:94:b0:dc:90:67:82:a1:f3:6d:e2:a4:fd:4c:d2:
f6:ed:49:f3:91:1b:12:ff:80:39:8e:c5:6e:e5:3f:e3:4d:dd:
d2:36:ca:38:75:3b:22:19:fa:19:68:0f:fc:d3:bf:73:01:80:
e8:05:3c:a9:d1:0a:37:a4:09:01:b6:65:2a:dc:58:f5:98:a9:
4b:0a:2a:6c:d4:3a:2e:b7:70:a1:24:fa:51:59:d5:14:15:4b:
20:2a:21:ff:0d:d7:2a:e5:8a:5a:74:f7:1e:70:82:12:2b:b5:
a5:c0:16:f9:e9:ba:4a:14:0d:87:8c:be:27:fe:6a:c3:72:1b:
fe:5f:e1:3a:56:93:0d:f6:a2:70:77:0b:ca:1b:65:be:53:6e:
c8:da:ee:a7:ca:f4:84:72:a0:ce:ad:fe:cb:a3:dc:0c:ee:46:
d6:b4:cf:7e:ac:db:3f:84:94:f2:29:b1:f5:3a:96:37:a9:e4:
06:b1:37:01:27:30:53:bd:87:50:bb:00:cc:b3:62:a4:71:1a:
dd:25:0d:58:2e:71:33:7a:7e:91:d9:d7:5d:46:4b:fa:d4:ec:
84:58:fd:7b:86:9c:03:1c:4e:b6:e0:2e:30:fd:d7:96:dd:b9:
12:d6:7b:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:05:34 2026 by rpki-client