Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.mft
File: ihZhi3H_yA4cP0HtDfyJq16WP9I.mft (raw, json)
Hash identifier: J1dtgDAaUFIu5wdbu1pd1rFA6xsqJ3ZgGTxl0aO8Rq0=
Subject key identifier: AF:E0:ED:59:20:52:ED:23:34:D6:01:63:DB:6A:00:18:24:6A:90:58
Authority key identifier: 8A:16:61:8B:71:FF:C8:0E:1C:3F:41:ED:0D:FC:89:AB:5E:96:3F:D2
Certificate issuer: /CN=8a16618b71ffc80e1c3f41ed0dfc89ab5e963fd2
Certificate serial: 019D9B879F848C18C4AFCD8A44A9944B09D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ihZhi3H_yA4cP0HtDfyJq16WP9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.mft
Manifest number: 18C9
Signing time: Fri 17 Apr 2026 13:00:49 +0000
Manifest this update: Fri 17 Apr 2026 13:00:49 +0000
Manifest next update: Sat 18 Apr 2026 13:00:49 +0000
Files and hashes: 1: SheiKMejj2UlfePnEJK4YM6UYGQ.roa (hash: Ll9jhdHvmhGlynW15LRcU3rlqzasSbGuWZW11z3vQs0=)
2: auDg02aDw-Ng4UMnzRMAZPV_78A.roa (hash: A2MCkRQZ/VKnTqKHBJZ1hnIKYJGRR8Cd5N45/0b9lic=)
3: ihZhi3H_yA4cP0HtDfyJq16WP9I.crl (hash: R5SiADZECaoCYHA+xZ/ZGLuMqteEFKQYOX+JowQScTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ihZhi3H_yA4cP0HtDfyJq16WP9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:9f:84:8c:18:c4:af:cd:8a:44:a9:94:4b:09:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a16618b71ffc80e1c3f41ed0dfc89ab5e963fd2
Validity
Not Before: Apr 17 13:00:49 2026 GMT
Not After : Apr 18 13:00:49 2026 GMT
Subject: CN=afe0ed592052ed2334d60163db6a0018246a9058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:5b:67:72:be:bf:b8:e4:b3:ba:4d:e5:f6:ca:
c1:16:3b:ac:fb:8e:3b:89:89:fa:9c:bb:6c:89:af:
17:67:2a:ce:4c:4f:4b:92:cc:99:91:07:cb:51:f8:
40:c4:88:c8:54:bd:c7:cf:d0:6e:a3:22:7e:99:d2:
15:58:59:49:08:03:49:39:96:c0:21:6e:8d:17:b4:
9b:c4:6d:62:3f:3d:29:c4:99:bc:b6:88:ef:07:7a:
80:ae:63:c4:fd:ba:bb:dd:06:ef:a3:ae:a7:8c:78:
4a:b7:2b:fb:e6:50:0a:1e:51:4a:10:26:56:11:4a:
89:61:17:60:a3:f1:69:fb:d5:3e:e7:3a:c3:53:7e:
03:5c:a5:ae:48:f8:bc:7f:12:7a:d2:c3:6d:94:53:
da:4a:42:cc:35:50:f2:87:db:ce:3c:40:81:40:45:
8c:dd:80:c8:6b:51:1a:7c:db:8a:ac:ca:14:0f:fa:
14:d8:4c:2f:1b:1a:43:3d:e8:b4:e8:ea:8a:cc:04:
f0:b3:df:94:84:e1:89:10:41:b6:b0:83:4e:3b:ef:
2b:06:72:47:f0:2c:a1:3e:db:fe:11:06:63:13:a0:
4d:10:15:b4:af:b6:b7:13:73:8a:9d:4d:a4:a8:54:
97:8d:cb:40:19:66:79:6e:43:56:df:51:c6:b7:26:
ab:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:E0:ED:59:20:52:ED:23:34:D6:01:63:DB:6A:00:18:24:6A:90:58
X509v3 Authority Key Identifier:
keyid:8A:16:61:8B:71:FF:C8:0E:1C:3F:41:ED:0D:FC:89:AB:5E:96:3F:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ihZhi3H_yA4cP0HtDfyJq16WP9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:6c:5b:03:72:df:d3:7f:6a:dd:a7:bf:e5:e7:4b:a4:d0:12:
57:d4:b6:21:9e:ad:04:a6:22:1c:a3:c8:ab:ef:f2:aa:18:8a:
4e:27:56:47:63:31:6b:39:b3:d6:f4:05:d2:44:6a:10:c9:83:
0d:39:5d:40:15:01:b2:fb:38:cb:8d:5f:87:9a:db:39:31:0b:
4a:e6:e2:22:9d:dd:21:7c:6c:4e:4a:73:5c:98:48:fc:83:d8:
4a:e1:79:af:cc:e6:bf:4f:3f:2d:b5:73:e2:ef:08:e9:53:08:
d0:46:7f:bc:65:a2:6e:4b:c0:b1:1f:d7:a5:ee:c8:28:78:b7:
d1:22:4c:09:26:36:11:e9:08:fe:19:d6:06:a4:82:d3:1c:f3:
70:a2:5e:4d:1b:1e:44:80:a8:0e:44:f3:b5:18:38:fc:66:be:
1a:a3:36:d5:20:a7:a5:16:e2:68:5b:fd:26:ed:0f:02:5d:3f:
30:58:25:d7:c2:e7:4b:b1:02:e4:e1:88:8d:18:3c:25:32:29:
c3:7c:1f:3e:e2:5a:34:ba:c7:76:a4:66:1b:ec:de:fc:71:a5:
db:67:b5:59:14:54:02:e3:12:3a:61:f9:0b:20:6a:16:66:82:
bd:94:4a:a5:0c:47:06:86:38:b4:80:ea:b9:43:4e:ed:91:7e:
a3:f5:d7:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:50:13 2026 by rpki-client