Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/595db6-8920-4231-ad01-3534c8c5a351/1/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.mft
File: IOEUqP7D9Ty-nL9tagvgCJ4wx1c.mft (raw, json)
Hash identifier: SIgfjxTeQ7UnqMRs9DzmYGn6Ns08cWFV95F+GzIxnrM=
Subject key identifier: 93:18:F2:1F:29:2E:F5:97:BE:95:3F:E5:B6:EB:45:70:69:6E:1C:C1
Authority key identifier: 20:E1:14:A8:FE:C3:F5:3C:BE:9C:BF:6D:6A:0B:E0:08:9E:30:C7:57
Certificate issuer: /CN=20e114a8fec3f53cbe9cbf6d6a0be0089e30c757
Certificate serial: 019D98BDE2A214DA4BA76B15A9AFA4E772AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/595db6-8920-4231-ad01-3534c8c5a351/1/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 00:01:14 +0000
Manifest this update: Fri 17 Apr 2026 00:01:14 +0000
Manifest next update: Sat 18 Apr 2026 00:01:14 +0000
Files and hashes: 1: EkKLuZw4LV_kTAmqXpErqPpsQB0.roa (hash: NBo+lqt+AsFMxVrnLsaa8l21I1AWQ5KFNlmQ5ApE1BQ=)
2: IOEUqP7D9Ty-nL9tagvgCJ4wx1c.crl (hash: 5MabttU7bqZuCp3f3p426Z8EUk5wBF539GardVs5BwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/595db6-8920-4231-ad01-3534c8c5a351/1/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/595db6-8920-4231-ad01-3534c8c5a351/1/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 00:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:e2:a2:14:da:4b:a7:6b:15:a9:af:a4:e7:72:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20e114a8fec3f53cbe9cbf6d6a0be0089e30c757
Validity
Not Before: Apr 17 00:01:14 2026 GMT
Not After : Apr 18 00:01:14 2026 GMT
Subject: CN=9318f21f292ef597be953fe5b6eb4570696e1cc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0c:06:09:39:f1:63:23:76:2e:d3:ac:b1:d0:
f1:fd:48:8d:a3:e4:aa:44:13:14:02:a1:47:cb:2d:
71:dc:30:87:47:2c:b4:d8:18:4e:06:93:c8:94:04:
27:a4:1b:f0:47:50:8e:f5:e1:38:9b:52:62:59:d5:
9e:9e:43:b0:04:80:9e:ef:0b:34:ba:2a:7f:44:d0:
35:88:74:15:dc:47:4a:a3:57:68:cd:a6:07:9b:e7:
f5:2e:4c:8f:07:d9:c6:9f:e1:38:7d:cd:10:1c:f8:
5e:65:1e:d5:da:98:27:31:a1:35:aa:75:02:39:93:
5d:8b:d6:7e:9f:c7:31:9c:72:45:c6:15:2f:82:ba:
01:a5:2c:a2:9b:72:d3:94:e0:f1:f1:ee:20:31:ab:
af:c6:4f:54:f2:e1:38:d8:9e:13:8c:bd:cd:d2:1d:
07:e2:93:c8:1f:b7:08:c5:29:c5:ad:88:b0:18:34:
d8:a9:aa:d0:34:3a:d5:ef:d6:40:c3:3f:61:27:eb:
7a:7e:a0:eb:68:28:38:85:0e:9e:29:72:a4:b7:ca:
a9:a1:31:7d:1d:d2:2f:d9:c1:8d:a6:d4:3f:03:7d:
4f:44:41:30:4f:f3:b3:4e:1c:38:e4:1e:82:da:de:
ba:99:73:a0:3d:cd:fc:4a:86:6f:73:dc:67:9e:68:
89:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:18:F2:1F:29:2E:F5:97:BE:95:3F:E5:B6:EB:45:70:69:6E:1C:C1
X509v3 Authority Key Identifier:
keyid:20:E1:14:A8:FE:C3:F5:3C:BE:9C:BF:6D:6A:0B:E0:08:9E:30:C7:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/595db6-8920-4231-ad01-3534c8c5a351/1/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/595db6-8920-4231-ad01-3534c8c5a351/1/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:e7:e4:c2:38:d3:58:29:c0:07:e1:b9:44:09:41:75:f2:ce:
0a:e8:3f:22:5c:70:db:3d:9e:e1:1a:40:24:88:6c:11:bb:b8:
41:ac:5c:77:44:b0:94:57:58:01:35:fa:25:7a:be:ba:13:33:
5c:02:8d:82:1d:92:dd:7c:f4:53:db:89:cd:8f:9c:5a:9c:39:
39:17:2b:ad:cb:6b:a7:87:bc:64:b7:ed:38:85:64:86:94:80:
a1:aa:c8:1d:9c:3d:ad:e3:0b:72:a6:dc:58:46:b5:34:f1:1b:
e6:a8:c6:70:4a:9b:80:00:dc:ef:7b:0e:55:7c:9d:84:08:a2:
be:e1:22:7f:0f:de:24:a7:af:63:e1:60:89:88:b5:94:08:d6:
09:71:88:f5:eb:d4:52:f3:ee:87:0c:fd:7f:6f:0f:1d:fe:60:
ef:b1:35:5b:78:39:e2:89:9d:d2:c4:c3:7e:e3:19:61:43:d3:
9f:7b:57:33:bf:52:a7:60:a6:fb:d4:77:ce:19:a5:07:8a:26:
ef:bb:ea:88:60:34:24:4b:2e:82:eb:97:97:73:bf:6e:6e:76:
cb:f7:2e:15:9f:1e:aa:c8:d3:c7:80:98:f3:5e:86:4d:e6:e4:
03:d4:d4:65:d0:b0:5f:ae:7d:25:7b:9e:7b:4d:77:f0:03:40:
44:fc:64:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YveKiFNpLp2sVqa+k53KtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwZTExNGE4ZmVjM2Y1M2NiZTljYmY2ZDZhMGJlMDA4OWUz
MGM3NTcwHhcNMjYwNDE3MDAwMTE0WhcNMjYwNDE4MDAwMTE0WjAzMTEwLwYDVQQD
Eyg5MzE4ZjIxZjI5MmVmNTk3YmU5NTNmZTViNmViNDU3MDY5NmUxY2MxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgwGCTnxYyN2LtOssdDx/UiNo+Sq
RBMUAqFHyy1x3DCHRyy02BhOBpPIlAQnpBvwR1CO9eE4m1JiWdWenkOwBICe7ws0
uip/RNA1iHQV3EdKo1dozaYHm+f1LkyPB9nGn+E4fc0QHPheZR7V2pgnMaE1qnUC
OZNdi9Z+n8cxnHJFxhUvgroBpSyim3LTlODx8e4gMauvxk9U8uE42J4TjL3N0h0H
4pPIH7cIxSnFrYiwGDTYqarQNDrV79ZAwz9hJ+t6fqDraCg4hQ6eKXKkt8qpoTF9
HdIv2cGNptQ/A31PREEwT/OzThw45B6C2t66mXOgPc38SoZvc9xnnmiJLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJMY8h8pLvWXvpU/5bbrRXBpbhzBMB8GA1UdIwQY
MBaAFCDhFKj+w/U8vpy/bWoL4AieMMdXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSU9FVXFQN0Q5VHktbkw5dGFndmdDSjR3eDFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS81OTVkYjYtODkyMC00MjMxLWFkMDEt
MzUzNGM4YzVhMzUxLzEvSU9FVXFQN0Q5VHktbkw5dGFndmdDSjR3eDFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS81OTVkYjYtODkyMC00MjMxLWFkMDEtMzUzNGM4YzVhMzUx
LzEvSU9FVXFQN0Q5VHktbkw5dGFndmdDSjR3eDFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGufkwjjT
WCnAB+G5RAlBdfLOCug/Ilxw2z2e4RpAJIhsEbu4Qaxcd0SwlFdYATX6JXq+uhMz
XAKNgh2S3Xz0U9uJzY+cWpw5ORcrrctrp4e8ZLftOIVkhpSAoarIHZw9reMLcqbc
WEa1NPEb5qjGcEqbgADc73sOVXydhAiivuEifw/eJKevY+FgiYi1lAjWCXGI9evU
UvPuhwz9f28PHf5g77E1W3g54omd0sTDfuMZYUPTn3tXM79Sp2Cm+9R3zhmlB4om
77vqiGA0JEsuguuXl3O/bm52y/cuFZ8eqsjTx4CY816GTebkA9TUZdCwX659JXue
e0138ANARPxklw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:03:55 2026 by rpki-client