Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.mft
File: ia6mmISBzqS5W2UTHMSYhPPtDj8.mft (raw, json)
Hash identifier: 0R5BfPdWWs7H5Q6iFBowpQMMvXnJlpIt8XZdu9tQT5E=
Subject key identifier: 75:BE:73:D2:25:5B:9F:C0:EF:EA:1F:BE:E8:F5:28:A9:2A:F4:45:D3
Authority key identifier: 89:AE:A6:98:84:81:CE:A4:B9:5B:65:13:1C:C4:98:84:F3:ED:0E:3F
Certificate issuer: /CN=89aea6988481cea4b95b65131cc49884f3ed0e3f
Certificate serial: 019D98866163367A9EDD792801A06EC396F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ia6mmISBzqS5W2UTHMSYhPPtDj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.mft
Manifest number: 18C1
Signing time: Thu 16 Apr 2026 23:00:36 +0000
Manifest this update: Thu 16 Apr 2026 23:00:36 +0000
Manifest next update: Fri 17 Apr 2026 23:00:36 +0000
Files and hashes: 1: NoeQVsGRTiyXfh1eMtf_ayztjys.roa (hash: AI/YmWAsP7YbcuYJ9yAOU2XEXLr8wONVVB+AxIjcXdo=)
2: ia6mmISBzqS5W2UTHMSYhPPtDj8.crl (hash: 9nsOfh3+Ha62odpbyqTgPNefSY4cZwT43ay5e9pRC9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ia6mmISBzqS5W2UTHMSYhPPtDj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:61:63:36:7a:9e:dd:79:28:01:a0:6e:c3:96:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89aea6988481cea4b95b65131cc49884f3ed0e3f
Validity
Not Before: Apr 16 23:00:36 2026 GMT
Not After : Apr 17 23:00:36 2026 GMT
Subject: CN=75be73d2255b9fc0efea1fbee8f528a92af445d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:73:95:ef:01:76:1e:7e:d3:10:d1:db:bb:39:
3c:15:2c:34:0d:25:52:b6:e4:de:2c:5c:64:14:ab:
02:55:d2:7d:bb:63:a9:d3:30:80:8b:7b:fe:d5:dd:
5a:15:a4:57:e8:20:c3:cf:5c:64:14:06:ce:a5:79:
8f:fc:1e:39:77:a3:8d:65:60:0b:0d:65:7f:d3:dc:
27:92:6d:58:80:27:3b:03:c8:21:06:15:f7:16:64:
e1:11:62:e2:bd:f5:eb:24:4a:d5:2f:30:68:f7:1f:
30:3b:65:5d:d5:c7:ee:d4:46:95:0b:ab:c3:4f:aa:
a8:aa:fa:46:72:2b:4e:9e:d4:29:df:12:1e:cc:4d:
83:7f:6f:28:23:ab:20:b7:60:3b:86:c1:90:1d:20:
30:0c:f1:d4:20:71:7e:b5:9e:03:e2:ef:3e:07:a4:
10:b4:b6:e1:b5:ca:0c:d3:6a:fa:2d:a6:81:19:78:
09:ab:b2:b6:04:05:8a:8d:16:44:75:22:0d:a5:a9:
01:35:1e:98:2f:51:32:2a:37:3d:2f:3a:fa:fd:fb:
fa:8e:f7:16:ac:40:c7:71:e3:2f:e0:43:bc:9a:b1:
93:4e:1c:4d:bf:bb:3d:cc:61:82:f9:d2:13:27:21:
f9:0c:f3:af:d2:23:b9:4b:e4:e3:60:7d:df:ab:9a:
56:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:BE:73:D2:25:5B:9F:C0:EF:EA:1F:BE:E8:F5:28:A9:2A:F4:45:D3
X509v3 Authority Key Identifier:
keyid:89:AE:A6:98:84:81:CE:A4:B9:5B:65:13:1C:C4:98:84:F3:ED:0E:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ia6mmISBzqS5W2UTHMSYhPPtDj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:44:e3:d1:04:a0:a8:3b:a2:c5:d8:ff:33:1e:eb:39:60:f8:
6b:ef:0d:10:fa:3e:d7:d9:54:9a:4a:f3:b7:38:63:d5:b1:64:
c1:6c:2c:88:d2:c2:64:57:3f:41:72:93:50:cb:ad:5d:96:8a:
b9:0a:76:d4:c4:1a:9a:62:97:05:48:1e:49:8a:84:82:6a:90:
0a:ca:0b:e9:a6:93:b6:37:1f:3b:b1:e6:e9:56:78:67:88:52:
a6:d5:d4:c3:62:7f:65:01:58:f7:d0:67:41:5b:30:d7:69:30:
68:1e:07:4b:0c:64:94:eb:40:97:0c:05:04:96:2c:a6:19:5f:
39:6b:cf:07:64:23:0e:99:ce:b0:06:8f:dd:ac:f1:f5:34:d0:
95:65:13:04:91:36:d1:86:0d:f8:ad:1e:27:f4:5a:b9:a0:5c:
7e:78:9f:b9:ad:8d:28:b0:51:7c:08:0f:0d:98:cc:54:dd:3a:
5b:62:f3:7b:8e:d0:15:0b:ce:92:48:c7:f0:d2:02:e5:2a:6a:
ae:f5:21:2f:d4:7f:dc:10:d2:5d:e9:ce:0e:3a:de:f6:dd:b2:
ec:d8:ee:6e:c0:b6:ef:0b:a2:9b:14:fa:57:99:bd:c0:dc:95:
a9:35:2d:a3:17:a4:96:39:12:48:75:ea:77:6f:72:0e:56:f5:
b3:32:b0:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:06:02 2026 by rpki-client