Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7d8900-be76-40e2-8c99-70f943eac4db/1/iWkzRGOKywU2WC-rCJh2V472vFY.mft
File: iWkzRGOKywU2WC-rCJh2V472vFY.mft (raw, json)
Hash identifier: fBqTrWZ/kcRvw6NJVmWv7DBdOELAYdH02G5WY4TRMys=
Subject key identifier: 4A:C1:92:AD:02:6E:7F:3E:F1:A8:25:57:2E:32:AB:1D:00:92:7A:42
Authority key identifier: 89:69:33:44:63:8A:CB:05:36:58:2F:AB:08:98:76:57:8E:F6:BC:56
Certificate issuer: /CN=89693344638acb0536582fab089876578ef6bc56
Certificate serial: 019D9A3E9E9419177EA0A03061CA721229CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iWkzRGOKywU2WC-rCJh2V472vFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7d8900-be76-40e2-8c99-70f943eac4db/1/iWkzRGOKywU2WC-rCJh2V472vFY.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 07:01:28 +0000
Manifest this update: Fri 17 Apr 2026 07:01:28 +0000
Manifest next update: Sat 18 Apr 2026 07:01:28 +0000
Files and hashes: 1: NDwNFZEXkfQJUDkRKdNYGoT-CYs.roa (hash: MgEstRhz+rsVJ145O8dZD+Rboj459K59VW57okQlLvE=)
2: iWkzRGOKywU2WC-rCJh2V472vFY.crl (hash: SGUl7P+DecgsvhJBnbDkLD2xotqjQvIIkigsRfWZIwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/7d8900-be76-40e2-8c99-70f943eac4db/1/iWkzRGOKywU2WC-rCJh2V472vFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/7d8900-be76-40e2-8c99-70f943eac4db/1/iWkzRGOKywU2WC-rCJh2V472vFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iWkzRGOKywU2WC-rCJh2V472vFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:9e:94:19:17:7e:a0:a0:30:61:ca:72:12:29:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89693344638acb0536582fab089876578ef6bc56
Validity
Not Before: Apr 17 07:01:28 2026 GMT
Not After : Apr 18 07:01:28 2026 GMT
Subject: CN=4ac192ad026e7f3ef1a825572e32ab1d00927a42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1a:b2:79:8a:bd:d1:9a:5f:9c:e8:0f:82:74:
2a:d0:db:3c:7c:fd:a9:6c:4e:c5:56:f7:4c:f1:de:
81:35:ba:92:e0:ea:b7:3e:05:42:2b:d0:96:c1:a7:
e9:3b:f6:c5:44:6c:ad:52:71:c2:22:e4:a9:11:78:
90:7b:e4:54:d5:f9:30:ec:99:d9:05:ee:31:f5:b4:
4d:65:06:6a:e7:05:b1:f4:2d:18:97:c0:40:bc:17:
7a:63:a3:63:62:93:26:b9:93:2d:90:8a:69:bf:64:
8c:ac:a9:68:40:51:9d:24:5f:75:ad:fa:6b:28:a6:
06:bf:c3:d5:d3:24:17:78:e8:17:2f:b3:d0:e4:a2:
eb:1e:b9:37:99:31:90:c9:7a:f8:9d:12:c5:05:1c:
5d:8b:d7:90:3f:02:87:6c:bd:dd:ce:52:b4:3a:c1:
69:bd:4f:a9:79:55:48:0e:1a:55:44:84:2f:e8:16:
54:7c:cd:f6:d7:ac:2e:99:4a:fb:67:aa:a3:1b:a6:
bc:b3:24:d3:1e:41:5e:0f:7a:43:ef:63:f4:bd:62:
6d:27:63:5c:c4:c1:08:ad:9a:ef:50:f2:97:dd:3f:
b1:ac:83:d2:c1:17:80:2f:ea:90:3d:a0:23:23:30:
52:10:61:c6:8d:ae:33:f8:b1:99:34:4a:61:a8:df:
ee:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:C1:92:AD:02:6E:7F:3E:F1:A8:25:57:2E:32:AB:1D:00:92:7A:42
X509v3 Authority Key Identifier:
keyid:89:69:33:44:63:8A:CB:05:36:58:2F:AB:08:98:76:57:8E:F6:BC:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWkzRGOKywU2WC-rCJh2V472vFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7d8900-be76-40e2-8c99-70f943eac4db/1/iWkzRGOKywU2WC-rCJh2V472vFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7d8900-be76-40e2-8c99-70f943eac4db/1/iWkzRGOKywU2WC-rCJh2V472vFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:83:5f:22:34:79:de:f5:0d:d5:a3:c9:07:52:6c:45:0c:8e:
05:51:8b:67:a3:52:48:5a:40:45:74:04:35:6c:4a:58:9b:08:
76:90:7c:8a:cc:5c:99:40:79:16:4c:bc:28:de:df:c7:86:9e:
82:11:85:f7:2e:a3:a6:38:c8:3b:b4:af:b7:5f:22:23:41:c8:
bd:83:7c:05:68:05:96:37:ed:85:77:1e:b3:1f:83:ed:49:54:
97:dd:3d:67:df:44:3a:76:8a:3b:0f:d8:33:e4:7b:5b:ee:e5:
4b:45:fa:1d:de:b0:36:37:4f:61:18:22:9f:46:3e:11:3e:be:
fe:bd:82:f5:e4:5b:94:42:8c:b3:a7:67:35:54:81:d2:45:b0:
9a:c3:14:77:51:3f:1b:ff:35:5f:f0:44:84:d2:ba:ce:02:b4:
c9:48:92:ed:89:cf:c5:6a:91:88:72:17:36:55:03:1b:e3:30:
80:e0:8f:e9:df:f7:dc:6c:ec:16:32:90:d8:66:0d:d9:35:7a:
4a:bf:b5:a7:07:a5:18:12:8b:ba:f3:71:64:c6:04:c2:42:7c:
e8:7f:a8:56:15:7f:f8:f8:d6:bc:91:d5:40:b5:16:e9:5c:52:
6e:5e:27:f5:d0:d3:c7:a5:87:ac:7a:84:e8:e3:c9:5b:e3:9d:
b3:2b:bc:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:02:48 2026 by rpki-client