Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a80963-3089-4ac4-af4f-3c8717414d80/1/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.mft
File: IhMAdZZJOAL7k6Mmcx_TMp6uLaw.mft (raw, json)
Hash identifier: rwJecZc2SWA2JKkho+OHAZMvEtbS0iFDkD6kCQfjgnQ=
Subject key identifier: FA:41:19:41:95:80:16:1F:BA:F7:1D:8D:C5:02:91:48:0B:DA:C6:60
Authority key identifier: 22:13:00:75:96:49:38:02:FB:93:A3:26:73:1F:D3:32:9E:AE:2D:AC
Certificate issuer: /CN=2213007596493802fb93a326731fd3329eae2dac
Certificate serial: 019D9A3E4F645FAB62ABE3CEE0E8313E95B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a80963-3089-4ac4-af4f-3c8717414d80/1/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 07:01:07 +0000
Manifest this update: Fri 17 Apr 2026 07:01:07 +0000
Manifest next update: Sat 18 Apr 2026 07:01:07 +0000
Files and hashes: 1: 1-1E1uif61o8C4HWLXAligJFDeqQ.roa (hash: D5F7YAusAftPV7C9tS7ICY1e2xvUA57jsFdWv4x/B44=)
2: IhMAdZZJOAL7k6Mmcx_TMp6uLaw.crl (hash: Rl/WvDhtAtdamLgz8g3Q/vfzTvJWT0WfhqOPAXWBZ2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/a80963-3089-4ac4-af4f-3c8717414d80/1/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/a80963-3089-4ac4-af4f-3c8717414d80/1/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:4f:64:5f:ab:62:ab:e3:ce:e0:e8:31:3e:95:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2213007596493802fb93a326731fd3329eae2dac
Validity
Not Before: Apr 17 07:01:07 2026 GMT
Not After : Apr 18 07:01:07 2026 GMT
Subject: CN=fa4119419580161fbaf71d8dc50291480bdac660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9a:e1:55:8e:7a:40:c0:bb:f3:b8:e1:5b:5c:
e7:2b:49:09:4c:ba:e1:8a:07:e4:ff:e9:2f:de:e8:
c1:af:8e:4e:fc:07:7b:48:52:7f:52:c1:4a:26:01:
ca:55:3f:a1:97:7d:aa:3d:c7:11:56:38:9f:ac:c6:
2e:dd:d1:21:fe:28:50:ba:2e:fa:77:ec:4a:d4:fa:
96:54:22:7c:7f:6d:2d:97:7c:a7:6a:6c:e1:00:c7:
e7:41:95:ea:69:b2:f0:48:56:15:bd:ea:1a:0c:86:
4d:79:fc:f6:c5:21:f8:7e:16:b4:4d:3a:89:2e:7c:
eb:11:97:97:c9:f7:49:2d:49:b6:2d:6d:29:a2:5d:
f6:92:c8:24:cd:fb:f4:70:22:30:4a:77:d8:2e:3d:
74:70:04:6f:76:46:e4:4d:2e:d8:92:b6:e5:a9:e5:
c6:f4:f1:1e:85:d4:08:3e:da:e2:1e:06:ae:2a:17:
a2:8e:95:d9:a5:b1:6b:48:56:74:72:5b:72:7a:c3:
93:c3:12:8f:86:c2:df:9a:1d:0f:5c:94:f6:9a:02:
b6:d6:54:09:0c:60:45:53:fa:bf:ba:56:5b:04:53:
fb:e1:dd:6e:ea:b7:e1:9f:57:df:57:50:67:97:01:
60:6a:50:c6:b1:7d:bb:93:fb:84:31:3e:93:e6:6d:
b9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:41:19:41:95:80:16:1F:BA:F7:1D:8D:C5:02:91:48:0B:DA:C6:60
X509v3 Authority Key Identifier:
keyid:22:13:00:75:96:49:38:02:FB:93:A3:26:73:1F:D3:32:9E:AE:2D:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a80963-3089-4ac4-af4f-3c8717414d80/1/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a80963-3089-4ac4-af4f-3c8717414d80/1/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:f6:cc:72:b5:35:94:f9:b4:a7:dc:46:7b:a1:37:40:e7:5a:
98:da:39:95:e6:94:31:d4:7a:5b:67:98:47:d2:37:f4:2b:59:
74:9b:05:3e:85:88:e9:e4:49:86:4f:25:d8:78:06:05:d3:f8:
1c:c5:60:18:b3:9e:0d:93:18:00:30:66:20:bb:3f:85:bf:17:
2f:25:2d:f6:ca:23:64:dd:5f:08:0f:cd:b6:10:40:3c:e7:db:
04:71:d3:f2:7c:0b:01:f1:de:12:75:a7:d6:f2:ce:6b:09:93:
ee:b7:d5:18:e6:a5:bf:bc:2b:b0:6d:10:ed:10:6e:8c:3a:53:
dc:ba:63:35:94:97:92:1e:e0:12:8b:24:f7:a5:85:8a:9c:96:
73:0d:de:8b:3d:c8:b3:1c:a3:e7:b4:68:b1:fb:0b:13:54:db:
62:b3:52:42:d7:8b:15:f2:35:4f:20:fa:18:da:76:83:da:24:
e3:d8:b7:20:3e:b5:68:83:24:40:46:2a:6d:9e:44:f9:83:45:
49:67:a7:84:52:d4:e9:f1:fa:67:3c:db:71:b9:bd:6d:db:77:
52:7f:70:6d:4f:03:1d:86:64:99:ef:90:e7:60:f3:b8:5c:e3:
0d:16:42:4d:c8:38:11:29:2c:77:36:8d:e4:9f:7d:9d:39:5b:
00:67:eb:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:19:32 2026 by rpki-client