Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/i0LHUqmwmDEos9KV5F6hazPuffk.mft
File: i0LHUqmwmDEos9KV5F6hazPuffk.mft (raw, json)
Hash identifier: iszJgi8HYUkmusHE8KI1uuaSpO5jV0D4604bhXGwJDc=
Subject key identifier: D0:A0:A7:E3:09:19:FE:DE:41:8A:C8:CD:98:68:96:69:B0:DA:E5:A8
Authority key identifier: 8B:42:C7:52:A9:B0:98:31:28:B3:D2:95:E4:5E:A1:6B:33:EE:7D:F9
Certificate issuer: /CN=8b42c752a9b0983128b3d295e45ea16b33ee7df9
Certificate serial: 019D996238FC245029986E33FC1E5B83A600
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i0LHUqmwmDEos9KV5F6hazPuffk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/i0LHUqmwmDEos9KV5F6hazPuffk.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 03:00:44 +0000
Manifest this update: Fri 17 Apr 2026 03:00:44 +0000
Manifest next update: Sat 18 Apr 2026 03:00:44 +0000
Files and hashes: 1: 3qQwWKb1-kVy_ayi1t9X0ckV-So.roa (hash: 6uc0py4DUTjhUubTuSWB3rLcaAx0aZmagITkDfiQN1k=)
2: i0LHUqmwmDEos9KV5F6hazPuffk.crl (hash: JzbM+RJQoyyEVraQQ9jukbnJ5IjpAiUBNp+VUP+dsFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/i0LHUqmwmDEos9KV5F6hazPuffk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/i0LHUqmwmDEos9KV5F6hazPuffk.mft
rsync://rpki.ripe.net/repository/DEFAULT/i0LHUqmwmDEos9KV5F6hazPuffk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:38:fc:24:50:29:98:6e:33:fc:1e:5b:83:a6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b42c752a9b0983128b3d295e45ea16b33ee7df9
Validity
Not Before: Apr 17 03:00:44 2026 GMT
Not After : Apr 18 03:00:44 2026 GMT
Subject: CN=d0a0a7e30919fede418ac8cd98689669b0dae5a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:da:a8:72:ae:83:f9:10:30:a3:90:41:68:6a:
af:1a:94:d4:44:24:20:da:2e:32:fe:b7:ce:67:da:
1b:8b:88:1a:b9:69:2e:94:b3:e2:11:50:2b:8f:61:
31:b7:76:7a:fa:40:f0:3a:21:61:19:2d:b9:f6:46:
2d:ea:f2:bb:d2:a8:01:95:3f:3f:e7:3a:a2:5c:48:
f9:a9:7c:72:af:1d:95:f1:bc:bc:a6:c3:8d:f8:30:
d1:48:6e:62:80:6e:84:1f:94:71:63:b8:ba:e1:bf:
aa:75:a5:b6:51:9f:48:3c:a6:98:fd:8e:54:e8:0f:
1a:30:62:bd:5c:b9:9f:3b:10:1e:22:b5:18:b2:c3:
9a:86:25:0f:8d:2c:8e:20:1d:a8:c6:9e:78:d5:46:
a3:b2:2b:ea:ab:cc:f6:9c:d0:4b:ac:29:23:78:95:
d9:c6:60:a7:d9:5b:e5:f9:fa:e6:90:7f:09:6a:70:
db:ac:fb:ce:d6:89:70:5d:31:3c:3b:1a:62:97:ec:
ed:cf:b1:a3:8e:09:b7:00:2a:55:7c:92:60:94:b4:
46:f0:a9:30:7c:5d:08:00:e4:f8:f5:64:21:e1:77:
53:01:3d:60:3d:9d:73:a8:2b:7e:33:bb:71:75:e8:
1b:73:72:7f:1d:53:d9:5b:ad:7e:e2:42:da:3b:77:
ef:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:A0:A7:E3:09:19:FE:DE:41:8A:C8:CD:98:68:96:69:B0:DA:E5:A8
X509v3 Authority Key Identifier:
keyid:8B:42:C7:52:A9:B0:98:31:28:B3:D2:95:E4:5E:A1:6B:33:EE:7D:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i0LHUqmwmDEos9KV5F6hazPuffk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/i0LHUqmwmDEos9KV5F6hazPuffk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/i0LHUqmwmDEos9KV5F6hazPuffk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:ae:92:95:46:a9:f6:3b:31:56:3b:6f:16:03:1c:8f:16:34:
c3:78:22:a3:bb:e9:2d:d4:6d:55:53:e1:af:29:59:d9:45:aa:
7e:00:b7:b8:24:75:16:ec:f7:5c:f4:a6:60:36:66:23:e1:c2:
02:68:f7:6c:05:03:8c:a7:55:70:2c:2a:6a:37:2b:8e:85:c4:
83:77:c8:f8:85:d5:e6:dc:15:24:c3:63:08:d6:d0:16:03:1c:
29:fd:6a:26:fb:4e:ea:a6:61:86:ba:fa:9e:7a:9a:08:5b:3f:
20:69:fb:86:24:81:88:22:02:60:55:67:bf:d5:99:fc:26:c0:
86:c4:85:01:97:af:29:be:2a:00:82:3a:13:5e:77:ce:4e:f8:
b1:1b:2e:a4:d6:fb:dd:4d:8b:1e:11:a8:14:40:4a:39:78:f9:
89:c2:ce:b3:77:31:eb:d3:66:40:e2:e6:b7:a6:53:07:bc:d8:
94:bd:ff:48:27:51:61:b5:ba:2b:24:3c:41:25:2d:86:95:9b:
a6:a5:36:12:61:e8:05:ac:33:64:a1:bb:5e:af:c1:e0:6b:b2:
cc:81:6d:c0:ac:1b:67:22:5c:ee:0a:d3:eb:7f:dc:31:87:c9:
1a:d2:38:5a:b2:ac:c0:67:6d:a6:ea:ee:59:8c:a6:69:33:34:
5f:98:36:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:14:20 2026 by rpki-client