Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.mft
File: iEteFkkLmmjQn7y0VXQ1AAAUmvo.mft (raw, json)
Hash identifier: FaxMN4zFp+d9AIkhb657aZtfD4CxxJlb/AmuAyAau6w=
Subject key identifier: 85:DC:E9:AC:C2:46:51:69:E4:47:14:72:34:92:1A:AD:53:A7:26:39
Authority key identifier: 88:4B:5E:16:49:0B:9A:68:D0:9F:BC:B4:55:74:35:00:00:14:9A:FA
Certificate issuer: /CN=884b5e16490b9a68d09fbcb45574350000149afa
Certificate serial: 019D9A7502F7F29E30D21B77FCC41A090C7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iEteFkkLmmjQn7y0VXQ1AAAUmvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 08:00:52 +0000
Manifest this update: Fri 17 Apr 2026 08:00:52 +0000
Manifest next update: Sat 18 Apr 2026 08:00:52 +0000
Files and hashes: 1: C-j7DHdcPeX_wLaiQQCXx01sXKk.roa (hash: lDDZElowGuCMiUnBVx2Enp74tiPB1NbesCh32sGC/h0=)
2: iEteFkkLmmjQn7y0VXQ1AAAUmvo.crl (hash: ESmUvo2XNRzIkigFxFVuNTyhfUtNvP+RRFNou531HIQ=)
3: js6Pq6wBoWvKTyUwxz0skM29Qco.roa (hash: Y4NrXbk6igcwSNPM65V1DQWV2gXoGtbHhjuHToI9XM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.mft
rsync://rpki.ripe.net/repository/DEFAULT/iEteFkkLmmjQn7y0VXQ1AAAUmvo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:75:02:f7:f2:9e:30:d2:1b:77:fc:c4:1a:09:0c:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=884b5e16490b9a68d09fbcb45574350000149afa
Validity
Not Before: Apr 17 08:00:52 2026 GMT
Not After : Apr 18 08:00:52 2026 GMT
Subject: CN=85dce9acc2465169e447147234921aad53a72639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:49:1f:95:29:9e:82:05:10:f7:00:f8:5a:d3:
72:5b:a1:7f:26:56:69:ff:9d:9a:da:69:7e:f4:e2:
70:e8:d5:99:80:00:7e:66:ac:da:a5:4b:2f:53:92:
89:75:e7:fe:65:62:af:83:bc:db:9c:c6:cb:d4:0c:
28:e6:9c:90:dd:14:a9:36:15:55:da:67:89:06:8e:
f3:e7:eb:44:60:28:7b:61:20:1d:38:38:81:78:f2:
db:fa:00:86:4a:9c:2d:ba:84:ea:c4:47:d3:bd:fb:
0f:97:ca:00:68:dd:22:37:1c:55:62:c7:aa:91:b8:
ba:2c:3d:cd:b5:47:bf:68:bb:f9:83:8c:55:b3:90:
dd:6e:2d:21:c5:11:25:dd:ad:6c:2b:7c:69:42:7e:
a0:96:9f:11:95:1d:17:51:05:bd:99:8e:73:3a:aa:
4b:a7:9f:58:65:03:3f:4b:fc:a6:b4:1a:0c:9e:44:
22:a3:c4:4d:32:18:76:08:47:00:29:27:21:64:74:
04:34:94:3f:a5:cc:80:1e:f7:30:ac:5f:40:99:a3:
a0:96:0d:a6:9b:e2:91:d5:50:37:05:ca:ad:6e:10:
78:6e:f7:d2:90:17:d4:19:9a:80:b2:29:0b:22:29:
04:6c:69:bd:4f:22:ed:b3:2a:00:4e:e7:74:2a:2b:
b2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:DC:E9:AC:C2:46:51:69:E4:47:14:72:34:92:1A:AD:53:A7:26:39
X509v3 Authority Key Identifier:
keyid:88:4B:5E:16:49:0B:9A:68:D0:9F:BC:B4:55:74:35:00:00:14:9A:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iEteFkkLmmjQn7y0VXQ1AAAUmvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:f6:7d:28:c5:c2:f5:15:23:db:2a:3e:f5:fd:13:74:7e:a1:
fb:1d:4b:70:2e:17:ea:64:db:d7:bf:66:aa:f3:ff:c4:3a:11:
cd:09:57:5b:b6:e9:72:de:d3:93:9f:61:30:01:9e:ce:29:7d:
84:ac:88:42:e2:88:dd:4f:4f:5c:c9:06:dc:6f:e7:d1:b8:2c:
d8:bf:91:1b:68:9b:82:6f:b6:ed:fa:fd:b6:ca:38:a1:da:db:
fe:b0:9b:a1:50:5f:7c:28:cf:b3:fb:3e:b1:f8:07:69:20:28:
7e:a9:b7:5a:41:d3:0c:70:f4:96:ca:dd:e7:3c:34:46:58:58:
ed:48:d7:e3:cb:d3:e3:77:c2:52:e2:83:0a:0a:22:d8:80:2c:
1a:98:72:b7:ce:55:64:f6:32:bf:04:0f:f1:d4:81:2e:85:24:
88:1c:15:92:51:52:76:a8:dd:fa:2d:d8:19:2d:28:ed:3d:1e:
93:6f:43:82:c7:93:78:d1:ff:7c:41:8d:a3:8b:94:79:72:26:
a3:57:a4:e9:4d:23:49:9b:6f:cb:61:87:1a:f2:ff:80:2f:e8:
92:ca:23:31:58:fe:cc:18:4f:61:b5:fa:4d:8b:04:47:eb:2f:
76:45:9b:58:60:dc:ac:bb:f9:d0:53:62:18:6e:52:d8:8c:de:
e2:00:e0:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:52:54 2026 by rpki-client