Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/129a5b-b7f6-49d0-95c2-12f9cb0a2118/1/iDa9j605PlExoCNykxWzVgFOZjc.mft
File: iDa9j605PlExoCNykxWzVgFOZjc.mft (raw, json)
Hash identifier: rjdDDsKl+z8CdxK6V4u8ZBc3lITCS+DuK9XmN3rEFYo=
Subject key identifier: A2:D0:38:82:A0:E6:F8:78:E6:30:EF:9A:1C:60:01:C5:97:8E:C2:99
Authority key identifier: 88:36:BD:8F:AD:39:3E:51:31:A0:23:72:93:15:B3:56:01:4E:66:37
Certificate issuer: /CN=8836bd8fad393e5131a023729315b356014e6637
Certificate serial: 019D9A075C80917CFB2787ED78E6D1E436AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iDa9j605PlExoCNykxWzVgFOZjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/129a5b-b7f6-49d0-95c2-12f9cb0a2118/1/iDa9j605PlExoCNykxWzVgFOZjc.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 06:01:06 +0000
Manifest this update: Fri 17 Apr 2026 06:01:06 +0000
Manifest next update: Sat 18 Apr 2026 06:01:06 +0000
Files and hashes: 1: iDa9j605PlExoCNykxWzVgFOZjc.crl (hash: o9hGJfQNKR9Zvhlqt5vLO3LsfGZJE1lF2+HgLH/ARzs=)
2: mY4Ps2ODyoJOR0xKvF6KJHBSMik.roa (hash: UmvKuUUkINXoOW+jyUXuOgnlOY9eMq6JudtGUkNm/Ow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/129a5b-b7f6-49d0-95c2-12f9cb0a2118/1/iDa9j605PlExoCNykxWzVgFOZjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/129a5b-b7f6-49d0-95c2-12f9cb0a2118/1/iDa9j605PlExoCNykxWzVgFOZjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iDa9j605PlExoCNykxWzVgFOZjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:5c:80:91:7c:fb:27:87:ed:78:e6:d1:e4:36:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8836bd8fad393e5131a023729315b356014e6637
Validity
Not Before: Apr 17 06:01:06 2026 GMT
Not After : Apr 18 06:01:06 2026 GMT
Subject: CN=a2d03882a0e6f878e630ef9a1c6001c5978ec299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:35:58:19:67:d8:a9:c9:27:a7:8b:a7:7c:8e:
18:21:a1:c5:a2:50:4d:32:80:b7:70:7a:5a:47:13:
f4:f6:e5:6f:82:04:e0:a0:75:34:60:bd:4f:76:ed:
1e:aa:0e:35:99:a7:78:7e:fe:e1:b8:3f:94:3f:f2:
40:86:70:2f:0b:5c:51:2a:3a:f1:d4:9a:53:74:67:
8e:c4:74:78:01:d9:ad:39:d7:e5:a2:f8:e4:76:59:
3f:9f:05:b1:b2:ba:45:10:09:b4:c8:ea:5a:e3:5a:
c1:ee:6c:d3:4f:1c:8c:ac:03:c8:7b:de:52:52:36:
cf:a1:3e:9d:c2:3b:7e:64:63:4c:f5:cf:cd:94:5e:
3e:30:a7:e0:1c:49:75:9e:3d:6e:8e:db:4f:43:41:
c1:be:be:51:8b:ec:6a:6b:09:55:8d:67:bf:db:8b:
8c:26:3e:0e:08:1f:75:b1:46:fb:21:59:57:25:21:
38:e5:1d:3a:42:cb:30:41:ac:54:3a:21:45:67:77:
cc:7f:75:4b:4c:ea:70:7f:84:62:87:36:c0:0e:15:
14:e6:35:75:91:2f:40:a8:45:08:96:11:c2:b0:a8:
3a:65:20:47:2e:56:1f:b8:7a:67:9d:83:50:ac:f1:
02:04:e0:38:3a:ad:fb:17:24:c0:fe:6c:5f:7c:a0:
47:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:D0:38:82:A0:E6:F8:78:E6:30:EF:9A:1C:60:01:C5:97:8E:C2:99
X509v3 Authority Key Identifier:
keyid:88:36:BD:8F:AD:39:3E:51:31:A0:23:72:93:15:B3:56:01:4E:66:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iDa9j605PlExoCNykxWzVgFOZjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/129a5b-b7f6-49d0-95c2-12f9cb0a2118/1/iDa9j605PlExoCNykxWzVgFOZjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/129a5b-b7f6-49d0-95c2-12f9cb0a2118/1/iDa9j605PlExoCNykxWzVgFOZjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:94:3d:fa:d5:8e:8f:62:b3:60:a0:75:a6:0d:e2:7d:9c:c2:
8e:53:6c:44:42:21:7b:76:d5:eb:5a:62:3e:4d:4e:34:fc:ea:
f5:02:75:0a:6a:05:f7:38:91:26:a8:5b:a7:d3:4e:a7:2b:11:
84:a3:b3:9a:60:82:b6:33:1e:d3:5c:b9:b6:92:d5:97:65:91:
53:7a:9f:1b:26:31:6f:b2:eb:25:eb:14:fa:d8:e3:7f:f6:0f:
f3:7e:a1:8a:2c:0a:94:ec:dd:86:d8:24:61:29:f3:44:14:fb:
fd:63:0d:26:84:7d:a4:86:00:ad:51:c5:70:3d:8e:e4:32:a0:
19:dd:c0:30:1c:71:fc:d7:86:79:2c:15:86:45:36:fc:65:c8:
03:3f:9a:cc:a4:2b:c7:67:e8:6a:dd:22:5c:30:0b:95:de:ef:
2f:ff:af:1b:31:82:f3:81:8c:8f:89:e7:38:65:4b:7e:22:09:
d6:fe:4e:06:4e:f0:05:e9:1a:ff:a6:9c:ca:e0:7c:75:9e:09:
4c:82:d7:d9:82:4b:20:17:da:f1:30:52:b1:8f:50:1e:a1:1d:
43:2f:59:60:3b:a1:39:df:6c:d4:16:42:d4:b2:fe:ae:78:e6:
5b:d6:46:4c:12:e1:15:2a:5f:59:47:dd:e8:6f:18:fd:24:61:
5a:05:be:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:46:05 2026 by rpki-client