Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.mft
File: iTr8bv5imQomky9A4VCyfu1TnEs.mft (raw, json)
Hash identifier: yZ+deFwhyQcpPJ8a9QHx2iGVcfxE6oxWIZV24dihU+A=
Subject key identifier: 25:12:9D:CD:AC:DE:98:70:2E:9F:28:D7:6B:C5:D3:78:D7:BE:60:AC
Authority key identifier: 89:3A:FC:6E:FE:62:99:0A:26:93:2F:40:E1:50:B2:7E:ED:53:9C:4B
Certificate issuer: /CN=893afc6efe62990a26932f40e150b27eed539c4b
Certificate serial: 019D9999A41A43D211C31FB683108DC1B660
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iTr8bv5imQomky9A4VCyfu1TnEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.mft
Manifest number: 18BF
Signing time: Fri 17 Apr 2026 04:01:15 +0000
Manifest this update: Fri 17 Apr 2026 04:01:15 +0000
Manifest next update: Sat 18 Apr 2026 04:01:15 +0000
Files and hashes: 1: SPmuoUXoA6tsZiCS0_pV74-AIEk.roa (hash: S9bFhQItClU/AaCIXnbTpcvt5Rg2XY1adevUwVNVVvo=)
2: iTr8bv5imQomky9A4VCyfu1TnEs.crl (hash: bHERAJRpyAVy74wbZ7RJKIe8JRHlbyfx1V/1HTf6fVQ=)
3: ip8Nz4oaOC3WF5YWfdlIj2uJ4es.roa (hash: L9aCvRxqO1gcLQJnMNhhLg422VtbcLvTCPUD+6YJIFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/iTr8bv5imQomky9A4VCyfu1TnEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:a4:1a:43:d2:11:c3:1f:b6:83:10:8d:c1:b6:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=893afc6efe62990a26932f40e150b27eed539c4b
Validity
Not Before: Apr 17 04:01:15 2026 GMT
Not After : Apr 18 04:01:15 2026 GMT
Subject: CN=25129dcdacde98702e9f28d76bc5d378d7be60ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:24:a8:61:63:e0:49:0f:90:7f:98:3f:37:c0:
52:92:8d:18:9f:13:2e:e1:e5:9d:13:c8:2c:34:54:
8e:79:a5:2e:e8:52:a1:8f:4d:47:82:67:e5:60:92:
f6:90:ef:8c:87:8d:af:20:93:2f:7b:e3:33:46:96:
d7:ad:9c:9a:4b:72:1d:c7:22:dc:2e:43:f7:98:7d:
ab:7e:40:0d:b6:c3:ec:6d:90:65:13:8f:41:cb:96:
18:ac:d7:63:2a:2e:a1:2d:fb:a4:21:fb:ca:0f:d6:
2d:ce:7f:a6:76:18:c0:d3:a1:3a:f1:5a:05:3e:5a:
5c:ad:10:2d:41:01:d9:59:18:7b:09:a5:2c:73:81:
d7:10:34:95:92:c8:14:1c:aa:d3:5e:14:d5:11:52:
2d:19:5b:30:71:b9:70:2d:47:48:bb:e1:7a:1e:49:
89:c8:2f:0f:7c:56:b8:de:63:82:18:aa:be:1a:a2:
d1:44:19:f1:d9:7e:16:bc:0d:7a:80:6c:0f:40:e0:
f6:87:fc:44:fd:46:c6:58:9a:c5:4f:d5:dc:8f:d5:
ac:71:ab:20:a6:8a:f7:66:8e:71:37:62:00:61:24:
c9:40:df:ab:33:45:b1:e1:53:73:38:c2:b9:86:64:
2f:f4:9e:b4:a1:93:0f:ff:ce:42:e7:02:59:9f:33:
45:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:12:9D:CD:AC:DE:98:70:2E:9F:28:D7:6B:C5:D3:78:D7:BE:60:AC
X509v3 Authority Key Identifier:
keyid:89:3A:FC:6E:FE:62:99:0A:26:93:2F:40:E1:50:B2:7E:ED:53:9C:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iTr8bv5imQomky9A4VCyfu1TnEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:42:82:9f:96:26:4e:02:d0:44:6b:dd:ac:f4:a5:80:ae:f7:
bd:13:4d:9f:14:4e:78:86:18:0b:e2:8c:e5:76:ff:24:d7:2b:
0a:a5:5c:77:65:62:55:4e:23:91:b4:24:0a:30:6a:f3:06:10:
cf:8a:b5:b6:3a:b3:28:df:da:d7:09:2f:0f:f9:5b:48:d5:55:
dc:ab:c6:99:6b:8d:c5:e7:52:86:2b:3f:ea:5c:94:50:7b:d5:
ce:31:cc:83:c7:73:c1:37:78:e4:8b:dd:6a:f9:66:cb:ea:98:
83:ec:07:38:75:df:28:2b:e9:46:39:53:cc:c4:93:5b:5e:b0:
cb:13:08:06:81:cd:d5:64:c3:67:14:b8:e4:e5:75:4c:59:31:
38:25:51:b2:5b:46:97:dd:9b:29:61:ae:78:06:d7:90:1c:70:
ba:f7:6c:da:c9:c0:c2:3a:c2:c8:2d:44:d4:2c:88:76:b0:c6:
fe:04:36:96:57:5b:4b:ac:23:b2:84:57:31:d4:2e:53:1e:a5:
f9:f7:57:e2:90:6e:70:4f:16:73:68:00:f0:36:a6:28:6d:f1:
87:47:77:99:5c:47:4d:f1:ff:7d:0c:0d:87:69:69:d9:9a:1d:
3c:c6:fb:5d:a1:83:64:59:2c:40:af:44:ab:b1:79:ab:f4:c3:
66:d5:1c:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:01:46 2026 by rpki-client