Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft
File: IcOUybOja2n57l-JNqL1G5XqzrQ.mft (raw, json)
Hash identifier: UER4GQfh3PWI0PNiON/K1fp2cu451E8hekWJUkS8Z+Q=
Subject key identifier: 18:72:88:97:AA:73:AD:F2:AF:D2:C8:68:90:21:CA:92:B4:28:B6:3F
Authority key identifier: 21:C3:94:C9:B3:A3:6B:69:F9:EE:5F:89:36:A2:F5:1B:95:EA:CE:B4
Certificate issuer: /CN=21c394c9b3a36b69f9ee5f8936a2f51b95eaceb4
Certificate serial: 019DB16A775D5F32C68A30A2F9CFEF1C5BE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IcOUybOja2n57l-JNqL1G5XqzrQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft
Manifest number: 18D3
Signing time: Tue 21 Apr 2026 19:00:37 +0000
Manifest this update: Tue 21 Apr 2026 19:00:37 +0000
Manifest next update: Wed 22 Apr 2026 19:00:37 +0000
Files and hashes: 1: 2vB0H2qYyz6SI0m9_Uc6vD9cNDE.roa (hash: nA5TN8D8VR57ajti92sbOf79Vloshs+N1jBn946xsJk=)
2: IcOUybOja2n57l-JNqL1G5XqzrQ.crl (hash: Umjf0bwOQK/FvgUp+ggRJyuN+uGjH8un1AHvgm0ds9k=)
3: O_6FFbhc4JZemzwdUopF30jTO70.roa (hash: YpXPwTYN0lUePsEcimr/XTryk56n06KBrcCoSPFO4DM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IcOUybOja2n57l-JNqL1G5XqzrQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 14:21:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b1:6a:77:5d:5f:32:c6:8a:30:a2:f9:cf:ef:1c:5b:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21c394c9b3a36b69f9ee5f8936a2f51b95eaceb4
Validity
Not Before: Apr 21 19:00:37 2026 GMT
Not After : Apr 22 19:00:37 2026 GMT
Subject: CN=18728897aa73adf2afd2c8689021ca92b428b63f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ae:da:4b:f3:b4:76:37:b2:3b:7b:ce:9a:e8:
5a:31:9c:f4:ba:fa:e3:5e:f3:5e:33:76:e8:e9:ec:
2f:19:be:8d:4b:e7:3e:92:6c:4f:70:97:dd:0e:82:
69:30:a9:7c:a3:63:cf:01:b8:1b:b7:6b:10:a4:22:
6f:4c:72:e7:c4:b9:94:63:85:1d:47:d7:44:51:70:
5e:3c:36:7c:d7:38:67:93:29:2a:b1:c9:15:f7:b5:
14:ee:ed:5f:b9:f4:43:3c:9d:80:41:51:56:95:6e:
79:63:dc:2e:5a:b7:e0:a0:e8:eb:f4:39:76:6f:b3:
dd:9e:f5:a1:3c:3d:73:c9:72:4a:fb:68:18:43:b3:
3a:8c:61:04:de:0c:16:9b:f8:bf:e5:f2:62:06:ad:
9a:e8:98:f2:b4:db:ee:c4:b2:6c:9c:ee:aa:ad:15:
d0:14:2a:13:ae:75:68:be:de:c9:1e:7d:ce:ec:a8:
1c:f8:24:27:8c:02:65:f8:d7:ce:a2:5a:6a:50:fe:
1a:82:52:3f:d2:6f:7e:de:4d:eb:e0:fc:f9:b3:57:
e3:69:6a:cc:d6:e3:01:c8:82:41:6c:de:09:99:92:
78:41:f8:9f:b9:ea:7a:4d:18:c6:98:08:9a:c9:d0:
c2:0e:27:ac:2f:7a:bf:34:22:ea:bb:d2:68:5e:a3:
53:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:72:88:97:AA:73:AD:F2:AF:D2:C8:68:90:21:CA:92:B4:28:B6:3F
X509v3 Authority Key Identifier:
keyid:21:C3:94:C9:B3:A3:6B:69:F9:EE:5F:89:36:A2:F5:1B:95:EA:CE:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IcOUybOja2n57l-JNqL1G5XqzrQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:71:d0:e5:ba:26:9c:8e:98:7a:06:4e:d6:44:13:7a:56:fe:
59:bc:e9:e0:e0:23:b5:1f:c8:d1:3b:85:db:e1:38:1b:78:2b:
22:f9:24:e6:2e:25:11:24:06:3e:44:97:41:8c:89:fa:c6:1e:
c9:06:b5:e1:d1:d7:0b:e2:bc:47:c3:91:4e:8c:75:b6:db:3b:
5e:35:e3:fc:1b:9d:81:33:3f:f6:e3:bc:81:e6:4e:21:a8:4d:
c8:20:d1:43:ae:9f:c9:b9:45:17:c2:a3:c5:ae:a5:a1:d1:44:
e5:83:59:73:4e:37:21:88:d0:2f:ab:b1:dc:45:16:f8:f7:39:
87:49:06:aa:2c:ed:f4:be:fe:41:f0:bb:2a:63:c6:91:2f:03:
57:95:4d:71:3e:d1:8d:0c:40:b2:38:2c:ea:b1:99:63:57:83:
51:6a:d2:2a:96:0e:39:19:37:d3:19:b7:af:62:78:1d:81:60:
32:d8:05:f6:d6:ba:6b:21:f9:9c:e8:75:2f:a4:41:3f:b6:16:
57:d4:47:bd:e4:58:35:66:27:af:fc:3f:6c:26:1b:37:fd:7f:
02:a0:ce:54:06:57:2a:40:6e:89:5b:3e:a9:6c:d5:d1:6d:04:
f8:02:48:15:72:14:fd:0c:d5:1b:1d:0b:34:19:ff:e5:17:f0:
52:b2:6f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 00:25:31 2026 by rpki-client