Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/idvHFWpO58Z9nmhHZ6L0uvijW6s.mft
File: idvHFWpO58Z9nmhHZ6L0uvijW6s.mft (raw, json)
Hash identifier: Lmw63ocOTAIskxnvQgZWHGNJFRe52GPlrfFJ8zdoq08=
Subject key identifier: FE:3E:FE:5B:C2:19:B1:FA:38:99:4C:4C:CC:C2:C6:29:8D:4E:F5:04
Authority key identifier: 89:DB:C7:15:6A:4E:E7:C6:7D:9E:68:47:67:A2:F4:BA:F8:A3:5B:AB
Certificate issuer: /CN=89dbc7156a4ee7c67d9e684767a2f4baf8a35bab
Certificate serial: 019D51491DEFD5017389B251F7899DD2EC69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/idvHFWpO58Z9nmhHZ6L0uvijW6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/idvHFWpO58Z9nmhHZ6L0uvijW6s.mft
Manifest number: 18A2
Signing time: Fri 03 Apr 2026 03:00:39 +0000
Manifest this update: Fri 03 Apr 2026 03:00:39 +0000
Manifest next update: Sat 04 Apr 2026 03:00:39 +0000
Files and hashes: 1: 0CdqlW01ACbv3EQD2O6eNsK9tUw.asa (hash: 9WhwZoBfEGd5k4zvC4ZA/vr5vp3EXDon/OkKYutAIU0=)
2: GBd4rVL5dJN0-9cuwhBBwNEyoV0.roa (hash: iRjXs3gr4L7byQxpcKRUar4Pisuwylgwnacqi0QdLQQ=)
3: PLZ1UvYELfgIKPLrh6OHNKK9acc.roa (hash: Shni7jpvErA8s5MzWpDHouyJxJ3M6Tbya9IWgb+KMM8=)
4: idvHFWpO58Z9nmhHZ6L0uvijW6s.crl (hash: DzO9/RkqPwV80FQlb8VB1Evfg41B4ok01i6hxor+j2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/idvHFWpO58Z9nmhHZ6L0uvijW6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/idvHFWpO58Z9nmhHZ6L0uvijW6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/idvHFWpO58Z9nmhHZ6L0uvijW6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Apr 2026 01:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:51:49:1d:ef:d5:01:73:89:b2:51:f7:89:9d:d2:ec:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89dbc7156a4ee7c67d9e684767a2f4baf8a35bab
Validity
Not Before: Apr 3 03:00:39 2026 GMT
Not After : Apr 4 03:00:39 2026 GMT
Subject: CN=fe3efe5bc219b1fa38994c4cccc2c6298d4ef504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4b:c7:e4:52:42:1d:a9:d2:c8:54:b4:ab:29:
c2:d2:a9:3f:95:d4:fa:3e:18:ea:9b:f0:c9:b7:43:
ef:6e:eb:38:21:32:dc:7f:da:cf:33:03:57:0a:fd:
c7:d5:ec:74:51:01:19:9f:2d:8a:e5:e6:f7:92:c1:
0e:28:6a:0e:bb:ab:ca:2a:4b:6b:59:d1:1a:a7:8d:
15:f6:e9:ab:cb:d4:14:f6:61:8f:b9:60:b5:fe:ad:
00:20:7b:5c:40:38:5a:3f:3b:37:b5:8c:77:bc:01:
7e:22:b8:26:0d:0d:3a:1b:46:fd:43:5e:d7:a1:82:
89:bd:de:06:5a:ca:ad:84:b2:21:7f:18:38:93:c6:
1c:b6:67:86:2e:07:17:02:a6:ca:68:fc:52:e3:d6:
41:ea:ad:e6:a1:e8:8d:ca:bd:cf:32:66:ac:b9:01:
76:48:11:94:00:97:0f:77:08:b7:c7:a8:a4:92:ea:
be:9e:7f:bc:86:d8:b8:83:77:de:c9:e7:fd:5b:f4:
d5:55:e8:1d:1c:bc:9e:20:11:5d:b5:6c:75:06:3f:
36:dd:a2:d1:26:56:6a:d9:b5:de:80:e2:24:29:fd:
2b:72:39:45:ce:46:03:11:10:52:95:b0:d1:1c:ec:
30:67:88:df:af:3b:f7:aa:50:f0:cd:7d:ab:79:cf:
7f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:3E:FE:5B:C2:19:B1:FA:38:99:4C:4C:CC:C2:C6:29:8D:4E:F5:04
X509v3 Authority Key Identifier:
keyid:89:DB:C7:15:6A:4E:E7:C6:7D:9E:68:47:67:A2:F4:BA:F8:A3:5B:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idvHFWpO58Z9nmhHZ6L0uvijW6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/idvHFWpO58Z9nmhHZ6L0uvijW6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/idvHFWpO58Z9nmhHZ6L0uvijW6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:4d:48:b0:7f:83:3e:d1:72:3a:8c:66:78:a7:81:a1:81:a4:
5e:22:69:dd:e3:d7:cb:b0:86:b8:5c:38:7f:d9:a5:98:e6:0a:
20:99:25:37:8b:a8:9e:e7:36:da:83:96:aa:26:f8:43:65:cc:
94:7d:a0:21:33:bb:4d:76:e5:02:aa:82:7b:11:d2:5a:18:76:
f6:f8:c7:85:7e:40:4a:c9:44:44:97:07:81:13:c0:5c:42:22:
00:e2:13:20:1c:31:a1:f5:cb:f5:a2:e8:f3:1f:f9:f7:f1:96:
b2:6e:37:72:30:3c:0a:96:e1:23:75:d1:c7:d9:6d:8d:27:0d:
25:71:ec:32:85:c8:c1:5d:54:5f:69:a2:f1:2b:b6:7c:db:55:
3e:0e:a8:13:cb:ee:8f:f4:f2:73:28:f5:89:83:ea:04:4c:fe:
05:4b:60:5a:ea:12:00:d5:b0:c4:96:7e:d3:32:4c:ca:09:58:
f4:4f:a4:fe:53:ec:95:4f:4c:3d:98:ff:9b:3d:03:24:3e:40:
cc:ca:b5:f7:a9:a2:b6:d4:8d:9a:50:48:0a:51:6c:87:ab:8a:
a7:91:19:cb:fa:c3:92:44:00:ed:d9:c0:a4:1e:89:ed:b8:ab:
da:50:27:3b:7a:f7:04:85:a3:bb:36:81:fe:34:d6:a2:17:5e:
03:7d:8b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 3 08:50:40 2026 by rpki-client