Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft
File: IQ2p568B3nVEj0kGqsQb0pZOiEc.mft (raw, json)
Hash identifier: 0PX+sBNQ6B/OK5l31ikyw4CbsADLz1qQa9Sw4m4gkdc=
Subject key identifier: 68:A1:73:F6:9E:B8:BE:DA:2C:B2:01:96:35:98:C0:C7:A7:61:20:00
Authority key identifier: 21:0D:A9:E7:AF:01:DE:75:44:8F:49:06:AA:C4:1B:D2:96:4E:88:47
Certificate issuer: /CN=210da9e7af01de75448f4906aac41bd2964e8847
Certificate serial: 019D9E88E5797B1F58DEE0DCF0A03C1878A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQ2p568B3nVEj0kGqsQb0pZOiEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft
Manifest number: 18CB
Signing time: Sat 18 Apr 2026 03:01:04 +0000
Manifest this update: Sat 18 Apr 2026 03:01:04 +0000
Manifest next update: Sun 19 Apr 2026 03:01:04 +0000
Files and hashes: 1: 5qofx5kn-ofCIj9o3NGivX2oyoc.roa (hash: 7NfNoXJjBTrvr3E7539ztDCcU2EbYZAvEuO82OgvQXg=)
2: IQ2p568B3nVEj0kGqsQb0pZOiEc.crl (hash: 1NHWOM6kAaiLO/n60RehPraYKPOLthR0hiWyXFO5aZs=)
3: mWpfuNKr59RM8vs6VkBzUlnVMDw.roa (hash: NvT/WJHbjfkyULAS3B3qYEFqcvvfoazpHQgER185/rQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQ2p568B3nVEj0kGqsQb0pZOiEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9e:88:e5:79:7b:1f:58:de:e0:dc:f0:a0:3c:18:78:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=210da9e7af01de75448f4906aac41bd2964e8847
Validity
Not Before: Apr 18 03:01:04 2026 GMT
Not After : Apr 19 03:01:04 2026 GMT
Subject: CN=68a173f69eb8beda2cb201963598c0c7a7612000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8c:6f:0d:7c:ee:1b:a0:ce:ab:d5:53:be:e9:
db:d0:46:f5:70:46:18:7f:61:dc:ed:03:bc:44:b5:
63:eb:d8:14:79:77:9b:21:69:ad:19:90:75:c3:f9:
4b:dc:87:74:65:28:01:18:3c:76:fe:8b:37:e1:f6:
1b:37:82:0a:8c:d1:6e:90:c3:13:13:64:8e:f6:78:
e5:89:e6:e2:d3:0a:86:89:9a:35:80:7e:99:fd:02:
3a:b4:de:72:b1:ac:17:72:7a:f8:fa:2c:47:6b:23:
7e:3c:8a:ff:8d:dc:f8:12:5a:2f:d6:24:b4:18:75:
48:29:dc:4d:01:76:a6:49:29:8e:d1:da:c7:e9:b3:
89:e6:fa:4d:42:43:8d:ea:f8:a7:64:3f:29:c3:83:
2e:75:c8:6a:51:67:70:26:78:ab:52:a2:37:bc:c5:
a9:b5:89:b0:9e:01:d6:24:63:59:4e:08:ef:03:26:
ae:cc:6a:55:8c:c4:f4:8f:13:19:b2:3b:d9:6e:41:
75:19:db:dd:37:c4:e1:61:c0:82:62:81:0f:4b:7b:
12:11:78:75:96:6d:30:f1:12:12:1d:56:30:68:7f:
5e:1d:9f:c0:0c:ec:85:0f:42:2d:d3:15:f0:32:2f:
f1:78:6d:e3:3a:bf:d7:9e:aa:f3:60:23:6a:4e:bc:
f9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:A1:73:F6:9E:B8:BE:DA:2C:B2:01:96:35:98:C0:C7:A7:61:20:00
X509v3 Authority Key Identifier:
keyid:21:0D:A9:E7:AF:01:DE:75:44:8F:49:06:AA:C4:1B:D2:96:4E:88:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQ2p568B3nVEj0kGqsQb0pZOiEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:d6:a3:de:2c:6c:03:7e:a9:9a:b5:71:aa:d4:22:8d:e9:bb:
fc:33:d9:ce:9e:39:0c:31:49:2b:76:ab:71:93:e1:a4:8e:06:
ec:b4:50:a5:52:66:1d:ef:3f:8e:7b:bd:d4:a7:55:5d:ac:df:
b7:dd:d0:7c:b4:5c:c8:68:a7:8f:a1:80:58:1f:d9:f6:86:c2:
44:2e:de:58:8a:26:3e:cc:87:56:44:b4:3a:85:b8:0e:bf:e4:
a6:59:38:51:eb:78:fd:37:c9:4f:a4:b9:e6:a7:a7:dc:d2:05:
3b:80:92:36:a6:29:7b:13:73:b4:c7:d1:41:e4:25:5a:f5:3f:
87:83:c4:0a:36:bb:9c:e7:50:17:e3:0a:3a:a0:01:c4:7e:57:
c4:c0:46:a1:ee:f9:c5:23:18:13:99:b3:d0:3b:24:62:33:ae:
d5:e8:9c:b8:75:12:2a:a4:ee:c3:38:c7:1e:92:d0:66:a5:fe:
30:1f:dc:14:51:d5:f5:16:1c:ea:07:80:16:67:dc:2f:9c:85:
4c:2b:59:68:bd:af:66:67:1e:ef:63:8b:eb:a0:69:1d:78:69:
d2:46:00:28:aa:4d:0d:be:a4:b1:68:fe:90:61:64:32:0b:5d:
9c:22:6b:56:50:13:87:0d:4d:e7:fd:ef:a7:8c:ae:99:b8:46:
6a:f5:28:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 07:10:11 2026 by rpki-client