Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/m-Io1xO-xtTJq87C8Aoo6CH8J78.mft
File: m-Io1xO-xtTJq87C8Aoo6CH8J78.mft (raw, json)
Hash identifier: rjXS+lTJKtSXhV8MkaEaBZpp+RfysCS3PeHeWuwbRI8=
Subject key identifier: 18:C1:CF:5B:3A:FA:DD:0B:31:B3:6C:3F:92:E0:E7:DE:61:8B:2B:00
Authority key identifier: 9B:E2:28:D7:13:BE:C6:D4:C9:AB:CE:C2:F0:0A:28:E8:21:FC:27:BF
Certificate issuer: /CN=9be228d713bec6d4c9abcec2f00a28e821fc27bf
Certificate serial: 019DA8D5CC1FF3DC26003E9BC95C8DAFCA9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-Io1xO-xtTJq87C8Aoo6CH8J78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/m-Io1xO-xtTJq87C8Aoo6CH8J78.mft
Manifest number: 185C
Signing time: Mon 20 Apr 2026 03:01:16 +0000
Manifest this update: Mon 20 Apr 2026 03:01:16 +0000
Manifest next update: Tue 21 Apr 2026 03:01:16 +0000
Files and hashes: 1: 0ZGTFrZyUevTua2zs9Lh9hQNybY.roa (hash: zKYr5PtkQA7YlTYVOh/meKgufXnFJ/zrbKe55i+T7vI=)
2: m-Io1xO-xtTJq87C8Aoo6CH8J78.crl (hash: 8RMZ+Larv0TOuRixSEUre23+pQmMW9+9PM+k8vCYDp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/m-Io1xO-xtTJq87C8Aoo6CH8J78.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/m-Io1xO-xtTJq87C8Aoo6CH8J78.mft
rsync://rpki.ripe.net/repository/DEFAULT/m-Io1xO-xtTJq87C8Aoo6CH8J78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Apr 2026 03:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a8:d5:cc:1f:f3:dc:26:00:3e:9b:c9:5c:8d:af:ca:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9be228d713bec6d4c9abcec2f00a28e821fc27bf
Validity
Not Before: Apr 20 03:01:16 2026 GMT
Not After : Apr 21 03:01:16 2026 GMT
Subject: CN=18c1cf5b3afadd0b31b36c3f92e0e7de618b2b00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c4:db:15:ad:4b:a5:b8:93:38:80:18:e7:27:
e7:f4:92:16:3a:bf:0d:07:38:1b:66:84:7e:b1:bd:
8f:48:8a:a7:a0:a8:8f:e5:53:68:20:d5:5a:99:31:
bc:0e:4a:6f:b8:d2:5a:35:65:e6:41:40:1a:c9:3a:
e8:f7:f2:75:e7:06:ae:a2:63:da:2e:aa:4c:17:79:
25:e5:90:6f:35:ae:7b:a5:6d:48:6a:e3:88:a0:4a:
0b:66:ac:1f:da:ae:38:a6:b6:25:a1:c1:ab:05:07:
51:b8:35:1a:6a:87:ca:9d:4a:c8:5d:29:25:a6:75:
64:5d:0e:90:64:2d:3c:73:4b:e1:21:22:19:34:49:
26:07:38:b8:d2:8c:a6:0a:fd:4d:54:1a:46:db:60:
34:82:f1:35:0f:50:79:9e:26:c2:25:e8:6a:b5:cc:
75:ae:34:ec:16:e6:e5:25:46:a1:7b:63:9d:c5:4e:
f2:93:16:fd:bd:3a:1f:d6:d6:76:ae:c7:41:53:de:
9b:13:f4:b5:32:87:22:dd:73:b5:ba:ce:f2:05:8d:
4d:85:e8:10:5c:c3:ab:84:93:0e:32:ec:be:8c:ef:
f7:7e:40:9d:60:a1:3f:71:5c:33:f0:57:e5:58:f6:
47:fb:12:07:3e:37:b2:b8:ba:5c:9b:84:54:cb:e3:
4f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:C1:CF:5B:3A:FA:DD:0B:31:B3:6C:3F:92:E0:E7:DE:61:8B:2B:00
X509v3 Authority Key Identifier:
keyid:9B:E2:28:D7:13:BE:C6:D4:C9:AB:CE:C2:F0:0A:28:E8:21:FC:27:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-Io1xO-xtTJq87C8Aoo6CH8J78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/m-Io1xO-xtTJq87C8Aoo6CH8J78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/m-Io1xO-xtTJq87C8Aoo6CH8J78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:1a:42:e7:98:03:20:a4:d5:ba:d6:93:72:a3:4a:55:4d:f3:
cb:75:d2:86:43:b1:92:f9:3a:a2:a1:00:90:f3:7b:dd:d1:a0:
89:6f:27:2f:92:f9:6d:51:a1:6f:ba:0e:02:51:ae:26:17:33:
bb:38:22:56:5b:d7:6e:a9:23:f4:ac:41:00:5e:e2:f1:75:6a:
38:67:4e:fa:8f:61:0a:ed:52:89:34:20:f5:53:3f:d2:d5:8a:
c5:cc:20:bf:10:3c:b2:c9:ae:5c:70:74:76:41:69:63:bf:eb:
44:bd:d3:fc:05:5d:56:24:ca:15:6e:ee:7f:03:d7:65:99:1a:
32:92:3d:f5:3a:9b:f5:fb:64:28:78:d1:08:3f:58:8c:f1:37:
2f:b3:e2:a6:f7:cc:78:cf:ba:19:e8:fd:65:a6:d9:95:e5:8d:
64:35:93:6a:cb:ee:59:49:41:01:40:60:55:56:48:69:f5:9c:
a4:e1:00:8e:4a:4b:02:55:ef:60:9c:bd:16:ec:b2:96:c2:3d:
ec:65:ee:b8:f8:aa:d6:89:c0:ad:f7:03:a3:9c:08:1f:3d:53:
86:26:9c:96:f0:ae:60:94:87:c9:59:43:72:12:bd:33:74:d2:
87:f6:c8:08:66:a5:b7:00:97:68:44:95:55:df:79:9f:8f:53:
cb:f0:ca:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 09:54:10 2026 by rpki-client