Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/7da3a9-34df-48f8-8a1b-079e111edbf9/1/iDjoVrInLfF0ulpAqPx9XTAxyso.mft
File: iDjoVrInLfF0ulpAqPx9XTAxyso.mft (raw, json)
Hash identifier: hQBE80a0ZZSlNcMw32eke28TETOsHAHXO4VyKPieQ9g=
Subject key identifier: 48:12:85:6E:5C:B7:51:52:CE:B2:EF:38:61:77:04:2F:02:61:25:26
Authority key identifier: 88:38:E8:56:B2:27:2D:F1:74:BA:5A:40:A8:FC:7D:5D:30:31:CA:CA
Certificate issuer: /CN=8838e856b2272df174ba5a40a8fc7d5d3031caca
Certificate serial: 019D98BD26FEBE86EC502AAB9641068DA8A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iDjoVrInLfF0ulpAqPx9XTAxyso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/7da3a9-34df-48f8-8a1b-079e111edbf9/1/iDjoVrInLfF0ulpAqPx9XTAxyso.mft
Manifest number: 122A
Signing time: Fri 17 Apr 2026 00:00:26 +0000
Manifest this update: Fri 17 Apr 2026 00:00:26 +0000
Manifest next update: Sat 18 Apr 2026 00:00:26 +0000
Files and hashes: 1: bNXclAMIg3T6s2Uoz_EnoMHtGpo.roa (hash: ZMo0HqpRxUY5NsvyrYlzQ++ahmncMXJuDazn/I+//9I=)
2: iDjoVrInLfF0ulpAqPx9XTAxyso.crl (hash: oS5dQVfrzE4zFzW/GG9gdgZHQOvjpTxr3DqdvaJ1hgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/7da3a9-34df-48f8-8a1b-079e111edbf9/1/iDjoVrInLfF0ulpAqPx9XTAxyso.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/7da3a9-34df-48f8-8a1b-079e111edbf9/1/iDjoVrInLfF0ulpAqPx9XTAxyso.mft
rsync://rpki.ripe.net/repository/DEFAULT/iDjoVrInLfF0ulpAqPx9XTAxyso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:26:fe:be:86:ec:50:2a:ab:96:41:06:8d:a8:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8838e856b2272df174ba5a40a8fc7d5d3031caca
Validity
Not Before: Apr 17 00:00:26 2026 GMT
Not After : Apr 18 00:00:26 2026 GMT
Subject: CN=4812856e5cb75152ceb2ef386177042f02612526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:eb:65:55:17:65:d7:f4:71:7e:74:59:5c:ea:
9d:dc:3a:f3:37:f9:c8:91:34:ab:5f:81:91:6c:e2:
bb:84:73:07:e3:51:ad:16:3e:32:b5:9c:24:63:e4:
c4:6b:cc:7e:ef:4e:16:9e:fa:48:0c:12:d0:5d:1f:
44:ca:c5:ee:b4:0a:d3:e0:cf:a3:c4:a7:9f:a2:6b:
73:b9:8e:27:e5:ff:7b:21:9c:48:1f:5f:67:7f:18:
82:43:28:db:a3:b7:9c:f9:4f:e2:72:fa:fa:2f:14:
c0:fb:48:c8:8f:83:16:08:6e:9d:28:f0:02:20:e4:
63:bb:38:0f:ef:32:b5:6b:f6:4f:1d:30:de:14:2e:
b8:20:09:dc:cb:9b:14:4a:3d:75:2d:89:53:f5:17:
13:3a:ba:67:97:12:98:39:5f:de:e1:07:fc:10:f7:
99:88:dc:a2:29:ef:4a:de:c2:d7:0d:90:16:fa:1d:
3d:b2:87:3f:e2:3c:b5:33:0b:98:73:a5:99:48:97:
43:f2:82:50:53:34:76:38:20:b4:a7:73:4c:f9:7a:
d9:12:01:2e:61:7b:72:7e:b6:a8:77:dd:c8:fb:1c:
77:59:dd:34:7c:bf:ab:a7:de:51:95:32:01:82:d0:
8b:68:4d:b9:51:6d:57:dd:e0:b7:ca:63:5e:8d:dd:
d7:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:12:85:6E:5C:B7:51:52:CE:B2:EF:38:61:77:04:2F:02:61:25:26
X509v3 Authority Key Identifier:
keyid:88:38:E8:56:B2:27:2D:F1:74:BA:5A:40:A8:FC:7D:5D:30:31:CA:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iDjoVrInLfF0ulpAqPx9XTAxyso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7da3a9-34df-48f8-8a1b-079e111edbf9/1/iDjoVrInLfF0ulpAqPx9XTAxyso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7da3a9-34df-48f8-8a1b-079e111edbf9/1/iDjoVrInLfF0ulpAqPx9XTAxyso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:75:3b:fa:65:ff:d6:9e:c4:c2:84:9c:d4:77:ac:8c:b7:68:
de:e5:fd:99:48:3d:2a:a4:81:eb:72:38:45:a5:c3:ca:e2:cc:
2a:bd:10:0f:b0:f9:91:30:82:10:ef:3f:1f:21:67:6a:95:12:
2d:4c:4a:6d:ea:1a:5e:13:5d:4e:be:09:1d:50:aa:8a:ea:de:
c6:8f:b8:03:24:8e:06:b6:7f:fd:d9:21:54:bf:1b:e6:71:33:
b1:64:2a:f6:07:9f:c4:17:ad:2f:a6:61:98:d7:35:d8:36:7b:
b4:89:9f:29:50:7a:78:2a:ed:f1:cb:33:0a:69:5a:ab:54:43:
37:96:ad:ec:b8:3a:c7:b6:12:0e:f4:0a:c5:f5:cc:33:3c:82:
48:7c:76:9e:b6:f9:6d:00:79:11:2f:01:b3:1b:0e:7f:70:90:
40:48:ff:51:02:c7:ad:59:67:0f:52:b8:64:40:96:e2:bf:e4:
3d:59:5d:fd:77:8b:79:f7:36:8c:ba:4a:5b:d6:27:a1:57:62:
9a:f3:63:74:35:7b:d6:ad:7c:9b:c2:1f:b5:37:bb:4a:d6:3b:
ab:17:3f:04:3e:90:28:c9:7a:12:9c:09:58:01:e3:c9:7b:47:
0a:f8:9a:68:56:93:1b:16:a3:d7:5e:9a:8d:51:93:60:06:7f:
b5:4b:70:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:36:03 2026 by rpki-client