Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.mft
File: IWRiyMAGWgps6vJDmFtpfPE1e_s.mft (raw, json)
Hash identifier: HtF7uWTqy//HwjiBgiRm4Otpz7hDvWEu/vwDYZuancE=
Subject key identifier: 18:6A:C2:3E:9F:75:13:D4:9B:86:CD:A0:15:1F:FF:E0:80:2B:2D:FD
Authority key identifier: 21:64:62:C8:C0:06:5A:0A:6C:EA:F2:43:98:5B:69:7C:F1:35:7B:FB
Certificate issuer: /CN=216462c8c0065a0a6ceaf243985b697cf1357bfb
Certificate serial: 019D9961F11D26043D6A924AF4928B2CE87B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IWRiyMAGWgps6vJDmFtpfPE1e_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.mft
Manifest number: 15B1
Signing time: Fri 17 Apr 2026 03:00:25 +0000
Manifest this update: Fri 17 Apr 2026 03:00:25 +0000
Manifest next update: Sat 18 Apr 2026 03:00:25 +0000
Files and hashes: 1: IWRiyMAGWgps6vJDmFtpfPE1e_s.crl (hash: +ZIIbkEa3veuuR4tDnAgikguIussSsrPEQeCs4MGtU4=)
2: h1EMUyyZAAzRRRYxM5oEAQyKbqc.roa (hash: ab51Arxngi98phPFWNZggcRVUoPdKMJSwBp4EQAAf+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/IWRiyMAGWgps6vJDmFtpfPE1e_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:61:f1:1d:26:04:3d:6a:92:4a:f4:92:8b:2c:e8:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=216462c8c0065a0a6ceaf243985b697cf1357bfb
Validity
Not Before: Apr 17 03:00:25 2026 GMT
Not After : Apr 18 03:00:25 2026 GMT
Subject: CN=186ac23e9f7513d49b86cda0151fffe0802b2dfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ef:b2:81:82:a7:bc:6c:7f:b3:5c:d7:e9:d1:
89:fb:e8:3b:c0:9f:d7:aa:c3:e1:52:eb:77:4b:cd:
db:9e:6b:0c:5d:d2:94:75:6f:47:8a:0d:82:7f:52:
b3:90:19:2b:15:98:b1:95:da:d8:3b:71:e1:03:e8:
a3:32:a0:1d:8d:42:e4:dc:14:ef:aa:31:09:a6:4a:
65:84:ae:90:b0:9f:45:84:2f:72:76:be:48:3c:79:
2b:ba:39:ab:05:19:44:94:a4:77:52:1a:d5:cc:ca:
ee:32:9f:7f:b1:d4:9f:54:5f:67:bb:80:bf:be:6c:
b1:f7:08:da:a0:42:c9:80:b5:07:2d:92:c9:06:40:
e7:24:b4:c7:5c:b1:f6:31:3d:da:aa:27:dd:ba:a8:
ad:a0:0c:0c:66:3e:3b:ab:6f:0f:98:ec:60:a5:b4:
78:3e:9d:56:06:d3:89:db:57:1b:42:0e:0f:36:0d:
f7:dd:49:ee:39:93:90:e8:4f:55:26:f0:23:75:fc:
d2:fe:e3:a3:2d:ee:8a:dd:be:b6:c8:e9:e7:b7:4e:
40:94:b3:36:19:d1:f3:0f:29:ad:f5:93:b4:6b:9a:
0b:0f:1f:57:6f:5f:e8:3b:aa:99:1d:8d:44:3d:59:
91:c4:56:a4:f8:0c:3d:a3:9a:a0:e2:4d:08:7a:60:
27:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:6A:C2:3E:9F:75:13:D4:9B:86:CD:A0:15:1F:FF:E0:80:2B:2D:FD
X509v3 Authority Key Identifier:
keyid:21:64:62:C8:C0:06:5A:0A:6C:EA:F2:43:98:5B:69:7C:F1:35:7B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IWRiyMAGWgps6vJDmFtpfPE1e_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:f4:c7:fc:5d:d8:68:b4:cd:66:7c:9c:9b:c8:4b:b8:9d:17:
0e:45:33:d6:05:08:9a:94:ed:ac:a6:1c:e0:ae:fa:84:91:6c:
f2:27:5a:e3:70:55:8a:17:6d:f6:14:54:f6:a4:49:e8:74:10:
ae:f2:46:5e:95:b7:79:bd:ee:2f:27:13:26:62:40:ea:a6:a9:
18:db:e5:fb:96:16:76:2f:0c:16:74:74:b3:d6:19:8d:41:05:
24:53:5e:38:c5:a6:85:f8:01:ee:2d:2f:9b:74:8c:81:76:84:
50:68:0c:c3:36:ab:4f:39:2c:c6:a9:9b:e2:28:08:0e:de:7a:
69:a8:b4:af:ea:12:5b:d8:f9:94:7a:ef:8e:a0:c5:cd:0e:00:
b3:7c:2a:04:39:9d:38:cf:5f:a5:9e:ba:92:13:ab:82:83:88:
ac:ed:73:05:08:d1:67:36:ac:a1:31:3d:e1:08:3a:c0:ed:79:
0a:88:23:ce:c7:82:88:54:d1:70:64:dd:b4:f1:28:75:f0:43:
62:11:d1:09:cf:92:01:24:33:59:c1:20:3c:5f:ad:06:30:1b:
71:13:95:eb:bc:1b:b8:26:cb:21:1d:d3:ef:c8:94:6b:cd:27:
3c:32:62:35:84:69:a4:55:54:7e:06:b7:2b:ab:2f:44:13:17:
5d:d4:96:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:30:16 2026 by rpki-client