Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3318d9-5669-4920-a55c-73a63b259beb/1/I0tEmJRYnRb2dr_ygqvtqlbMe40.mft
File: I0tEmJRYnRb2dr_ygqvtqlbMe40.mft (raw, json)
Hash identifier: XeqiTEbWS/EN3MwlXDns8jgoQheFhOuHJXaA1oFnyAo=
Subject key identifier: 26:EE:A3:CC:AE:D1:36:7D:F8:38:CA:DF:98:0D:FD:0F:61:DB:0E:E5
Authority key identifier: 23:4B:44:98:94:58:9D:16:F6:76:BF:F2:82:AB:ED:AA:56:CC:7B:8D
Certificate issuer: /CN=234b449894589d16f676bff282abedaa56cc7b8d
Certificate serial: 019D9962BE941CE68AC2E69659E668537B14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0tEmJRYnRb2dr_ygqvtqlbMe40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3318d9-5669-4920-a55c-73a63b259beb/1/I0tEmJRYnRb2dr_ygqvtqlbMe40.mft
Manifest number: 08FE
Signing time: Fri 17 Apr 2026 03:01:18 +0000
Manifest this update: Fri 17 Apr 2026 03:01:18 +0000
Manifest next update: Sat 18 Apr 2026 03:01:18 +0000
Files and hashes: 1: I0tEmJRYnRb2dr_ygqvtqlbMe40.crl (hash: dx1kv9ZZT3yJr3/HvLGrnIT6pm7Po0qDGtPAapd/eUk=)
2: NWc7mOdqZ8fGWkhVkiDNa4c4NnE.roa (hash: aspcKV2w4XRZmv8Xg1QmYjjgR0mYMF80LK5f3kp14g8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3318d9-5669-4920-a55c-73a63b259beb/1/I0tEmJRYnRb2dr_ygqvtqlbMe40.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/3318d9-5669-4920-a55c-73a63b259beb/1/I0tEmJRYnRb2dr_ygqvtqlbMe40.mft
rsync://rpki.ripe.net/repository/DEFAULT/I0tEmJRYnRb2dr_ygqvtqlbMe40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:be:94:1c:e6:8a:c2:e6:96:59:e6:68:53:7b:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234b449894589d16f676bff282abedaa56cc7b8d
Validity
Not Before: Apr 17 03:01:18 2026 GMT
Not After : Apr 18 03:01:18 2026 GMT
Subject: CN=26eea3ccaed1367df838cadf980dfd0f61db0ee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d2:6a:88:a0:0c:b2:d5:c1:ef:5d:a1:bb:db:
28:e5:29:c1:b4:8e:8d:02:96:51:87:ae:50:6b:2e:
7a:d2:ea:97:e1:d7:1f:e5:88:a6:e9:07:fe:79:8c:
fb:00:b0:42:a3:4b:bd:62:aa:65:56:8a:ca:94:03:
21:77:3e:62:65:b9:21:34:94:ba:2c:c7:bd:c7:3e:
b3:d8:b4:b5:dc:33:df:83:a0:b5:e8:43:a9:af:a9:
70:7b:1f:4f:87:4c:fa:63:ed:f6:bf:f1:15:c9:4b:
e3:5f:a8:02:4c:3f:1b:a5:33:ca:d6:4d:9c:d7:65:
99:18:54:17:d0:b4:14:1a:67:99:b6:be:dd:f8:29:
ef:e5:fb:51:a8:21:d4:9d:c8:60:7a:70:17:20:6d:
fd:48:0a:68:bf:74:33:4e:34:70:75:85:9b:4a:d7:
ae:39:3b:df:a8:15:c8:ea:24:9c:5f:a5:a9:0e:5c:
0e:b3:73:dc:6e:22:c5:35:92:5a:f5:48:92:93:6c:
92:f8:26:23:22:76:71:1f:d8:72:60:39:83:70:ea:
9a:e7:09:ee:fb:80:61:82:34:60:14:76:93:46:ef:
d0:80:47:0e:ba:98:21:72:e1:05:06:1b:22:82:8a:
30:30:a1:f2:0b:82:3b:f3:68:e3:90:dc:ae:19:5d:
e4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:EE:A3:CC:AE:D1:36:7D:F8:38:CA:DF:98:0D:FD:0F:61:DB:0E:E5
X509v3 Authority Key Identifier:
keyid:23:4B:44:98:94:58:9D:16:F6:76:BF:F2:82:AB:ED:AA:56:CC:7B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0tEmJRYnRb2dr_ygqvtqlbMe40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3318d9-5669-4920-a55c-73a63b259beb/1/I0tEmJRYnRb2dr_ygqvtqlbMe40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3318d9-5669-4920-a55c-73a63b259beb/1/I0tEmJRYnRb2dr_ygqvtqlbMe40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:09:01:96:9b:a9:5a:de:1a:3a:ca:40:b3:69:43:52:52:85:
d3:dc:d7:78:c8:9c:71:82:f1:36:df:9a:84:7a:97:cb:e4:e6:
66:f3:c5:c8:40:c5:9b:97:60:4d:44:eb:75:47:b1:01:5d:b3:
df:f8:1c:94:0d:08:fa:14:a4:d6:a7:86:e9:b6:d4:2d:68:88:
bb:1d:e5:53:92:92:30:78:77:13:e6:1b:0e:fe:8f:7b:a1:70:
20:08:1b:98:32:ad:d8:f7:70:36:8d:17:f1:64:94:41:22:31:
0e:9b:0b:69:6a:0d:35:e3:64:f4:b3:76:85:97:09:38:36:dc:
fd:81:23:69:35:54:88:34:4f:97:71:9e:90:bd:fe:df:0b:f6:
b6:95:85:c2:55:9d:6f:09:2d:ec:38:20:9f:54:74:2b:e3:f7:
f9:34:7f:e7:7b:44:8f:5e:85:14:55:ce:41:9f:83:9c:9b:cc:
3b:d5:32:29:76:0a:a8:52:67:0e:c4:55:e5:ef:97:3c:fc:8c:
5f:88:ca:41:af:8a:49:9b:1b:bb:1c:40:d3:06:cb:b1:f0:0a:
60:50:fe:41:79:3a:49:49:49:a0:89:9c:0f:70:fa:c5:96:1f:
9a:9a:3d:c5:a0:11:41:f0:e8:5a:4e:8b:72:f7:af:d1:42:59:
73:b4:37:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:55:17 2026 by rpki-client