Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/445a66-b76b-4b48-a02d-bc289a931b4b/1/iAsPesuH0TTDhZ1y0NGmHkdRusA.mft
File: iAsPesuH0TTDhZ1y0NGmHkdRusA.mft (raw, json)
Hash identifier: zlgPPZiYIfzhEjl1e1Zm4e+5FX8eLxNp25tmemlQQhA=
Subject key identifier: AE:F8:B4:19:8B:CA:5A:32:65:A8:E1:23:34:7B:28:6B:70:D8:09:C4
Authority key identifier: 88:0B:0F:7A:CB:87:D1:34:C3:85:9D:72:D0:D1:A6:1E:47:51:BA:C0
Certificate issuer: /CN=880b0f7acb87d134c3859d72d0d1a61e4751bac0
Certificate serial: 019D9886819CDD5DEDC9478C5A2E98E828E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iAsPesuH0TTDhZ1y0NGmHkdRusA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/445a66-b76b-4b48-a02d-bc289a931b4b/1/iAsPesuH0TTDhZ1y0NGmHkdRusA.mft
Manifest number: 0F6C
Signing time: Thu 16 Apr 2026 23:00:44 +0000
Manifest this update: Thu 16 Apr 2026 23:00:44 +0000
Manifest next update: Fri 17 Apr 2026 23:00:44 +0000
Files and hashes: 1: QFY0JdkqZACX6DbQrMuCDT111r8.roa (hash: 8ei2JwlhItg4y3r3m8oI+dJmgo/uwKKNh5cafYIl8Iw=)
2: iAsPesuH0TTDhZ1y0NGmHkdRusA.crl (hash: wLl1K4+jtybuF83udYZ+csl6VTKTNiJ23x2ufyLvOIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/445a66-b76b-4b48-a02d-bc289a931b4b/1/iAsPesuH0TTDhZ1y0NGmHkdRusA.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/445a66-b76b-4b48-a02d-bc289a931b4b/1/iAsPesuH0TTDhZ1y0NGmHkdRusA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iAsPesuH0TTDhZ1y0NGmHkdRusA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:81:9c:dd:5d:ed:c9:47:8c:5a:2e:98:e8:28:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=880b0f7acb87d134c3859d72d0d1a61e4751bac0
Validity
Not Before: Apr 16 23:00:44 2026 GMT
Not After : Apr 17 23:00:44 2026 GMT
Subject: CN=aef8b4198bca5a3265a8e123347b286b70d809c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6e:89:5d:7e:4b:c1:7e:0c:d6:18:30:b3:04:
10:ad:a0:e0:fb:07:c2:7c:f5:90:a0:63:c3:f9:f3:
26:71:57:1e:d9:9a:ea:f6:d7:5f:b6:29:ff:e7:c4:
ab:31:38:c1:ec:96:85:09:53:dd:b3:9a:6d:ad:c7:
76:50:de:4d:7a:66:f8:19:00:c6:ae:2a:dc:b2:f7:
e1:76:e2:89:b9:06:fb:74:8c:85:97:d9:e7:c1:76:
9a:db:b0:38:ba:2b:96:8d:ea:f9:16:53:c2:cf:ed:
6e:40:45:6d:5b:ce:6d:60:45:be:fc:d3:e1:cf:9b:
c0:05:de:74:5a:ae:07:5e:de:45:13:4e:94:ad:fb:
11:0b:b5:3c:f2:37:7d:d3:4e:e6:02:7e:22:a1:5c:
99:8c:07:a4:44:51:d4:d9:7f:5d:12:2d:98:7e:73:
f9:5d:72:cf:42:88:66:fb:ba:06:37:34:a2:c5:a3:
b1:fb:42:42:24:66:9c:12:03:8c:60:dd:57:50:6c:
75:cf:b8:ed:cd:08:b0:80:5c:ea:f8:f2:75:b4:c8:
88:25:ee:d4:8f:c8:51:e8:c1:b3:77:50:76:0e:b5:
c8:0c:47:3b:e1:17:5b:13:5f:f3:4f:b9:8d:1b:45:
c6:5a:73:05:78:07:a4:d9:63:96:18:19:d7:1b:15:
6f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:F8:B4:19:8B:CA:5A:32:65:A8:E1:23:34:7B:28:6B:70:D8:09:C4
X509v3 Authority Key Identifier:
keyid:88:0B:0F:7A:CB:87:D1:34:C3:85:9D:72:D0:D1:A6:1E:47:51:BA:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iAsPesuH0TTDhZ1y0NGmHkdRusA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/445a66-b76b-4b48-a02d-bc289a931b4b/1/iAsPesuH0TTDhZ1y0NGmHkdRusA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/445a66-b76b-4b48-a02d-bc289a931b4b/1/iAsPesuH0TTDhZ1y0NGmHkdRusA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:d4:b9:42:d0:ac:9d:8d:a3:f6:a0:d4:aa:12:dd:31:c1:5e:
24:9d:d0:e0:87:1a:19:f8:37:c0:9f:47:cc:27:90:c1:50:13:
47:7c:9c:e4:b8:f5:a9:c0:f0:03:ad:da:6d:2d:f7:d6:19:56:
a0:bc:9e:c3:27:f5:d8:1f:c8:f3:9b:84:4d:43:9b:51:cd:84:
ad:df:de:25:83:10:32:02:0b:20:9d:ec:42:3b:bb:a1:b6:fa:
ca:cc:57:c0:5c:1c:84:e2:ce:69:cc:7e:c0:c7:09:f2:90:19:
57:66:ca:6b:10:1a:b6:bc:22:b1:d2:41:c5:ba:4b:f7:e1:98:
fb:44:04:b0:84:33:93:dd:b5:2d:49:c1:8b:60:d8:17:28:4e:
ee:12:0d:6d:38:54:8d:a3:bf:3d:25:13:bb:85:7d:bd:24:0c:
a7:00:5c:ac:36:df:a9:c7:a0:b5:e5:a3:45:2f:d6:ff:cf:ff:
7b:7b:b7:31:4e:8e:f1:02:10:0f:d8:dc:e4:84:76:a1:55:0a:
7a:c8:7b:ae:d8:98:bd:ee:f0:6a:06:37:8a:16:e2:2a:0e:f7:
c6:10:76:b3:38:ec:65:2d:8e:c4:60:a0:b7:c3:3e:f1:71:29:
81:6d:23:07:53:c7:29:8c:cb:ec:c0:61:48:43:dd:e5:fe:be:
1a:b7:42:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:21:29 2026 by rpki-client