Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.mft
File: invfL1uWEjLljbKJtIqf4kX6nWw.mft (raw, json)
Hash identifier: Cy6hBNWr8liydIUO9CtkiIasgMy6JPGrO85+rhKn3iE=
Subject key identifier: 4C:6A:C6:9B:64:CE:90:67:3F:C7:65:21:43:12:DF:2F:65:99:C3:CF
Authority key identifier: 8A:7B:DF:2F:5B:96:12:32:E5:8D:B2:89:B4:8A:9F:E2:45:FA:9D:6C
Certificate issuer: /CN=8a7bdf2f5b961232e58db289b48a9fe245fa9d6c
Certificate serial: 019D99D0B76767C0F0B11B165C260286620F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/invfL1uWEjLljbKJtIqf4kX6nWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.mft
Manifest number: 0653
Signing time: Fri 17 Apr 2026 05:01:25 +0000
Manifest this update: Fri 17 Apr 2026 05:01:25 +0000
Manifest next update: Sat 18 Apr 2026 05:01:25 +0000
Files and hashes: 1: 13bg8sr321aaC-jFOX86O1_lBzU.roa (hash: bU7Oi7TbB7FOIxER/ptIdZra1cEI8qAD1Nz/78F0Vtg=)
2: invfL1uWEjLljbKJtIqf4kX6nWw.crl (hash: PpzkRckjVEsFgm4S8FPA6Rhh32MwY1qBQOPUks7wenI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/invfL1uWEjLljbKJtIqf4kX6nWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:b7:67:67:c0:f0:b1:1b:16:5c:26:02:86:62:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a7bdf2f5b961232e58db289b48a9fe245fa9d6c
Validity
Not Before: Apr 17 05:01:25 2026 GMT
Not After : Apr 18 05:01:25 2026 GMT
Subject: CN=4c6ac69b64ce90673fc765214312df2f6599c3cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0c:2d:e5:d4:ff:c9:b8:35:bd:5d:c3:86:99:
3d:69:95:55:12:42:32:dc:fd:9d:c4:4d:2a:e7:6d:
a0:dc:90:5b:62:b6:14:d2:a5:30:f7:e1:2e:9e:ad:
eb:2e:2d:07:02:fa:89:29:41:97:f7:40:a4:8d:2e:
cb:2c:3f:61:5f:b6:d3:d9:bb:5d:ec:7c:d8:9d:7b:
b8:ea:99:5d:c4:91:52:f6:08:94:1d:a4:8f:5e:7b:
b3:cf:ff:f0:c2:06:26:ae:4d:f7:39:3b:df:59:78:
d8:ce:11:2b:62:0b:83:d2:71:85:58:f3:b3:13:22:
ba:08:03:42:1e:03:23:48:14:84:ab:b0:1b:1c:5f:
57:57:c8:ab:cf:57:97:33:9d:da:c2:de:74:8d:54:
be:59:34:35:c9:78:74:86:07:01:b8:40:db:c3:26:
6e:e8:26:4a:40:84:32:9d:91:0d:1b:ee:7b:91:f6:
0d:3a:30:76:3b:c1:4d:b6:32:97:9b:88:2b:46:b0:
69:67:fa:08:c4:01:44:14:e1:3b:9f:1a:47:b7:55:
37:13:82:d1:53:65:45:8b:d0:3b:ca:66:8a:ee:ca:
64:a2:38:a2:a8:bd:f3:d3:75:e9:36:d1:59:55:9b:
e6:8e:76:b6:aa:81:d6:47:c8:88:81:ab:40:10:23:
ab:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:6A:C6:9B:64:CE:90:67:3F:C7:65:21:43:12:DF:2F:65:99:C3:CF
X509v3 Authority Key Identifier:
keyid:8A:7B:DF:2F:5B:96:12:32:E5:8D:B2:89:B4:8A:9F:E2:45:FA:9D:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/invfL1uWEjLljbKJtIqf4kX6nWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:63:5b:59:3b:b5:c1:d3:6b:4c:7a:43:3f:98:5d:b8:65:49:
9f:eb:49:96:00:32:7f:1d:c8:d2:89:7f:38:2e:81:c5:9b:1c:
14:90:85:5f:f4:18:ec:05:93:b1:ff:d2:9b:c9:f6:dc:f1:f6:
40:a0:1b:67:cc:e0:9b:ef:b6:e4:04:a9:5e:12:95:43:1c:e6:
71:f4:c4:1d:81:fd:49:02:4b:21:84:1f:e8:d9:88:a9:83:b0:
0e:00:98:5f:f5:ff:d6:b3:94:3d:69:4c:c3:8e:6e:8f:9b:95:
9f:d1:0c:be:d7:a3:92:95:5e:2c:a6:27:c5:ae:ca:79:55:2b:
b5:45:41:ac:e8:44:e7:7a:4f:ed:b3:d9:39:94:cc:78:1a:bc:
72:57:9c:24:82:9d:e4:29:10:57:10:30:ee:fe:6a:4f:06:0c:
e9:d3:14:9c:99:1e:28:60:71:a3:60:f3:bc:56:d8:8c:57:74:
24:c5:1e:7c:89:5e:c5:59:0d:a7:ef:6a:9c:ef:e3:b9:9b:e7:
aa:7e:d6:d4:29:8f:b1:26:0c:43:8c:a8:bd:da:91:63:cc:4b:
71:46:e8:b7:4c:3b:24:96:90:05:88:1a:d6:d3:57:47:26:56:
48:01:7f:9b:e5:ec:52:ef:7f:0a:6b:e0:53:5d:33:25:e6:8b:
38:a4:41:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:22:26 2026 by rpki-client