Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/ccbf7a-ec38-44e6-b2eb-7187977e057e/1/iIx7lGQtLku_uVg62UH1HrjEVkA.mft
File: iIx7lGQtLku_uVg62UH1HrjEVkA.mft (raw, json)
Hash identifier: Ax+xSMIR/t8LpJR5IH2mrS8H+4AHqaIjh+amfyqJT08=
Subject key identifier: 2F:FE:9F:D1:5F:54:3D:F8:E5:59:05:FB:C1:D9:81:95:FF:2F:05:64
Authority key identifier: 88:8C:7B:94:64:2D:2E:4B:BF:B9:58:3A:D9:41:F5:1E:B8:C4:56:40
Certificate issuer: /CN=888c7b94642d2e4bbfb9583ad941f51eb8c45640
Certificate serial: 019D9B87F4A66E63FEEA1A41B022FB8C70A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iIx7lGQtLku_uVg62UH1HrjEVkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/ccbf7a-ec38-44e6-b2eb-7187977e057e/1/iIx7lGQtLku_uVg62UH1HrjEVkA.mft
Manifest number: 12BE
Signing time: Fri 17 Apr 2026 13:01:11 +0000
Manifest this update: Fri 17 Apr 2026 13:01:11 +0000
Manifest next update: Sat 18 Apr 2026 13:01:11 +0000
Files and hashes: 1: HuFQZvhRuo0xrVnhchpAwhxXio0.roa (hash: 5dZkdyNjGGkUNI6gq510mm4AVyEYl5KXnKFtrfLu3/Q=)
2: iIx7lGQtLku_uVg62UH1HrjEVkA.crl (hash: 3oMy6Vni0iLj8TDJ+chiTli3udO54/isE/PsKTBkRUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/ccbf7a-ec38-44e6-b2eb-7187977e057e/1/iIx7lGQtLku_uVg62UH1HrjEVkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/ccbf7a-ec38-44e6-b2eb-7187977e057e/1/iIx7lGQtLku_uVg62UH1HrjEVkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iIx7lGQtLku_uVg62UH1HrjEVkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:f4:a6:6e:63:fe:ea:1a:41:b0:22:fb:8c:70:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=888c7b94642d2e4bbfb9583ad941f51eb8c45640
Validity
Not Before: Apr 17 13:01:11 2026 GMT
Not After : Apr 18 13:01:11 2026 GMT
Subject: CN=2ffe9fd15f543df8e55905fbc1d98195ff2f0564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:89:c2:3c:5e:80:5b:61:72:47:31:10:bc:f3:
37:07:58:bc:39:33:c6:c7:ad:7b:42:76:bc:10:e3:
60:85:06:68:2e:af:da:1b:a2:8f:67:70:29:7f:11:
7f:5f:05:b5:2d:be:a1:9f:8f:eb:76:fa:06:cc:df:
b6:ff:84:eb:05:1b:cc:08:b5:6e:21:5c:ce:9e:76:
0f:60:cf:51:96:6b:e7:d2:b4:99:f8:ef:0f:bf:07:
ec:79:6e:1a:8d:bf:48:ef:b9:31:66:80:36:e4:99:
27:e1:35:3a:fe:d0:68:0b:49:aa:71:fb:6f:e5:1e:
3c:88:c0:68:f8:14:9f:38:f7:6c:f5:99:ed:3f:1f:
b2:e8:f4:9a:ef:4d:2a:59:8c:73:df:9e:3e:7a:ae:
06:cc:f0:99:c1:06:5c:cd:69:ec:ad:ee:4e:48:20:
cd:d1:94:5b:a7:42:a3:c8:db:b1:0c:bd:6c:93:71:
a8:60:fe:bd:30:12:15:68:f9:53:b7:9a:96:94:55:
a3:29:e7:1f:37:e3:29:d6:47:3f:a4:93:37:14:ae:
06:d6:bc:5c:0f:20:0b:7b:22:a8:ee:0c:3d:9f:d7:
ff:89:bc:b7:c4:51:af:75:48:f1:6c:ff:f6:ab:85:
59:74:81:23:c4:da:f1:6c:0e:c2:95:b0:df:f1:7c:
37:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:FE:9F:D1:5F:54:3D:F8:E5:59:05:FB:C1:D9:81:95:FF:2F:05:64
X509v3 Authority Key Identifier:
keyid:88:8C:7B:94:64:2D:2E:4B:BF:B9:58:3A:D9:41:F5:1E:B8:C4:56:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iIx7lGQtLku_uVg62UH1HrjEVkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ccbf7a-ec38-44e6-b2eb-7187977e057e/1/iIx7lGQtLku_uVg62UH1HrjEVkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ccbf7a-ec38-44e6-b2eb-7187977e057e/1/iIx7lGQtLku_uVg62UH1HrjEVkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:b2:a9:f2:fe:7f:dc:66:22:30:28:47:2f:4c:59:c7:4a:a6:
d8:05:49:15:7a:54:3a:0f:8c:ba:fd:b9:16:9b:b6:f3:92:49:
60:bb:a4:8a:ec:fd:7a:b7:4c:43:2d:c2:6b:1b:f1:06:dd:44:
0a:03:cc:73:8d:06:15:d5:33:48:87:96:a0:fb:96:39:1f:31:
3d:fb:bf:1f:6e:e2:ad:24:47:47:4b:3c:98:ee:0e:98:29:e3:
2f:88:ea:45:0c:9a:e3:0c:4a:e1:f1:1c:fb:f2:d8:a8:e0:0e:
50:ae:1e:b4:45:4f:8f:49:fa:16:82:eb:32:b9:73:f2:4a:f0:
b9:53:fb:51:71:eb:42:a1:60:e7:ee:7e:fb:b8:ec:0e:38:cb:
6f:df:bd:14:c7:07:d7:13:94:9c:b6:68:7d:12:d4:bf:d1:52:
d9:f7:9e:92:32:a9:5c:bd:89:1f:3b:2f:cd:04:9e:dd:48:ff:
de:df:04:92:1d:4f:8a:ba:75:c8:df:98:38:c1:31:27:c6:10:
2f:ef:c0:63:ce:e0:c9:87:6d:f3:45:de:ad:88:4d:5f:d2:6b:
6c:92:46:93:45:19:11:60:b8:76:1e:90:9c:be:8c:01:2f:25:
59:59:82:ad:fe:6a:23:ee:99:70:8f:29:d7:b7:2f:ca:56:a7:
28:06:b9:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:31:06 2026 by rpki-client