Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/dcad13-e9e8-4d4f-afc2-62bc8fc755dd/1/ijJOTOdpObTbV9XTUMKtAHtZgOE.mft
File: ijJOTOdpObTbV9XTUMKtAHtZgOE.mft (raw, json)
Hash identifier: RQhBrXEgDUC0yMPUvaryT3HNrGJ8ToFzjp9r/M2EL4c=
Subject key identifier: 45:05:80:CE:3A:5F:4E:08:5B:65:35:18:DB:A1:2C:A1:B0:FE:27:88
Authority key identifier: 8A:32:4E:4C:E7:69:39:B4:DB:57:D5:D3:50:C2:AD:00:7B:59:80:E1
Certificate issuer: /CN=8a324e4ce76939b4db57d5d350c2ad007b5980e1
Certificate serial: 019D98F4BC7DA2956CD9ACC7130414AB19C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ijJOTOdpObTbV9XTUMKtAHtZgOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/dcad13-e9e8-4d4f-afc2-62bc8fc755dd/1/ijJOTOdpObTbV9XTUMKtAHtZgOE.mft
Manifest number: 12F7
Signing time: Fri 17 Apr 2026 01:01:08 +0000
Manifest this update: Fri 17 Apr 2026 01:01:08 +0000
Manifest next update: Sat 18 Apr 2026 01:01:08 +0000
Files and hashes: 1: dRuHtag2W48upoirGox3mzp5yls.roa (hash: pcW0qjbXLjHfD/4xJe2tmXXM1DU4kBxoW5dZ8O0Fexc=)
2: ijJOTOdpObTbV9XTUMKtAHtZgOE.crl (hash: keNN4TwqY7JkvMAgEey007q3nKApc8J2Hat5bZXR3Jw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/dcad13-e9e8-4d4f-afc2-62bc8fc755dd/1/ijJOTOdpObTbV9XTUMKtAHtZgOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/dcad13-e9e8-4d4f-afc2-62bc8fc755dd/1/ijJOTOdpObTbV9XTUMKtAHtZgOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ijJOTOdpObTbV9XTUMKtAHtZgOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:bc:7d:a2:95:6c:d9:ac:c7:13:04:14:ab:19:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a324e4ce76939b4db57d5d350c2ad007b5980e1
Validity
Not Before: Apr 17 01:01:08 2026 GMT
Not After : Apr 18 01:01:08 2026 GMT
Subject: CN=450580ce3a5f4e085b653518dba12ca1b0fe2788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c8:dc:66:60:64:ee:36:3b:6f:0d:66:70:76:
c3:c8:a3:97:77:69:05:62:a5:12:f5:d7:ff:b3:6f:
24:e6:d3:ed:49:2d:1b:61:7e:85:62:a7:0a:0c:3e:
e5:ea:df:6c:0d:d9:48:bd:35:17:78:bd:9c:78:93:
9f:24:df:fc:53:58:1b:f9:44:9f:b4:26:ed:dd:8d:
22:c7:6b:90:fc:6f:59:9f:b9:4e:d5:0b:95:fc:c8:
55:27:79:23:cb:23:c6:4c:5c:54:c8:a3:09:e4:33:
1d:49:5d:3a:83:8e:e3:e0:bf:42:b1:13:db:3e:29:
4f:5e:d9:01:b6:61:d7:ff:d5:b7:41:60:45:92:50:
87:09:bd:d4:f9:69:ae:18:28:92:72:4e:09:12:ac:
2b:ce:8a:ee:87:e9:ba:2c:29:46:ef:7d:15:d3:83:
28:3b:fa:6e:1e:84:63:58:d2:7d:a8:3d:e1:db:fc:
a5:b6:af:b7:d4:72:26:91:31:2f:6a:b0:7e:e2:fa:
96:4f:f4:c7:10:bb:44:9e:f2:94:96:15:07:47:80:
d8:14:2d:84:10:26:95:85:8f:ae:e2:0b:5f:1d:52:
36:9d:25:cd:5b:8d:c3:b4:f4:54:2f:c7:ff:9f:27:
19:d5:77:08:73:3b:99:9e:e5:ee:89:da:72:4e:4f:
2a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:05:80:CE:3A:5F:4E:08:5B:65:35:18:DB:A1:2C:A1:B0:FE:27:88
X509v3 Authority Key Identifier:
keyid:8A:32:4E:4C:E7:69:39:B4:DB:57:D5:D3:50:C2:AD:00:7B:59:80:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ijJOTOdpObTbV9XTUMKtAHtZgOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dcad13-e9e8-4d4f-afc2-62bc8fc755dd/1/ijJOTOdpObTbV9XTUMKtAHtZgOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dcad13-e9e8-4d4f-afc2-62bc8fc755dd/1/ijJOTOdpObTbV9XTUMKtAHtZgOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:51:57:3c:d6:30:b9:a5:51:63:26:61:1f:2a:0a:73:37:bd:
88:96:69:67:bd:b9:d7:6d:3f:14:d3:ca:cb:47:fa:58:9d:e0:
b0:b2:ec:5f:b8:a7:5c:1c:6a:78:39:da:e8:c0:cf:f1:dc:35:
6a:8e:e3:46:1d:b5:e1:a8:4d:28:93:5b:9a:40:4b:2f:3f:bb:
fc:e4:e5:c7:4a:a5:8a:2c:fd:60:d7:fd:7e:5a:ef:d3:08:89:
5e:7d:b0:46:83:49:8c:49:66:47:47:20:75:d0:53:66:8a:84:
36:fe:f0:d4:d9:d0:3c:67:96:13:36:85:b1:67:dc:81:e7:10:
a4:f9:3d:45:62:fe:18:b4:64:55:4b:83:f4:fe:56:34:38:72:
ab:43:b2:e0:f3:0b:98:fd:f3:bd:75:f6:ef:06:00:1e:10:66:
48:c9:6b:83:19:6d:10:5f:d9:ed:c2:55:e8:d1:d5:8b:d9:40:
36:6d:59:23:c6:42:b2:ea:ea:29:99:f8:9a:78:ed:3a:3b:2e:
8c:45:d1:31:d3:75:54:6f:09:31:01:84:35:c9:9d:27:0b:90:
66:ef:1f:d5:03:03:e3:11:ff:49:d3:b7:a2:2b:43:dd:60:c3:
ae:26:61:de:8e:f4:30:cf:17:14:b9:cf:2b:9a:be:54:07:6f:
b8:92:60:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:51:55 2026 by rpki-client