Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/1ITgzuV1xhkFP47isQBMxEL9LO0.mft
File: 1ITgzuV1xhkFP47isQBMxEL9LO0.mft (raw, json)
Hash identifier: Snd+3nVIbC6ZSAyGKVOx5/DdfNe8FQOExLC1uD4NuXM=
Subject key identifier: 62:03:D5:B1:0C:0C:C3:64:29:83:72:FC:6E:95:0B:B6:3B:6F:C1:5E
Authority key identifier: D4:84:E0:CE:E5:75:C6:19:05:3F:8E:E2:B1:00:4C:C4:42:FD:2C:ED
Certificate issuer: /CN=d484e0cee575c619053f8ee2b1004cc442fd2ced
Certificate serial: 019D9C2CAF34490A694D1BD0DC3C7D2BCABB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ITgzuV1xhkFP47isQBMxEL9LO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/1ITgzuV1xhkFP47isQBMxEL9LO0.mft
Manifest number: 16EC
Signing time: Fri 17 Apr 2026 16:01:07 +0000
Manifest this update: Fri 17 Apr 2026 16:01:07 +0000
Manifest next update: Sat 18 Apr 2026 16:01:07 +0000
Files and hashes: 1: 1ITgzuV1xhkFP47isQBMxEL9LO0.crl (hash: qwOJcdt2TMn98xQCbfu9/vCMkx4KNuGerqCSilOwluI=)
2: VGhk2cDF1jTB8yf6DPPbRT2NsSU.roa (hash: P3BuUVRGKsw3eiebCq9ip9oGlC6+nCgvMNwUPBdCFVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/1ITgzuV1xhkFP47isQBMxEL9LO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/1ITgzuV1xhkFP47isQBMxEL9LO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1ITgzuV1xhkFP47isQBMxEL9LO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2c:af:34:49:0a:69:4d:1b:d0:dc:3c:7d:2b:ca:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d484e0cee575c619053f8ee2b1004cc442fd2ced
Validity
Not Before: Apr 17 16:01:07 2026 GMT
Not After : Apr 18 16:01:07 2026 GMT
Subject: CN=6203d5b10c0cc364298372fc6e950bb63b6fc15e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c8:31:a1:fb:e8:d5:0f:3f:4a:d7:f6:de:b5:
08:48:c5:06:c5:e3:5d:09:71:cd:05:75:de:83:cf:
29:2a:1e:f2:3a:22:bc:18:13:5d:ca:16:c7:cc:6b:
e1:bf:ff:d4:80:6d:f0:28:88:e1:27:c6:22:e9:ba:
82:cd:04:77:9e:2d:a3:fb:5e:e4:c6:4e:21:b1:17:
3d:40:3d:9a:38:3b:a5:2e:27:10:48:52:e0:21:3c:
18:0f:85:0c:e0:5d:23:c6:34:2b:46:44:ff:66:61:
8a:97:47:0b:de:74:b4:f1:2d:f6:19:7f:a0:21:52:
cf:76:7e:23:6a:ac:c5:31:93:00:6b:4d:3a:a9:8e:
cd:6e:6d:ca:d7:ee:03:6c:97:2d:fc:63:6e:5d:88:
d1:24:91:ae:c6:b6:76:3a:c1:b7:2c:51:1a:db:a7:
9f:0b:78:83:c5:df:dd:7f:31:a9:fa:be:6f:fc:22:
9e:d4:aa:0f:5b:cf:e2:a5:42:58:23:b2:93:c0:58:
e8:ce:ee:eb:4d:00:0c:bd:91:71:ae:c0:f6:86:26:
21:b7:a0:a4:35:4d:7a:54:d6:29:1b:60:d6:61:cc:
93:b6:58:b6:6e:3e:c9:40:ae:64:ab:3b:55:90:c2:
94:4d:8e:94:bb:91:c4:93:4f:a0:c2:be:14:43:3b:
4f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:03:D5:B1:0C:0C:C3:64:29:83:72:FC:6E:95:0B:B6:3B:6F:C1:5E
X509v3 Authority Key Identifier:
keyid:D4:84:E0:CE:E5:75:C6:19:05:3F:8E:E2:B1:00:4C:C4:42:FD:2C:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ITgzuV1xhkFP47isQBMxEL9LO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/1ITgzuV1xhkFP47isQBMxEL9LO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/1ITgzuV1xhkFP47isQBMxEL9LO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:1f:9a:1e:0a:07:27:91:ec:a3:ed:a7:d1:ed:5f:a4:0f:75:
f8:f7:25:7a:73:65:84:9a:09:bb:15:76:5a:36:ab:84:82:06:
31:35:70:8e:a1:3d:b5:72:38:68:c3:44:75:36:fb:a4:df:24:
d6:95:6e:eb:69:1a:f5:ac:19:5f:3e:bd:31:c4:29:a2:ef:b9:
29:b1:e8:67:1e:3b:3e:8d:78:fc:30:e6:07:5c:0a:04:08:28:
2a:a3:20:a2:7b:45:31:08:3b:cf:ab:af:b6:23:e3:04:db:5e:
9c:4f:d1:ad:2e:0a:60:b0:47:20:14:e9:91:07:02:82:b2:17:
c6:53:76:0a:a3:b1:9d:4d:10:bc:04:f5:fd:04:ab:8e:64:ff:
79:f8:2f:bc:54:74:e8:48:12:19:4d:2b:04:ed:4d:56:6f:0b:
41:f8:7c:c1:7f:56:c2:52:7a:53:dc:d1:53:97:4f:7b:af:44:
21:13:2b:c5:e2:13:be:8a:44:0e:b0:51:6d:01:b2:f6:4e:19:
4c:0a:47:ad:ff:3c:24:6c:8b:8b:ad:00:19:89:4f:85:cf:cf:
11:2c:98:cc:c2:00:d1:b5:a7:e0:d8:87:63:0e:be:fc:e4:f1:
0f:45:f0:41:65:c5:aa:e4:0f:11:01:9a:b9:34:b1:1c:80:90:
76:6f:c8:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:55:22 2026 by rpki-client