Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.mft
File: bI5k4HENMvJqNtaM_3s_hqyCDOs.mft (raw, json)
Hash identifier: mX4OvuAs+elAdQI46XZgbQQyIPHCzP8ZK32aaJ+Rs2U=
Subject key identifier: E1:1F:37:C2:2C:FE:09:FB:C7:E3:BD:6A:37:36:9F:F2:D0:12:2D:30
Authority key identifier: 6C:8E:64:E0:71:0D:32:F2:6A:36:D6:8C:FF:7B:3F:86:AC:82:0C:EB
Certificate issuer: /CN=6c8e64e0710d32f26a36d68cff7b3f86ac820ceb
Certificate serial: 019DA59CF6DC043C2017E2ACA8373B3A31DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI5k4HENMvJqNtaM_3s_hqyCDOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.mft
Manifest number: 033E
Signing time: Sun 19 Apr 2026 12:00:20 +0000
Manifest this update: Sun 19 Apr 2026 12:00:20 +0000
Manifest next update: Mon 20 Apr 2026 12:00:20 +0000
Files and hashes: 1: 03NeIplATFDJWFtEuuQG-JYnRlE.roa (hash: 0PUjM3BFPHGxuy7ESUIjpYFstJbdDCjDTMV4Zmhng7M=)
2: bI5k4HENMvJqNtaM_3s_hqyCDOs.crl (hash: IUk8QSruZsbj8UhRreiLRtCZb0dlzXYTtK4pNW/OfWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/bI5k4HENMvJqNtaM_3s_hqyCDOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 12:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:9c:f6:dc:04:3c:20:17:e2:ac:a8:37:3b:3a:31:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8e64e0710d32f26a36d68cff7b3f86ac820ceb
Validity
Not Before: Apr 19 12:00:20 2026 GMT
Not After : Apr 20 12:00:20 2026 GMT
Subject: CN=e11f37c22cfe09fbc7e3bd6a37369ff2d0122d30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:fc:e5:32:d2:f4:bf:f6:b2:72:95:de:19:15:
c9:52:43:d5:1d:82:79:dc:df:3c:99:a8:ad:41:6f:
34:ad:5a:c3:0f:f9:6b:59:e1:78:eb:39:00:6e:c1:
0a:ac:21:ca:7a:6b:2f:7b:e7:2f:0b:48:f6:ff:7a:
4b:cb:b4:e1:7a:61:1b:26:a8:f7:80:2b:e1:26:8b:
f4:71:da:ac:28:7b:fd:b7:f4:93:74:8e:0b:6f:e3:
67:66:09:77:3c:c8:d2:5a:f7:c4:88:0b:0c:26:55:
8c:dd:b2:27:26:97:13:b7:42:12:09:f0:47:d1:1e:
ef:6e:b0:ad:f1:78:b3:39:d6:1f:00:d2:46:ca:43:
b1:4a:7f:58:20:39:a5:3b:9d:39:8d:ea:0d:53:90:
19:89:7c:fa:e2:bf:8b:0b:12:4f:e5:cb:55:a9:ab:
cf:09:fe:82:30:9c:08:91:19:bf:a2:26:2b:10:ba:
af:16:f3:4a:24:2f:e5:f1:5f:d8:be:5b:90:61:28:
5e:df:48:91:a0:a4:e8:97:e0:86:4c:63:fd:a7:81:
5e:7d:24:0d:d1:25:d1:66:b4:1b:c3:b6:fc:9f:0d:
54:61:cf:c8:55:50:34:8a:93:4a:c2:1a:8f:cb:d9:
73:08:29:c3:84:43:0a:5f:4f:42:7c:fc:cd:77:81:
bb:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:1F:37:C2:2C:FE:09:FB:C7:E3:BD:6A:37:36:9F:F2:D0:12:2D:30
X509v3 Authority Key Identifier:
keyid:6C:8E:64:E0:71:0D:32:F2:6A:36:D6:8C:FF:7B:3F:86:AC:82:0C:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI5k4HENMvJqNtaM_3s_hqyCDOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dc:78:03:71:75:6a:48:97:f5:63:54:04:a7:30:71:e4:30:39:
b2:c5:64:17:cd:fa:be:69:bc:ad:35:ab:0a:9e:3a:d2:40:10:
ff:45:33:30:13:a6:1c:8c:3e:da:0d:ac:c9:93:fe:d7:0a:ca:
3a:83:96:69:be:46:e4:c1:5e:ab:c3:dc:da:33:b3:ed:70:14:
f9:5e:b4:99:f7:95:77:4f:b7:72:72:cf:8f:1c:da:7b:22:08:
c5:f1:5f:e7:b7:db:ff:2a:52:c7:3c:9a:98:23:3a:9d:32:d9:
0f:55:a8:f8:fc:4e:5d:c8:6d:79:73:14:dd:fd:32:74:88:05:
e6:25:b4:66:c5:32:a1:e1:9c:86:87:55:77:ea:26:9d:6d:89:
79:87:0f:55:eb:5d:48:2b:23:6b:ac:e6:20:da:22:76:a9:91:
df:c2:35:86:88:05:47:ed:36:93:25:35:f8:f7:d1:88:54:85:
0c:6b:a5:48:32:4b:fa:f9:0c:db:aa:d6:42:33:4c:c2:52:85:
0f:cb:47:da:50:38:99:67:99:b5:ca:97:ab:d4:d8:89:68:f9:
e0:07:1b:93:2b:3c:cc:f5:87:3d:d7:11:df:d7:f6:2d:c3:3f:
87:1a:0e:aa:a8:c8:a0:62:4a:4b:a1:2a:8b:89:33:83:08:f8:
91:b8:ff:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 17:57:20 2026 by rpki-client