Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft
File: iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft (raw, json)
Hash identifier: nNB4gEepzauoN3A1QYkqdqLvRVSuUdLQWDULOp8ii7w=
Subject key identifier: BD:BB:02:F1:4C:6F:82:C5:B4:CD:36:F8:CD:84:61:CD:A4:00:50:84
Authority key identifier: 88:44:FC:4A:E1:06:49:9E:05:75:FF:3C:A1:55:6D:BC:0D:9B:46:51
Certificate issuer: /CN=8844fc4ae106499e0575ff3ca1556dbc0d9b4651
Certificate serial: 019D9998CCEFF0765C58947FDEBBD6B90C81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iET8SuEGSZ4Fdf88oVVtvA2bRlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft
Manifest number: 181A
Signing time: Fri 17 Apr 2026 04:00:21 +0000
Manifest this update: Fri 17 Apr 2026 04:00:21 +0000
Manifest next update: Sat 18 Apr 2026 04:00:21 +0000
Files and hashes: 1: aeU9_Yx1c9nw1y-4xtz44SqG1m0.roa (hash: 0t0fFg5NYuzbKW5UvLMqmaiFIgFM8FNQ8jsxvVeiMB0=)
2: iET8SuEGSZ4Fdf88oVVtvA2bRlE.crl (hash: +5P0LLRS0byPmldsZwiI5MW+8qfFop0W8ori0O1Hi+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/iET8SuEGSZ4Fdf88oVVtvA2bRlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:98:cc:ef:f0:76:5c:58:94:7f:de:bb:d6:b9:0c:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8844fc4ae106499e0575ff3ca1556dbc0d9b4651
Validity
Not Before: Apr 17 04:00:21 2026 GMT
Not After : Apr 18 04:00:21 2026 GMT
Subject: CN=bdbb02f14c6f82c5b4cd36f8cd8461cda4005084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b0:5f:8a:c6:b4:e3:b8:b5:0d:ac:cd:aa:5f:
cc:a4:ce:ad:23:90:c4:ee:17:ec:00:f8:5e:35:a7:
07:f4:d4:a0:10:4e:c5:25:6a:5b:f9:4b:8b:28:f9:
b8:ae:1b:88:f2:e8:4f:fe:59:72:94:37:16:35:b2:
1a:2e:72:d4:68:5c:02:ee:c9:57:6c:9c:a3:d1:5a:
50:d0:29:6b:ca:b0:fd:c6:d2:68:52:29:9e:7b:c8:
c3:57:01:e1:43:39:1e:a2:d2:f7:b8:38:10:88:07:
70:18:80:52:d8:76:dc:38:dd:08:95:8c:33:d7:52:
4f:d5:43:24:b8:d3:85:5f:f1:5a:1e:c8:99:5a:41:
b6:c9:44:87:d0:a3:f2:9d:a6:13:a7:55:43:1c:14:
69:33:45:48:57:ae:80:94:8a:e1:b6:47:67:5d:6d:
d2:c1:e2:f8:55:0d:c8:c9:01:89:f7:5d:b1:23:a1:
2a:93:41:04:5f:1a:27:b5:4d:a2:91:1d:21:5c:e9:
47:2d:1d:71:64:da:8c:f9:c5:2f:19:af:72:cc:a3:
6d:ac:cb:7b:ff:cf:97:52:a2:38:b9:28:c9:fc:d2:
28:61:79:bc:80:86:15:26:47:0d:fc:39:0a:36:90:
df:00:75:f2:52:36:15:20:7d:37:76:5c:61:01:27:
fc:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:BB:02:F1:4C:6F:82:C5:B4:CD:36:F8:CD:84:61:CD:A4:00:50:84
X509v3 Authority Key Identifier:
keyid:88:44:FC:4A:E1:06:49:9E:05:75:FF:3C:A1:55:6D:BC:0D:9B:46:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iET8SuEGSZ4Fdf88oVVtvA2bRlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:af:49:57:05:87:83:48:4d:a1:7b:f2:ee:f3:fc:da:09:8b:
69:ca:08:86:4c:05:95:6f:e3:82:bf:a1:09:83:68:4f:a7:da:
94:86:83:30:da:71:5d:08:4c:f7:43:63:08:26:89:0f:1b:d6:
6c:45:05:f9:9c:9d:1f:05:7b:ce:09:3c:f5:4a:88:f2:92:73:
69:98:eb:7e:84:3e:eb:59:49:9f:5d:91:c7:c6:9d:1b:82:10:
b2:dd:08:39:06:31:d6:11:ac:8e:09:77:8b:be:28:f0:db:ed:
cb:f8:83:9f:2b:7a:a4:7a:96:60:97:66:f8:81:58:04:09:3f:
5b:cd:61:48:c5:71:52:01:c3:bd:e2:bc:bd:3b:e2:6c:7d:39:
cd:35:a6:ac:be:77:ff:9d:9d:09:59:a7:a2:54:32:7e:3a:b4:
56:11:01:c0:18:73:68:f5:86:86:f6:2e:be:06:7a:4c:c5:a6:
d3:86:4a:0b:ea:8f:cf:7a:f9:b0:3f:29:2f:0c:db:e3:8d:ee:
8b:e5:4e:21:fa:06:c1:da:84:e3:76:e4:47:5e:dc:c9:f6:63:
79:94:58:c1:33:5e:5e:de:f5:b9:6b:c3:c7:14:51:b6:76:c7:
a9:11:f0:e5:de:be:ad:a9:13:9f:14:02:b8:b3:d3:a2:b7:3f:
43:ae:ed:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:30:15 2026 by rpki-client