Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/725b88-c523-4313-9e30-02c1e19a71d5/1/Ic9TSB0TO6z1J4aNuhs3Y-PW3ac.mft
File: Ic9TSB0TO6z1J4aNuhs3Y-PW3ac.mft (raw, json)
Hash identifier: 4POt1bTTIIzxDNgHxC7iTkUaEyFDJ4nKs06RAKx8fFQ=
Subject key identifier: 36:B8:36:AB:4D:71:C1:5B:45:FC:7D:F0:92:31:FF:5C:11:65:7D:00
Authority key identifier: 21:CF:53:48:1D:13:3B:AC:F5:27:86:8D:BA:1B:37:63:E3:D6:DD:A7
Certificate issuer: /CN=21cf53481d133bacf527868dba1b3763e3d6dda7
Certificate serial: 019D992AFD3A1F03DA49D0D8D471B6A062A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ic9TSB0TO6z1J4aNuhs3Y-PW3ac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/725b88-c523-4313-9e30-02c1e19a71d5/1/Ic9TSB0TO6z1J4aNuhs3Y-PW3ac.mft
Manifest number: 0884
Signing time: Fri 17 Apr 2026 02:00:24 +0000
Manifest this update: Fri 17 Apr 2026 02:00:24 +0000
Manifest next update: Sat 18 Apr 2026 02:00:24 +0000
Files and hashes: 1: Ic9TSB0TO6z1J4aNuhs3Y-PW3ac.crl (hash: DoK3cJOyZ5Ve3xTxCN1TSWgnYxS9WaqXNvVM0diR1FM=)
2: u4vgRPiGJN_uy7XS4Ei6ANq07Xk.roa (hash: B983HqaReMNEcqs8+hdzrl8wmUkdYz1ezJd1jwO+3yE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/725b88-c523-4313-9e30-02c1e19a71d5/1/Ic9TSB0TO6z1J4aNuhs3Y-PW3ac.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/725b88-c523-4313-9e30-02c1e19a71d5/1/Ic9TSB0TO6z1J4aNuhs3Y-PW3ac.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ic9TSB0TO6z1J4aNuhs3Y-PW3ac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2a:fd:3a:1f:03:da:49:d0:d8:d4:71:b6:a0:62:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21cf53481d133bacf527868dba1b3763e3d6dda7
Validity
Not Before: Apr 17 02:00:24 2026 GMT
Not After : Apr 18 02:00:24 2026 GMT
Subject: CN=36b836ab4d71c15b45fc7df09231ff5c11657d00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:04:28:df:4c:50:02:4f:f9:35:b3:28:a7:03:
2f:23:33:14:7f:92:8e:70:98:21:d9:06:1f:70:ee:
24:e3:e4:22:08:0d:d4:32:ad:28:55:97:b5:a4:9f:
e7:fc:e3:4b:59:e8:6e:48:22:a3:70:d4:9b:5f:1f:
87:33:f9:30:44:a4:ae:92:db:b4:d2:ad:fa:f5:b5:
42:6c:4c:c5:f2:9b:81:5a:1b:ef:ed:74:d4:1f:a5:
08:6d:5f:cf:00:4e:dd:3d:31:07:80:d7:1a:1a:91:
b2:61:34:23:2a:08:58:f5:2e:0f:ab:fe:e7:51:20:
03:34:cb:6e:8b:43:aa:4e:72:6d:b2:b3:99:55:a4:
50:86:73:e0:a7:5d:af:b1:82:e9:85:49:80:cd:51:
63:6c:ee:61:6f:9a:4d:21:ef:68:36:75:ed:41:77:
16:71:75:14:a9:2d:0b:2d:dd:74:a8:aa:6f:f9:69:
fd:6f:14:a1:5e:40:26:03:2a:c8:f9:d1:01:e5:ac:
cb:5a:af:2a:d1:41:ac:6b:58:45:02:a5:98:46:d0:
cc:f5:5b:55:8d:5d:37:68:dd:94:80:e2:61:fd:e4:
4e:7f:e0:e1:55:ce:0f:a5:50:c0:4c:00:58:20:b3:
39:f2:6b:e4:f0:1b:5f:b1:14:ea:ec:04:b3:b7:84:
ee:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:B8:36:AB:4D:71:C1:5B:45:FC:7D:F0:92:31:FF:5C:11:65:7D:00
X509v3 Authority Key Identifier:
keyid:21:CF:53:48:1D:13:3B:AC:F5:27:86:8D:BA:1B:37:63:E3:D6:DD:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ic9TSB0TO6z1J4aNuhs3Y-PW3ac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/725b88-c523-4313-9e30-02c1e19a71d5/1/Ic9TSB0TO6z1J4aNuhs3Y-PW3ac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/725b88-c523-4313-9e30-02c1e19a71d5/1/Ic9TSB0TO6z1J4aNuhs3Y-PW3ac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:05:fa:28:59:1d:d6:6f:05:ef:7e:45:de:c3:13:4b:f8:66:
b3:ca:33:4d:0d:aa:c0:af:53:69:e2:9f:5a:d9:ed:e3:03:95:
2f:cd:6a:0a:12:1d:20:da:d4:61:f0:f1:73:ef:16:39:1f:f6:
aa:21:5e:80:01:fe:d9:f9:37:0f:8a:ae:f0:8c:fa:6f:52:8d:
34:18:c9:30:9d:65:83:2e:f4:bd:23:3e:96:0a:da:70:6f:c6:
29:de:c2:ab:f0:0c:55:65:4e:43:04:1e:19:fc:7e:7f:4c:7b:
58:91:4f:95:b6:bb:77:c3:a9:e0:f0:87:46:00:83:96:7d:44:
a5:03:64:c3:6c:7a:53:3d:24:53:1e:41:63:85:5c:b2:f2:81:
48:f8:8a:5f:2e:ed:b8:44:ac:48:8d:f0:79:48:3c:89:39:8d:
52:ff:7e:b6:ad:1b:2b:9a:89:07:5a:84:3f:19:02:fa:25:d5:
64:f4:7c:60:72:e9:8f:f4:0e:64:30:27:e3:95:c4:ac:0d:43:
0b:f1:66:32:83:b7:c5:10:8c:8b:d2:64:50:cd:6c:9f:54:48:
b0:f3:f9:17:e1:b3:28:f8:9f:79:77:c7:91:72:7f:30:2b:c7:
28:26:c9:ed:17:34:e3:92:80:ac:a7:a7:89:e8:03:b4:28:f2:
be:6a:b3:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:59:20 2026 by rpki-client