Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/099e79-16fb-40be-a918-db7c1af3a073/1/INShQtHjFwTrW88Dp4X2N4NVt5k.mft
File: INShQtHjFwTrW88Dp4X2N4NVt5k.mft (raw, json)
Hash identifier: xx2nHbBRknwxKszzmQ76+VEMt6at1IEF+IW1wQOqGLM=
Subject key identifier: 9F:BC:AA:90:11:1F:E4:A5:C7:E8:98:69:E0:5B:76:4E:17:83:3A:BB
Authority key identifier: 20:D4:A1:42:D1:E3:17:04:EB:5B:CF:03:A7:85:F6:37:83:55:B7:99
Certificate issuer: /CN=20d4a142d1e31704eb5bcf03a785f6378355b799
Certificate serial: 019D9B50960DC21C6BE4D1706F507DC6168E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/INShQtHjFwTrW88Dp4X2N4NVt5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/099e79-16fb-40be-a918-db7c1af3a073/1/INShQtHjFwTrW88Dp4X2N4NVt5k.mft
Manifest number: 08E7
Signing time: Fri 17 Apr 2026 12:00:42 +0000
Manifest this update: Fri 17 Apr 2026 12:00:42 +0000
Manifest next update: Sat 18 Apr 2026 12:00:42 +0000
Files and hashes: 1: INShQtHjFwTrW88Dp4X2N4NVt5k.crl (hash: 0VxW0p7bdmkwknPIB1DOPsauqOk1cnWNXkXLWyHuW94=)
2: g082PDAHpiRZAocEJGI8VaarFzs.roa (hash: Au5SOTFMsi2+OrZE63a9/Ibnr7Cniiip3FgMbm/9rrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/099e79-16fb-40be-a918-db7c1af3a073/1/INShQtHjFwTrW88Dp4X2N4NVt5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/099e79-16fb-40be-a918-db7c1af3a073/1/INShQtHjFwTrW88Dp4X2N4NVt5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/INShQtHjFwTrW88Dp4X2N4NVt5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:96:0d:c2:1c:6b:e4:d1:70:6f:50:7d:c6:16:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20d4a142d1e31704eb5bcf03a785f6378355b799
Validity
Not Before: Apr 17 12:00:42 2026 GMT
Not After : Apr 18 12:00:42 2026 GMT
Subject: CN=9fbcaa90111fe4a5c7e89869e05b764e17833abb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:68:40:e0:63:af:b3:54:1f:e5:c4:9c:27:2c:
13:a3:5c:85:cb:9a:ea:6c:88:20:48:f8:19:43:b3:
76:d2:ea:2b:a3:16:55:63:82:0b:2b:de:9b:ef:be:
7a:e3:87:d4:b0:67:73:fc:39:13:fe:9e:e5:a1:a9:
3a:f4:7c:53:52:ae:41:79:3e:c2:e8:a7:3b:18:46:
f5:d9:26:76:b3:b8:45:48:f0:1e:79:d8:ae:34:61:
43:b6:1c:fc:98:52:97:ca:6e:ff:94:96:15:45:75:
a6:2e:bf:6c:91:2e:c4:58:51:08:a3:d0:bd:5c:19:
db:57:e3:ce:9c:7f:6c:a7:99:e2:6b:f8:ec:8d:5b:
5f:b5:ff:a9:d2:48:ba:ba:53:e8:71:22:7d:d5:0a:
ca:a3:c0:f1:7d:2c:2a:62:0f:b7:30:46:6a:8b:96:
51:57:62:86:49:52:f0:eb:ef:ca:99:1b:06:e3:61:
5f:d0:7e:e7:0a:e6:fb:2b:89:78:87:8d:6f:c9:f3:
9d:18:5f:dc:9f:4f:fc:61:08:c9:2c:27:c8:71:7f:
1c:08:30:af:03:da:14:0b:4c:fb:a2:d8:d1:a3:4b:
cc:62:bb:7f:87:0e:e6:5c:62:0a:aa:16:98:61:8f:
fb:a9:45:63:ce:25:64:38:29:2c:53:be:b7:01:65:
02:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:BC:AA:90:11:1F:E4:A5:C7:E8:98:69:E0:5B:76:4E:17:83:3A:BB
X509v3 Authority Key Identifier:
keyid:20:D4:A1:42:D1:E3:17:04:EB:5B:CF:03:A7:85:F6:37:83:55:B7:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INShQtHjFwTrW88Dp4X2N4NVt5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/099e79-16fb-40be-a918-db7c1af3a073/1/INShQtHjFwTrW88Dp4X2N4NVt5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/099e79-16fb-40be-a918-db7c1af3a073/1/INShQtHjFwTrW88Dp4X2N4NVt5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:13:ed:7c:79:61:2d:d9:dd:ab:3b:14:cd:bc:02:f1:7d:1e:
92:e3:b6:92:ec:35:0b:17:64:30:5a:a7:77:72:ef:8a:b9:f6:
0c:bb:e8:bb:96:3e:93:41:63:06:02:fe:b3:f4:03:d9:1a:ed:
ca:e6:63:89:27:3c:95:9c:37:9a:24:a4:26:3b:47:c2:43:6b:
94:a8:38:32:8e:77:dc:46:20:c4:fd:32:62:93:93:ef:5a:f9:
f7:69:ea:a8:e7:e4:5b:a1:61:6b:34:da:d0:51:eb:b4:03:b8:
30:bd:f3:09:a6:09:8c:4b:aa:7f:7a:77:0d:e6:7c:15:30:28:
dd:b4:8f:3c:81:cb:05:ab:20:66:9e:b8:01:fa:e5:fd:93:70:
8a:0f:28:e0:15:e5:dd:f1:2c:71:2a:77:8f:75:ac:1a:61:0b:
69:50:f8:a1:0a:94:a7:47:2f:f4:62:0e:e6:29:8d:fc:7d:3a:
22:cc:fd:bb:c8:8e:9e:c1:af:5c:b2:12:ec:d6:e7:2d:1d:c8:
f7:2a:91:fa:6b:01:ad:e4:de:fa:1a:62:82:28:7f:2e:c0:24:
f3:8c:20:27:27:6f:f6:bc:83:ea:c5:29:4e:ea:57:97:f6:75:
37:de:ec:f4:3a:dd:da:c0:b0:96:f2:89:9b:e4:8c:cf:96:cd:
85:71:7b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:07:47 2026 by rpki-client