Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/981b84-9ff0-48e9-ab21-9b6cbfb43246/1/X-C-IOAv_HNU1bLTPg_ncVGa_R8.mft
File: X-C-IOAv_HNU1bLTPg_ncVGa_R8.mft (raw, json)
Hash identifier: 6IKYkiXuLFBcr5uUI9O+fbN70wQuU1LqdZTJZ5Kk70w=
Subject key identifier: AB:4E:DE:C3:BA:1B:0A:F4:64:2D:DC:AA:3E:87:43:BA:A9:6D:FD:13
Authority key identifier: 5F:E0:BE:20:E0:2F:FC:73:54:D5:B2:D3:3E:0F:E7:71:51:9A:FD:1F
Certificate issuer: /CN=5fe0be20e02ffc7354d5b2d33e0fe771519afd1f
Certificate serial: 019D98F449D308807B4C439BC485F871CEAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-C-IOAv_HNU1bLTPg_ncVGa_R8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/981b84-9ff0-48e9-ab21-9b6cbfb43246/1/X-C-IOAv_HNU1bLTPg_ncVGa_R8.mft
Manifest number: 096D
Signing time: Fri 17 Apr 2026 01:00:39 +0000
Manifest this update: Fri 17 Apr 2026 01:00:39 +0000
Manifest next update: Sat 18 Apr 2026 01:00:39 +0000
Files and hashes: 1: X-C-IOAv_HNU1bLTPg_ncVGa_R8.crl (hash: IP0hL015xatYXoPAXQSYNhPZEYFxtp69KrZlJy3eelk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/981b84-9ff0-48e9-ab21-9b6cbfb43246/1/X-C-IOAv_HNU1bLTPg_ncVGa_R8.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/981b84-9ff0-48e9-ab21-9b6cbfb43246/1/X-C-IOAv_HNU1bLTPg_ncVGa_R8.mft
rsync://rpki.ripe.net/repository/DEFAULT/X-C-IOAv_HNU1bLTPg_ncVGa_R8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:49:d3:08:80:7b:4c:43:9b:c4:85:f8:71:ce:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fe0be20e02ffc7354d5b2d33e0fe771519afd1f
Validity
Not Before: Apr 17 01:00:39 2026 GMT
Not After : Apr 18 01:00:39 2026 GMT
Subject: CN=ab4edec3ba1b0af4642ddcaa3e8743baa96dfd13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:69:0c:b0:52:7f:38:5e:5f:86:4c:5d:48:e4:
3c:9a:eb:3f:6f:f0:88:8a:6e:70:d8:a6:17:f5:fc:
18:3f:03:f8:d9:40:fa:c8:43:19:35:e1:4d:c3:04:
c9:5b:23:01:ab:5e:7e:64:9b:c0:77:73:7e:cf:d8:
bc:98:dc:2c:5d:30:2b:dd:7a:ac:a6:27:7d:ef:79:
c1:83:8b:42:e4:a6:7f:06:a9:53:a4:0c:33:7b:dd:
8c:6d:8d:bd:72:28:fe:00:69:dc:db:46:8c:07:7a:
15:92:d6:db:e4:2f:b9:59:bf:91:b0:33:b1:eb:1a:
57:3a:4d:08:2e:b0:3c:f8:02:ac:65:49:ff:4e:cc:
7d:46:a3:c2:9f:96:6e:bd:53:d7:df:08:8a:c1:a6:
7a:a9:dc:bd:54:c9:b6:58:20:ad:fc:5a:d7:57:27:
59:7b:e7:ae:b4:8d:aa:87:f6:81:4f:cc:be:4f:d0:
ee:71:04:2c:a6:8c:69:db:ef:9a:b4:4e:8f:3f:9d:
1a:8d:02:f9:45:65:73:cb:65:5f:e6:e9:7f:7b:3a:
2f:9e:6b:b6:a6:a8:31:a3:bf:99:9f:4e:35:50:70:
b5:f6:f0:4b:0a:d0:dd:ac:9a:c5:2f:40:b7:d7:05:
69:8e:2f:dd:0f:12:de:4f:a7:a9:ef:fb:7a:29:0a:
36:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:4E:DE:C3:BA:1B:0A:F4:64:2D:DC:AA:3E:87:43:BA:A9:6D:FD:13
X509v3 Authority Key Identifier:
keyid:5F:E0:BE:20:E0:2F:FC:73:54:D5:B2:D3:3E:0F:E7:71:51:9A:FD:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-C-IOAv_HNU1bLTPg_ncVGa_R8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/981b84-9ff0-48e9-ab21-9b6cbfb43246/1/X-C-IOAv_HNU1bLTPg_ncVGa_R8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/981b84-9ff0-48e9-ab21-9b6cbfb43246/1/X-C-IOAv_HNU1bLTPg_ncVGa_R8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:f1:1c:06:35:eb:90:e8:0e:ad:a0:e0:e5:f1:c4:4a:7a:c3:
67:32:e5:14:0c:8f:be:4f:36:2e:f7:d0:43:47:c0:f1:51:8d:
62:5d:8d:be:e6:42:45:92:45:5a:63:3e:f2:3d:a4:e1:89:9e:
17:8b:d5:e9:d3:60:73:f5:92:e7:42:8f:58:b4:0e:85:1f:39:
fb:3c:94:c8:9a:26:bf:63:f0:81:c8:ba:81:0a:bd:f7:b8:f6:
c5:41:18:80:b1:0e:0c:56:1f:51:b6:be:17:b2:8a:8d:27:94:
01:03:25:3d:bb:f9:fb:3b:93:0a:15:8a:8b:6a:8c:ee:ff:af:
97:44:31:eb:fe:5e:1d:50:ba:00:1f:d4:30:83:f3:3b:7c:5b:
f4:c7:63:79:ac:ac:fa:19:aa:32:7c:d7:3e:de:f1:84:c7:26:
16:ad:9e:50:4f:c2:a8:ad:f2:a6:b6:42:cd:fa:90:67:64:11:
90:89:4d:d8:2f:de:18:5d:09:72:16:42:56:64:84:2f:fc:ce:
67:26:9a:32:cc:a4:98:06:dc:53:bb:08:4f:b9:9e:2c:65:d8:
f3:54:14:36:57:d4:fb:44:45:f9:77:7c:ac:0a:19:e9:6f:0c:
4b:c1:6b:6b:89:f7:29:b4:38:84:da:cc:1e:1c:c7:41:12:9d:
75:91:2c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:50:14 2026 by rpki-client