Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.mft
File: Iw6axkUQ-jkYRrsTmrUrgAHVgDg.mft (raw, json)
Hash identifier: d60fuaY+8Yo5fnEsXxKmN4Q/ynnVInnVoxhMiKtYB7c=
Subject key identifier: AE:25:3E:47:CF:72:2B:2D:BD:B5:97:CC:04:35:07:B3:FF:1E:9F:B0
Authority key identifier: 23:0E:9A:C6:45:10:FA:39:18:46:BB:13:9A:B5:2B:80:01:D5:80:38
Certificate issuer: /CN=230e9ac64510fa391846bb139ab52b8001d58038
Certificate serial: 019D9A3E620D4331F997F697550FA036E66F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.mft
Manifest number: 1557
Signing time: Fri 17 Apr 2026 07:01:12 +0000
Manifest this update: Fri 17 Apr 2026 07:01:12 +0000
Manifest next update: Sat 18 Apr 2026 07:01:12 +0000
Files and hashes: 1: Iw6axkUQ-jkYRrsTmrUrgAHVgDg.crl (hash: a6VhYrRFrIwYJR6m2exEO15W4wdkACsEnn4SnAPyJzk=)
2: Jc3bkiFIpTCnI7iepJAdAbekabs.roa (hash: NwsftHfqSo5igUnmJFDaLhMgga9JlSbY/WwsognqQyI=)
3: e3q1V2fD2QBr302Nmb_jtOVn5-M.roa (hash: kNGhLH15D9N/CBFSD4P6hJtpDjbOe8kg0SMmM1H5/j0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:62:0d:43:31:f9:97:f6:97:55:0f:a0:36:e6:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=230e9ac64510fa391846bb139ab52b8001d58038
Validity
Not Before: Apr 17 07:01:12 2026 GMT
Not After : Apr 18 07:01:12 2026 GMT
Subject: CN=ae253e47cf722b2dbdb597cc043507b3ff1e9fb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:99:ee:91:1c:d4:ae:03:c9:c4:df:7b:4a:7b:
e6:99:05:4d:28:00:c8:96:fb:4c:29:03:65:19:40:
25:6d:f6:9a:50:27:3d:7b:c2:94:c3:d0:e3:54:40:
3e:3c:5d:1c:e2:e3:60:64:f9:66:dd:f3:0f:6f:a6:
2b:2d:87:8e:8b:92:e6:47:65:ee:b0:ea:29:86:2b:
09:46:0c:d7:f3:f5:8d:31:64:da:97:7a:db:cf:56:
be:f1:d6:f8:7d:80:c1:76:e6:35:24:8b:76:0c:3e:
77:02:4f:bb:a4:38:cf:cb:ea:7b:2e:27:5b:ff:ef:
b8:d1:3f:0e:3d:44:c0:87:e5:b1:8b:e4:63:51:a6:
65:16:28:95:55:2e:c1:4b:06:b3:00:2b:e4:d5:1e:
4e:8b:a8:8d:48:21:63:14:af:a8:5a:2b:06:9d:99:
82:2d:26:2b:92:5f:6b:95:0c:33:e3:c5:09:77:f2:
b3:ed:3c:81:da:ce:fd:a9:cc:ae:b9:40:30:27:c4:
c2:fb:ad:78:25:02:0e:b1:8c:d8:63:08:90:8a:7c:
8a:54:18:1a:4e:9f:e8:01:98:a4:23:d1:15:c6:01:
c6:47:a7:31:11:5f:b2:93:a8:b0:6b:c4:3b:db:10:
d7:af:46:fa:1a:ce:91:29:9d:39:8a:03:53:76:4e:
86:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:25:3E:47:CF:72:2B:2D:BD:B5:97:CC:04:35:07:B3:FF:1E:9F:B0
X509v3 Authority Key Identifier:
keyid:23:0E:9A:C6:45:10:FA:39:18:46:BB:13:9A:B5:2B:80:01:D5:80:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:f2:5f:e8:24:91:5e:0c:f8:4a:08:88:2b:15:69:f6:7c:ef:
f6:a8:e7:87:93:ad:2a:1e:b1:03:34:f6:bd:bb:27:b7:04:dc:
60:e2:a2:3d:bd:6e:26:c4:18:c2:42:8b:06:dd:fc:3a:f7:96:
e5:93:f7:dc:c8:d2:61:f8:1a:e1:e9:ff:a7:3a:26:9c:90:e5:
55:8b:1b:70:34:d7:8e:38:dc:e4:7b:7c:c3:32:7c:00:62:67:
d2:e4:c0:56:a3:b8:eb:c2:09:82:e3:fb:ae:8f:9c:ff:37:3c:
43:cf:54:36:0e:65:fe:10:5c:05:c4:57:3a:7f:e4:76:13:a7:
c0:a4:58:9d:4b:c3:ec:0d:d0:a1:c1:55:a4:cf:24:62:48:68:
05:00:47:b5:b0:fc:94:8e:ee:06:77:2c:06:50:99:c1:f4:59:
63:e0:cd:67:af:30:fb:fb:d1:ea:55:d5:80:20:20:c8:55:f6:
44:4d:50:5c:f8:85:d9:8f:c1:9a:7a:22:9b:80:76:ba:d0:4c:
00:2a:38:65:18:4f:fb:74:7e:6b:72:04:0b:18:1a:57:91:6b:
69:e9:1c:45:23:43:97:a6:4d:64:16:4b:3e:8f:ac:4b:46:3a:
50:2c:2f:c6:f8:1b:b3:2e:da:f0:ca:df:90:da:f4:63:ca:92:
b5:8c:5e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:50:47 2026 by rpki-client