Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/dc8c02-4f6d-49f6-882c-136905e2c7c5/1/iPew3Z_8ovhXNMU3y-9czRGZ5bw.mft
File: iPew3Z_8ovhXNMU3y-9czRGZ5bw.mft (raw, json)
Hash identifier: cX/hS3GEmwU71GYJcEHNA0dAfTU4I0zymkpnmgcIEBk=
Subject key identifier: 75:9C:55:51:78:15:75:84:5B:24:4D:7A:AE:47:FB:7F:97:32:17:98
Authority key identifier: 88:F7:B0:DD:9F:FC:A2:F8:57:34:C5:37:CB:EF:5C:CD:11:99:E5:BC
Certificate issuer: /CN=88f7b0dd9ffca2f85734c537cbef5ccd1199e5bc
Certificate serial: 019D9886345132D2B1294D88B8EABF2D7146
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPew3Z_8ovhXNMU3y-9czRGZ5bw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/dc8c02-4f6d-49f6-882c-136905e2c7c5/1/iPew3Z_8ovhXNMU3y-9czRGZ5bw.mft
Manifest number: 0769
Signing time: Thu 16 Apr 2026 23:00:25 +0000
Manifest this update: Thu 16 Apr 2026 23:00:25 +0000
Manifest next update: Fri 17 Apr 2026 23:00:25 +0000
Files and hashes: 1: C15rJO_bJRsVwZitZCSgh0qDMBk.roa (hash: rFrB85LTHmEZy4HaNwBvd/+Qzbn2vKgCWTAZhL3DIhc=)
2: iPew3Z_8ovhXNMU3y-9czRGZ5bw.crl (hash: sRK5dCFiP9a56osUK1OHzXkgKXsI4ulDEJEwwMfI/tg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/dc8c02-4f6d-49f6-882c-136905e2c7c5/1/iPew3Z_8ovhXNMU3y-9czRGZ5bw.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/dc8c02-4f6d-49f6-882c-136905e2c7c5/1/iPew3Z_8ovhXNMU3y-9czRGZ5bw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iPew3Z_8ovhXNMU3y-9czRGZ5bw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:34:51:32:d2:b1:29:4d:88:b8:ea:bf:2d:71:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88f7b0dd9ffca2f85734c537cbef5ccd1199e5bc
Validity
Not Before: Apr 16 23:00:25 2026 GMT
Not After : Apr 17 23:00:25 2026 GMT
Subject: CN=759c5551781575845b244d7aae47fb7f97321798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6d:14:1a:95:3b:34:8b:9e:dc:d3:c7:ed:49:
e9:37:18:b3:b5:1b:81:d5:11:37:29:c4:7a:69:cb:
0d:cb:f7:29:ac:ff:b3:5a:ea:a8:08:0b:77:cf:9e:
40:f9:86:2e:4b:1c:e0:94:ef:22:2d:8b:c7:68:ce:
f4:87:b8:05:fd:d8:d8:75:09:90:a6:57:e5:83:4c:
c1:46:ec:e4:1c:54:6d:7d:d0:c5:bd:98:b1:53:fd:
55:ee:40:9b:1d:de:a2:e4:a9:f9:a2:6d:e2:f0:20:
bb:f9:7a:63:53:73:85:d1:51:09:0e:61:4f:97:fc:
14:a3:53:73:1b:22:35:e2:d6:2e:b9:b4:c6:c6:65:
54:18:d4:6a:70:8d:89:96:49:cc:ba:8a:0a:ba:00:
e3:f6:24:ef:ae:82:45:62:8a:ad:aa:1e:9b:c3:58:
1f:69:b8:14:56:4a:04:33:00:28:68:11:20:77:e5:
7f:ad:f3:56:38:75:9d:60:43:5e:ae:3e:45:08:ff:
29:4a:65:95:1d:3b:92:13:07:b6:e1:33:fc:e4:e5:
b8:05:a9:f1:89:58:5d:d3:3f:d2:85:8d:08:fb:12:
b1:4f:fc:10:16:0a:2f:e5:f9:99:dc:33:52:f5:34:
51:f0:07:fc:ef:c3:a2:9a:e5:63:88:20:60:9e:25:
60:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:9C:55:51:78:15:75:84:5B:24:4D:7A:AE:47:FB:7F:97:32:17:98
X509v3 Authority Key Identifier:
keyid:88:F7:B0:DD:9F:FC:A2:F8:57:34:C5:37:CB:EF:5C:CD:11:99:E5:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPew3Z_8ovhXNMU3y-9czRGZ5bw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/dc8c02-4f6d-49f6-882c-136905e2c7c5/1/iPew3Z_8ovhXNMU3y-9czRGZ5bw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/dc8c02-4f6d-49f6-882c-136905e2c7c5/1/iPew3Z_8ovhXNMU3y-9czRGZ5bw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:96:a8:84:70:48:16:3b:85:22:9d:f1:47:a0:ac:90:e6:2b:
71:e1:79:15:b5:14:01:f4:21:c7:65:bb:e3:77:50:f1:11:9f:
1f:6e:b0:dd:9c:59:9b:9a:7d:c7:3d:f6:c8:8a:6f:a3:56:ec:
de:95:cf:00:fd:d1:1d:93:8c:6d:dd:ce:b5:48:2a:0b:92:5f:
69:6d:93:96:21:f8:ee:82:36:63:15:a5:9a:d5:1a:70:d4:d3:
9c:43:2f:cb:e8:7d:c9:f7:d1:cf:1d:92:4e:72:65:02:00:1f:
54:ab:59:32:17:49:9f:96:3a:7f:b6:29:55:a7:20:30:ee:53:
bb:89:8c:91:28:7c:a3:8a:11:b4:86:aa:3f:47:d2:8c:b8:61:
90:68:e2:bb:3c:9f:51:c1:96:05:b0:5f:6f:7a:e7:fc:b5:2f:
f3:d7:0a:5c:bf:cb:c5:7e:67:ab:4a:52:3f:4c:29:ac:46:3a:
51:b5:61:4b:7b:be:fd:8f:69:b1:ea:e3:aa:22:5e:21:1a:c2:
08:87:f3:99:7f:ea:ac:ee:d3:fe:14:ee:bb:b2:94:b2:a0:94:
ff:7b:69:4f:3b:99:76:98:03:27:dd:ad:54:e6:ae:67:9d:a2:
a6:a1:b6:71:af:da:ea:4d:73:41:4f:45:40:6a:8a:a4:c7:e9:
c1:e1:f1:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:33:40 2026 by rpki-client