Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.mft
File: I_XCWFOCCEeS8TrRlyBe_dJ1LfI.mft (raw, json)
Hash identifier: axLugyfgHGXUl6fl6mcSpq3ldXAWnvN8CxwQ7I+rXVU=
Subject key identifier: DD:66:A6:A0:1D:C9:5C:A2:D9:53:7F:20:E5:F8:C8:72:86:A7:1D:C3
Authority key identifier: 23:F5:C2:58:53:82:08:47:92:F1:3A:D1:97:20:5E:FD:D2:75:2D:F2
Certificate issuer: /CN=23f5c2585382084792f13ad197205efdd2752df2
Certificate serial: 019D9AAC5AD57FA1111719BA528580536D92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.mft
Manifest number: 0270
Signing time: Fri 17 Apr 2026 09:01:19 +0000
Manifest this update: Fri 17 Apr 2026 09:01:19 +0000
Manifest next update: Sat 18 Apr 2026 09:01:19 +0000
Files and hashes: 1: I_XCWFOCCEeS8TrRlyBe_dJ1LfI.crl (hash: WArKoNDEzbEDtxVUUPBlZ/ENQ225pPxfacYtS0l+A+I=)
2: ayEAcT6oCdclXkVG2FkLRzZ9mOw.roa (hash: 7P+K2VYLnbm0w74/RJLkFBdqeqXQaGd7I3w+dIasZpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 09:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:5a:d5:7f:a1:11:17:19:ba:52:85:80:53:6d:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23f5c2585382084792f13ad197205efdd2752df2
Validity
Not Before: Apr 17 09:01:19 2026 GMT
Not After : Apr 18 09:01:19 2026 GMT
Subject: CN=dd66a6a01dc95ca2d9537f20e5f8c87286a71dc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b8:f1:d2:d3:e5:7a:15:3a:2a:85:72:a7:5a:
bc:20:14:63:98:4c:e0:db:e1:dd:b8:0b:3e:88:fe:
b1:8d:ff:d5:09:06:17:d2:47:73:3d:73:c0:c5:dd:
07:f9:a7:8c:63:01:b5:46:2c:90:88:02:91:3c:70:
a4:c3:b3:5b:8a:b8:53:e7:39:29:eb:1c:11:df:a5:
8c:5e:00:92:3c:68:d3:00:55:48:55:95:7e:46:c9:
e4:92:d0:f0:cb:cb:30:bf:42:b2:a7:35:bc:70:95:
5b:d1:70:56:c4:15:9e:a4:80:d6:84:73:79:ea:68:
4d:c9:80:b1:8b:66:9d:32:a8:48:08:c0:15:21:19:
9e:e1:47:36:5f:dc:8c:e4:0d:26:36:2a:92:4c:29:
50:b7:06:6c:32:3b:13:59:1f:81:de:7f:33:e9:98:
3d:24:2a:56:ee:43:4a:c1:f3:11:8f:b3:f4:b8:ad:
6d:ba:60:34:a9:b8:ea:f2:dd:25:a7:e5:7d:87:22:
cf:7f:6f:0d:97:7a:3a:ba:8b:35:f3:b1:4b:3d:41:
7f:95:8d:9d:d8:2f:db:65:97:6d:48:fe:b2:d2:7f:
a7:4e:7c:ff:3a:7e:4c:e8:d3:43:49:b2:e2:5c:79:
ac:35:2f:7e:0e:fd:24:8a:91:3b:ff:bd:95:ce:1b:
f0:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:66:A6:A0:1D:C9:5C:A2:D9:53:7F:20:E5:F8:C8:72:86:A7:1D:C3
X509v3 Authority Key Identifier:
keyid:23:F5:C2:58:53:82:08:47:92:F1:3A:D1:97:20:5E:FD:D2:75:2D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:31:dd:05:1d:66:03:c0:15:3f:a0:10:03:ee:4c:c1:c2:73:
31:02:23:e5:a0:69:5b:8b:22:ea:4a:d4:d2:17:4c:92:eb:8a:
ca:7d:06:83:26:9c:b4:0b:cb:97:66:b9:73:94:22:dc:91:f8:
ec:d3:e7:f3:c5:0c:ef:e7:64:06:99:6c:19:18:fa:ee:84:37:
92:eb:00:35:04:d3:39:f7:3f:c4:8b:fe:29:ae:4e:5b:01:73:
7b:7b:81:5b:9d:01:b5:02:f5:3b:9a:30:f5:ad:cd:72:d6:85:
8d:9f:35:09:7f:60:0e:b5:bb:59:21:e1:34:ef:fc:8d:96:e7:
f5:93:f4:eb:ea:0f:a3:e7:8a:0e:72:5f:7b:68:83:a4:4e:b0:
ef:7a:99:1d:8c:c6:22:12:7f:17:81:af:57:53:78:d3:7d:eb:
1a:02:0c:27:4c:2f:2c:ef:56:6a:08:f5:21:50:5c:74:b7:bc:
48:4d:4f:40:b0:4a:f0:93:cc:0a:9c:53:ae:dd:40:1c:85:19:
ad:eb:37:23:9a:4c:8e:1a:bc:af:ad:72:a1:0f:63:af:25:2d:
8e:dc:71:16:40:54:a7:86:dc:8c:d3:c6:3a:a6:6b:5f:01:c2:
3e:16:d4:0c:1b:b9:bc:f8:b0:d3:8f:48:02:75:8d:fb:68:e9:
60:51:79:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2arFrVf6ERFxm6UoWAU22SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzZjVjMjU4NTM4MjA4NDc5MmYxM2FkMTk3MjA1ZWZkZDI3
NTJkZjIwHhcNMjYwNDE3MDkwMTE5WhcNMjYwNDE4MDkwMTE5WjAzMTEwLwYDVQQD
EyhkZDY2YTZhMDFkYzk1Y2EyZDk1MzdmMjBlNWY4Yzg3Mjg2YTcxZGMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrjx0tPlehU6KoVyp1q8IBRjmEzg
2+HduAs+iP6xjf/VCQYX0kdzPXPAxd0H+aeMYwG1RiyQiAKRPHCkw7NbirhT5zkp
6xwR36WMXgCSPGjTAFVIVZV+RsnkktDwy8swv0KypzW8cJVb0XBWxBWepIDWhHN5
6mhNyYCxi2adMqhICMAVIRme4Uc2X9yM5A0mNiqSTClQtwZsMjsTWR+B3n8z6Zg9
JCpW7kNKwfMRj7P0uK1tumA0qbjq8t0lp+V9hyLPf28Nl3o6uos187FLPUF/lY2d
2C/bZZdtSP6y0n+nTnz/On5M6NNDSbLiXHmsNS9+Dv0kipE7/72Vzhvw5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN1mpqAdyVyi2VN/IOX4yHKGpx3DMB8GA1UdIwQY
MBaAFCP1wlhTgghHkvE60ZcgXv3SdS3yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSV9YQ1dGT0NDRWVTOFRyUmx5QmVfZEoxTGZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9mODNkMDktMzQxMy00NjUxLTk2Y2Ut
OGZiNTI0NGJjMjU2LzEvSV9YQ1dGT0NDRWVTOFRyUmx5QmVfZEoxTGZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9mODNkMDktMzQxMy00NjUxLTk2Y2UtOGZiNTI0NGJjMjU2
LzEvSV9YQ1dGT0NDRWVTOFRyUmx5QmVfZEoxTGZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjTHdBR1m
A8AVP6AQA+5MwcJzMQIj5aBpW4si6krU0hdMkuuKyn0GgyactAvLl2a5c5Qi3JH4
7NPn88UM7+dkBplsGRj67oQ3kusANQTTOfc/xIv+Ka5OWwFze3uBW50BtQL1O5ow
9a3NctaFjZ81CX9gDrW7WSHhNO/8jZbn9ZP06+oPo+eKDnJfe2iDpE6w73qZHYzG
IhJ/F4GvV1N4033rGgIMJ0wvLO9Wagj1IVBcdLe8SE1PQLBK8JPMCpxTrt1AHIUZ
res3I5pMjhq8r61yoQ9jryUtjtxxFkBUp4bcjNPGOqZrXwHCPhbUDBu5vPiw049I
AnWN+2jpYFF5cQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:38:09 2026 by rpki-client