Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/1f1d43-43db-4f4a-b494-7df9ae53d484/1/I50GV-qu8Ja-yUsR9NadDT7QTOY.mft
File: I50GV-qu8Ja-yUsR9NadDT7QTOY.mft (raw, json)
Hash identifier: 52TbhnmK0+SDXjqvyjQvz/NN+AEmkb5ExHNJehgMYe8=
Subject key identifier: 11:98:F0:D1:6D:55:69:75:36:83:8D:B6:E5:EB:13:B1:97:38:F4:51
Authority key identifier: 23:9D:06:57:EA:AE:F0:96:BE:C9:4B:11:F4:D6:9D:0D:3E:D0:4C:E6
Certificate issuer: /CN=239d0657eaaef096bec94b11f4d69d0d3ed04ce6
Certificate serial: 019D996304017C61EB7F173D992528B5F7C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I50GV-qu8Ja-yUsR9NadDT7QTOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/1f1d43-43db-4f4a-b494-7df9ae53d484/1/I50GV-qu8Ja-yUsR9NadDT7QTOY.mft
Manifest number: 1606
Signing time: Fri 17 Apr 2026 03:01:35 +0000
Manifest this update: Fri 17 Apr 2026 03:01:35 +0000
Manifest next update: Sat 18 Apr 2026 03:01:35 +0000
Files and hashes: 1: I50GV-qu8Ja-yUsR9NadDT7QTOY.crl (hash: 7yUcWaMIjx3EtCcv4I3gtGgVMbxhgJhLIU/h+ocHlS8=)
2: JYCsV2i5N2HKe8jWnVBbskEk35g.roa (hash: bJ+6gtzP1kZJb4K84CU9VOHZvtsvVD/JCSadOrdU128=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/1f1d43-43db-4f4a-b494-7df9ae53d484/1/I50GV-qu8Ja-yUsR9NadDT7QTOY.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/1f1d43-43db-4f4a-b494-7df9ae53d484/1/I50GV-qu8Ja-yUsR9NadDT7QTOY.mft
rsync://rpki.ripe.net/repository/DEFAULT/I50GV-qu8Ja-yUsR9NadDT7QTOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:63:04:01:7c:61:eb:7f:17:3d:99:25:28:b5:f7:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=239d0657eaaef096bec94b11f4d69d0d3ed04ce6
Validity
Not Before: Apr 17 03:01:35 2026 GMT
Not After : Apr 18 03:01:35 2026 GMT
Subject: CN=1198f0d16d55697536838db6e5eb13b19738f451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4d:f3:50:4d:df:bc:1c:fc:5a:b8:d6:b9:dc:
0d:a9:5a:bc:49:5e:4a:a5:c5:a6:9a:ed:11:5d:ef:
65:59:35:76:ed:ea:73:b9:28:6f:fd:23:05:a1:0d:
c0:fb:9b:9c:37:6e:2c:23:51:c4:8d:29:57:f0:79:
d3:7f:45:25:4a:fc:dd:ff:5f:fe:4d:81:35:0a:c0:
c4:cb:5e:08:31:28:07:0d:cb:d1:db:45:3d:35:12:
0e:68:ad:99:a2:12:51:94:b0:20:62:74:47:36:d9:
cc:f4:fc:00:20:8f:0d:42:ee:60:ff:d3:50:2a:5b:
50:89:14:50:58:e1:7b:82:4d:3f:28:b2:14:29:d1:
a2:b1:0d:03:1d:d5:bc:7f:77:6f:f5:b1:30:a1:ae:
e7:e1:9d:f0:91:cd:c2:2c:87:a3:47:1b:7f:53:a8:
2e:bd:3d:d6:bb:3d:18:9d:13:64:6c:16:ab:af:28:
31:a5:bd:d7:1c:da:63:7f:53:fd:23:28:15:e7:65:
84:5b:f4:c4:27:b0:bf:48:a8:71:3d:cf:17:b5:46:
a7:fc:c9:01:bd:c6:30:f5:eb:35:80:fe:c5:fd:33:
fd:4a:17:4a:23:b5:f7:4b:95:e4:ec:cb:67:a4:00:
a4:54:91:50:65:fe:38:b2:41:6d:ed:74:40:9b:37:
d8:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:98:F0:D1:6D:55:69:75:36:83:8D:B6:E5:EB:13:B1:97:38:F4:51
X509v3 Authority Key Identifier:
keyid:23:9D:06:57:EA:AE:F0:96:BE:C9:4B:11:F4:D6:9D:0D:3E:D0:4C:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I50GV-qu8Ja-yUsR9NadDT7QTOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1f1d43-43db-4f4a-b494-7df9ae53d484/1/I50GV-qu8Ja-yUsR9NadDT7QTOY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1f1d43-43db-4f4a-b494-7df9ae53d484/1/I50GV-qu8Ja-yUsR9NadDT7QTOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:1c:9b:f1:3a:63:1b:4f:54:5b:d8:71:78:10:0e:04:c3:bc:
43:b6:d2:f5:30:08:17:20:b2:28:70:ba:d5:2a:87:99:93:61:
79:f7:69:fe:3a:84:a4:c3:62:af:51:80:1b:a2:b4:d8:27:1f:
03:5b:80:28:b9:4d:25:15:2c:2c:9b:9a:6c:d0:da:3c:97:97:
8d:2e:eb:63:45:10:44:2e:af:e7:b9:84:d0:1b:25:02:0b:44:
40:f5:23:1c:6d:bb:2f:bc:30:75:36:1b:b7:61:ff:bc:85:5d:
eb:4c:e4:83:7c:e1:b3:d7:3c:bd:99:1c:53:60:ff:ae:91:1f:
02:93:fc:f9:3f:47:fd:c7:05:07:37:50:e6:da:c9:73:38:ad:
c1:81:c8:9f:09:01:3d:1a:22:95:81:0d:5a:40:25:4b:60:b7:
c3:7d:c4:f9:9f:81:80:31:49:21:4f:2b:cf:99:1a:85:d8:e0:
f7:f3:2a:6e:a9:2f:74:68:2d:be:23:64:8b:37:ce:2c:d9:12:
13:79:37:dc:69:cd:9d:8b:79:82:8a:10:68:14:fd:49:47:9b:
4b:d1:c0:f9:ad:e4:08:6b:cf:a4:e6:56:b8:c6:16:31:dc:a4:
49:b3:b2:81:24:cd:2e:e5:e9:c0:33:68:ed:89:63:d3:00:ca:
8b:ff:49:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:23:12 2026 by rpki-client