Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft
File: I7oexPA1py36OekwrY7FQ2jrevQ.mft (raw, json)
Hash identifier: QK9aoxp0lVBSfVD6gY4ZsGooh0hdKGwRzs51/05YSo4=
Subject key identifier: 0C:58:D2:5C:CC:12:0F:BB:33:21:A5:6B:CF:FC:1F:64:4C:0A:2C:B1
Authority key identifier: 23:BA:1E:C4:F0:35:A7:2D:FA:39:E9:30:AD:8E:C5:43:68:EB:7A:F4
Certificate issuer: /CN=23ba1ec4f035a72dfa39e930ad8ec54368eb7af4
Certificate serial: 019D9C63105192ACD41BFA0D66CA4860A11A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I7oexPA1py36OekwrY7FQ2jrevQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft
Manifest number: 18C9
Signing time: Fri 17 Apr 2026 17:00:31 +0000
Manifest this update: Fri 17 Apr 2026 17:00:31 +0000
Manifest next update: Sat 18 Apr 2026 17:00:31 +0000
Files and hashes: 1: I7oexPA1py36OekwrY7FQ2jrevQ.crl (hash: GTe61/Oxvf/Ee8wG3aukfVsBuIAJ3xHBoScSOeMsdGc=)
2: YV5YbyzQ4v-R-M9sTv2X0MLou60.roa (hash: Wnl73KWmj3QlZUmHv6GR1P0QHj68SNwwAwR9VDBTafI=)
3: _IN-lUbsVoIujOIBhlqniYDIAj4.roa (hash: OVNWFTAvftStnpg3u2YMXcX4JyBnzVvFH9bIqxUH8FU=)
4: b0HKN9ab1P1Sr3YvvuEwkf7syng.roa (hash: 9hsVaqxhAVdgsjntPxtz6LrMJOjEjADE4hMXgvvmdoo=)
5: t_VAikl6AuDV7KY1lJg71qWe6PI.roa (hash: 5EWDR0oT5pCzdNuqq4gxPs1dK+scKpifLsg8E3R3q10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/I7oexPA1py36OekwrY7FQ2jrevQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:63:10:51:92:ac:d4:1b:fa:0d:66:ca:48:60:a1:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ba1ec4f035a72dfa39e930ad8ec54368eb7af4
Validity
Not Before: Apr 17 17:00:31 2026 GMT
Not After : Apr 18 17:00:31 2026 GMT
Subject: CN=0c58d25ccc120fbb3321a56bcffc1f644c0a2cb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:89:99:ff:e0:9f:15:6e:9a:d0:10:ff:35:41:
c1:c4:9c:df:55:5d:0c:63:2f:ef:d3:37:97:15:92:
2b:01:c0:5b:ed:cb:17:e5:c9:73:99:40:04:6f:46:
1a:38:11:4f:af:ef:10:65:15:f3:2f:46:e0:a3:e8:
3a:73:60:39:93:71:a6:c8:ee:86:d0:ee:a0:65:f9:
3a:b0:05:66:7c:d6:c4:51:22:11:58:b6:df:d5:37:
e7:ee:f1:10:90:4d:56:d3:e3:d7:90:25:aa:91:e7:
3c:d2:5f:2c:0e:9f:71:85:f5:f9:f0:2f:c6:16:99:
36:1f:93:41:f7:7e:78:bf:81:a1:ac:b8:38:d1:c2:
1e:87:97:9f:0a:ea:49:2a:b8:7b:e1:3c:71:dc:f1:
04:96:3b:7c:8b:8a:b5:17:0c:90:4a:1a:95:c0:f3:
d9:1e:80:95:71:9d:ea:b4:c2:1e:1f:ed:62:16:fc:
d2:a1:7f:ed:23:c9:15:44:8c:a8:86:d8:c3:86:69:
31:fc:e5:39:b8:3e:bf:55:ad:79:07:bd:e7:a5:7f:
14:64:88:73:34:19:09:95:6b:6a:40:41:a8:fe:3d:
c2:9e:a7:1f:fe:16:f0:dd:aa:55:11:0f:cb:40:6b:
39:3a:3f:91:3a:46:98:b0:74:45:7c:d2:2b:12:48:
1e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:58:D2:5C:CC:12:0F:BB:33:21:A5:6B:CF:FC:1F:64:4C:0A:2C:B1
X509v3 Authority Key Identifier:
keyid:23:BA:1E:C4:F0:35:A7:2D:FA:39:E9:30:AD:8E:C5:43:68:EB:7A:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I7oexPA1py36OekwrY7FQ2jrevQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:b5:5a:e2:59:b1:06:69:e5:5f:24:bb:07:a5:14:8c:89:b9:
97:e6:68:e6:74:cc:88:01:35:1f:6a:ac:5d:21:ed:bf:aa:aa:
8b:46:5f:c7:6a:c9:54:06:bd:23:18:ee:f9:d2:9c:db:49:f9:
42:c8:cb:2a:b5:68:f9:e4:a3:a3:a6:fc:07:e1:07:69:34:15:
d2:e6:eb:dd:1a:a1:2e:62:df:3c:00:99:97:ab:b1:ec:22:ad:
03:1a:91:2c:16:94:1f:e1:96:ab:62:5d:37:f9:a9:f2:7f:a7:
2b:ba:9a:05:26:6b:7a:75:65:a8:50:c8:a1:dd:18:f9:28:98:
68:93:76:b5:3b:32:40:ce:01:cc:4b:1b:33:fe:99:e9:67:48:
bb:48:9c:bc:f6:cb:89:17:19:ec:ca:37:b7:98:b9:cb:aa:d6:
06:dd:f1:18:a8:55:a5:5a:75:56:3c:b1:1c:0d:d1:8a:9b:38:
87:b9:2f:49:03:24:6c:e5:30:ba:06:bc:d9:e5:fb:8a:f5:65:
56:0f:8c:ca:f0:52:3d:e7:9c:a7:26:a4:fb:f4:e6:b6:fc:de:
33:36:94:d4:bd:5d:f7:3c:af:ce:eb:a7:6d:67:e0:5f:3b:35:
8e:98:d2:fa:36:ff:bd:8a:d8:f1:da:d3:d2:78:8b:c6:44:20:
67:e8:94:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:00:56 2026 by rpki-client