Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/bd680c-4a50-4f52-98f8-4bae62896c4f/1/rIt3HiV7ryfdoQoIq1iybPj3Xgk.mft
File: rIt3HiV7ryfdoQoIq1iybPj3Xgk.mft (raw, json)
Hash identifier: /wFMGXFy/VMDox1KinTlOXzFr7UzPQvczg+tKSzJ2ig=
Subject key identifier: D6:A5:95:4B:4D:5A:E9:FF:05:68:5A:B9:AB:58:6A:9D:AA:51:FA:7A
Authority key identifier: AC:8B:77:1E:25:7B:AF:27:DD:A1:0A:08:AB:58:B2:6C:F8:F7:5E:09
Certificate issuer: /CN=ac8b771e257baf27dda10a08ab58b26cf8f75e09
Certificate serial: 019D9D3FC1FB051B6C185A64A40435218CC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rIt3HiV7ryfdoQoIq1iybPj3Xgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/bd680c-4a50-4f52-98f8-4bae62896c4f/1/rIt3HiV7ryfdoQoIq1iybPj3Xgk.mft
Manifest number: 51
Signing time: Fri 17 Apr 2026 21:01:34 +0000
Manifest this update: Fri 17 Apr 2026 21:01:34 +0000
Manifest next update: Sat 18 Apr 2026 21:01:34 +0000
Files and hashes: 1: rIt3HiV7ryfdoQoIq1iybPj3Xgk.crl (hash: xglxL42eLYXEvQQzA1/JE2bURCJJr2Mvax71axyboLI=)
2: rcclP2fW2M9d6FzhFGpcIug6Slw.roa (hash: Ah4o3LwYLB7WSaBBzcrCq3rn0s5Unn57tKa0V6nN2u0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/bd680c-4a50-4f52-98f8-4bae62896c4f/1/rIt3HiV7ryfdoQoIq1iybPj3Xgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/bd680c-4a50-4f52-98f8-4bae62896c4f/1/rIt3HiV7ryfdoQoIq1iybPj3Xgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/rIt3HiV7ryfdoQoIq1iybPj3Xgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:3f:c1:fb:05:1b:6c:18:5a:64:a4:04:35:21:8c:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac8b771e257baf27dda10a08ab58b26cf8f75e09
Validity
Not Before: Apr 17 21:01:34 2026 GMT
Not After : Apr 18 21:01:34 2026 GMT
Subject: CN=d6a5954b4d5ae9ff05685ab9ab586a9daa51fa7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:70:66:94:0c:a2:d1:41:ff:7a:32:45:5f:69:
33:3a:62:81:1e:ec:f3:59:d8:10:fe:ee:70:49:4e:
30:51:a9:75:bf:4b:2d:df:f0:f8:7d:88:a3:40:01:
80:50:fe:76:d0:c0:39:ef:26:ea:9d:26:32:99:b2:
fc:18:68:cf:1e:d8:bd:14:9c:0b:f8:b1:08:56:0b:
35:0d:a5:31:17:6f:4c:0d:6c:58:77:0c:b8:e3:5f:
b9:0f:a3:7f:ab:b3:e1:92:da:0c:81:1f:f6:75:2d:
c1:29:d9:af:c6:79:46:1c:33:45:ee:d6:f6:8d:d6:
12:1f:1f:c6:15:ae:e2:57:cf:e2:c3:d0:fb:8e:97:
b3:7c:6d:2b:84:87:19:60:a8:9b:44:45:89:97:2f:
fe:76:3b:e6:80:ef:10:7c:34:22:5a:a0:53:16:46:
e8:e4:82:c1:c9:f5:c7:a5:de:d7:27:6f:f3:83:d5:
6a:f1:34:ff:3f:f7:ce:16:87:d8:15:b1:b1:88:77:
41:da:a7:ef:ef:cb:6d:2f:91:d5:b3:1a:5f:17:69:
61:89:ad:aa:5e:45:97:8d:90:3e:ab:b0:bd:0c:17:
2a:2e:14:6c:e8:af:ae:24:ef:b0:18:95:1e:84:d4:
8a:9f:0b:2c:05:dc:a6:ca:eb:b0:29:0f:7f:9f:f8:
72:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:A5:95:4B:4D:5A:E9:FF:05:68:5A:B9:AB:58:6A:9D:AA:51:FA:7A
X509v3 Authority Key Identifier:
keyid:AC:8B:77:1E:25:7B:AF:27:DD:A1:0A:08:AB:58:B2:6C:F8:F7:5E:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rIt3HiV7ryfdoQoIq1iybPj3Xgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/bd680c-4a50-4f52-98f8-4bae62896c4f/1/rIt3HiV7ryfdoQoIq1iybPj3Xgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/bd680c-4a50-4f52-98f8-4bae62896c4f/1/rIt3HiV7ryfdoQoIq1iybPj3Xgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:0d:82:a9:aa:77:84:e7:94:19:5f:50:05:05:40:6b:a2:f4:
7a:3b:ee:55:34:ae:8f:0c:c6:6f:6d:0c:e1:68:ba:bd:54:6c:
e7:78:5c:42:71:27:5e:81:9b:ba:c7:02:1e:a3:3f:05:d6:46:
b2:a5:35:1f:2a:ef:31:7a:d7:71:ca:7b:93:f5:8b:ea:4b:4b:
b3:e2:34:0c:c1:88:83:29:6c:33:2f:ce:30:a9:3e:07:be:68:
11:9e:42:64:09:af:33:80:53:94:42:23:3f:1c:5c:f4:80:c9:
fc:f5:69:77:a6:93:4b:07:53:02:ae:50:7e:36:69:0e:b5:92:
07:72:a5:09:1e:23:52:a5:7b:41:54:4c:52:02:ce:70:6a:ef:
3e:f1:fe:ab:7c:3a:43:d5:d6:fa:f5:73:ed:6f:13:32:03:92:
f0:8f:fb:ea:b1:5d:92:75:f4:33:2c:7b:db:94:06:85:0f:6a:
33:55:67:33:a4:0f:b0:18:55:e1:1a:c0:1f:bc:00:ab:23:17:
89:89:66:5c:7f:58:88:0b:46:e5:b0:5e:fe:f1:23:00:98:86:
7d:7f:2f:93:a7:16:df:54:b6:21:41:bc:4b:ba:a9:9c:19:c5:
31:15:80:fd:01:f4:7e:5b:55:06:dc:1e:07:76:1f:9d:ad:c8:
fb:29:de:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:54:21 2026 by rpki-client