Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.mft
File: ie36QUlE0BCsae5b-yJ3OySyfvs.mft (raw, json)
Hash identifier: 0jIHnNrBZSE+1b2St6HrKaNEMseGrXQ0SUbvKALg4Tg=
Subject key identifier: F4:A4:2A:6A:0D:2E:FF:63:AC:C8:12:FF:ED:F0:89:82:AD:A5:75:31
Authority key identifier: 89:ED:FA:41:49:44:D0:10:AC:69:EE:5B:FB:22:77:3B:24:B2:7E:FB
Certificate issuer: /CN=89edfa414944d010ac69ee5bfb22773b24b27efb
Certificate serial: 019D9A74F7EB6644465DCFA797ACD9BD5BC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ie36QUlE0BCsae5b-yJ3OySyfvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.mft
Manifest number: 0D38
Signing time: Fri 17 Apr 2026 08:00:49 +0000
Manifest this update: Fri 17 Apr 2026 08:00:49 +0000
Manifest next update: Sat 18 Apr 2026 08:00:49 +0000
Files and hashes: 1: D91yhkWJzNy0wIqj24fZRWkjXyo.roa (hash: gzLfISz+cY1sCnwSJWKi4LD4Qz5Rm88X/kCLR5D2X/M=)
2: PCk3nkxvRoLF1gDbkxnDCrjgGa0.roa (hash: /z0KQlvJI+XaH2sEgQieqsdlMwCig0WcE8tOTdtJWRQ=)
3: XVjNtKOnJpcmis7Nf1eAthdQZB0.roa (hash: P0IN+5mFqrGT5cbJJWFNGnDNpinkIhBbzTCg+cVZWjI=)
4: ie36QUlE0BCsae5b-yJ3OySyfvs.crl (hash: PsFQIIWlSUGhTs+luvgSq33XerZerErtdZ2VlWcoNTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ie36QUlE0BCsae5b-yJ3OySyfvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:f7:eb:66:44:46:5d:cf:a7:97:ac:d9:bd:5b:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89edfa414944d010ac69ee5bfb22773b24b27efb
Validity
Not Before: Apr 17 08:00:49 2026 GMT
Not After : Apr 18 08:00:49 2026 GMT
Subject: CN=f4a42a6a0d2eff63acc812ffedf08982ada57531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:3e:36:a2:1b:4f:21:d4:49:de:aa:2d:a6:46:
67:f8:c6:ee:a8:77:6a:71:82:d5:ad:47:51:39:16:
24:2f:71:6c:e6:4c:ad:62:4c:a0:32:5c:89:65:40:
af:55:41:f8:1e:e7:d7:b0:f9:92:f2:f8:f9:d5:7b:
29:dd:34:ae:91:b7:ec:00:e8:6b:45:fd:11:4e:20:
cd:e8:cb:9f:51:5e:8a:45:0a:5d:18:bf:38:a4:2d:
7d:a5:c0:86:83:5f:d2:1d:59:00:db:4c:76:85:3e:
87:bb:c5:ca:87:6a:70:3f:b6:e9:1a:07:9a:20:6d:
d2:e9:2e:38:42:9a:46:29:bb:0c:db:f5:a6:36:55:
ed:13:aa:dc:98:1e:96:a4:10:b4:84:ef:3f:8b:7a:
a4:af:ec:fd:40:66:14:f7:fd:30:75:aa:a4:7c:5b:
1d:ce:3c:42:f8:4f:41:b6:64:7e:ae:91:39:a2:dd:
f8:ae:cc:c3:54:5e:1d:95:43:d9:c0:f5:94:78:93:
67:5b:ae:92:76:ea:4d:8a:5c:a2:f3:f4:f4:27:e0:
8a:9b:00:c1:51:33:fe:fa:33:6c:90:58:de:b9:be:
6d:24:8f:13:f0:4b:50:70:db:65:a0:f7:42:a2:c9:
cd:65:22:f2:ae:75:4b:cb:44:e3:04:16:15:83:ae:
c5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:A4:2A:6A:0D:2E:FF:63:AC:C8:12:FF:ED:F0:89:82:AD:A5:75:31
X509v3 Authority Key Identifier:
keyid:89:ED:FA:41:49:44:D0:10:AC:69:EE:5B:FB:22:77:3B:24:B2:7E:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ie36QUlE0BCsae5b-yJ3OySyfvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:88:33:cb:d6:fa:c9:e2:c0:ae:a4:eb:45:ec:40:84:f5:ea:
d7:04:4f:6e:95:10:79:59:39:d5:a5:71:af:57:47:7e:5f:b6:
bd:28:08:3a:55:49:83:53:3e:56:3d:8e:fc:8a:1e:47:fc:d4:
0e:d1:92:92:ac:83:8a:32:35:64:c1:92:58:2d:d1:9e:12:d8:
03:b3:3e:a9:48:d3:a5:3b:49:3e:3a:70:0e:98:a9:ae:60:4d:
df:ea:3e:44:90:fb:e6:94:00:d6:2c:63:32:69:ce:2c:2b:16:
4c:64:5b:01:28:e1:7a:c0:e5:83:db:fa:f7:07:ce:5a:3c:5e:
cd:72:f2:08:96:a6:be:40:71:4f:5a:be:8f:cb:a9:00:07:d8:
d7:55:74:b9:e1:52:9c:34:49:f6:a3:17:1c:c1:62:d4:1c:e3:
83:e6:3c:5a:21:ff:2b:41:ec:01:23:5d:2c:bd:df:1d:4a:61:
f7:01:b2:aa:89:4e:4b:cd:e0:46:fb:26:60:03:2e:2d:31:86:
5f:ab:7a:d2:af:f3:c3:dc:ce:65:c5:09:4c:fb:7e:b8:73:d7:
ae:08:69:24:b5:b6:0b:09:8d:fa:85:d3:81:e4:ad:03:1f:44:
52:74:8d:ae:38:87:99:8b:6c:fc:03:77:d5:e3:73:c0:eb:02:
c4:e9:cc:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:55:02 2026 by rpki-client