Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/cfc0d1-d095-4b1b-9b5d-3985299fad6d/1/IO7gXaGD3uK4EYFBlWRiySQNeHY.mft
File: IO7gXaGD3uK4EYFBlWRiySQNeHY.mft (raw, json)
Hash identifier: uKPnukocB/X56NnD8fu6pJ/9V7yGK7YICrsRDaNfgbg=
Subject key identifier: 6E:92:07:5D:F6:D9:5A:BD:11:EB:5F:86:0A:A6:2A:82:09:D6:4D:4D
Authority key identifier: 20:EE:E0:5D:A1:83:DE:E2:B8:11:81:41:95:64:62:C9:24:0D:78:76
Certificate issuer: /CN=20eee05da183dee2b8118141956462c9240d7876
Certificate serial: 019DA48AD69D615B8C1074F2606DE774A5DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IO7gXaGD3uK4EYFBlWRiySQNeHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/cfc0d1-d095-4b1b-9b5d-3985299fad6d/1/IO7gXaGD3uK4EYFBlWRiySQNeHY.mft
Manifest number: 16D2
Signing time: Sun 19 Apr 2026 07:00:55 +0000
Manifest this update: Sun 19 Apr 2026 07:00:55 +0000
Manifest next update: Mon 20 Apr 2026 07:00:55 +0000
Files and hashes: 1: IO7gXaGD3uK4EYFBlWRiySQNeHY.crl (hash: XDHj3ydNVabir6w9HlgN1CxvKpUpCRNeNFiez/xrvDI=)
2: WX9t0xmXDR4uM2A7AQHLj3QPI_4.roa (hash: juszrqxHpM/25SYd4SpIiGanqn2fYHKuBqSkrqz21Rw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/cfc0d1-d095-4b1b-9b5d-3985299fad6d/1/IO7gXaGD3uK4EYFBlWRiySQNeHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/cfc0d1-d095-4b1b-9b5d-3985299fad6d/1/IO7gXaGD3uK4EYFBlWRiySQNeHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IO7gXaGD3uK4EYFBlWRiySQNeHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8a:d6:9d:61:5b:8c:10:74:f2:60:6d:e7:74:a5:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20eee05da183dee2b8118141956462c9240d7876
Validity
Not Before: Apr 19 07:00:55 2026 GMT
Not After : Apr 20 07:00:55 2026 GMT
Subject: CN=6e92075df6d95abd11eb5f860aa62a8209d64d4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:af:5c:25:3a:bf:d6:74:b4:5e:84:54:10:16:
60:96:e8:6b:69:25:02:86:f8:e5:25:97:0e:51:d8:
08:40:90:4c:f5:90:76:4b:7b:a9:fc:f7:11:3f:7c:
04:af:a3:e6:0c:56:dc:52:e5:f8:1d:28:e6:fc:3d:
fe:49:e1:ab:6c:a3:10:52:9f:80:57:25:b0:af:26:
a3:06:50:e0:f8:49:99:9a:aa:e0:42:31:39:c2:3e:
6f:97:37:ae:93:4b:0a:67:9b:d0:9d:a6:0d:eb:0b:
41:9f:5f:32:fa:3e:04:b1:95:fd:f4:37:aa:31:76:
f7:7a:66:23:5a:8e:8d:0a:36:cd:ed:f5:c8:ee:9a:
f4:46:e7:eb:c4:5a:52:75:2d:8a:9c:af:13:49:df:
c0:4d:a3:5c:f7:f1:67:f1:87:a5:59:a0:57:ab:56:
8b:26:71:33:ef:17:3b:f4:9b:5b:20:7e:d3:46:84:
34:b3:d0:10:5b:76:12:45:35:58:85:d4:74:15:6b:
1f:7e:75:af:0e:f3:b6:a6:8d:08:11:af:3a:33:2e:
93:f2:9c:58:e8:40:b6:e8:db:2a:c2:a2:35:26:ae:
e5:07:5d:4e:f5:18:39:d0:4e:e9:3d:b6:61:4d:ef:
de:66:06:4e:04:df:e0:9c:88:79:d3:5f:f6:9f:f6:
e6:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:92:07:5D:F6:D9:5A:BD:11:EB:5F:86:0A:A6:2A:82:09:D6:4D:4D
X509v3 Authority Key Identifier:
keyid:20:EE:E0:5D:A1:83:DE:E2:B8:11:81:41:95:64:62:C9:24:0D:78:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IO7gXaGD3uK4EYFBlWRiySQNeHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/cfc0d1-d095-4b1b-9b5d-3985299fad6d/1/IO7gXaGD3uK4EYFBlWRiySQNeHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/cfc0d1-d095-4b1b-9b5d-3985299fad6d/1/IO7gXaGD3uK4EYFBlWRiySQNeHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:ba:19:0b:51:eb:77:09:27:0a:17:e8:9f:e4:d2:f3:89:63:
18:9e:0a:c3:34:0c:90:b1:37:16:c1:bd:42:30:b1:a2:a4:4c:
ed:9c:0c:f6:92:8b:90:2a:3a:76:e7:49:c8:d6:60:f3:e6:1b:
34:1a:34:61:44:58:8a:34:89:99:c2:67:7d:94:43:70:41:fe:
75:d6:1e:9b:a5:80:d7:08:c8:1b:18:fa:d7:5e:a0:4d:46:c5:
93:d0:17:2f:64:5a:06:1d:c8:d0:ef:c8:1b:f3:e8:9a:08:a5:
9d:3d:82:90:02:e6:a5:db:f7:7b:e2:6e:14:24:b1:a9:9f:1d:
b5:d9:a6:29:9c:26:1a:c3:20:b9:a6:36:94:33:93:5a:ba:3f:
35:df:25:0e:e9:eb:40:c9:bd:6a:b8:91:f1:85:fe:47:0e:cf:
70:b6:ab:63:3c:3d:3d:3d:f1:42:7e:6e:87:05:a5:e3:65:74:
ab:00:f2:be:e5:35:0b:bb:3d:7e:e1:07:ae:a9:d4:16:d9:2b:
d3:fb:7d:04:ec:95:f2:a4:c6:16:1e:af:e3:3c:fa:00:58:ce:
c4:81:e7:24:78:e0:89:69:e8:e6:14:51:76:93:08:cc:c1:54:
0e:17:77:19:5f:29:1f:c5:d2:4e:c6:1b:b0:71:4b:c3:5d:9d:
fa:c3:c0:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:03:22 2026 by rpki-client