Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft
File: IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft (raw, json)
Hash identifier: 7mPZjTavnSV7Hwpu+X5UNlcTU32+aZPM7HTy6wwvb38=
Subject key identifier: 02:F9:B9:71:C4:0C:A9:22:9F:12:4C:26:34:6C:69:FA:31:E2:24:C9
Authority key identifier: 20:05:85:36:1D:51:A7:2E:7B:A6:30:8C:0C:EB:16:02:44:83:11:78
Certificate issuer: /CN=200585361d51a72e7ba6308c0ceb160244831178
Certificate serial: 019D97739651B53049BA03D26460F4B72896
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IAWFNh1Rpy57pjCMDOsWAkSDEXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft
Manifest number: 09F4
Signing time: Thu 16 Apr 2026 18:00:27 +0000
Manifest this update: Thu 16 Apr 2026 18:00:27 +0000
Manifest next update: Fri 17 Apr 2026 18:00:27 +0000
Files and hashes: 1: 4kSC89D1AOgPjo_VC2p_1wAdyJ4.roa (hash: 49whWUdE9kNFPfnAL8tYbd6+c7MEWg0vvwt7AatABa0=)
2: IAWFNh1Rpy57pjCMDOsWAkSDEXg.crl (hash: BELKckbQtnO0aUB3EEGJzI05tCF/7tDn+yabayI65rk=)
3: d32KHDz4hQyuCuhNOb9K5kOq2qY.roa (hash: Sa1ntueDsGqjR2cwqIdDg9aoAqEdJGNyLoTHBEU6HPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IAWFNh1Rpy57pjCMDOsWAkSDEXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:73:96:51:b5:30:49:ba:03:d2:64:60:f4:b7:28:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=200585361d51a72e7ba6308c0ceb160244831178
Validity
Not Before: Apr 16 18:00:27 2026 GMT
Not After : Apr 17 18:00:27 2026 GMT
Subject: CN=02f9b971c40ca9229f124c26346c69fa31e224c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:f2:42:c3:bd:09:8c:06:ec:40:c6:3b:ea:b9:
a0:f8:7c:aa:20:3f:e3:07:fd:56:75:ac:44:50:5d:
8d:c4:d5:bd:01:76:cc:d7:db:56:92:d8:a1:04:19:
f9:59:db:cd:53:da:ef:d5:c7:29:e9:c7:59:d2:fe:
96:bb:dc:18:2f:71:53:31:33:e5:9f:62:0b:44:58:
bb:d0:4d:79:34:09:5a:96:00:c3:81:e9:17:5b:64:
9a:8d:1d:b0:c2:df:1c:17:16:d1:70:91:6f:3a:2f:
94:03:c0:8e:4b:79:24:61:af:8f:e2:75:c5:0c:3f:
d7:5b:29:58:7b:eb:fa:2b:dd:23:ab:56:e8:34:c4:
a6:49:c3:a9:60:7f:8f:86:b3:e5:ea:78:7c:83:36:
e9:39:f2:eb:29:c0:cf:77:6b:84:d5:42:f1:59:ec:
96:3e:ff:a7:2e:eb:a9:91:99:71:a3:79:6e:10:03:
3f:f9:7f:d0:88:79:78:e7:47:20:e5:21:d1:95:cb:
0c:8c:0c:e0:e8:46:6a:00:05:0b:8f:03:d7:f5:d1:
8f:95:85:de:3c:ab:81:d1:0c:2a:6e:6f:d8:ac:48:
39:dd:5a:84:b1:8f:16:09:7d:fe:97:8a:b8:16:0d:
69:55:f3:66:b2:a1:11:4b:68:78:8e:c1:c3:dc:85:
66:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:F9:B9:71:C4:0C:A9:22:9F:12:4C:26:34:6C:69:FA:31:E2:24:C9
X509v3 Authority Key Identifier:
keyid:20:05:85:36:1D:51:A7:2E:7B:A6:30:8C:0C:EB:16:02:44:83:11:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IAWFNh1Rpy57pjCMDOsWAkSDEXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:65:ef:de:d6:11:e1:83:14:18:29:76:9a:97:1f:23:07:60:
75:99:91:06:c7:5c:43:c0:1e:40:40:ac:49:22:ad:32:ff:28:
f9:b6:99:09:cc:33:ae:0f:ed:0f:e9:d4:6c:18:c1:a2:1d:fa:
8b:91:61:b1:bc:50:0a:9c:52:78:2f:32:ff:78:ff:19:1f:66:
ad:44:14:fb:88:86:38:af:3b:64:c2:e2:61:ec:75:e3:0e:d7:
65:9a:96:11:c2:16:59:87:69:1d:3f:cc:60:05:8b:3a:3e:81:
4e:5a:21:9d:98:53:44:2d:67:a8:86:af:8d:ff:d3:88:8a:eb:
aa:b0:9d:12:94:46:91:8e:36:1b:e7:c6:84:b5:41:c2:68:30:
04:65:8d:b5:89:e8:31:77:67:ac:b8:9c:94:53:04:5f:c0:18:
3f:fe:22:6a:2b:95:33:14:bf:f2:d0:83:03:01:2d:42:8a:a8:
4c:05:31:80:84:78:b5:11:c1:6a:06:43:58:34:3a:6b:c1:12:
8a:b7:e0:4b:06:f3:13:14:33:a0:8f:3e:fa:c7:ce:e8:6d:23:
1e:96:a4:fd:b6:b8:ab:16:39:e5:5c:e6:30:6a:ea:a9:7a:42:
16:db:94:1e:16:1c:2e:41:08:39:27:55:60:e8:65:fc:a3:c7:
35:72:b3:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:22:48 2026 by rpki-client