Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/5305c8-c6a8-40e3-b43e-2d6eef905607/1/_1ipjbd3y5FspWOX7D2HyYY2cxA.mft
File: _1ipjbd3y5FspWOX7D2HyYY2cxA.mft (raw, json)
Hash identifier: BnsuWfiep1WJ28mROcTCzsSmh9Pd4BzRzapZCsSfhtA=
Subject key identifier: D4:8E:85:75:A6:D7:D4:B9:F2:AC:D1:66:B4:D7:BC:2E:02:D8:55:9F
Authority key identifier: FF:58:A9:8D:B7:77:CB:91:6C:A5:63:97:EC:3D:87:C9:86:36:73:10
Certificate issuer: /CN=ff58a98db777cb916ca56397ec3d87c986367310
Certificate serial: 019D9818CF8EBBFE3106DEEE5C4359B2D5F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_1ipjbd3y5FspWOX7D2HyYY2cxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/5305c8-c6a8-40e3-b43e-2d6eef905607/1/_1ipjbd3y5FspWOX7D2HyYY2cxA.mft
Manifest number: 0647
Signing time: Thu 16 Apr 2026 21:00:55 +0000
Manifest this update: Thu 16 Apr 2026 21:00:55 +0000
Manifest next update: Fri 17 Apr 2026 21:00:55 +0000
Files and hashes: 1: _1ipjbd3y5FspWOX7D2HyYY2cxA.crl (hash: d8Cq7BEIMSP2HlKmd3OltQCOx1kEaRBUjN9b0uYad5I=)
2: fz-rvWQsVYjo3OqyUy9lM_fX5Ww.roa (hash: m87pe4kWn6CXoDHZ+RYNhWqFQvvF86Ib8ZOI9K0cWsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/5305c8-c6a8-40e3-b43e-2d6eef905607/1/_1ipjbd3y5FspWOX7D2HyYY2cxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/5305c8-c6a8-40e3-b43e-2d6eef905607/1/_1ipjbd3y5FspWOX7D2HyYY2cxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_1ipjbd3y5FspWOX7D2HyYY2cxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:cf:8e:bb:fe:31:06:de:ee:5c:43:59:b2:d5:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff58a98db777cb916ca56397ec3d87c986367310
Validity
Not Before: Apr 16 21:00:55 2026 GMT
Not After : Apr 17 21:00:55 2026 GMT
Subject: CN=d48e8575a6d7d4b9f2acd166b4d7bc2e02d8559f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f1:f9:6f:5a:9c:5c:fa:d5:a9:76:78:f0:15:
58:eb:0b:fb:ab:f8:20:d2:9c:46:57:e9:4c:a5:55:
2a:df:50:e2:26:58:6a:c9:64:03:1c:76:a8:0a:bd:
3f:78:03:58:af:c6:92:21:66:18:63:c2:10:7c:73:
fe:de:cf:a3:83:03:e7:5d:7b:15:45:a4:2c:a0:76:
64:26:47:f9:bc:95:11:6b:05:96:de:97:9a:5a:ef:
2f:19:f0:59:13:8f:a0:28:0a:75:3f:bc:5d:e9:2e:
73:f4:ce:99:ec:86:fe:03:37:e3:51:b6:23:6d:bb:
b5:35:19:77:04:55:86:2d:1a:e9:55:0c:2a:37:8c:
60:9a:6f:24:f7:ae:cd:48:00:38:31:26:52:d5:82:
a0:9d:85:4c:d6:7a:2f:03:00:1f:e4:7b:c6:9f:77:
91:46:7b:31:3c:4f:36:19:bb:21:9b:cf:46:a1:9f:
3b:da:68:d8:1c:0d:32:3d:ce:40:54:ec:b6:21:7e:
4d:cc:94:a9:d6:8b:76:46:55:dd:8d:ec:c4:fb:19:
3e:00:98:4a:4a:51:f6:92:a7:45:d4:3e:b5:8a:95:
02:25:5f:47:43:8e:aa:7d:ec:a0:b5:47:19:aa:06:
74:bf:d4:83:ad:64:22:b3:0f:9f:e3:30:43:ab:ca:
f3:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:8E:85:75:A6:D7:D4:B9:F2:AC:D1:66:B4:D7:BC:2E:02:D8:55:9F
X509v3 Authority Key Identifier:
keyid:FF:58:A9:8D:B7:77:CB:91:6C:A5:63:97:EC:3D:87:C9:86:36:73:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_1ipjbd3y5FspWOX7D2HyYY2cxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/5305c8-c6a8-40e3-b43e-2d6eef905607/1/_1ipjbd3y5FspWOX7D2HyYY2cxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/5305c8-c6a8-40e3-b43e-2d6eef905607/1/_1ipjbd3y5FspWOX7D2HyYY2cxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:74:4d:cc:f9:f6:82:be:cb:c8:b6:b4:da:92:97:9c:70:0c:
93:35:59:de:88:13:a0:bd:38:ad:57:07:49:c4:34:4f:6f:c7:
bd:70:88:dd:c8:8a:8c:0b:c6:f6:70:d1:c9:b4:62:e9:00:0c:
c2:e6:35:d4:10:9e:9d:2e:b4:6f:a0:e3:68:8c:4d:8e:70:2c:
f7:75:0a:fc:f4:a7:29:cc:cd:ba:32:b3:eb:cc:65:12:f9:ea:
43:4b:af:0a:d5:00:04:4a:3e:0c:ed:54:84:4a:4d:d9:7e:e9:
fc:69:89:a0:95:49:51:b7:a1:bc:5b:9e:f1:a6:27:34:a3:20:
4b:15:9a:ea:6b:50:86:59:e0:f3:41:8e:84:f0:9b:7f:57:eb:
35:cd:b9:e1:14:2f:bc:19:a2:5f:d2:3c:5f:ee:8f:cb:6d:f9:
45:fd:26:98:8d:2f:65:65:f9:66:89:5b:04:19:70:9f:e3:43:
34:71:df:e2:b7:b1:cb:c3:54:96:c2:c5:91:47:ee:8b:9c:75:
7d:db:a9:7f:22:4c:d1:d8:33:ef:b9:4c:47:76:43:2c:90:63:
29:60:98:a2:e6:bb:02:27:61:8d:d5:0b:8b:11:22:93:34:74:
bb:b8:3b:1c:84:2d:bf:bb:a6:fe:54:19:04:bf:c5:0e:60:21:
89:c6:28:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 02:31:06 2026 by rpki-client