Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/c025e5-399a-4ce8-b5f0-acbef018d03a/1/IIP4tbYgnefJQAjzM3vjQ2866-Y.mft
File: IIP4tbYgnefJQAjzM3vjQ2866-Y.mft (raw, json)
Hash identifier: F9T8lta3XQAXiSanJCXJ18TXwr/MCx+kG0aNctKcncc=
Subject key identifier: 04:63:CE:0D:8F:72:A3:06:A6:B4:A1:5A:51:3F:FF:8E:2F:CE:7A:A5
Authority key identifier: 20:83:F8:B5:B6:20:9D:E7:C9:40:08:F3:33:7B:E3:43:6F:3A:EB:E6
Certificate issuer: /CN=2083f8b5b6209de7c94008f3337be3436f3aebe6
Certificate serial: 019D9A07123D457EAF79C420116B771E67F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IIP4tbYgnefJQAjzM3vjQ2866-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/c025e5-399a-4ce8-b5f0-acbef018d03a/1/IIP4tbYgnefJQAjzM3vjQ2866-Y.mft
Manifest number: 0916
Signing time: Fri 17 Apr 2026 06:00:47 +0000
Manifest this update: Fri 17 Apr 2026 06:00:47 +0000
Manifest next update: Sat 18 Apr 2026 06:00:47 +0000
Files and hashes: 1: IIP4tbYgnefJQAjzM3vjQ2866-Y.crl (hash: dXqYG5cHffvJ3xK8kNhy9gxUMBwyCafbt8/rW5gvS4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/c025e5-399a-4ce8-b5f0-acbef018d03a/1/IIP4tbYgnefJQAjzM3vjQ2866-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/c025e5-399a-4ce8-b5f0-acbef018d03a/1/IIP4tbYgnefJQAjzM3vjQ2866-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/IIP4tbYgnefJQAjzM3vjQ2866-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:12:3d:45:7e:af:79:c4:20:11:6b:77:1e:67:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2083f8b5b6209de7c94008f3337be3436f3aebe6
Validity
Not Before: Apr 17 06:00:47 2026 GMT
Not After : Apr 18 06:00:47 2026 GMT
Subject: CN=0463ce0d8f72a306a6b4a15a513fff8e2fce7aa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:78:83:31:2d:26:ee:00:e8:8c:1d:94:fa:24:
02:25:8c:54:db:03:66:92:b4:09:bc:99:7d:41:2d:
57:6b:5f:12:85:cc:a9:05:ad:12:eb:79:cf:7a:a2:
8d:c8:7a:50:9f:dd:e0:c2:4a:24:e4:7e:03:e7:7c:
ff:f3:a1:8b:11:1d:90:aa:af:d2:a7:b6:a3:4a:14:
e1:71:f9:55:c0:61:2f:d3:cc:42:fd:05:1d:8f:ec:
ea:7d:25:aa:df:5d:cc:3a:f4:f1:7e:6a:dd:ce:d4:
0a:33:b9:eb:50:0b:87:6c:38:a6:a2:6b:f4:d9:29:
55:b4:3b:de:a8:63:55:08:19:47:89:e8:12:e3:1b:
02:20:49:8b:7b:72:af:d3:ea:df:c1:08:75:e8:8b:
1f:f1:54:fd:da:d0:a1:e6:e4:0b:c6:32:04:b4:96:
b5:68:b2:cf:97:b2:dc:a1:5f:23:a8:44:fd:ce:4b:
00:76:b2:2c:97:db:7c:cf:45:32:3c:fb:69:1a:a9:
21:a9:ae:63:77:6d:11:56:b6:67:e9:01:7e:1b:28:
1d:27:25:bd:5e:77:d6:33:70:14:fc:8c:aa:f5:c7:
0b:c7:a9:74:52:38:53:d4:00:28:74:7c:c5:7f:69:
b5:f0:c3:2d:73:2b:71:27:51:02:eb:55:f7:3a:18:
4e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:63:CE:0D:8F:72:A3:06:A6:B4:A1:5A:51:3F:FF:8E:2F:CE:7A:A5
X509v3 Authority Key Identifier:
keyid:20:83:F8:B5:B6:20:9D:E7:C9:40:08:F3:33:7B:E3:43:6F:3A:EB:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IIP4tbYgnefJQAjzM3vjQ2866-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c025e5-399a-4ce8-b5f0-acbef018d03a/1/IIP4tbYgnefJQAjzM3vjQ2866-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c025e5-399a-4ce8-b5f0-acbef018d03a/1/IIP4tbYgnefJQAjzM3vjQ2866-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:23:97:39:84:5d:3e:49:10:4d:32:f8:a8:ea:50:95:c8:01:
46:21:24:05:e8:70:f1:2f:2f:28:a3:50:7f:8a:a5:ae:e8:9a:
7b:8b:a7:2f:d4:50:15:20:cd:38:1e:81:2a:4e:01:11:9d:28:
99:f9:be:f1:86:e8:33:a2:0b:f6:b7:48:67:4a:4f:19:06:e7:
11:f1:8e:86:a2:a7:a5:86:f2:9c:8b:bc:c6:48:06:0a:45:07:
6d:b8:b8:fc:20:40:da:60:98:22:9a:e2:ec:24:e8:ee:d1:89:
45:91:95:15:42:92:98:b8:8a:ab:a6:0e:b1:37:a9:d4:69:10:
b6:7f:4c:48:f1:50:db:90:fc:b9:2e:4c:6a:65:e8:7a:37:6f:
6e:7b:2b:54:bc:6e:b8:ce:4f:3b:fb:e3:69:e8:87:db:20:71:
4f:6b:e0:78:ea:bb:de:00:ac:b9:ea:f0:2f:aa:8f:a2:e9:7b:
e0:a9:fb:43:6b:93:3f:05:a6:90:91:73:46:35:bd:49:06:fe:
e3:97:df:f5:2f:74:c4:70:eb:8c:3a:3c:c6:28:80:5e:45:fd:
be:c3:d9:47:da:a4:94:2a:b9:f4:68:8a:46:8c:4d:0e:94:56:
6f:03:33:26:5d:0d:7d:a3:1b:e8:15:3a:3e:26:95:57:dd:b2:
83:81:5e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:17:28 2026 by rpki-client