Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.mft
File: 240I7cQ5OoZxKW-OrLvs-U12Vio.mft (raw, json)
Hash identifier: chGzsWsM8qB+sM7pk3cLZ+0q/kZGtmpSc8cYT75+5Po=
Subject key identifier: 74:99:67:AD:CF:1A:C3:E9:D1:60:C6:2D:E4:36:C4:F9:5E:0E:6F:3F
Authority key identifier: DB:8D:08:ED:C4:39:3A:86:71:29:6F:8E:AC:BB:EC:F9:4D:76:56:2A
Certificate issuer: /CN=db8d08edc4393a8671296f8eacbbecf94d76562a
Certificate serial: 019D9B19EF6D2D95B4B375F2D89016F13CE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/240I7cQ5OoZxKW-OrLvs-U12Vio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.mft
Manifest number: 159B
Signing time: Fri 17 Apr 2026 11:01:01 +0000
Manifest this update: Fri 17 Apr 2026 11:01:01 +0000
Manifest next update: Sat 18 Apr 2026 11:01:01 +0000
Files and hashes: 1: 1-r4Lv2Rmvz8PS3uEyqLHDg79e6o.roa (hash: Ynnh/ie5fd1c8AWIp3/nOFWKmHgGwnafc2HeQlk9EJ8=)
2: 240I7cQ5OoZxKW-OrLvs-U12Vio.crl (hash: I3aK0shbePrNSFGeXY72HR89SHWBwSEvXCqu9itN7Zs=)
3: w3Lux0gfeLL5j0FE93SK7EkO-xA.roa (hash: /yS1rew79qv077Dug+2vMb4pmqIyVizWzCEA9rbz10o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.mft
rsync://rpki.ripe.net/repository/DEFAULT/240I7cQ5OoZxKW-OrLvs-U12Vio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:ef:6d:2d:95:b4:b3:75:f2:d8:90:16:f1:3c:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db8d08edc4393a8671296f8eacbbecf94d76562a
Validity
Not Before: Apr 17 11:01:01 2026 GMT
Not After : Apr 18 11:01:01 2026 GMT
Subject: CN=749967adcf1ac3e9d160c62de436c4f95e0e6f3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a0:7b:0d:ac:e0:e2:d7:91:62:ec:74:37:98:
06:00:20:67:74:10:dd:8e:b7:d4:11:fd:41:03:cf:
9a:da:5a:81:38:ec:ac:1a:e8:63:3b:60:20:0e:a8:
8d:e7:9b:4f:f1:b8:fd:81:3f:af:c9:00:2f:74:26:
ac:8d:2c:9e:b3:b1:ba:f5:9a:a2:e6:8b:77:3a:55:
e7:13:1a:3d:81:14:33:93:2e:79:b6:4d:d6:7f:aa:
0e:21:5b:d6:cd:72:ea:9d:cf:5e:1c:f9:62:cc:f4:
00:50:05:b1:30:90:1f:ba:1c:b4:6c:90:3b:8a:db:
54:e6:a4:97:48:e0:99:2c:68:de:4a:6a:92:9d:1e:
1f:4d:d2:79:eb:31:8a:de:74:3b:f7:d3:1f:d4:a3:
82:27:e6:87:49:2d:7e:73:6f:bb:36:a6:9d:4c:32:
75:bb:80:ed:ba:ef:42:48:4e:c2:9f:33:2a:1e:01:
4f:74:1a:ad:ac:44:9e:95:0f:0b:20:f9:65:9f:19:
e2:0c:39:93:ef:df:03:74:72:23:b8:d6:2e:a0:bf:
08:e3:17:ec:39:e0:7b:b6:32:82:04:6c:1a:02:f5:
61:46:72:9f:de:fa:f7:fb:f6:4b:a2:9d:c7:da:8a:
9e:17:17:68:a5:96:8a:3b:bb:d4:7e:cf:95:4e:37:
ad:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:99:67:AD:CF:1A:C3:E9:D1:60:C6:2D:E4:36:C4:F9:5E:0E:6F:3F
X509v3 Authority Key Identifier:
keyid:DB:8D:08:ED:C4:39:3A:86:71:29:6F:8E:AC:BB:EC:F9:4D:76:56:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/240I7cQ5OoZxKW-OrLvs-U12Vio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:9c:29:a8:70:1a:6a:7e:56:1b:6d:63:60:26:d3:ae:dc:02:
9f:ea:a1:d6:10:cf:a7:57:f4:99:b4:4f:8d:b6:66:d9:0a:07:
23:91:3d:1b:d5:9d:d7:a4:db:53:a0:53:ee:3e:0b:05:f9:7f:
5d:93:7f:db:54:8b:6c:8d:ef:be:64:65:94:6f:a4:68:51:5d:
0f:02:a5:89:1c:e9:d9:86:0b:1e:6e:1b:62:a1:fb:d8:f8:cd:
d9:8f:cb:ae:98:b8:7f:0a:e7:55:04:f9:77:4f:21:1b:98:6f:
06:1c:36:b0:97:fe:9a:79:d4:63:e2:95:4a:68:09:5c:98:a4:
a1:cd:ec:c6:b7:59:70:41:9e:fd:72:5d:11:0a:1e:28:4b:a0:
69:25:77:d5:21:f0:c6:bc:d5:99:b6:26:04:c8:80:ea:c1:37:
76:2b:a4:ea:c8:30:59:1f:4c:96:af:4c:29:40:69:54:7a:a6:
41:7c:b9:8c:7d:15:57:dc:e5:4f:5e:b3:17:7d:c6:8d:59:3a:
f6:3e:73:3d:df:bf:3f:ad:cb:1e:03:56:a7:03:96:85:a8:bb:
fb:b0:e5:7c:29:c3:99:40:05:ba:d0:d0:c5:95:f2:7a:21:da:
67:c3:d6:ec:36:8d:7b:10:3c:9e:44:1c:85:7a:30:2b:d3:5d:
88:f1:43:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:03:20 2026 by rpki-client