Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.mft
File: I7GUMIfOaWI-drIUWzR5rCBLock.mft (raw, json)
Hash identifier: LNfiNSN58SyRsOKTnzbbGTpm0IIW0pXApn+RFS8B20Y=
Subject key identifier: 45:1D:7B:D7:2C:96:92:DD:FA:DE:D7:81:84:72:CA:C8:F8:1C:5D:84
Authority key identifier: 23:B1:94:30:87:CE:69:62:3E:76:B2:14:5B:34:79:AC:20:4B:A1:C9
Certificate issuer: /CN=23b1943087ce69623e76b2145b3479ac204ba1c9
Certificate serial: 019D9BBEA4F77DE54850B70EF9BD2A176A74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I7GUMIfOaWI-drIUWzR5rCBLock.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.mft
Manifest number: 1801
Signing time: Fri 17 Apr 2026 14:00:55 +0000
Manifest this update: Fri 17 Apr 2026 14:00:55 +0000
Manifest next update: Sat 18 Apr 2026 14:00:55 +0000
Files and hashes: 1: 78v4VJEfw5PVOd7xHPXoIyfNp48.roa (hash: 6qQ8BW5L0oi0uF4TdnOMiqJXcCMSoxgt26+h+J3CUsI=)
2: Di79UbTmbpFxSYwbXsMn-pZLrV8.roa (hash: tV65sDjzx9UVZdR97H6FDEjyFBVEvZi4/CVnig4SJ08=)
3: I7GUMIfOaWI-drIUWzR5rCBLock.crl (hash: CjXM9wxD/45p+9DCh1SKZYnZrlZAOeBUSdyTSB1TtLA=)
4: Xy9KAo8RgHqzd9LCgtHpYYSq1Ws.roa (hash: pkyeg5y/UqA2MwW/DbnlFyqNjdMeUTSbZh1g/kjVAXE=)
5: fMLivNYCuxdhHtX3Ga7hVSkjoJM.roa (hash: 9AwEnRwEhqte/EFdOWwlxFhd4JAdP6+asha44+p++gg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.mft
rsync://rpki.ripe.net/repository/DEFAULT/I7GUMIfOaWI-drIUWzR5rCBLock.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:a4:f7:7d:e5:48:50:b7:0e:f9:bd:2a:17:6a:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23b1943087ce69623e76b2145b3479ac204ba1c9
Validity
Not Before: Apr 17 14:00:55 2026 GMT
Not After : Apr 18 14:00:55 2026 GMT
Subject: CN=451d7bd72c9692ddfaded7818472cac8f81c5d84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a6:d3:6b:0d:26:58:b8:b9:00:ec:ba:73:04:
1f:85:73:0e:49:5a:ec:01:2d:2e:f2:9c:20:50:62:
18:94:25:56:49:1c:c7:ed:45:00:b8:96:36:86:7c:
ce:5f:c4:6a:60:8d:2e:13:f4:c7:74:d2:49:8c:3c:
64:28:12:e6:df:ff:d7:21:14:d4:9e:8a:b2:82:59:
7f:6d:3a:86:a2:11:04:3c:0f:1d:c8:b5:a1:2e:60:
a3:11:26:2b:f2:9f:86:2b:b5:1d:04:5e:e2:5e:98:
7f:45:60:99:aa:e4:4b:db:31:3d:11:45:d8:da:c6:
0d:4e:98:85:3f:1f:35:bf:74:e7:8e:d4:61:c2:f0:
40:3b:fb:35:70:0d:8c:e0:2d:df:2e:3a:fe:2f:aa:
29:f0:c9:94:5d:21:4c:c1:98:37:94:ed:7f:13:bf:
57:00:89:47:f6:7a:75:09:8e:d6:16:ae:b0:2f:83:
63:28:d1:0c:a3:ed:ff:12:bd:86:8c:dd:45:19:9f:
17:53:fe:96:ae:9f:81:2d:23:be:3f:01:59:7c:b5:
3b:5f:f2:53:3a:59:84:9d:44:65:22:47:4a:88:86:
26:88:3e:71:4e:f3:f4:aa:eb:2b:32:cc:d4:13:f6:
34:b9:1a:63:cd:08:e6:6f:80:37:43:78:78:8e:42:
00:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:1D:7B:D7:2C:96:92:DD:FA:DE:D7:81:84:72:CA:C8:F8:1C:5D:84
X509v3 Authority Key Identifier:
keyid:23:B1:94:30:87:CE:69:62:3E:76:B2:14:5B:34:79:AC:20:4B:A1:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I7GUMIfOaWI-drIUWzR5rCBLock.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:51:82:a3:64:bc:ec:44:10:9e:52:dd:1f:bf:00:36:02:e7:
c8:10:05:1b:1a:78:4a:fd:3a:d2:e7:6b:b6:ae:42:73:c3:c1:
08:ed:6b:14:22:03:7a:bf:43:45:d2:76:70:c6:de:8f:2c:8f:
6e:05:49:3d:b0:70:c8:c6:07:ae:31:17:26:b1:c8:27:5f:f7:
51:e2:c5:76:b8:6b:74:c0:bf:b5:24:ac:25:54:10:a0:08:14:
a8:4d:9c:92:c1:97:32:4c:5f:52:03:88:4c:52:ac:b8:36:da:
e2:8e:ef:29:f7:fe:34:6b:a7:f2:14:2f:1a:1b:81:14:1e:3c:
e8:26:f6:b4:2f:55:d0:c2:9c:40:cf:08:4a:e7:de:6c:cc:1d:
4d:85:7b:7e:99:10:65:13:2f:a1:f8:d9:31:bf:98:c7:3f:5b:
49:a5:5f:ed:6d:64:44:98:cf:37:58:d3:a6:f2:a4:89:bc:79:
3d:49:b9:07:25:78:42:f0:48:c2:db:8f:21:d6:03:d0:a2:bf:
23:e6:c0:61:bc:ca:aa:97:eb:f5:e6:c9:81:1e:d1:6e:e6:db:
4d:d7:24:6b:49:cb:26:da:2f:b4:f6:5a:6c:6e:ce:95:bf:ea:
5b:38:cb:17:66:bd:2c:12:96:73:58:4c:fb:db:7a:ac:fd:54:
13:b4:46:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:38:03 2026 by rpki-client