
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.mft
File: I7GUMIfOaWI-drIUWzR5rCBLock.mft (raw, json)
Hash identifier: CIxEbo70W/WjYlbv6EROX4x2NqkqNIkZdIki6fo8yjQ=
Subject key identifier: BF:B9:55:B1:93:DE:F7:E2:CC:A0:50:81:11:4E:C3:6C:EB:08:9A:80
Authority key identifier: 23:B1:94:30:87:CE:69:62:3E:76:B2:14:5B:34:79:AC:20:4B:A1:C9
Certificate issuer: /CN=23b1943087ce69623e76b2145b3479ac204ba1c9
Certificate serial: 019D9DAD00731A5D271C84E2360BCCE94229
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I7GUMIfOaWI-drIUWzR5rCBLock.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.mft
Manifest number: 1802
Signing time: Fri 17 Apr 2026 23:00:53 +0000
Manifest this update: Fri 17 Apr 2026 23:00:53 +0000
Manifest next update: Sat 18 Apr 2026 23:00:53 +0000
Files and hashes: 1: 78v4VJEfw5PVOd7xHPXoIyfNp48.roa (hash: 6qQ8BW5L0oi0uF4TdnOMiqJXcCMSoxgt26+h+J3CUsI=)
2: Di79UbTmbpFxSYwbXsMn-pZLrV8.roa (hash: tV65sDjzx9UVZdR97H6FDEjyFBVEvZi4/CVnig4SJ08=)
3: I7GUMIfOaWI-drIUWzR5rCBLock.crl (hash: NjeFkuGMWvIIhb3Ghuys/YR3mFgXmtdPEEPSabDJOz0=)
4: Xy9KAo8RgHqzd9LCgtHpYYSq1Ws.roa (hash: pkyeg5y/UqA2MwW/DbnlFyqNjdMeUTSbZh1g/kjVAXE=)
5: fMLivNYCuxdhHtX3Ga7hVSkjoJM.roa (hash: 9AwEnRwEhqte/EFdOWwlxFhd4JAdP6+asha44+p++gg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.mft
rsync://rpki.ripe.net/repository/DEFAULT/I7GUMIfOaWI-drIUWzR5rCBLock.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:ad:00:73:1a:5d:27:1c:84:e2:36:0b:cc:e9:42:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23b1943087ce69623e76b2145b3479ac204ba1c9
Validity
Not Before: Apr 17 23:00:53 2026 GMT
Not After : Apr 18 23:00:53 2026 GMT
Subject: CN=bfb955b193def7e2cca05081114ec36ceb089a80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cb:82:62:66:45:0d:5d:7d:19:c3:e5:21:c1:
95:ac:11:c2:e7:f9:c0:e2:40:f4:e3:7d:5e:31:8f:
d4:aa:9f:c4:29:d5:b1:f1:77:3b:1b:33:36:39:eb:
25:d0:ab:52:6b:ab:4b:59:79:a5:f4:7e:c2:27:74:
84:1c:f5:7d:cd:8e:48:b2:d2:cc:68:5f:c2:b7:4d:
71:3b:4c:f6:35:88:06:20:3f:4a:e6:c8:e8:84:ae:
6b:51:bb:0e:92:bc:2e:af:1b:85:7e:55:86:f0:fd:
9c:0a:3e:1f:d5:69:5f:30:7a:80:9c:ae:14:dd:1e:
82:32:13:30:a9:fd:b8:ca:d6:06:85:43:f7:8b:8e:
d7:c3:bc:57:63:a6:94:46:c6:39:f3:ee:13:a9:96:
74:ae:9b:89:3f:1e:74:15:2c:5a:a3:07:8e:93:e1:
7b:5a:68:f1:46:29:af:ac:28:e9:24:73:83:e0:17:
c3:df:e1:44:d3:4a:b2:24:36:b2:07:7f:0b:e2:bb:
99:bc:0c:67:ce:90:49:25:f9:10:e8:2c:71:5d:53:
89:01:4b:0e:ba:e1:d2:7c:53:e3:a3:12:ba:d0:ab:
58:81:c3:83:90:78:e2:79:1f:c6:cb:e3:08:6f:fc:
ef:a6:28:71:f2:a3:8d:e0:d5:54:5b:0f:cb:6a:c4:
ad:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:B9:55:B1:93:DE:F7:E2:CC:A0:50:81:11:4E:C3:6C:EB:08:9A:80
X509v3 Authority Key Identifier:
keyid:23:B1:94:30:87:CE:69:62:3E:76:B2:14:5B:34:79:AC:20:4B:A1:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I7GUMIfOaWI-drIUWzR5rCBLock.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:bd:68:da:78:f0:0d:48:0a:7c:e3:97:c1:ee:52:47:ce:43:
ab:45:d7:85:1d:03:91:eb:48:7c:9a:4f:39:31:1c:d2:bd:91:
41:a2:33:42:cf:78:e6:3e:2b:fe:1a:8b:7c:53:96:6c:84:97:
fa:77:3e:53:93:70:92:a0:42:27:c8:da:ee:27:6c:84:53:07:
82:ae:c7:e8:9e:37:14:17:2d:e6:dc:af:7d:7b:26:c6:aa:5b:
23:72:e5:2b:5c:c9:31:87:7e:39:b7:40:03:d4:b5:95:77:de:
57:e5:95:1d:78:20:8d:2d:14:82:86:72:a0:12:db:f8:e0:5f:
24:49:c8:6d:17:f3:1b:7c:39:bf:1c:23:72:fe:e8:d1:3a:d2:
48:75:67:50:47:13:6b:4f:3b:9b:be:ee:96:4f:a7:60:54:41:
55:92:8a:44:2a:32:79:e4:a3:d0:1a:5c:94:61:98:6a:f1:27:
55:40:95:7d:39:85:48:6a:d0:f9:e5:5f:d2:34:44:5b:1c:dc:
47:4c:4e:d1:6c:09:4f:9a:9e:de:4c:f8:ce:f7:01:d6:fd:3d:
f9:fe:98:a5:88:64:2e:d5:1f:6b:33:2e:b4:95:2a:c7:6b:8c:
78:67:ec:94:4b:2a:39:3e:59:56:78:34:86:6f:68:ec:2c:ea:
e9:3d:4f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:05:56 2026 by rpki-client