Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft
File: I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft (raw, json)
Hash identifier: /tp2ZAecLfnLPmKqmmVyy6xDhr0JNt4GGILRj2/jB+s=
Subject key identifier: 06:47:CE:55:D8:98:BE:80:B4:DD:D3:91:43:56:C2:38:2F:44:FF:11
Authority key identifier: 23:4C:D3:49:11:CF:CE:94:6A:22:EA:84:66:37:38:CD:CC:07:6D:45
Certificate issuer: /CN=234cd34911cfce946a22ea84663738cdcc076d45
Certificate serial: 019D9B19B6D93A28128D6B4D281BBEC78D6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0zTSRHPzpRqIuqEZjc4zcwHbUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft
Manifest number: 18C6
Signing time: Fri 17 Apr 2026 11:00:46 +0000
Manifest this update: Fri 17 Apr 2026 11:00:46 +0000
Manifest next update: Sat 18 Apr 2026 11:00:46 +0000
Files and hashes: 1: I0zTSRHPzpRqIuqEZjc4zcwHbUU.crl (hash: Fxv0OpymZTV+wKg33L/ufy04VkFG16pYK3+98EvXI8U=)
2: di7BBo89yLvPzYRgI1CnXRkGKek.roa (hash: J2fGlbJBwYkKOrpnLxq93QttJnUWfvQ1tz5acXy/Cg8=)
3: jkcDTDZLfkPzj9uIRYp8UTnhwQI.roa (hash: uJEOU0bJFwdOC2+0d4gL/okHKs1T55lvZjr01PdnJqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/I0zTSRHPzpRqIuqEZjc4zcwHbUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:b6:d9:3a:28:12:8d:6b:4d:28:1b:be:c7:8d:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234cd34911cfce946a22ea84663738cdcc076d45
Validity
Not Before: Apr 17 11:00:46 2026 GMT
Not After : Apr 18 11:00:46 2026 GMT
Subject: CN=0647ce55d898be80b4ddd3914356c2382f44ff11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b0:e3:8e:5e:71:9d:62:8a:af:a8:67:3d:4a:
2f:ce:19:2d:6d:7b:67:9a:52:8a:2c:f1:4b:73:cf:
13:e2:69:97:d1:37:7f:05:e4:2b:40:40:17:d1:7c:
b0:06:7b:6d:7a:af:2b:a7:e7:7c:eb:53:b0:1c:20:
4c:c2:a6:25:20:de:df:1c:1b:d8:46:82:4a:c3:ad:
ca:3e:d8:a5:6d:6f:13:0e:6e:f7:a5:b7:05:84:23:
f8:7c:1c:9a:a2:00:f4:f8:b6:36:25:65:a4:22:70:
98:9d:21:8c:02:78:24:6a:b2:86:2c:44:26:b9:14:
89:25:f4:58:51:d7:6e:29:4f:83:68:ab:6f:d1:41:
d3:4b:fd:a1:5c:d2:c4:76:db:29:5e:1b:a3:81:b2:
64:66:42:73:6f:2f:a5:3e:03:54:dc:bd:d1:b8:2d:
7f:60:7b:95:b7:a3:a1:e4:ec:17:f1:8a:78:e4:04:
66:ce:52:1f:6a:40:d0:75:02:42:2c:77:c5:c9:8a:
d4:72:cf:38:a8:03:a0:8a:41:66:0a:b2:78:02:02:
07:bd:39:cb:1e:de:ff:b0:26:5a:9c:9a:72:4c:d0:
75:b5:36:06:61:91:79:82:a1:fd:3a:bc:e0:36:a0:
45:7b:d8:45:d4:a1:a4:ea:f6:bd:fc:8f:fa:17:36:
9d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:47:CE:55:D8:98:BE:80:B4:DD:D3:91:43:56:C2:38:2F:44:FF:11
X509v3 Authority Key Identifier:
keyid:23:4C:D3:49:11:CF:CE:94:6A:22:EA:84:66:37:38:CD:CC:07:6D:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0zTSRHPzpRqIuqEZjc4zcwHbUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:4e:c7:66:1a:5d:ce:e5:1c:af:72:91:39:c2:a6:c8:74:c8:
93:d1:90:80:39:dc:2d:c2:cb:95:70:12:ef:32:57:fe:31:c5:
31:1c:7f:76:e9:38:cb:52:6e:a8:bb:6e:61:18:35:3b:1d:5e:
da:d6:94:66:c7:e6:2b:0e:d7:33:bd:91:b7:d2:91:ff:e4:a3:
8a:fa:1b:3f:80:09:a6:b6:96:4a:d6:a9:69:e4:b2:99:95:4b:
62:70:f3:5e:82:1b:6e:d2:09:92:99:db:b0:99:96:a8:a0:4e:
fe:2e:3f:3b:66:ed:5d:2d:bd:c5:f9:8a:ca:91:ec:62:ab:de:
8b:ef:37:c1:ca:b5:45:a1:87:e3:c5:2b:cf:85:ba:88:a8:c4:
c1:95:ad:5d:66:ee:c1:96:7d:6e:c6:88:4c:5e:25:f6:0b:ab:
c6:25:95:7f:db:77:2a:fa:10:e8:a9:2d:55:04:dd:c7:47:37:
44:82:23:23:4e:fa:05:38:59:e5:dc:45:01:d3:f2:97:74:46:
b2:c2:5f:ab:3c:bd:12:30:a9:cd:ac:0f:ea:23:4b:2c:dd:0b:
61:e8:34:fb:f7:ef:ad:cf:9c:02:d3:94:46:5c:37:4c:e5:ae:
e0:37:66:cd:09:f9:27:4f:bb:53:6b:0c:9d:7c:e3:9b:3c:c5:
b2:98:ce:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:23:50 2026 by rpki-client