Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.mft
File: RIFOp-g7QBm_1Xl-upidoG3ZDjM.mft (raw, json)
Hash identifier: cF0law5WcKTsP4XUm5rdC8KvPDCwAZlavpgW/DJ0bng=
Subject key identifier: 5A:7C:83:19:1C:6D:8C:35:93:59:E7:8E:FC:1D:6A:EF:C4:02:FB:3D
Authority key identifier: 44:81:4E:A7:E8:3B:40:19:BF:D5:79:7E:BA:98:9D:A0:6D:D9:0E:33
Certificate issuer: /CN=44814ea7e83b4019bfd5797eba989da06dd90e33
Certificate serial: 019D99D0A17D3499095416A5429F95A0548B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RIFOp-g7QBm_1Xl-upidoG3ZDjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.mft
Manifest number: 1089
Signing time: Fri 17 Apr 2026 05:01:19 +0000
Manifest this update: Fri 17 Apr 2026 05:01:19 +0000
Manifest next update: Sat 18 Apr 2026 05:01:19 +0000
Files and hashes: 1: RIFOp-g7QBm_1Xl-upidoG3ZDjM.crl (hash: tefYYOVa6UJTIAq3lXp8fRjWSjfBvkeyD4dQEk6Hvj4=)
2: c4pt8vUVaeXjMXnofvH8CstQg9I.roa (hash: JquKoOYBsn6huX/IMn7g4cc/ok8BfYvy/bpSr/C0iVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RIFOp-g7QBm_1Xl-upidoG3ZDjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:a1:7d:34:99:09:54:16:a5:42:9f:95:a0:54:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44814ea7e83b4019bfd5797eba989da06dd90e33
Validity
Not Before: Apr 17 05:01:19 2026 GMT
Not After : Apr 18 05:01:19 2026 GMT
Subject: CN=5a7c83191c6d8c359359e78efc1d6aefc402fb3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:46:ea:dc:3c:64:61:0f:6e:b0:de:cb:9f:45:
ab:70:15:73:d0:bd:8f:10:cf:48:1d:b9:be:09:17:
8e:ca:b6:9c:a3:41:41:80:e9:c6:2d:9b:0c:04:f2:
92:3a:71:90:07:57:0f:3e:82:6c:74:e2:4a:9e:96:
01:d4:67:f0:0f:cc:0a:b0:06:17:9b:85:c2:4b:6f:
4a:bc:ca:d3:71:7c:0c:e1:46:be:a9:04:d0:46:ab:
15:91:c5:9d:c5:ff:07:96:d4:5c:89:63:f6:a1:34:
6a:0b:e2:b0:5a:18:15:4b:8d:ef:98:a0:ce:bb:6a:
90:30:7d:6f:3d:bf:d5:fb:45:34:ac:1a:70:4b:74:
7b:c1:c3:ed:df:80:7c:38:3e:e5:4b:53:a1:62:dc:
de:1d:52:1f:51:80:11:eb:cf:17:5d:7d:d6:dd:0a:
3f:91:2e:6d:3f:40:96:c2:61:72:67:c7:4a:7a:65:
8d:33:bb:70:94:4c:18:d1:7f:5e:94:6c:92:3a:89:
02:87:a4:54:1a:1e:3b:25:87:d6:02:dd:77:5c:18:
f4:ee:d2:ad:8c:5c:b3:0a:37:91:59:9c:28:4c:eb:
fc:19:86:14:2d:0a:fd:5c:e4:1e:2e:da:75:34:f6:
0a:86:e5:cf:81:67:1e:2c:74:8f:30:8e:cc:4c:37:
a1:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:7C:83:19:1C:6D:8C:35:93:59:E7:8E:FC:1D:6A:EF:C4:02:FB:3D
X509v3 Authority Key Identifier:
keyid:44:81:4E:A7:E8:3B:40:19:BF:D5:79:7E:BA:98:9D:A0:6D:D9:0E:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RIFOp-g7QBm_1Xl-upidoG3ZDjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:da:67:04:3c:24:ed:d6:ad:27:90:25:8b:fd:40:0c:1d:0a:
33:de:db:c9:98:09:49:e4:03:d2:7e:43:24:63:d8:e6:4e:fc:
66:e6:78:d1:6b:cc:06:94:17:00:9b:47:e6:fd:09:9a:a5:ca:
bb:dc:78:78:bf:65:c5:43:bf:ad:93:a4:a3:a8:f1:a6:68:f2:
0a:80:fd:1f:de:15:1b:8f:4a:9c:28:94:73:29:9a:64:32:ee:
d8:da:f7:14:6a:6f:76:87:81:97:55:23:ce:7d:c8:bb:f0:ee:
06:25:53:d7:9c:c5:45:49:5a:19:c2:7d:7b:17:ca:cc:0b:aa:
a9:75:11:88:7a:d3:86:19:39:d8:8e:10:1c:08:58:b7:5e:e0:
e2:eb:0c:62:a4:c1:e6:a4:0e:6a:75:05:06:b5:29:7b:63:53:
7a:93:b3:44:26:a5:fb:10:f5:2e:1a:5d:29:09:5a:aa:05:48:
e7:6c:a3:67:92:95:e2:9e:0f:ec:a5:bd:66:af:40:25:b8:03:
3f:b7:65:80:87:50:24:50:62:d6:7b:4e:77:03:e5:d7:4f:79:
fe:b1:0a:ba:a3:06:7e:b0:22:de:b0:69:b4:07:f7:9c:e7:9a:
d3:53:2f:16:57:5f:d2:0a:22:33:5b:e1:7e:97:e1:3e:a5:96:
43:1c:03:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:52:30 2026 by rpki-client