Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft
File: IacXNhMJ0pOTUcnYuiFz24MZqI8.mft (raw, json)
Hash identifier: yZrP3obssYJbfd6oS0+YcAOvhsxp02a4nQW/RbNMrsk=
Subject key identifier: 80:C6:EC:9F:C3:6E:FF:11:85:15:2F:5B:B3:FC:53:E0:DD:F0:4A:7D
Authority key identifier: 21:A7:17:36:13:09:D2:93:93:51:C9:D8:BA:21:73:DB:83:19:A8:8F
Certificate issuer: /CN=21a717361309d2939351c9d8ba2173db8319a88f
Certificate serial: 019D9B1A19707D7257E16D8AF30B7F2860F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IacXNhMJ0pOTUcnYuiFz24MZqI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft
Manifest number: 10DF
Signing time: Fri 17 Apr 2026 11:01:12 +0000
Manifest this update: Fri 17 Apr 2026 11:01:12 +0000
Manifest next update: Sat 18 Apr 2026 11:01:12 +0000
Files and hashes: 1: 1-lmEP6bvSg72yf_GUeD4MSKNWhk.roa (hash: UZw/L6lxwycncfuJtQDWqM2GbKpxVlPtsRDnOtxZfq4=)
2: IacXNhMJ0pOTUcnYuiFz24MZqI8.crl (hash: wA3Q3foFsyr1HsvgyK+dHjK1gslINuZdWumApYCeAd0=)
3: uy5YZrZ342ZeZ2NGVVpULZDoPcE.roa (hash: ePYFBpMymgZ8ANPnNiychRqaQ6Srx/8bC1+U5miv+Ng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft
rsync://rpki.ripe.net/repository/DEFAULT/IacXNhMJ0pOTUcnYuiFz24MZqI8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 11:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:1a:19:70:7d:72:57:e1:6d:8a:f3:0b:7f:28:60:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21a717361309d2939351c9d8ba2173db8319a88f
Validity
Not Before: Apr 17 11:01:12 2026 GMT
Not After : Apr 18 11:01:12 2026 GMT
Subject: CN=80c6ec9fc36eff1185152f5bb3fc53e0ddf04a7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:07:cf:d2:2c:12:d4:33:8f:7b:09:6c:53:75:
68:da:90:d0:3d:2e:e3:94:c9:8c:38:4a:9a:42:e6:
f4:23:f0:f4:a0:9a:39:f7:09:d9:bb:b9:6c:80:a1:
65:5e:94:44:4a:25:8b:d3:58:88:05:64:f5:05:33:
a0:66:bd:ab:41:60:4c:6d:9e:13:48:f3:42:1f:ae:
5a:11:16:85:33:da:76:f3:6b:ea:6e:c8:fd:1e:91:
b0:1a:12:ab:37:78:e8:e2:6f:bc:5c:58:83:6c:d2:
74:fd:2a:5c:92:6e:58:66:e1:fe:01:af:b1:f8:a6:
5d:63:55:15:56:f2:6c:4a:a0:4d:cb:2b:1a:99:f0:
8e:42:8c:e4:20:af:f0:42:bf:5e:91:79:a1:5e:94:
c4:3b:a3:34:36:41:49:f6:ad:a0:60:41:6a:35:a2:
d9:2a:9c:38:bf:cb:56:df:e5:7a:ac:0a:2a:69:1e:
98:17:9a:8b:22:4e:01:f9:6c:11:65:43:ce:5f:91:
a8:61:b7:2c:72:c9:0a:ba:e9:ea:2a:7f:53:92:ab:
23:b8:03:a4:d8:fb:fc:4a:32:db:3c:26:bb:44:79:
e9:91:0a:83:c5:3c:fc:55:11:da:19:56:c1:cd:df:
a9:4d:25:cb:01:95:73:f9:b2:7d:2b:8d:bb:24:c7:
29:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:C6:EC:9F:C3:6E:FF:11:85:15:2F:5B:B3:FC:53:E0:DD:F0:4A:7D
X509v3 Authority Key Identifier:
keyid:21:A7:17:36:13:09:D2:93:93:51:C9:D8:BA:21:73:DB:83:19:A8:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IacXNhMJ0pOTUcnYuiFz24MZqI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:eb:11:7f:b1:02:b3:82:c5:5b:86:8a:6c:d3:32:d4:69:30:
6b:37:bb:38:3f:41:c5:3a:a4:b4:0e:bd:09:b7:ad:25:9f:e8:
85:f7:e0:ff:bd:d2:6f:61:6d:6a:09:64:0b:42:81:43:45:55:
1f:e8:85:26:96:38:d1:42:29:73:51:fe:d1:a8:99:f2:be:b2:
2c:04:2d:49:4d:a0:e9:d8:c0:3c:a6:f7:2f:cf:19:a5:9c:4a:
ff:ec:bf:64:33:c2:05:15:bc:a1:e0:4b:5d:44:bb:ac:3d:a1:
df:17:3f:58:8d:76:6b:0a:09:6c:5e:16:c6:de:60:83:5a:69:
db:f1:b9:72:1d:63:a2:f2:d1:69:66:63:b5:d8:39:76:78:e7:
06:e6:27:8f:b2:5f:db:df:5c:69:a3:6d:e5:26:21:d6:71:54:
2a:6b:f3:3b:38:4a:d3:2e:73:7a:b2:76:2f:37:02:ba:fa:ba:
16:a1:5d:a2:da:67:14:58:e1:0b:a6:b7:14:5a:65:4d:fe:af:
1e:53:e3:17:9d:54:f9:ab:49:af:29:52:d1:fd:31:26:37:67:
27:0d:6e:8b:72:90:45:4f:78:70:97:74:e5:65:9c:73:85:c5:
8e:4b:24:60:dd:39:1a:4e:de:7b:62:a3:cf:b4:67:2e:28:3c:
55:86:a8:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:47:24 2026 by rpki-client