Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft
File: iNEpp8ePtm0Hc7yZAINX5QfB574.mft (raw, json)
Hash identifier: iFglYVLJGqpZAXoLbvJ1Dv3ohC3/I5Esyt14UL7qayw=
Subject key identifier: 0B:9C:6E:0A:2C:56:E4:E6:58:E4:5D:E8:C6:ED:22:EE:63:76:DE:00
Authority key identifier: 88:D1:29:A7:C7:8F:B6:6D:07:73:BC:99:00:83:57:E5:07:C1:E7:BE
Certificate issuer: /CN=88d129a7c78fb66d0773bc99008357e507c1e7be
Certificate serial: 019D99621B6A10785D632A537C3F34E554F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iNEpp8ePtm0Hc7yZAINX5QfB574.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft
Manifest number: 09F3
Signing time: Fri 17 Apr 2026 03:00:36 +0000
Manifest this update: Fri 17 Apr 2026 03:00:36 +0000
Manifest next update: Sat 18 Apr 2026 03:00:36 +0000
Files and hashes: 1: WJ4tfO6kiSMSkG1grDmRdHg6U_4.roa (hash: Eb3yXv0Sg6PPztcKbZR4VGFXGGjS4jiVBjwDazfbRcs=)
2: iNEpp8ePtm0Hc7yZAINX5QfB574.crl (hash: Es5UzF+LqS7/WD1pWfqB4QCyRCoDWOcKnQsqRb/xrlM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft
rsync://rpki.ripe.net/repository/DEFAULT/iNEpp8ePtm0Hc7yZAINX5QfB574.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:1b:6a:10:78:5d:63:2a:53:7c:3f:34:e5:54:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88d129a7c78fb66d0773bc99008357e507c1e7be
Validity
Not Before: Apr 17 03:00:36 2026 GMT
Not After : Apr 18 03:00:36 2026 GMT
Subject: CN=0b9c6e0a2c56e4e658e45de8c6ed22ee6376de00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ff:af:7a:30:6d:95:39:00:1c:ed:b1:f5:0c:
8d:ed:6b:c3:c5:31:d4:dd:2a:d6:17:2d:db:ca:90:
d5:8c:bb:69:c8:83:cd:75:86:80:ef:17:1b:94:72:
c1:da:77:92:eb:d8:7a:cd:08:28:02:dd:90:a5:5b:
d6:30:88:23:44:91:17:97:0c:48:5a:dd:fc:f6:c0:
2d:d0:20:f3:ed:04:49:65:d9:f7:38:b3:83:52:ba:
43:07:a8:75:42:b7:f6:41:04:e6:f3:f0:75:eb:f5:
1c:3d:09:21:fa:8f:ee:f8:13:92:86:20:ea:f4:a3:
0a:b4:51:6b:4c:59:45:60:9c:11:bd:92:8a:11:5f:
3d:15:7e:ca:d6:78:b0:be:31:f2:d4:3a:f8:6d:03:
4b:2e:54:0f:25:9d:95:39:46:46:e4:79:03:3f:0d:
1a:3f:79:d9:0c:7a:68:e7:7b:f4:12:f0:35:cd:87:
7b:cf:fa:38:a7:2e:81:1d:a8:2e:61:cc:f0:7a:a9:
6a:fe:fc:77:c3:8d:10:5b:bb:0b:91:12:8e:74:74:
ef:66:0d:4a:14:dc:b4:8b:5d:b1:58:f5:61:36:68:
fd:9f:9e:bc:eb:44:e6:57:2d:3c:54:3c:62:dc:74:
b1:bb:85:01:4b:57:5f:a4:e3:a5:56:67:b1:b6:48:
0f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:9C:6E:0A:2C:56:E4:E6:58:E4:5D:E8:C6:ED:22:EE:63:76:DE:00
X509v3 Authority Key Identifier:
keyid:88:D1:29:A7:C7:8F:B6:6D:07:73:BC:99:00:83:57:E5:07:C1:E7:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iNEpp8ePtm0Hc7yZAINX5QfB574.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:ce:8a:05:f8:e8:5b:58:f3:df:26:74:f1:98:b3:fc:86:6a:
8a:d5:b3:d0:ae:81:85:41:c5:3e:77:4a:dc:6d:de:e3:7c:78:
d5:12:6f:f6:66:fe:dd:f7:8b:51:cd:71:03:e9:88:f3:98:04:
8c:a6:70:15:86:67:8f:66:a1:d2:12:19:ce:b1:c1:99:7a:c8:
0c:49:7a:6c:6b:d2:8d:59:5a:df:ab:ef:8a:9d:eb:8c:6f:99:
2d:a2:4f:2b:1c:58:10:8a:0c:2c:f3:f2:1d:a7:9d:b1:60:95:
d3:d8:04:05:c8:3b:a8:b6:db:fa:94:7a:91:48:32:7d:fb:fe:
5e:1f:95:14:7f:6a:03:27:3b:67:43:94:ef:62:49:52:6c:e5:
a0:f3:18:78:1b:58:fc:d4:19:7d:f6:ad:4b:64:ea:09:70:02:
49:fe:58:c8:d5:79:28:74:dd:f1:7a:99:87:05:d1:02:1f:36:
43:54:f3:b3:a0:af:5d:cd:d4:67:7e:0f:74:98:22:fd:f3:d3:
5e:a1:8b:36:22:75:a6:d7:fb:81:ef:d3:90:0b:3e:35:c2:bf:
3a:88:b4:5b:26:8a:dd:b4:8b:75:2b:8e:1d:ca:b2:c3:09:8c:
c7:a1:c6:c6:00:72:2d:05:2d:78:5d:55:9b:f6:39:57:05:63:
29:34:c6:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:28:44 2026 by rpki-client