Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/3b25f5-a190-48ff-a3e1-171dc5a98474/1/sA09NPYeSEaIv_-cxwN1WCN3WZg.mft
File: sA09NPYeSEaIv_-cxwN1WCN3WZg.mft (raw, json)
Hash identifier: AtzEJbXl9TtqKmNIANQB3btAaTgLNQdegoEFGf14axs=
Subject key identifier: 87:42:DA:0D:B9:6D:B3:CC:A9:76:93:EE:40:E8:0D:A0:81:45:A9:0C
Authority key identifier: B0:0D:3D:34:F6:1E:48:46:88:BF:FF:9C:C7:03:75:58:23:77:59:98
Certificate issuer: /CN=b00d3d34f61e484688bfff9cc703755823775998
Certificate serial: 019D9886477F434FC585C62ACC2A2DB3A34F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sA09NPYeSEaIv_-cxwN1WCN3WZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/3b25f5-a190-48ff-a3e1-171dc5a98474/1/sA09NPYeSEaIv_-cxwN1WCN3WZg.mft
Manifest number: 1578
Signing time: Thu 16 Apr 2026 23:00:30 +0000
Manifest this update: Thu 16 Apr 2026 23:00:30 +0000
Manifest next update: Fri 17 Apr 2026 23:00:30 +0000
Files and hashes: 1: i-A0G1xNSw4VydVA7TAj4sDFMVk.roa (hash: kMsiOD5BYe1zMMRan05rFNja/Pm689GMM1lIhaKqC7o=)
2: sA09NPYeSEaIv_-cxwN1WCN3WZg.crl (hash: eSY7wYjG2fhrekZgYS4xSfOatqlzzAmBBlOudp0nbVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/3b25f5-a190-48ff-a3e1-171dc5a98474/1/sA09NPYeSEaIv_-cxwN1WCN3WZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/3b25f5-a190-48ff-a3e1-171dc5a98474/1/sA09NPYeSEaIv_-cxwN1WCN3WZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/sA09NPYeSEaIv_-cxwN1WCN3WZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:47:7f:43:4f:c5:85:c6:2a:cc:2a:2d:b3:a3:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b00d3d34f61e484688bfff9cc703755823775998
Validity
Not Before: Apr 16 23:00:30 2026 GMT
Not After : Apr 17 23:00:30 2026 GMT
Subject: CN=8742da0db96db3cca97693ee40e80da08145a90c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:af:7e:7e:88:c7:1e:72:a2:d7:44:ff:3f:3f:
8e:aa:69:25:e7:da:ed:a1:2f:3e:66:9c:2a:18:57:
8d:f3:8d:96:32:5c:69:fa:ea:58:07:53:18:f5:9c:
b5:f6:05:2a:6f:d4:57:50:d4:72:5a:cd:02:e6:32:
0f:56:a7:5f:15:63:35:6a:f2:51:a5:e1:8c:cf:70:
8f:5b:2f:53:b8:5b:30:a3:c6:4d:8a:65:7e:26:3b:
d2:c0:bf:66:59:84:4e:fb:86:de:c0:14:3d:39:6f:
b1:96:2b:ff:94:b7:d4:aa:fd:54:91:8b:31:87:a7:
c0:8f:cb:36:ba:a9:1d:74:02:42:44:d0:2a:13:b8:
f6:84:df:18:b6:04:c4:a1:55:d2:2f:38:fd:6e:f9:
2c:91:b2:b3:05:f1:d8:5c:54:b8:66:ae:4d:68:98:
de:8d:8a:36:f5:13:ba:1b:c8:54:02:ea:d5:54:39:
07:83:d7:fc:68:63:e5:4c:2d:41:e4:f8:5a:29:8b:
5f:27:70:49:6b:c2:8b:b2:ae:78:9d:f1:b0:b5:e9:
94:9c:1b:d8:d7:ef:65:d0:2b:85:b7:db:e9:e8:5b:
00:6c:6e:4b:b1:65:aa:b7:00:2e:4a:58:64:b6:27:
26:a9:ad:56:3e:67:01:d9:71:8d:08:78:d6:9f:15:
2f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:42:DA:0D:B9:6D:B3:CC:A9:76:93:EE:40:E8:0D:A0:81:45:A9:0C
X509v3 Authority Key Identifier:
keyid:B0:0D:3D:34:F6:1E:48:46:88:BF:FF:9C:C7:03:75:58:23:77:59:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sA09NPYeSEaIv_-cxwN1WCN3WZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/3b25f5-a190-48ff-a3e1-171dc5a98474/1/sA09NPYeSEaIv_-cxwN1WCN3WZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/3b25f5-a190-48ff-a3e1-171dc5a98474/1/sA09NPYeSEaIv_-cxwN1WCN3WZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:db:e1:09:f2:e3:93:1c:f8:8a:d2:f8:3b:23:24:cd:61:f7:
d0:91:74:27:ea:c8:6d:22:cc:28:0f:a7:8c:f8:3a:1f:15:80:
2c:f2:16:7a:5e:ed:68:3a:75:46:f5:7f:76:5d:40:53:05:1c:
2f:d1:b8:6a:54:27:74:b0:ad:be:72:8d:78:b8:e5:2d:86:34:
86:6a:b7:9c:da:a4:3f:fc:eb:a9:3e:40:f1:23:62:ce:25:5e:
f8:c4:14:81:31:18:15:2c:72:88:51:a9:a2:8f:46:45:bf:b2:
85:e8:5e:01:fd:7d:a1:ac:4e:79:8d:c7:df:ca:5e:15:7b:14:
8c:47:1b:37:33:53:9a:6f:7d:e2:af:0b:74:44:b3:b0:fa:f3:
95:52:68:2e:4f:51:8b:72:b1:bf:ed:0f:d4:76:3b:df:d1:c6:
32:18:eb:d3:59:09:3c:46:33:6a:1d:7d:54:a3:6d:da:6b:e4:
b9:1b:79:c0:e3:29:f4:09:e3:87:ff:45:29:e3:80:9d:f6:a1:
c1:e8:d8:dc:c2:be:3d:8a:b1:ae:fd:9d:1d:cb:43:65:c8:9e:
57:e2:91:66:1b:3e:03:0f:da:7b:d9:39:e4:2b:13:e6:71:7a:
c1:fd:24:8e:57:ca:15:31:7b:94:cc:27:c3:06:38:87:81:0d:
aa:7e:a6:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:35:09 2026 by rpki-client