Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft
File: IixFhb2I-yfK3ynuW7ldZXX874M.mft (raw, json)
Hash identifier: c5p8dechG7JrcXCYPy0Aa5KWghYq6bsatOSAD6pjAuE=
Subject key identifier: A0:A0:46:DE:0A:55:CA:4D:83:E3:C2:CA:85:BB:17:64:9D:7F:B8:6E
Authority key identifier: 22:2C:45:85:BD:88:FB:27:CA:DF:29:EE:5B:B9:5D:65:75:FC:EF:83
Certificate issuer: /CN=222c4585bd88fb27cadf29ee5bb95d6575fcef83
Certificate serial: 019D992B2161B4F33ABBDC2F2DF2620924FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft
Manifest number: 1013
Signing time: Fri 17 Apr 2026 02:00:33 +0000
Manifest this update: Fri 17 Apr 2026 02:00:33 +0000
Manifest next update: Sat 18 Apr 2026 02:00:33 +0000
Files and hashes: 1: 1lY-CsGva2obFTlBMU3iZDfCreA.roa (hash: Snn45LbsQALIONEF3gxNerrBtObVtDy584EK4tr9H6g=)
2: 2bVvxRffnJ6GQKgs2LoPDWvUcK4.roa (hash: er7wIVOxtiLCvuKAAvSBfYTSBvkd5n1t/IW0taeZM7Y=)
3: EKwGj8cGWTKa1emZfvaG-_KFnug.roa (hash: 0WqMi3eKQHHkupGYUjixsLx2D37mbsIXi9Fsl7hZLiw=)
4: IixFhb2I-yfK3ynuW7ldZXX874M.crl (hash: CrrVl5VbYKWtl/dOIp1BJEipAnmHt4BaLBaW0kJ95QM=)
5: QdRrKIrH4mGJmO4pGdzpank3gew.roa (hash: uL5ZvBd0SOggdi3Ll3eXsAHR4s6R5DvUqu2sa+EiNtI=)
6: TruqXXhyrBV8Cwe5yzCBt7QLsCE.roa (hash: Ab+jWWB0kPKqVoiUmBfNBgr0bDHAA/s+gzbI3fKh/Jo=)
7: YIiAdksRfvM2tL27jCCRXB5ju3Q.roa (hash: QClgQMgXCLixY3zPZ3xGliorGs5EkE6bJGcMO+wqsBg=)
8: hD3IqorNDrlwkzGUmybhJLv5L2k.roa (hash: ZaWNL4A6CBZBDeNroOwIUO67tG+ZeiSsCvPL+QQ5od4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft
rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:21:61:b4:f3:3a:bb:dc:2f:2d:f2:62:09:24:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=222c4585bd88fb27cadf29ee5bb95d6575fcef83
Validity
Not Before: Apr 17 02:00:33 2026 GMT
Not After : Apr 18 02:00:33 2026 GMT
Subject: CN=a0a046de0a55ca4d83e3c2ca85bb17649d7fb86e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:bf:4a:32:91:80:31:aa:0d:b1:3c:7b:df:d3:
f6:a8:13:99:9a:ee:21:90:4f:45:d0:45:df:2b:4c:
2a:64:96:71:4a:48:3e:d9:b5:50:04:29:74:ae:dd:
64:76:0d:46:d0:1a:f1:86:f6:95:49:e3:2d:9a:ec:
8e:c5:24:c9:5a:ac:1f:59:55:eb:ee:22:a3:32:00:
15:80:16:54:a8:21:80:bf:69:bd:5a:c2:43:e7:74:
b9:e1:be:a0:73:b4:29:26:ec:fa:7b:0f:80:ba:42:
0c:a0:e6:91:af:d8:ce:61:25:4f:ae:54:cd:bf:dd:
6c:4e:13:7d:0c:ed:e2:9f:8b:21:3a:6b:5a:db:ed:
58:11:a8:e9:e8:bb:73:66:24:02:8f:0e:c2:67:73:
f5:3b:36:3b:78:1f:eb:2e:aa:04:47:cd:0f:d2:70:
56:64:2a:14:2e:11:06:f0:f2:ff:bb:2d:88:dc:a4:
4c:0f:2c:ac:b4:36:cc:09:d2:94:0d:37:49:cf:24:
a4:ba:b9:46:2c:fa:ed:4b:56:c7:fe:09:bd:af:a0:
47:54:f4:e8:d9:e5:aa:98:85:17:5f:b2:f4:e7:40:
50:a5:ab:cc:d8:9f:de:ff:98:0d:1e:a6:96:51:1a:
a7:4a:f6:95:17:bf:0a:69:47:4e:6c:cc:f4:a7:10:
be:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:A0:46:DE:0A:55:CA:4D:83:E3:C2:CA:85:BB:17:64:9D:7F:B8:6E
X509v3 Authority Key Identifier:
keyid:22:2C:45:85:BD:88:FB:27:CA:DF:29:EE:5B:B9:5D:65:75:FC:EF:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:30:e6:45:f0:6a:f6:d9:6a:31:e4:a7:fb:1b:a4:c9:c1:0f:
18:3f:06:1d:91:4a:aa:bb:c6:46:be:9b:b2:21:52:33:e4:a6:
2b:5d:b6:f1:0f:98:1d:b3:5b:4e:6a:00:e4:d9:af:a1:1c:e7:
f3:4d:ca:02:4f:b6:7a:e5:87:b3:1e:ae:23:67:f8:db:9c:8a:
52:ee:c5:d2:be:e7:e7:f3:52:1d:90:e2:0b:ef:b6:03:77:0f:
90:51:a1:45:b6:13:89:4e:c8:9b:87:0d:e5:f6:3a:f7:72:14:
22:f9:8a:ad:ff:bf:d8:5b:77:dd:f6:0c:f3:c0:e2:b4:3d:95:
60:ab:4d:b4:96:62:59:6c:04:c7:8c:0a:3c:4d:0a:40:d5:99:
ef:71:7f:a5:bc:28:f6:65:57:48:07:3d:9c:5f:eb:0f:df:81:
5f:72:c9:52:db:9f:ad:ac:23:9a:b7:7e:10:39:a6:b3:97:db:
34:67:4a:20:d2:88:d9:ba:a1:3a:5e:31:0d:42:19:20:b1:4b:
e5:eb:72:40:38:6f:49:85:ef:d1:00:85:ca:bd:09:7f:50:8e:
10:c6:a5:da:44:c6:a5:d3:1c:f5:33:62:73:78:64:3c:f5:3b:
f3:9e:35:91:a5:63:59:18:44:19:5c:5d:21:0c:81:c5:db:07:
3c:b7:71:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:58:03 2026 by rpki-client