Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0b35c5-8990-4e76-aeee-fcaf4cdd1663/1/IPtKDEbqkecGD7KUJqEyM4UmhJU.mft
File: IPtKDEbqkecGD7KUJqEyM4UmhJU.mft (raw, json)
Hash identifier: Ff4Ml9A4/VWSmSnLTK+oHIL0F1BfwmNwOjevbSuUziQ=
Subject key identifier: D1:65:54:FB:7F:2D:FB:F7:A9:0E:04:EA:DC:1C:EE:4A:24:41:7B:86
Authority key identifier: 20:FB:4A:0C:46:EA:91:E7:06:0F:B2:94:26:A1:32:33:85:26:84:95
Certificate issuer: /CN=20fb4a0c46ea91e7060fb29426a1323385268495
Certificate serial: 019D992B58391D99E0FD883A51730ACEF1AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPtKDEbqkecGD7KUJqEyM4UmhJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0b35c5-8990-4e76-aeee-fcaf4cdd1663/1/IPtKDEbqkecGD7KUJqEyM4UmhJU.mft
Manifest number: 081D
Signing time: Fri 17 Apr 2026 02:00:47 +0000
Manifest this update: Fri 17 Apr 2026 02:00:47 +0000
Manifest next update: Sat 18 Apr 2026 02:00:47 +0000
Files and hashes: 1: IPtKDEbqkecGD7KUJqEyM4UmhJU.crl (hash: Z66VVLL8Itkbr7g+Qlw1R9bDtVnVFarYvQre89mdy3Y=)
2: N9l_SoYrcFcPv0jC7XqElG5VoCc.roa (hash: R5qOIsjrofGZDxXTlws22ZLH6QPaz3qDwthTa7rQG/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/0b35c5-8990-4e76-aeee-fcaf4cdd1663/1/IPtKDEbqkecGD7KUJqEyM4UmhJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/0b35c5-8990-4e76-aeee-fcaf4cdd1663/1/IPtKDEbqkecGD7KUJqEyM4UmhJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IPtKDEbqkecGD7KUJqEyM4UmhJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:58:39:1d:99:e0:fd:88:3a:51:73:0a:ce:f1:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20fb4a0c46ea91e7060fb29426a1323385268495
Validity
Not Before: Apr 17 02:00:47 2026 GMT
Not After : Apr 18 02:00:47 2026 GMT
Subject: CN=d16554fb7f2dfbf7a90e04eadc1cee4a24417b86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:37:52:15:87:8c:88:5f:87:af:74:82:d6:ae:
c6:20:d1:e9:8e:cf:98:1b:cf:61:54:c4:6d:6b:31:
f3:2b:f8:3c:ac:14:61:1d:3d:0d:7d:ca:e9:b2:97:
81:3e:a5:4d:fc:c9:ab:d8:27:ae:ac:b2:57:a9:90:
6f:57:4b:7b:7c:12:69:ad:c6:fa:09:73:18:72:9a:
0b:75:2a:0d:f5:7b:f7:14:4c:04:74:c5:13:43:6b:
55:1a:ed:47:a4:8d:89:0a:c8:3a:25:78:22:e5:47:
41:f9:64:b2:09:12:42:e2:99:4a:c2:0d:7f:0f:39:
d0:35:ef:82:a5:f8:4e:6a:8a:15:6b:7b:fa:8d:90:
f8:a5:aa:9a:4d:bf:61:01:b2:bc:ea:20:79:b8:15:
48:fb:42:02:82:4e:b4:5b:31:d8:6a:0d:ee:4f:f5:
34:bc:77:cf:c3:73:d6:0e:cc:da:2a:0b:2c:2e:c5:
d2:09:3d:1d:dd:6b:5c:c0:80:4f:e0:b2:64:0c:d4:
54:af:ad:57:e4:7d:8a:55:03:ed:ef:6a:f2:1c:87:
ef:54:af:4c:e6:54:51:0a:4d:71:ce:e4:3c:05:45:
d6:06:27:ba:32:da:5d:15:98:31:2f:dc:88:2b:ed:
e1:b7:44:24:37:2b:94:1e:17:d4:f8:3a:23:a4:dc:
d6:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:65:54:FB:7F:2D:FB:F7:A9:0E:04:EA:DC:1C:EE:4A:24:41:7B:86
X509v3 Authority Key Identifier:
keyid:20:FB:4A:0C:46:EA:91:E7:06:0F:B2:94:26:A1:32:33:85:26:84:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPtKDEbqkecGD7KUJqEyM4UmhJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0b35c5-8990-4e76-aeee-fcaf4cdd1663/1/IPtKDEbqkecGD7KUJqEyM4UmhJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0b35c5-8990-4e76-aeee-fcaf4cdd1663/1/IPtKDEbqkecGD7KUJqEyM4UmhJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:f7:5c:92:44:a3:04:19:35:55:50:82:6c:b8:c1:4c:28:b0:
4e:70:ae:09:40:47:ba:f2:d2:59:3e:76:b6:2e:5a:e2:8a:58:
a8:6d:7e:d5:be:46:dc:98:fb:44:3d:30:0c:87:4c:23:bc:07:
c3:c5:39:17:68:82:80:2e:e2:c6:56:20:32:50:ea:88:67:e2:
2a:f6:5d:1f:9f:6c:74:87:0d:9b:36:91:d3:13:ef:5a:e1:58:
b8:9a:32:bd:1e:d4:3f:01:cf:6c:90:0d:a0:a2:12:97:17:c5:
68:bd:51:82:17:21:81:33:58:e5:30:ac:ac:78:dc:07:0e:44:
3b:d1:87:ea:14:e3:01:a1:90:a8:ef:5d:54:fe:db:1d:65:41:
86:20:30:fd:95:f3:b4:9b:54:a2:71:55:6f:c6:8a:5d:81:01:
35:ad:ba:1a:c2:8f:96:2a:1f:86:7d:50:68:1a:fa:51:07:70:
bf:59:b1:a8:67:a1:6a:ab:92:44:2c:1c:b3:9e:4d:84:4d:08:
01:3c:e8:7d:77:fc:0a:7d:56:92:32:f8:aa:e1:54:38:42:86:
24:a8:26:6d:63:18:66:66:d1:68:e3:d2:27:2e:41:f1:ea:74:
4f:8f:ef:c8:66:65:71:22:05:52:0e:13:94:03:16:62:d8:cd:
7d:44:21:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:35:08 2026 by rpki-client