Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.mft
File: MIfS4cwIqVF0v3lOLy3m49A--Co.mft (raw, json)
Hash identifier: VfghSr8ZFP5BHQ3OGYFy68IjYWPfXv9Fxv3CUjobBfg=
Subject key identifier: D1:21:FB:00:4F:BF:64:EE:E6:73:3B:5F:37:58:67:9E:64:8C:51:C3
Authority key identifier: 30:87:D2:E1:CC:08:A9:51:74:BF:79:4E:2F:2D:E6:E3:D0:3E:F8:2A
Certificate issuer: /CN=3087d2e1cc08a95174bf794e2f2de6e3d03ef82a
Certificate serial: 019D9998D83DB63FDAAB5423ECE889308B41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MIfS4cwIqVF0v3lOLy3m49A--Co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.mft
Manifest number: 1429
Signing time: Fri 17 Apr 2026 04:00:23 +0000
Manifest this update: Fri 17 Apr 2026 04:00:23 +0000
Manifest next update: Sat 18 Apr 2026 04:00:23 +0000
Files and hashes: 1: MIfS4cwIqVF0v3lOLy3m49A--Co.crl (hash: 6U+lTzrF6gqQc9DmrCEkvV4sSjw1FfCOTNwCRrl4oCE=)
2: UO3-ECp44i-4NHov7ZcCJgmk2iw.roa (hash: pq04zRZsIbyhYdzYcYCke50JhIGeXTbV4hV+QB02Ah0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.mft
rsync://rpki.ripe.net/repository/DEFAULT/MIfS4cwIqVF0v3lOLy3m49A--Co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:98:d8:3d:b6:3f:da:ab:54:23:ec:e8:89:30:8b:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3087d2e1cc08a95174bf794e2f2de6e3d03ef82a
Validity
Not Before: Apr 17 04:00:23 2026 GMT
Not After : Apr 18 04:00:23 2026 GMT
Subject: CN=d121fb004fbf64eee6733b5f3758679e648c51c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:61:d2:63:36:b7:66:61:c1:fb:49:9c:a2:1f:
30:ec:bc:6a:22:be:91:cd:71:33:54:ec:91:e1:b3:
83:81:f9:3f:c3:6c:ff:5d:21:e9:36:8e:6f:2d:e4:
3f:d9:74:c8:67:fe:32:62:38:ca:53:11:7d:99:e1:
e3:02:ac:75:79:6e:3f:3f:9f:35:67:c3:64:78:9b:
49:c0:93:83:b7:51:94:ad:c5:cb:b9:27:90:95:36:
0b:3f:c5:eb:88:79:6e:bf:a8:94:b3:0d:32:4b:2a:
81:ec:db:16:17:12:dc:8b:f3:d8:b7:ab:42:2b:e6:
26:40:07:b2:ad:1b:4b:0a:a7:12:a1:37:94:07:19:
2e:03:61:20:35:9e:b3:c6:5f:1a:8b:08:6a:24:5b:
6e:d8:04:d4:93:89:64:d1:2c:75:24:61:be:08:8e:
8d:20:47:a4:52:51:2b:ae:6a:28:2a:e2:e5:47:16:
cd:93:f0:73:7c:67:3e:b6:19:bf:ab:51:b4:d9:7f:
74:a8:4f:97:ce:38:9c:2e:db:a8:13:0c:a1:f6:f0:
12:68:03:a7:74:dd:03:09:bb:64:21:8d:80:5d:29:
39:22:fa:f4:9c:83:46:0a:11:35:00:ae:9d:c6:2d:
6f:9e:d7:fc:26:5f:a7:70:a2:ce:af:f9:2f:d1:05:
a4:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:21:FB:00:4F:BF:64:EE:E6:73:3B:5F:37:58:67:9E:64:8C:51:C3
X509v3 Authority Key Identifier:
keyid:30:87:D2:E1:CC:08:A9:51:74:BF:79:4E:2F:2D:E6:E3:D0:3E:F8:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MIfS4cwIqVF0v3lOLy3m49A--Co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:fd:81:db:a0:bc:f9:ec:75:f6:e0:e1:07:57:fb:00:11:66:
a0:fd:73:90:4e:37:3c:9b:9d:15:20:d4:2a:63:52:ff:58:3b:
dc:cd:e0:af:27:dd:b1:9e:51:74:17:a9:4b:0b:be:87:22:47:
d9:45:ac:e3:9f:a9:27:64:d0:b5:c6:26:2c:e0:c1:0b:f3:02:
af:fe:65:5e:f3:94:53:82:de:0e:0a:46:4a:a0:a1:71:29:b3:
58:1b:23:72:1d:c4:b2:6f:83:1e:4e:cb:73:fe:c7:68:c8:da:
67:29:3a:71:ba:70:85:2b:60:4b:ee:d9:68:cb:b9:6c:ea:48:
fa:c1:0a:5d:58:d1:db:00:64:35:56:61:68:d3:66:41:bf:b9:
37:9d:e9:0d:0f:ec:8e:54:7f:c8:e6:0a:c8:c5:00:39:a9:25:
5f:39:ba:e4:f8:52:f0:51:ff:34:b3:65:ed:30:a1:8e:17:7f:
9e:75:71:4f:25:8e:bc:3c:a4:94:a4:0e:98:86:84:b5:30:9c:
8c:53:58:bf:2f:71:70:62:c2:0e:6e:0e:2b:4d:78:6c:56:03:
5f:95:ef:af:14:cb:f2:ab:c2:12:9f:21:88:95:21:61:2d:ca:
69:15:3e:30:6e:f8:a1:a5:91:79:ae:e8:40:01:c9:b0:06:f4:
5b:11:77:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:58:22 2026 by rpki-client