Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.mft
File: I32X8VCOekR4mfWaVfuKpiQe9RA.mft (raw, json)
Hash identifier: M5dmTOGLQ+vC8tRD10luevxG7wMtvTaWQCduN2VSBzE=
Subject key identifier: 90:4C:24:26:0B:98:F8:FD:58:E4:4C:ED:B2:74:3D:6A:76:86:7C:DF
Authority key identifier: 23:7D:97:F1:50:8E:7A:44:78:99:F5:9A:55:FB:8A:A6:24:1E:F5:10
Certificate issuer: /CN=237d97f1508e7a447899f59a55fb8aa6241ef510
Certificate serial: 019D99D03B03E0C514261561B0B81EF22258
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I32X8VCOekR4mfWaVfuKpiQe9RA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.mft
Manifest number: 074E
Signing time: Fri 17 Apr 2026 05:00:53 +0000
Manifest this update: Fri 17 Apr 2026 05:00:53 +0000
Manifest next update: Sat 18 Apr 2026 05:00:53 +0000
Files and hashes: 1: 2MeX37cZHGHHuxJtj1E28ddzIsI.roa (hash: LZd2fssCxVZOERqVCoqkBsBn4xYtLG5cKZGv8FiTdNw=)
2: I32X8VCOekR4mfWaVfuKpiQe9RA.crl (hash: Vp6yrK/TU3hg+5etdDIG5zRJhdCDDsHoMJ8HhsupECw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.mft
rsync://rpki.ripe.net/repository/DEFAULT/I32X8VCOekR4mfWaVfuKpiQe9RA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:3b:03:e0:c5:14:26:15:61:b0:b8:1e:f2:22:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237d97f1508e7a447899f59a55fb8aa6241ef510
Validity
Not Before: Apr 17 05:00:53 2026 GMT
Not After : Apr 18 05:00:53 2026 GMT
Subject: CN=904c24260b98f8fd58e44cedb2743d6a76867cdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b5:c2:fe:0c:ad:bd:ba:cd:1c:46:97:55:4f:
40:2f:a9:ea:a0:5b:de:f5:77:2c:d3:a9:b8:8a:2b:
79:d7:43:8a:12:50:f4:80:52:81:81:00:da:24:79:
e1:ca:de:e2:3a:6f:98:e3:99:f8:b7:44:d5:b4:83:
7b:3a:66:59:ff:b7:2a:89:40:88:07:5d:a3:0f:68:
69:4f:91:8e:2a:c2:6d:f9:9e:d4:46:8d:74:d7:0f:
69:7a:37:2b:89:b4:fe:07:ba:72:e1:6e:70:67:ed:
10:b9:8a:b0:f6:a1:24:6d:85:9f:b6:30:b7:37:d5:
0c:e7:98:18:37:20:7e:15:70:91:06:c1:9b:96:6a:
04:81:c1:fa:5f:26:e8:7d:1e:ab:2a:12:7d:22:7b:
e1:28:a0:62:97:09:08:05:f8:d5:ce:99:15:75:49:
b4:e2:26:30:b8:22:83:43:95:11:d8:a2:ca:73:a5:
5f:34:9e:a3:0d:4f:a0:ad:72:1a:1f:24:87:d4:6b:
9f:77:b6:53:37:e3:96:b5:9c:c2:4f:58:fb:40:98:
d2:fe:d7:c7:d0:ca:d2:02:54:e0:e6:22:bd:d4:2b:
fe:b0:e0:68:65:72:73:05:fc:f6:3c:0c:fd:eb:64:
4e:af:34:9c:20:10:b2:f6:b3:a9:30:50:21:96:de:
da:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:4C:24:26:0B:98:F8:FD:58:E4:4C:ED:B2:74:3D:6A:76:86:7C:DF
X509v3 Authority Key Identifier:
keyid:23:7D:97:F1:50:8E:7A:44:78:99:F5:9A:55:FB:8A:A6:24:1E:F5:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I32X8VCOekR4mfWaVfuKpiQe9RA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:dd:16:8c:58:3b:da:81:3d:51:e7:46:1a:70:1c:c8:13:ab:
2b:07:5d:7b:26:29:5f:77:2a:67:dd:c0:e4:8c:9f:1b:e2:05:
52:c4:d9:09:fe:38:02:fe:af:0c:6e:ce:d9:05:fe:86:39:0d:
94:ac:af:98:44:9f:d8:3a:63:5d:9d:ad:d7:e9:32:9f:53:2f:
e4:3e:3e:b6:9c:3c:e3:23:7b:c4:fd:5c:3e:98:a9:fc:40:1d:
5e:b8:dd:29:2b:7f:5b:ed:b4:4d:c0:3f:f0:dc:0a:bf:34:7d:
da:57:51:c9:19:1b:7d:4f:fa:38:9c:35:ef:dd:36:bb:a6:21:
cd:15:89:de:a6:c3:92:3a:38:f9:a3:76:86:22:ca:a9:5b:63:
c6:d3:34:fe:72:62:31:ae:0c:9a:19:5f:93:e5:f8:e6:b7:95:
6b:d8:bd:41:84:1d:64:00:0d:4c:15:fe:15:75:c2:59:af:42:
34:e2:4b:ec:03:19:e6:f4:ec:ed:0f:71:c5:14:a6:10:7b:a3:
16:fe:4b:68:85:98:2d:1a:f7:b8:f1:e3:5e:be:24:55:ef:da:
35:34:33:c5:94:c2:bc:7b:99:7a:5b:f7:14:76:ad:49:e8:9e:
06:bc:d2:97:0a:6a:5f:af:be:ee:a6:fe:26:11:0a:30:7c:73:
76:8b:7f:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:25:03 2026 by rpki-client