Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.mft
File: IY3WwGGLv-_xqEyU_WQYnhhFsYg.mft (raw, json)
Hash identifier: DBLbBHEipH+wG27509WTwIQyUVmFIlkDUiccx/mZLPw=
Subject key identifier: AA:F8:F8:D6:82:17:01:4D:CC:20:38:DA:2B:B2:99:67:15:1A:46:14
Authority key identifier: 21:8D:D6:C0:61:8B:BF:EF:F1:A8:4C:94:FD:64:18:9E:18:45:B1:88
Certificate issuer: /CN=218dd6c0618bbfeff1a84c94fd64189e1845b188
Certificate serial: 019D99996AFD1903B3D5A88BBDE05EDAC042
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IY3WwGGLv-_xqEyU_WQYnhhFsYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.mft
Manifest number: 070B
Signing time: Fri 17 Apr 2026 04:01:01 +0000
Manifest this update: Fri 17 Apr 2026 04:01:01 +0000
Manifest next update: Sat 18 Apr 2026 04:01:01 +0000
Files and hashes: 1: IY3WwGGLv-_xqEyU_WQYnhhFsYg.crl (hash: CjjyqatbaI1VLyh14M8he7O3Jd1BIbtMOV9mycuc6TI=)
2: uLD67uNvCc4ky2TYfWAY_NstWnE.roa (hash: J64Q9GWUgcn8Guex3fYi7oSiRMd56hoswqyttiC77H4=)
3: yQugqDhsoFCyt4EOU-Yd8LiriqA.roa (hash: RbGDZvWEo1F7e5KTPgIMqC+hpQ10KuDrmfUdpa03+bk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IY3WwGGLv-_xqEyU_WQYnhhFsYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:6a:fd:19:03:b3:d5:a8:8b:bd:e0:5e:da:c0:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218dd6c0618bbfeff1a84c94fd64189e1845b188
Validity
Not Before: Apr 17 04:01:01 2026 GMT
Not After : Apr 18 04:01:01 2026 GMT
Subject: CN=aaf8f8d68217014dcc2038da2bb29967151a4614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c8:90:0e:5e:83:92:39:c2:4c:e8:c1:95:b9:
7f:d6:36:2f:1c:54:58:3b:97:13:ef:7f:a4:41:aa:
39:54:08:dd:ae:7f:6b:36:3a:bf:03:a5:1b:48:21:
e2:87:72:3f:a7:97:01:de:8c:cf:fd:4a:18:9d:bf:
ee:7d:ec:26:a7:42:f6:0b:5a:3e:a5:39:69:8a:3a:
6d:ef:4f:bc:2d:7d:81:89:fc:a4:3c:c7:2e:44:6b:
08:ff:75:41:7b:1c:63:ce:30:ae:f4:e3:de:36:ec:
09:2f:af:d1:66:38:80:99:1d:21:f6:5e:c2:fb:e8:
60:25:5a:19:5d:ac:46:d9:73:83:13:c9:9f:7d:31:
5d:5f:79:f2:81:54:06:14:26:11:b0:68:97:92:6a:
5c:b6:1e:07:da:db:27:cf:74:b7:af:8d:b9:a3:fd:
8c:74:8e:03:9f:45:e4:41:f9:f8:b1:6a:4d:b3:a6:
05:d9:b3:e2:6c:f0:56:c6:3e:d6:b0:32:81:e2:04:
59:1c:db:1c:97:2e:8d:f7:29:e9:3b:57:34:04:d3:
42:05:9d:8c:ab:3e:de:a7:e8:3c:16:1f:f3:5b:6e:
b4:bb:ea:bc:8b:86:63:a4:6e:d5:82:da:29:27:f9:
d8:33:6c:56:60:e7:1d:bf:a2:65:7e:c3:79:99:50:
f6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:F8:F8:D6:82:17:01:4D:CC:20:38:DA:2B:B2:99:67:15:1A:46:14
X509v3 Authority Key Identifier:
keyid:21:8D:D6:C0:61:8B:BF:EF:F1:A8:4C:94:FD:64:18:9E:18:45:B1:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IY3WwGGLv-_xqEyU_WQYnhhFsYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:06:c0:ac:55:aa:58:2e:cb:8f:07:8a:aa:f8:4e:29:f8:57:
53:42:ed:39:83:b3:5c:e6:25:3e:17:6b:29:af:43:f1:ab:47:
cb:3b:2e:c5:18:c6:77:de:87:57:b7:6d:77:3d:44:a2:f8:24:
71:18:9e:ed:71:4a:44:ca:ed:0b:6f:e6:b4:63:c5:ab:6c:ff:
68:87:6e:dc:df:23:d4:d5:38:8a:50:8c:f2:3a:92:d3:fa:4a:
47:7d:78:24:af:89:76:e3:f0:d9:e4:1a:16:af:d2:32:af:3a:
ce:58:1c:e1:6f:29:f0:8a:0c:d5:e2:27:c0:ec:4d:ce:ae:c1:
44:fa:34:e7:90:24:00:51:87:c1:85:df:d9:d4:8f:f2:b9:ec:
8a:59:98:fc:cd:5e:60:a9:1f:71:7f:5f:35:c8:ae:86:bf:77:
67:39:33:6a:17:47:32:c5:92:5e:f7:e7:bd:41:f7:64:18:3d:
06:72:d2:bc:f2:aa:87:70:a6:05:a9:fe:12:09:22:c9:95:6e:
e7:81:5d:a4:b2:e0:bf:c8:2e:de:bb:2a:66:43:a5:dd:34:1e:
dd:6a:c9:29:b5:b7:56:71:ef:e9:83:c9:7d:88:80:32:6d:8c:
e1:bb:1f:1d:77:5c:89:69:2d:52:9d:e8:ec:72:7d:e6:63:2d:
5c:aa:ec:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:08:00 2026 by rpki-client