Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/3b8a40-7610-4e4d-9b37-741fa4e10e36/1/ia4iC0do2m4nbmpi7dZ0bY_Dwfs.mft
File: ia4iC0do2m4nbmpi7dZ0bY_Dwfs.mft (raw, json)
Hash identifier: fXpJJMnTDWWd3yRbrQt3yxrjf6uGwfXBninYBe6lKwg=
Subject key identifier: 94:4B:FF:AF:B3:33:08:17:B2:F2:FE:92:C9:93:DA:46:D3:E5:F8:78
Authority key identifier: 89:AE:22:0B:47:68:DA:6E:27:6E:6A:62:ED:D6:74:6D:8F:C3:C1:FB
Certificate issuer: /CN=89ae220b4768da6e276e6a62edd6746d8fc3c1fb
Certificate serial: 019D97E1D3232709C60B879C6D83338349BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ia4iC0do2m4nbmpi7dZ0bY_Dwfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/3b8a40-7610-4e4d-9b37-741fa4e10e36/1/ia4iC0do2m4nbmpi7dZ0bY_Dwfs.mft
Manifest number: 1076
Signing time: Thu 16 Apr 2026 20:00:52 +0000
Manifest this update: Thu 16 Apr 2026 20:00:52 +0000
Manifest next update: Fri 17 Apr 2026 20:00:52 +0000
Files and hashes: 1: ia4iC0do2m4nbmpi7dZ0bY_Dwfs.crl (hash: Eqw8Kc/tNnSWKERVtIsE6kiTaTN26Kkfg0DlD23nH0s=)
2: swlvSyg5P2tG5hf6QszpyWKMn_k.roa (hash: bb3L+IeAkS1sZt2NMi7C0qunZyUMt8jC260rx3ny2gs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/3b8a40-7610-4e4d-9b37-741fa4e10e36/1/ia4iC0do2m4nbmpi7dZ0bY_Dwfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/3b8a40-7610-4e4d-9b37-741fa4e10e36/1/ia4iC0do2m4nbmpi7dZ0bY_Dwfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ia4iC0do2m4nbmpi7dZ0bY_Dwfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e1:d3:23:27:09:c6:0b:87:9c:6d:83:33:83:49:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ae220b4768da6e276e6a62edd6746d8fc3c1fb
Validity
Not Before: Apr 16 20:00:52 2026 GMT
Not After : Apr 17 20:00:52 2026 GMT
Subject: CN=944bffafb3330817b2f2fe92c993da46d3e5f878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e3:65:0d:19:e0:ad:54:2e:7b:4b:6d:fd:20:
a3:c6:af:ad:b6:60:06:48:2c:0e:3a:d1:a2:ad:02:
52:7a:34:f7:93:c8:60:86:6f:a1:87:92:eb:de:bc:
03:a5:6f:8a:7d:cc:cf:89:bc:ea:82:ac:e0:14:69:
0f:7b:f2:d3:3a:bc:b7:b2:1e:46:12:91:57:29:d1:
4a:1e:79:5f:a6:93:58:cf:c5:d9:1f:ab:84:b8:69:
98:34:5d:d2:4b:84:6e:a5:16:4b:50:eb:93:dc:89:
46:6f:8b:3e:10:e5:87:68:61:1e:6e:0c:e2:db:bf:
b0:a6:1e:bf:c1:60:b2:bc:bc:95:ba:f7:1c:7c:ed:
2d:a5:12:69:b3:99:ea:a5:51:0f:53:85:ba:22:89:
6a:b2:2a:59:73:8c:4c:46:3f:1e:03:b1:1e:e7:b5:
31:2b:4a:10:1b:39:c8:c4:97:8a:2a:39:2d:f4:25:
14:58:95:bb:15:c7:5e:12:75:a5:c8:e3:22:23:de:
75:3e:86:fc:35:1d:4b:58:17:60:38:d3:92:0e:fc:
22:ea:a7:73:8d:76:ac:45:1a:48:4a:46:11:1d:b4:
28:5c:c6:88:fa:68:23:38:43:8b:bb:05:68:2f:94:
39:c4:51:b9:2a:3c:27:62:e2:b3:b6:b8:7b:7c:66:
5b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:4B:FF:AF:B3:33:08:17:B2:F2:FE:92:C9:93:DA:46:D3:E5:F8:78
X509v3 Authority Key Identifier:
keyid:89:AE:22:0B:47:68:DA:6E:27:6E:6A:62:ED:D6:74:6D:8F:C3:C1:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ia4iC0do2m4nbmpi7dZ0bY_Dwfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3b8a40-7610-4e4d-9b37-741fa4e10e36/1/ia4iC0do2m4nbmpi7dZ0bY_Dwfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3b8a40-7610-4e4d-9b37-741fa4e10e36/1/ia4iC0do2m4nbmpi7dZ0bY_Dwfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:26:d7:11:ad:eb:d8:89:e5:78:c6:15:c0:34:af:db:29:a4:
2b:57:08:6e:f7:05:b4:c7:a0:dd:51:51:b6:d1:70:77:b2:1e:
d6:19:5a:20:1f:57:ff:1b:30:9f:1b:68:9c:12:c6:3f:56:af:
38:c3:82:40:db:36:41:7f:d7:37:b7:7c:b2:6d:80:fc:3f:49:
1a:95:26:d0:38:4d:0d:39:a0:7f:e3:f0:7b:08:5e:47:71:49:
c1:1b:00:5e:8c:5c:f9:d4:69:70:ed:17:aa:ff:d5:69:f5:da:
f7:7f:3b:0b:d5:b8:0a:32:9a:ae:82:ad:80:46:b3:50:07:9d:
c2:e7:45:48:4f:29:0f:89:70:f4:ac:6c:fd:9d:d6:b6:5d:43:
63:7c:0d:87:38:a4:4c:37:b7:0c:5a:84:7b:52:e9:ab:36:9d:
1b:0f:47:81:26:9e:bb:55:85:95:4d:67:fb:42:8b:ff:c0:9f:
2a:57:f3:59:2e:64:cc:1a:ed:af:71:4f:1a:6c:5d:76:3b:e0:
86:05:64:f9:84:e0:6e:73:f0:5b:e8:98:79:d6:0f:2c:10:9f:
6d:d5:01:d6:aa:22:e7:b9:7a:9c:59:5c:16:23:58:5e:6e:3c:
67:24:9b:5d:34:dd:5e:da:56:d0:6c:4f:7e:fe:c7:76:54:22:
38:2a:fd:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2X4dMjJwnGC4ecbYMzg0m8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5YWUyMjBiNDc2OGRhNmUyNzZlNmE2MmVkZDY3NDZkOGZj
M2MxZmIwHhcNMjYwNDE2MjAwMDUyWhcNMjYwNDE3MjAwMDUyWjAzMTEwLwYDVQQD
Eyg5NDRiZmZhZmIzMzMwODE3YjJmMmZlOTJjOTkzZGE0NmQzZTVmODc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+NlDRngrVQue0tt/SCjxq+ttmAG
SCwOOtGirQJSejT3k8hghm+hh5Lr3rwDpW+KfczPibzqgqzgFGkPe/LTOry3sh5G
EpFXKdFKHnlfppNYz8XZH6uEuGmYNF3SS4RupRZLUOuT3IlGb4s+EOWHaGEebgzi
27+wph6/wWCyvLyVuvccfO0tpRJps5nqpVEPU4W6IolqsipZc4xMRj8eA7Ee57Ux
K0oQGznIxJeKKjkt9CUUWJW7FcdeEnWlyOMiI951Pob8NR1LWBdgONOSDvwi6qdz
jXasRRpISkYRHbQoXMaI+mgjOEOLuwVoL5Q5xFG5KjwnYuKztrh7fGZb8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJRL/6+zMwgXsvL+ksmT2kbT5fh4MB8GA1UdIwQY
MBaAFImuIgtHaNpuJ25qYu3WdG2Pw8H7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWE0aUMwZG8ybTRuYm1waTdkWjBiWV9Ed2ZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8zYjhhNDAtNzYxMC00ZTRkLTliMzct
NzQxZmE0ZTEwZTM2LzEvaWE0aUMwZG8ybTRuYm1waTdkWjBiWV9Ed2ZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC8zYjhhNDAtNzYxMC00ZTRkLTliMzctNzQxZmE0ZTEwZTM2
LzEvaWE0aUMwZG8ybTRuYm1waTdkWjBiWV9Ed2ZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATCbXEa3r
2InleMYVwDSv2ymkK1cIbvcFtMeg3VFRttFwd7Ie1hlaIB9X/xswnxtonBLGP1av
OMOCQNs2QX/XN7d8sm2A/D9JGpUm0DhNDTmgf+PwewheR3FJwRsAXoxc+dRpcO0X
qv/VafXa9387C9W4CjKaroKtgEazUAedwudFSE8pD4lw9Kxs/Z3Wtl1DY3wNhzik
TDe3DFqEe1LpqzadGw9HgSaeu1WFlU1n+0KL/8CfKlfzWS5kzBrtr3FPGmxddjvg
hgVk+YTgbnPwW+iYedYPLBCfbdUB1qoi57l6nFlcFiNYXm48ZySbXTTdXtpW0GxP
fv7HdlQiOCr9zg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:01:28 2026 by rpki-client