Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft
File: I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft (raw, json)
Hash identifier: ov+AR5XSaNDWoMno6cF2phC9IkL16cwDmUGdDNG7M20=
Subject key identifier: F6:31:12:14:C3:6E:BA:F5:9F:36:F1:84:67:9E:37:94:A8:C0:18:56
Authority key identifier: 23:89:34:1E:10:E6:B0:21:FA:84:7F:55:5E:56:03:DE:F8:5D:2C:2B
Certificate issuer: /CN=2389341e10e6b021fa847f555e5603def85d2c2b
Certificate serial: 019D999904AF65CCDE75F8DAF594E417E9AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I4k0HhDmsCH6hH9VXlYD3vhdLCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft
Manifest number: 0C88
Signing time: Fri 17 Apr 2026 04:00:35 +0000
Manifest this update: Fri 17 Apr 2026 04:00:35 +0000
Manifest next update: Sat 18 Apr 2026 04:00:35 +0000
Files and hashes: 1: I4k0HhDmsCH6hH9VXlYD3vhdLCs.crl (hash: K695BSOqnRyr4RIOqLxC1WaCFdv3uMVILX7+3WHzrnM=)
2: ame8Z_daacjlEpmtE4K5w-dphW4.roa (hash: +YVtLUb/550grkiEIWmP1qcdaH2cQJ56+a6ZIvzeo2Y=)
3: b336X3WeMeMqlclahAX3Nlijuow.roa (hash: qBZyaLyDbfB2OL3m5O3Gqj9tW/vJBs1SdtUmTpwnruE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/I4k0HhDmsCH6hH9VXlYD3vhdLCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:04:af:65:cc:de:75:f8:da:f5:94:e4:17:e9:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2389341e10e6b021fa847f555e5603def85d2c2b
Validity
Not Before: Apr 17 04:00:35 2026 GMT
Not After : Apr 18 04:00:35 2026 GMT
Subject: CN=f6311214c36ebaf59f36f184679e3794a8c01856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f4:5b:ce:c2:2d:16:ba:78:fa:e9:ac:c2:9d:
18:b6:2e:4e:f7:04:66:69:a2:ec:de:6a:93:f1:72:
73:8c:47:55:1a:cf:ab:25:bd:da:fd:62:f9:a2:51:
8d:70:65:30:46:b0:8c:b1:a5:33:e0:23:f2:e4:f8:
3e:33:1f:5f:35:19:b4:72:ef:86:bb:fc:75:52:85:
2c:a6:25:63:30:2d:a5:a4:42:10:d1:00:cb:71:28:
56:d6:08:9b:32:2a:ee:ae:a4:82:80:87:fd:5c:f6:
06:75:fc:e8:8c:c7:d0:d0:ba:2e:63:9a:58:e9:3f:
35:ee:e1:f2:84:87:45:38:3c:1c:90:e4:17:5c:c6:
d1:a7:af:17:f4:9e:a3:6a:29:88:cc:2f:70:cd:64:
00:8b:a8:02:c6:2e:70:a9:25:d7:47:d4:30:7e:11:
bb:24:9a:e7:37:db:34:b4:39:68:85:8e:59:b7:3f:
6b:89:ba:b8:5f:9f:e5:d7:10:f2:c9:01:f3:7f:33:
32:43:f4:eb:d5:a1:d5:3f:ff:b7:b1:b1:06:4e:11:
b3:4b:7a:34:d2:9c:c3:00:1f:17:00:c2:03:8b:a3:
fd:54:0b:32:01:fa:e8:57:44:d7:f2:d4:09:05:af:
cc:2d:f6:9f:c6:dd:a9:0c:58:b1:fc:79:dd:1a:60:
b6:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:31:12:14:C3:6E:BA:F5:9F:36:F1:84:67:9E:37:94:A8:C0:18:56
X509v3 Authority Key Identifier:
keyid:23:89:34:1E:10:E6:B0:21:FA:84:7F:55:5E:56:03:DE:F8:5D:2C:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I4k0HhDmsCH6hH9VXlYD3vhdLCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:f5:7a:0f:de:8c:72:b7:2e:0e:32:9d:a7:eb:5d:a1:80:99:
44:16:60:91:e0:9f:b4:de:59:2c:50:7a:cd:aa:ac:00:ed:19:
54:53:fd:92:58:51:a2:d2:86:c6:01:ca:3e:b0:34:b1:4c:48:
82:4f:96:e9:d4:1d:e6:07:08:56:fc:95:ba:65:23:21:69:d5:
39:4a:c8:35:2e:ab:b8:c7:53:75:51:20:27:99:d0:51:b5:af:
fd:20:83:dc:a7:a6:6c:ed:6d:20:3e:f0:de:b1:5b:7c:14:c8:
bf:5d:5e:22:ce:a7:48:f3:c8:1f:2d:59:a4:6d:d9:e5:4f:bc:
5a:0b:6d:f1:fd:54:44:22:68:60:5d:7e:b9:d4:3e:d6:e4:94:
af:a0:c2:91:0c:4d:0c:6d:32:64:25:c6:20:07:e2:1f:3b:25:
74:07:22:8a:87:34:97:4b:fe:87:d3:b0:5a:b2:ff:e9:91:dc:
ca:a0:73:e7:a5:55:5c:d4:8e:d8:6f:0b:a2:f3:e9:79:f5:a7:
a6:df:9f:20:30:4b:a8:aa:68:5f:2b:e0:36:82:3c:fb:f6:a0:
51:d4:39:9f:aa:2c:ec:3e:5c:79:e4:f6:97:4b:2b:50:ac:1c:
ab:fd:5e:31:8c:94:71:20:f4:6c:4f:e2:78:c7:ca:3b:b4:d7:
b6:8b:5f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:20:28 2026 by rpki-client