Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.mft
File: ia7Sz_jOMbM0-DoLMF_u8B1x2nU.mft (raw, json)
Hash identifier: YnBsKPgR5lzY5QDZXXAOMfAxYAUZIDgwOXTB3MokkUA=
Subject key identifier: 54:47:DD:1D:EC:17:0B:61:49:17:05:F7:80:56:AE:27:DD:2F:27:69
Authority key identifier: 89:AE:D2:CF:F8:CE:31:B3:34:F8:3A:0B:30:5F:EE:F0:1D:71:DA:75
Certificate issuer: /CN=89aed2cff8ce31b334f83a0b305feef01d71da75
Certificate serial: 019D9999014FFF735453390398B21C38184B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.mft
Manifest number: 187C
Signing time: Fri 17 Apr 2026 04:00:34 +0000
Manifest this update: Fri 17 Apr 2026 04:00:34 +0000
Manifest next update: Sat 18 Apr 2026 04:00:34 +0000
Files and hashes: 1: FwqF1yEFG7mKuQRa7RkSyKPz0W0.roa (hash: arAr0Lk0kEre21H8drvKyvd7aUFHvFqu0QRUk2zIk0Y=)
2: ia7Sz_jOMbM0-DoLMF_u8B1x2nU.crl (hash: lrlvk+lhww4D2jyFgH9zYJRnmlTFu1ngLFzEXNOLrXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:01:4f:ff:73:54:53:39:03:98:b2:1c:38:18:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89aed2cff8ce31b334f83a0b305feef01d71da75
Validity
Not Before: Apr 17 04:00:34 2026 GMT
Not After : Apr 18 04:00:34 2026 GMT
Subject: CN=5447dd1dec170b61491705f78056ae27dd2f2769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:8f:69:ba:09:39:a9:21:73:05:f2:f5:b8:83:
85:45:80:c8:b4:ea:1d:7c:ed:db:7d:d7:3c:4a:00:
b7:5a:b2:f1:dc:68:63:49:71:ce:8a:4b:dc:57:e0:
d2:7d:02:60:2a:9f:3d:e4:3d:db:d7:6f:5d:99:73:
39:c4:d5:51:90:40:ee:da:1e:ec:d7:f5:85:c7:e2:
d3:49:91:b8:07:12:75:6b:bb:7d:ee:a7:05:e4:b9:
8f:ff:69:bc:15:c3:76:a1:3b:06:d3:a6:ee:f6:cb:
5c:0c:a2:e6:e9:ff:94:e4:eb:75:c4:fe:6d:57:92:
34:aa:75:b1:f3:92:5a:a7:e3:f3:3a:22:a3:dc:ac:
75:75:ee:76:02:75:2a:5f:79:0c:ed:8d:85:09:4d:
a7:5c:86:fd:4a:79:03:0d:70:a5:43:82:12:2e:ad:
95:d8:fc:f0:98:dc:03:fa:a4:49:7b:9a:20:7e:96:
c5:47:5b:b0:12:ac:b2:b2:28:c3:5f:ab:a6:a6:8a:
4f:be:94:43:dd:60:86:f7:53:82:f7:4d:ab:f2:50:
fe:90:47:c5:4b:96:ff:40:06:15:8e:07:af:98:0d:
b3:ab:af:85:c6:1b:b3:cf:7b:b6:8d:25:05:1d:01:
c7:f8:00:29:76:b8:c6:a7:0e:8e:1b:6a:ca:d4:9e:
5d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:47:DD:1D:EC:17:0B:61:49:17:05:F7:80:56:AE:27:DD:2F:27:69
X509v3 Authority Key Identifier:
keyid:89:AE:D2:CF:F8:CE:31:B3:34:F8:3A:0B:30:5F:EE:F0:1D:71:DA:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:ef:ad:8e:36:88:b7:e2:a4:f7:fc:94:b3:9f:dd:f3:a7:f1:
f7:dd:2f:1b:2f:db:0b:8f:92:cf:4b:12:56:ce:92:39:4a:8e:
7b:29:66:b8:4e:05:fc:8a:c4:60:90:be:c9:8a:a1:93:a9:ce:
55:3b:cb:f6:e1:9c:e1:59:e7:f4:ab:e2:31:4e:7a:71:5a:bb:
da:0e:c2:bf:61:a7:7f:87:bc:17:0c:e4:6e:3d:aa:8a:39:47:
f3:02:76:40:91:06:f6:ef:82:21:4b:55:5d:44:e1:05:b9:37:
26:55:16:36:c1:19:81:06:c6:0b:5f:87:6b:0c:01:4a:2a:70:
67:90:07:22:80:a6:64:7f:5c:3c:44:05:c1:66:47:cd:0b:f8:
d0:ad:9f:1a:df:73:ca:40:e9:8c:2f:3c:08:47:2f:b1:5e:15:
59:41:fc:a3:82:4b:6b:83:96:46:96:c5:46:99:4d:c8:a7:1b:
a2:9e:4d:18:c4:4f:62:64:24:05:8b:b0:5e:24:69:c8:04:97:
16:44:19:10:e6:6e:81:d2:dc:2d:89:54:05:39:83:f6:d1:b8:
e0:fa:e0:fb:04:9d:64:cb:c1:6d:fb:c0:cc:6b:a7:fc:5d:03:
61:53:30:bc:89:b7:ac:70:93:df:b9:fd:f8:8b:ad:ea:f6:81:
5d:87:c6:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:08:19 2026 by rpki-client