Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft
File: IXt6sGK8gos0jQUwbmU1R0i51tY.mft (raw, json)
Hash identifier: r8rt9TemRkojHBLY1so31hqH7Gnkl7QdRKT/yjFJEXY=
Subject key identifier: D3:EB:2A:B3:02:9B:59:A7:DC:3D:27:9F:A2:3F:A9:23:60:3E:D2:A4
Authority key identifier: 21:7B:7A:B0:62:BC:82:8B:34:8D:05:30:6E:65:35:47:48:B9:D6:D6
Certificate issuer: /CN=217b7ab062bc828b348d05306e65354748b9d6d6
Certificate serial: 019D9D75DEB73FCA6517EBFF2470ED87374B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft
Manifest number: 0C7B
Signing time: Fri 17 Apr 2026 22:00:40 +0000
Manifest this update: Fri 17 Apr 2026 22:00:40 +0000
Manifest next update: Sat 18 Apr 2026 22:00:40 +0000
Files and hashes: 1: Ha1zzuR5phsP43HrNuYV02K8JmM.roa (hash: OIS0Kv+EMSNX8skAuIawL3We9Kkncv5+iFQyWWdpmbk=)
2: IXt6sGK8gos0jQUwbmU1R0i51tY.crl (hash: zMVoMfeZTH7h6SdW3zGpth24hIDtScKR5lPeW5uFw7o=)
3: SqHxe2uwvaoACopO4_oazg_nels.roa (hash: 9zPi+ENkqVQXBQ+5cr5nLO5x0488pkDK6RTbeEiOUlc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:75:de:b7:3f:ca:65:17:eb:ff:24:70:ed:87:37:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=217b7ab062bc828b348d05306e65354748b9d6d6
Validity
Not Before: Apr 17 22:00:40 2026 GMT
Not After : Apr 18 22:00:40 2026 GMT
Subject: CN=d3eb2ab3029b59a7dc3d279fa23fa923603ed2a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:44:6d:c6:50:ee:db:88:fb:4a:2d:4b:ab:be:
92:de:da:77:08:fa:c1:63:dd:52:09:11:4b:76:cf:
11:66:fc:90:8d:ab:a1:ab:fb:2c:60:f8:f6:18:0c:
52:a4:18:6a:0c:2d:8e:da:20:be:0d:89:9a:1e:4f:
3f:82:37:a5:7f:48:ae:2c:10:76:b8:f0:7e:70:af:
ed:71:01:85:37:23:70:6e:92:6e:e3:39:ce:a9:b9:
0e:94:99:90:e5:5a:d7:d1:a2:95:2a:fe:e1:45:f7:
65:59:f3:e7:80:ef:af:7d:c3:d8:0e:ef:38:98:d3:
5e:76:3b:58:60:de:16:3a:48:0c:2c:90:78:1f:17:
3d:4e:5b:2f:f1:aa:7e:d5:82:51:62:70:62:bf:a5:
de:ca:b1:36:bd:04:d3:48:b8:0b:af:61:a8:7b:a6:
38:9b:a9:b6:1c:a9:d5:4c:a1:f0:cf:90:50:01:b7:
5b:db:2b:20:2b:70:ce:c0:c2:d1:ef:92:a6:b0:71:
6f:d3:34:6f:d6:4d:27:5d:b9:06:7e:b4:ef:eb:a4:
11:36:90:a3:9e:b9:6c:bd:6f:b6:78:ac:c9:6e:30:
a9:d2:4f:31:84:4c:c4:f5:0a:38:77:4f:a4:3d:b6:
ae:4f:00:b0:b0:70:1a:7f:64:96:ce:9d:d8:dc:12:
1b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:EB:2A:B3:02:9B:59:A7:DC:3D:27:9F:A2:3F:A9:23:60:3E:D2:A4
X509v3 Authority Key Identifier:
keyid:21:7B:7A:B0:62:BC:82:8B:34:8D:05:30:6E:65:35:47:48:B9:D6:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:ad:97:d9:c6:08:82:59:de:02:fa:bb:c3:89:76:43:6d:4b:
e4:cd:15:23:0e:8d:cd:fd:b5:f6:af:b8:5d:9e:9a:86:09:1f:
f8:f8:df:36:77:2d:14:e4:95:89:1c:0f:7a:6b:48:20:62:3c:
c1:cf:d4:09:02:5c:d5:c8:a0:4b:24:ef:0d:0e:b4:63:2d:68:
a4:94:4e:fe:25:c5:90:09:91:26:44:cf:c3:2f:76:0f:e4:04:
82:35:0d:06:34:af:16:62:d3:84:a6:ef:04:62:fa:03:80:f1:
dd:1b:c1:cd:00:f2:57:a1:39:27:36:f7:2a:49:7d:7d:44:7d:
07:fc:71:be:f7:f6:78:bc:5c:b4:1b:c1:2d:ea:42:fb:e2:49:
0e:72:7f:b3:58:fc:67:07:79:bd:86:52:f0:ec:a6:4b:87:b5:
19:51:2f:1a:c2:d0:ba:89:42:1d:8c:26:bd:93:96:d1:46:bf:
6c:75:26:27:22:76:cb:55:a7:21:9d:9d:40:41:2d:1c:48:48:
15:08:8d:59:e4:a2:57:eb:84:a1:f4:ac:81:90:a2:8d:a1:b3:
35:d2:54:2a:b6:ad:c1:f9:99:f0:b1:b9:55:40:7c:da:a5:c3:
6f:da:9d:b6:90:f2:ee:7b:17:96:74:70:9e:dd:4d:38:46:d9:
04:40:62:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 05:38:15 2026 by rpki-client