Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.mft
File: i024ekl6Fbp5pwbRLukExESdG1U.mft (raw, json)
Hash identifier: aC76bYYBvRfeRUSUucwRrwOGNp6OHjRY/Ww3n9ksvak=
Subject key identifier: 2A:93:1D:90:E0:94:B0:56:C4:0D:3D:04:9D:88:65:D5:10:49:FA:32
Authority key identifier: 8B:4D:B8:7A:49:7A:15:BA:79:A7:06:D1:2E:E9:04:C4:44:9D:1B:55
Certificate issuer: /CN=8b4db87a497a15ba79a706d12ee904c4449d1b55
Certificate serial: 019D9D3FA4410C6DF475F678149F37D23F05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i024ekl6Fbp5pwbRLukExESdG1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.mft
Manifest number: 0371
Signing time: Fri 17 Apr 2026 21:01:26 +0000
Manifest this update: Fri 17 Apr 2026 21:01:26 +0000
Manifest next update: Sat 18 Apr 2026 21:01:26 +0000
Files and hashes: 1: 2KUHS5LVkDhMjwhw1VzfC6cPGAc.roa (hash: 1jH7/SA5/GdwWT+Ps3WcqV+9OYqbYvLUuoLuw+3ezww=)
2: i024ekl6Fbp5pwbRLukExESdG1U.crl (hash: MVcr8AaHRJGX1qfY2ZfF9uHuV6CunHSIt4O3YpF4Fjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/i024ekl6Fbp5pwbRLukExESdG1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:3f:a4:41:0c:6d:f4:75:f6:78:14:9f:37:d2:3f:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b4db87a497a15ba79a706d12ee904c4449d1b55
Validity
Not Before: Apr 17 21:01:26 2026 GMT
Not After : Apr 18 21:01:26 2026 GMT
Subject: CN=2a931d90e094b056c40d3d049d8865d51049fa32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c0:7f:b7:ac:80:a6:4d:54:4d:c3:78:3c:6a:
dd:38:e9:10:a9:fe:6b:58:8a:f2:7c:bd:e4:12:85:
57:9b:a0:4d:0c:4a:37:29:8f:c7:90:91:1d:0a:74:
be:15:00:9f:14:df:f7:04:0f:4d:44:18:bb:30:c8:
1f:d7:7d:1e:6b:03:1a:d2:16:f5:83:40:37:a7:e1:
e4:b1:4e:cf:10:f0:26:ea:2d:a1:25:3f:c6:ba:14:
d1:d1:4b:27:78:b3:69:bc:2e:0a:d4:be:47:95:29:
d1:43:58:d4:3f:8e:f3:24:ba:34:36:20:fa:3a:e6:
26:2b:7b:f4:96:97:9a:8e:37:e7:52:e8:9e:d0:30:
12:5d:a0:2d:c0:bf:4b:16:0c:61:de:89:5c:a9:2b:
82:8b:cb:ae:21:32:8c:35:9e:7f:1f:be:83:d1:f9:
0e:68:39:a4:c9:3f:b0:68:4e:01:78:23:4e:76:cd:
75:a3:7c:87:68:62:2d:65:be:e6:3f:f3:20:80:f0:
75:46:1c:2f:d7:b0:e4:65:bf:ba:bf:b6:b0:e1:ba:
a8:d5:0d:95:74:92:8f:06:a8:a8:12:34:6e:16:1b:
72:a1:07:06:2a:f2:88:f5:94:7c:b6:8b:94:1f:6a:
fc:e7:24:8d:03:e3:5c:35:f1:e5:77:0b:35:7f:ff:
a2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:93:1D:90:E0:94:B0:56:C4:0D:3D:04:9D:88:65:D5:10:49:FA:32
X509v3 Authority Key Identifier:
keyid:8B:4D:B8:7A:49:7A:15:BA:79:A7:06:D1:2E:E9:04:C4:44:9D:1B:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i024ekl6Fbp5pwbRLukExESdG1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:d5:1c:3e:4f:52:40:2a:4e:03:fe:c4:d6:32:e1:e6:76:56:
90:c8:1a:03:b2:21:1b:07:51:23:ae:2c:90:21:6c:80:f5:2d:
7d:e9:56:01:cc:c3:08:63:f3:1d:e2:3c:5f:e6:59:ef:63:a3:
8d:4c:05:cb:80:fc:fd:43:1c:e2:0b:10:43:b3:ca:76:c6:94:
d5:8f:8a:a9:5c:6e:d1:26:8e:26:eb:05:3e:2b:4d:8e:db:d4:
74:fe:f9:dc:3e:0c:96:3c:c9:c3:38:f1:da:35:95:c0:ed:b7:
01:a3:82:ef:c2:ba:a8:06:0c:a2:fc:a8:00:71:87:cb:a2:03:
53:04:25:1a:ec:40:2b:84:10:9d:df:fd:4e:6a:63:f8:91:58:
19:08:17:4c:bc:af:85:40:ed:c1:bb:0e:f4:8d:b1:c7:3f:f9:
f2:cc:5d:04:12:e0:01:f8:95:f3:bc:51:b6:ac:70:cc:66:33:
45:11:76:8f:1d:30:f6:e8:67:3f:17:be:6f:03:9d:4d:01:61:
8d:d6:3e:96:dd:3f:ff:38:8e:04:f7:c9:1a:dc:6b:ca:61:ee:
d2:d0:10:14:89:55:3f:cb:d0:82:59:46:76:72:d1:bd:41:ec:
7d:5e:37:c8:8e:60:b8:b9:a2:20:79:09:ea:b3:f9:3e:2c:7f:
77:e5:7b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:00:40 2026 by rpki-client