Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/571244-9c9a-43ac-930c-370c80769831/1/iJiSZOUPOa6IiuMnYQm7qALkWAE.mft
File: iJiSZOUPOa6IiuMnYQm7qALkWAE.mft (raw, json)
Hash identifier: HyCN8UMxCl5b56x9fHHCZEi4cceg8ZfG4J+uz/fhVxA=
Subject key identifier: 86:3A:97:95:6F:71:5C:66:9A:35:BC:EF:D3:03:FA:77:E4:AB:DE:09
Authority key identifier: 88:98:92:64:E5:0F:39:AE:88:8A:E3:27:61:09:BB:A8:02:E4:58:01
Certificate issuer: /CN=88989264e50f39ae888ae3276109bba802e45801
Certificate serial: 019D9B515D558193DCB25497A9F41259E154
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iJiSZOUPOa6IiuMnYQm7qALkWAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/571244-9c9a-43ac-930c-370c80769831/1/iJiSZOUPOa6IiuMnYQm7qALkWAE.mft
Manifest number: 055A
Signing time: Fri 17 Apr 2026 12:01:33 +0000
Manifest this update: Fri 17 Apr 2026 12:01:33 +0000
Manifest next update: Sat 18 Apr 2026 12:01:33 +0000
Files and hashes: 1: PatdG5AHcJXdhxLeM5tM5L_BcII.roa (hash: 5h1/nVhqLUoRO6qPdWe0A5C0Fr5YO1aWm/IO1htZdyc=)
2: iJiSZOUPOa6IiuMnYQm7qALkWAE.crl (hash: 8mdbH5CBxOkeK9Ck6WC+NOdNQneRabW2BKFfOhLsatc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/571244-9c9a-43ac-930c-370c80769831/1/iJiSZOUPOa6IiuMnYQm7qALkWAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/571244-9c9a-43ac-930c-370c80769831/1/iJiSZOUPOa6IiuMnYQm7qALkWAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/iJiSZOUPOa6IiuMnYQm7qALkWAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:51:5d:55:81:93:dc:b2:54:97:a9:f4:12:59:e1:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88989264e50f39ae888ae3276109bba802e45801
Validity
Not Before: Apr 17 12:01:33 2026 GMT
Not After : Apr 18 12:01:33 2026 GMT
Subject: CN=863a97956f715c669a35bcefd303fa77e4abde09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6b:30:6f:c1:60:c8:59:2c:de:07:a4:9b:79:
77:39:c5:1c:03:ff:49:3c:04:4a:3b:22:9c:b7:7b:
d5:e5:f2:4c:4d:e9:7d:4b:0d:0f:5a:0b:96:af:f8:
87:3c:09:4f:21:58:8c:c4:6d:00:23:26:1c:64:38:
f7:6c:e9:b7:21:d5:c1:ec:53:8c:ec:c8:35:00:b5:
af:64:dd:f6:bf:b5:bd:95:7a:73:8b:10:fe:56:71:
5f:2b:71:06:d1:65:03:70:d5:43:02:42:3d:83:5c:
0c:f0:55:9d:69:9c:b6:ea:6c:ea:d3:11:b6:8e:74:
d1:78:31:23:f3:54:ff:ce:31:1d:fa:24:25:d8:0d:
d7:06:67:1e:3a:3a:eb:5d:e9:5a:80:f2:89:74:ed:
fb:c9:93:12:36:f5:f3:3d:18:91:98:22:82:ce:e6:
2e:f1:02:3c:a6:ac:b9:5d:e0:5d:8d:cb:19:c2:a4:
87:da:0b:36:50:c4:2a:24:10:db:a0:b2:fb:c0:6a:
15:ad:dc:0c:92:10:c8:32:83:7f:86:ce:bd:1e:d1:
c5:67:5d:d6:ff:f8:33:aa:a3:a2:d6:7d:fa:c9:85:
e2:1c:85:53:83:a5:2c:9a:bb:81:51:73:7d:e1:2b:
72:c8:e3:7b:3e:60:dd:ba:2d:48:a5:d4:2c:6f:93:
2f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:3A:97:95:6F:71:5C:66:9A:35:BC:EF:D3:03:FA:77:E4:AB:DE:09
X509v3 Authority Key Identifier:
keyid:88:98:92:64:E5:0F:39:AE:88:8A:E3:27:61:09:BB:A8:02:E4:58:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iJiSZOUPOa6IiuMnYQm7qALkWAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/571244-9c9a-43ac-930c-370c80769831/1/iJiSZOUPOa6IiuMnYQm7qALkWAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/571244-9c9a-43ac-930c-370c80769831/1/iJiSZOUPOa6IiuMnYQm7qALkWAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:06:0c:c4:34:97:bf:9e:b4:78:d7:3d:ff:1a:f4:fa:d4:b1:
62:a3:c7:ba:25:84:96:9a:4f:a7:6a:e1:67:12:0b:64:8d:9f:
de:f2:c9:41:f8:ab:37:91:5d:8f:2a:d1:dc:3b:ec:a4:37:46:
28:47:f7:0d:71:ec:ec:25:9d:ff:7f:da:55:ae:87:17:43:55:
6c:42:ba:15:e2:03:3a:55:17:4d:30:1d:bb:59:9b:10:93:1d:
66:73:a0:2a:0b:fd:85:f3:01:19:66:25:7c:06:07:22:c9:f3:
0e:58:fa:4c:fe:ca:14:86:e9:aa:47:5e:3e:6f:00:51:ec:5a:
a3:66:7c:35:ad:49:bf:91:cf:f6:e0:9a:f7:65:c0:80:e5:d5:
b5:20:53:1e:80:3d:a4:c6:30:af:d6:9d:47:b3:27:4b:40:50:
54:e0:94:f6:7d:bd:de:fd:e9:ba:06:5a:9b:08:d5:ec:f7:82:
bb:1d:46:21:0a:35:8d:86:79:5a:8b:e4:d9:77:5d:39:66:b5:
5d:af:e6:37:74:79:c3:bd:04:3a:37:96:2a:d3:0f:79:30:e8:
ba:78:41:04:48:03:cd:db:22:13:23:61:81:77:4f:c3:0f:3f:
9c:f6:52:07:6d:9c:06:c7:31:dc:c6:0f:e2:0f:a2:cd:fc:48:
19:eb:a8:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:01:50 2026 by rpki-client