Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/IW66tPRvJU2V9JZbhKjPJBlrnJU.mft
File: IW66tPRvJU2V9JZbhKjPJBlrnJU.mft (raw, json)
Hash identifier: xIZorMmZvQ6+fRGw13By/AYg0zIv6oWA8rVV1FkTUY4=
Subject key identifier: 15:00:E6:C6:44:31:57:76:CF:BD:3F:ED:D7:75:A9:4A:DD:61:D2:D7
Authority key identifier: 21:6E:BA:B4:F4:6F:25:4D:95:F4:96:5B:84:A8:CF:24:19:6B:9C:95
Certificate issuer: /CN=216ebab4f46f254d95f4965b84a8cf24196b9c95
Certificate serial: 019D992B22FD774B1C721825C6F571797289
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IW66tPRvJU2V9JZbhKjPJBlrnJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/IW66tPRvJU2V9JZbhKjPJBlrnJU.mft
Manifest number: 07DB
Signing time: Fri 17 Apr 2026 02:00:34 +0000
Manifest this update: Fri 17 Apr 2026 02:00:34 +0000
Manifest next update: Sat 18 Apr 2026 02:00:34 +0000
Files and hashes: 1: IW66tPRvJU2V9JZbhKjPJBlrnJU.crl (hash: tHDVv6QD6kemnnIGNg1u7pQwiWk5K4stq/4acGuukvk=)
2: TGA4vVujs0yD_obPFPyktqNpDgc.roa (hash: 5S5Kx8RY4RfrsLwFClyqoZagN1DyIRqE+8qw4ESGtGA=)
3: vYa3Ih6LXEOuOYMk9rXJWrFe8TQ.roa (hash: cUJ90bZFPukFANzteUEP/DKwx2ymm3AfgIUKRxH9Byw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/IW66tPRvJU2V9JZbhKjPJBlrnJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/IW66tPRvJU2V9JZbhKjPJBlrnJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IW66tPRvJU2V9JZbhKjPJBlrnJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:22:fd:77:4b:1c:72:18:25:c6:f5:71:79:72:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=216ebab4f46f254d95f4965b84a8cf24196b9c95
Validity
Not Before: Apr 17 02:00:34 2026 GMT
Not After : Apr 18 02:00:34 2026 GMT
Subject: CN=1500e6c644315776cfbd3fedd775a94add61d2d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:47:d3:85:10:1e:d6:fc:49:30:4c:df:b5:44:
2f:f4:64:45:35:b1:2d:9f:c3:23:53:f7:d8:3c:37:
8c:07:9f:af:3d:9d:b2:ca:d4:4c:38:d8:0e:0a:f9:
e4:c4:08:38:8d:e7:1d:cc:bc:f3:f4:32:0f:ea:b0:
13:91:23:ca:e0:93:53:29:ae:62:ec:be:04:2e:35:
ea:7c:ba:df:ba:3f:fa:8d:c6:6b:86:db:37:a8:53:
c8:e5:90:62:e0:5a:b9:18:53:15:81:d2:a2:40:12:
32:c8:39:61:d8:aa:8c:1d:23:e2:97:86:2b:f1:10:
63:8b:91:9c:9c:02:ad:14:2d:8d:d6:5d:63:f1:23:
8d:8c:12:f7:17:65:86:ae:7b:1b:bd:75:c8:26:19:
50:26:e6:51:1f:55:70:af:59:89:9e:5c:cf:ef:4b:
6f:37:fd:25:1f:ea:70:6c:e8:40:47:6b:ae:71:c7:
f6:73:29:87:e9:20:26:60:38:7c:40:73:df:b8:35:
c2:d6:d6:a8:4a:72:37:27:b3:16:9e:22:8e:e1:79:
14:fa:30:03:62:04:1b:7a:b3:34:7f:48:51:3e:d6:
74:f3:95:4b:e1:a5:bb:a2:a8:d7:25:91:b9:b3:13:
fe:7b:e2:79:9c:d3:44:7f:12:38:81:2d:08:24:99:
28:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:00:E6:C6:44:31:57:76:CF:BD:3F:ED:D7:75:A9:4A:DD:61:D2:D7
X509v3 Authority Key Identifier:
keyid:21:6E:BA:B4:F4:6F:25:4D:95:F4:96:5B:84:A8:CF:24:19:6B:9C:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IW66tPRvJU2V9JZbhKjPJBlrnJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/IW66tPRvJU2V9JZbhKjPJBlrnJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/IW66tPRvJU2V9JZbhKjPJBlrnJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:7b:d8:5a:4b:f3:54:d8:04:44:ff:9c:cf:e0:2d:37:b3:7c:
df:7b:45:e1:bc:11:27:9b:86:57:76:2c:2c:64:ce:93:49:a8:
3b:ed:f4:1d:04:b4:e1:be:e6:c7:78:1c:ac:87:e9:e2:ec:90:
11:b5:1d:1a:59:c8:64:95:e1:57:07:c0:7c:a0:86:1b:e8:58:
73:71:9f:f4:42:87:90:62:66:01:d3:a7:0d:59:a1:e9:5e:17:
25:e8:e0:b3:1a:98:3c:a8:b2:d8:df:bf:b3:c6:75:14:2c:4c:
19:9c:1a:f3:19:30:20:9d:c3:b8:e2:3d:79:59:c5:20:31:4a:
ed:3f:1b:8c:4f:77:9e:7f:76:58:82:ed:3f:10:e6:d9:49:94:
b8:84:8c:75:7a:d8:4f:93:98:63:8f:47:ec:2b:4c:80:53:00:
51:fb:27:8d:3c:ac:f4:d0:20:2c:06:13:ff:0b:ef:30:dc:d4:
97:d4:f6:f7:9c:a6:7d:45:5e:63:1d:5e:f1:1f:da:a8:e5:8b:
0f:f7:b3:39:a7:bb:a8:d9:ee:8b:9a:7f:49:1e:0d:a7:ec:7f:
fb:73:15:3a:6b:07:00:39:42:23:5b:86:f3:aa:5e:d6:e5:eb:
bb:1e:3c:5c:52:c8:2a:4a:33:e8:62:33:d8:a9:a3:6f:b3:0d:
d7:f8:f9:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:50:34 2026 by rpki-client