Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft
File: iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft (raw, json)
Hash identifier: PkHluXKg8NON0LqFaWq0JA2r8YvRHUlx3fZdEMoc134=
Subject key identifier: 4C:FF:77:17:46:17:B7:C2:43:0A:E6:62:0F:1F:95:E0:3F:A1:FA:A4
Authority key identifier: 88:FF:4E:E6:23:D8:FA:B7:3C:90:1D:0C:BD:C9:3A:32:1E:9C:CF:B7
Certificate issuer: /CN=88ff4ee623d8fab73c901d0cbdc93a321e9ccfb7
Certificate serial: 019D99D0359A6AF21CE4032C5F3224D6A082
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft
Manifest number: 0C5C
Signing time: Fri 17 Apr 2026 05:00:52 +0000
Manifest this update: Fri 17 Apr 2026 05:00:52 +0000
Manifest next update: Sat 18 Apr 2026 05:00:52 +0000
Files and hashes: 1: WDCEfBOgZu0IS0tXVscqDchFouE.roa (hash: M77yLF1D375mORfB1s9NJJsYDZZdRI/2B/Q2R1Rr0oU=)
2: eHFFve7oB3P4jI8nEd4tmbXombs.roa (hash: 2jkRmBwjqx2G1TPqQBkiFukmoNh6yKO3uMYlkbOFlyk=)
3: iP9O5iPY-rc8kB0Mvck6Mh6cz7c.crl (hash: cptk/NAcnxfbrGLYiwPrNBnP/p9M5qDpnM6jOnc13hU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:35:9a:6a:f2:1c:e4:03:2c:5f:32:24:d6:a0:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88ff4ee623d8fab73c901d0cbdc93a321e9ccfb7
Validity
Not Before: Apr 17 05:00:52 2026 GMT
Not After : Apr 18 05:00:52 2026 GMT
Subject: CN=4cff77174617b7c2430ae6620f1f95e03fa1faa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:ba:4b:79:5c:08:30:31:ab:a3:ab:c5:90:52:
8e:d1:b2:09:82:c3:28:9e:96:ae:b3:00:7d:30:f0:
fc:e4:03:ea:26:ff:06:71:a6:0b:43:8f:ed:20:a1:
b6:ed:5d:6f:4d:f2:8d:b5:b9:95:37:dc:fa:f3:cc:
ed:6f:da:58:62:cf:22:35:ff:b6:7c:85:c9:6e:02:
3d:48:7c:58:d8:12:cd:61:d3:eb:24:6b:63:08:23:
d7:ea:5c:d4:db:5e:7f:2e:42:31:c2:74:9a:f1:14:
97:80:85:af:fd:f6:5f:0d:01:9b:72:dd:7d:13:b6:
3b:1b:e2:93:ec:77:67:31:66:b8:0e:53:9c:69:0c:
0b:4c:13:04:36:bf:99:7e:b8:17:d5:1e:65:25:fe:
51:6f:32:9a:ac:4e:6e:e5:8f:29:1b:60:77:6e:76:
ac:96:7a:9c:06:b8:c6:70:75:e0:f7:66:8c:9d:af:
16:53:68:cd:5f:35:06:2e:0c:a5:cf:e2:be:de:9c:
57:3b:ae:cf:fa:f6:23:f9:77:9b:27:dd:fc:3f:f4:
d6:ac:ba:d7:a0:81:1a:f2:ce:c6:ab:79:6b:b8:44:
ad:5b:7b:92:c6:1e:d4:69:43:eb:64:ef:ad:0c:71:
95:e4:3b:33:cb:d9:41:ea:a8:a3:9a:fa:b8:19:8c:
91:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:FF:77:17:46:17:B7:C2:43:0A:E6:62:0F:1F:95:E0:3F:A1:FA:A4
X509v3 Authority Key Identifier:
keyid:88:FF:4E:E6:23:D8:FA:B7:3C:90:1D:0C:BD:C9:3A:32:1E:9C:CF:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:62:7f:09:24:0b:31:eb:51:ff:b8:36:6a:32:a3:d7:c3:f8:
95:97:9a:fc:b0:f2:7c:28:15:27:6d:28:a2:56:d6:7d:40:28:
6a:68:6f:f3:4e:e3:96:74:64:77:dd:eb:c5:4e:26:36:c4:58:
44:1b:a3:f6:77:3f:31:7d:00:d6:28:90:20:bf:16:ce:1b:50:
d1:05:2c:7e:4a:8f:23:cc:d2:53:95:37:f4:b5:90:ad:84:cc:
ea:d5:59:6c:af:76:b6:f2:94:f7:da:3b:a7:d1:d3:fc:db:5b:
c7:10:38:71:af:f1:20:b8:f0:bb:07:68:71:ba:d2:88:4b:23:
5e:6d:19:6f:1d:aa:bc:78:b2:16:82:f9:4f:9f:72:d9:83:d5:
89:53:bc:c7:bc:1c:30:20:54:58:ff:de:a0:e7:02:82:8d:d8:
12:cf:06:32:23:b9:f6:a7:5d:c8:b2:bb:de:94:50:95:5b:38:
0e:f0:9d:cf:37:ce:f7:02:84:b5:6a:a4:e3:dd:f9:34:1b:3c:
be:88:be:bb:94:fa:aa:5c:15:10:80:1a:de:42:43:54:bd:c8:
d3:52:f5:a3:01:bf:9f:00:a4:59:51:f0:5e:27:7f:b7:58:73:
89:9e:4c:49:ab:3f:62:9d:cc:c3:0a:30:66:25:f4:72:77:68:
ef:ee:ea:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:44:36 2026 by rpki-client