Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/39adc9-db28-4b1e-bf6e-a08bf2c43460/1/iKslD4208gR6QBWFwmTzjA4ih_4.mft
File: iKslD4208gR6QBWFwmTzjA4ih_4.mft (raw, json)
Hash identifier: So9kEjyckf4/XyFsWL++72H7GcEckaDS/QUPCk//Kvs=
Subject key identifier: A9:EC:9D:57:71:77:44:9F:D9:89:EF:71:2F:AA:C4:8C:C4:30:88:98
Authority key identifier: 88:AB:25:0F:8D:B4:F2:04:7A:40:15:85:C2:64:F3:8C:0E:22:87:FE
Certificate issuer: /CN=88ab250f8db4f2047a401585c264f38c0e2287fe
Certificate serial: 019D99D02F978D94D91209C4E8520301AAC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iKslD4208gR6QBWFwmTzjA4ih_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/39adc9-db28-4b1e-bf6e-a08bf2c43460/1/iKslD4208gR6QBWFwmTzjA4ih_4.mft
Manifest number: 16EE
Signing time: Fri 17 Apr 2026 05:00:50 +0000
Manifest this update: Fri 17 Apr 2026 05:00:50 +0000
Manifest next update: Sat 18 Apr 2026 05:00:50 +0000
Files and hashes: 1: iKslD4208gR6QBWFwmTzjA4ih_4.crl (hash: SfjXozxC+RmSA0gug3iqacQ0Rf4XzL0xL3AvX2GzlgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/39adc9-db28-4b1e-bf6e-a08bf2c43460/1/iKslD4208gR6QBWFwmTzjA4ih_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/39adc9-db28-4b1e-bf6e-a08bf2c43460/1/iKslD4208gR6QBWFwmTzjA4ih_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iKslD4208gR6QBWFwmTzjA4ih_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:2f:97:8d:94:d9:12:09:c4:e8:52:03:01:aa:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88ab250f8db4f2047a401585c264f38c0e2287fe
Validity
Not Before: Apr 17 05:00:50 2026 GMT
Not After : Apr 18 05:00:50 2026 GMT
Subject: CN=a9ec9d577177449fd989ef712faac48cc4308898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8b:71:dd:ed:35:99:cb:8c:7a:b8:52:1e:44:
5d:e9:cd:07:cb:14:5f:8e:06:4d:16:ce:90:a6:3b:
83:91:f3:91:25:5d:d6:a9:47:41:df:d4:37:6e:8e:
03:dc:74:78:07:98:99:30:60:2c:95:8a:eb:a1:93:
94:c0:eb:4a:c7:a5:4f:09:59:7f:34:f7:fe:83:cf:
f3:44:f8:e8:33:7a:cb:d6:55:d3:95:c7:94:cc:6f:
a1:db:93:7f:80:91:e6:af:cc:b4:08:70:fd:16:71:
02:d9:cf:32:cd:a7:50:64:e3:7a:da:ff:ec:dc:01:
cb:f9:02:0a:0d:18:17:4a:a3:1e:64:4e:b2:b8:ff:
7a:0a:46:48:67:01:27:93:8a:dc:2d:00:aa:06:ef:
6a:ea:15:6b:3b:90:59:b3:7a:c5:60:13:72:f8:fe:
7a:9e:41:d8:b3:79:8a:42:66:4c:42:04:d7:b2:68:
5a:b5:b5:d5:fa:42:2b:7a:9f:ff:3c:24:e3:c6:7b:
b3:a1:2e:d1:92:fa:2f:87:af:1a:53:d4:7e:73:fd:
30:d3:8b:cf:e9:01:de:2f:20:04:97:27:89:54:21:
11:3c:33:c8:f6:8a:d1:8f:a1:4e:3e:79:1c:f7:68:
4c:f8:f3:b6:b9:cb:ce:50:74:1b:4c:79:d3:57:48:
39:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:EC:9D:57:71:77:44:9F:D9:89:EF:71:2F:AA:C4:8C:C4:30:88:98
X509v3 Authority Key Identifier:
keyid:88:AB:25:0F:8D:B4:F2:04:7A:40:15:85:C2:64:F3:8C:0E:22:87:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKslD4208gR6QBWFwmTzjA4ih_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/39adc9-db28-4b1e-bf6e-a08bf2c43460/1/iKslD4208gR6QBWFwmTzjA4ih_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/39adc9-db28-4b1e-bf6e-a08bf2c43460/1/iKslD4208gR6QBWFwmTzjA4ih_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:57:2e:9f:21:88:7c:47:3f:fc:a9:63:ee:e8:17:42:e0:2b:
64:fe:a9:9d:b8:a9:05:ea:aa:51:8b:b3:99:d3:40:02:3d:75:
fe:98:4b:ec:9a:44:65:5b:13:5a:da:e9:bb:14:f4:a9:1e:a6:
c1:15:34:66:d6:9c:cc:7c:e7:50:23:dd:52:46:ca:c8:a9:f7:
96:2f:8f:e8:3b:ba:2d:c6:95:08:a2:5d:4c:c3:20:ae:bc:fe:
3f:ff:15:15:d3:ed:2c:07:e4:45:b8:8c:08:59:63:09:ed:24:
71:79:af:e7:60:19:4b:fe:0d:fb:bf:6d:78:69:68:c3:ef:24:
50:a9:e5:2f:ed:4d:ee:23:f4:fb:b3:fe:98:1d:17:c4:c0:67:
fd:20:b2:a2:69:9e:11:f5:65:ea:40:ac:35:4b:95:90:78:11:
13:fd:95:ef:cf:59:6e:e0:19:b1:a2:85:c6:68:f3:ba:a8:26:
b8:e4:11:a7:12:67:0d:c2:c1:03:bc:a8:41:f1:48:f4:ec:ee:
ed:68:4a:e9:5c:e6:32:1c:25:00:5a:44:9f:45:3c:ab:73:a9:
79:6b:92:a2:43:e7:9f:6e:de:4b:29:3c:a1:65:32:90:02:a8:
39:d3:72:aa:64:e2:f8:e9:c6:64:55:56:aa:f8:17:78:84:3b:
35:18:14:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Z0C+XjZTZEgnE6FIDAarGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4YWIyNTBmOGRiNGYyMDQ3YTQwMTU4NWMyNjRmMzhjMGUy
Mjg3ZmUwHhcNMjYwNDE3MDUwMDUwWhcNMjYwNDE4MDUwMDUwWjAzMTEwLwYDVQQD
EyhhOWVjOWQ1NzcxNzc0NDlmZDk4OWVmNzEyZmFhYzQ4Y2M0MzA4ODk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmItx3e01mcuMerhSHkRd6c0HyxRf
jgZNFs6QpjuDkfORJV3WqUdB39Q3bo4D3HR4B5iZMGAslYrroZOUwOtKx6VPCVl/
NPf+g8/zRPjoM3rL1lXTlceUzG+h25N/gJHmr8y0CHD9FnEC2c8yzadQZON62v/s
3AHL+QIKDRgXSqMeZE6yuP96CkZIZwEnk4rcLQCqBu9q6hVrO5BZs3rFYBNy+P56
nkHYs3mKQmZMQgTXsmhatbXV+kIrep//PCTjxnuzoS7Rkvovh68aU9R+c/0w04vP
6QHeLyAElyeJVCERPDPI9orRj6FOPnkc92hM+PO2ucvOUHQbTHnTV0g5cwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKnsnVdxd0Sf2YnvcS+qxIzEMIiYMB8GA1UdIwQY
MBaAFIirJQ+NtPIEekAVhcJk84wOIof+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUtzbEQ0MjA4Z1I2UUJXRndtVHpqQTRpaF80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8zOWFkYzktZGIyOC00YjFlLWJmNmUt
YTA4YmYyYzQzNDYwLzEvaUtzbEQ0MjA4Z1I2UUJXRndtVHpqQTRpaF80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy8zOWFkYzktZGIyOC00YjFlLWJmNmUtYTA4YmYyYzQzNDYw
LzEvaUtzbEQ0MjA4Z1I2UUJXRndtVHpqQTRpaF80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcVcunyGI
fEc//Klj7ugXQuArZP6pnbipBeqqUYuzmdNAAj11/phL7JpEZVsTWtrpuxT0qR6m
wRU0ZtaczHznUCPdUkbKyKn3li+P6Du6LcaVCKJdTMMgrrz+P/8VFdPtLAfkRbiM
CFljCe0kcXmv52AZS/4N+79teGlow+8kUKnlL+1N7iP0+7P+mB0XxMBn/SCyomme
EfVl6kCsNUuVkHgRE/2V789ZbuAZsaKFxmjzuqgmuOQRpxJnDcLBA7yoQfFI9Ozu
7WhK6VzmMhwlAFpEn0U8q3OpeWuSokPnn27eSyk8oWUykAKoOdNyqmTi+OnGZFVW
qvgXeIQ7NRgUWw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:23:36 2026 by rpki-client