Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/1f2c8f-8ed9-4b7e-aa1e-d3c4f5dcbe4c/1/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.mft
File: i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.mft (raw, json)
Hash identifier: Jzk7bwkQPx/mg1butkYo2wE3nur2FPTDOJxPMWygywY=
Subject key identifier: D2:E1:A4:1C:5A:25:3C:6F:9E:59:65:B0:96:97:50:C1:73:87:30:8E
Authority key identifier: 8B:8A:F6:AF:57:DD:FC:5C:7A:A8:28:CF:22:5F:98:DC:E9:59:04:A0
Certificate issuer: /CN=8b8af6af57ddfc5c7aa828cf225f98dce95904a0
Certificate serial: 019D99995E50004372F4AF926CBADAABF1D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/1f2c8f-8ed9-4b7e-aa1e-d3c4f5dcbe4c/1/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.mft
Manifest number: 0BCA
Signing time: Fri 17 Apr 2026 04:00:58 +0000
Manifest this update: Fri 17 Apr 2026 04:00:58 +0000
Manifest next update: Sat 18 Apr 2026 04:00:58 +0000
Files and hashes: 1: F7Rl3gkShjk9K5KCESdLS7DMA7I.roa (hash: c2n9H0jyH5wMRpTPvaViBcpdlnGbUmhYtVd+x1NbnoM=)
2: i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.crl (hash: TFDE3XO0hfiMXeYhbc/+GZy5ThNtxdf3Fs3egzdO7Dg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/1f2c8f-8ed9-4b7e-aa1e-d3c4f5dcbe4c/1/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/1f2c8f-8ed9-4b7e-aa1e-d3c4f5dcbe4c/1/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:5e:50:00:43:72:f4:af:92:6c:ba:da:ab:f1:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b8af6af57ddfc5c7aa828cf225f98dce95904a0
Validity
Not Before: Apr 17 04:00:58 2026 GMT
Not After : Apr 18 04:00:58 2026 GMT
Subject: CN=d2e1a41c5a253c6f9e5965b0969750c17387308e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f3:20:c1:3b:a0:27:8d:7d:8f:7a:62:d3:23:
e2:45:20:b6:c3:bd:74:25:7f:2f:d2:ac:69:90:6d:
da:70:97:ab:6e:6f:df:b5:1c:a4:78:10:ff:e2:e6:
ca:6b:fc:64:9a:b7:6a:38:eb:d8:c7:1f:5d:82:16:
25:c6:5a:25:c8:d1:f0:e6:65:a6:69:a1:ee:a4:d8:
23:8e:ea:26:d5:97:69:6c:7c:74:f5:24:7d:eb:5c:
f1:7c:6d:35:b9:c9:ed:1b:cb:8d:5b:8b:39:e8:c7:
e0:fc:63:3b:43:74:58:92:6b:d5:6e:fa:7d:57:8f:
a3:e3:6b:75:cf:30:97:49:a7:ed:4a:31:61:bc:3a:
18:43:ab:9c:d3:0e:72:b6:71:81:b1:0d:98:00:15:
89:bb:fd:d7:56:64:3d:e3:9d:78:8f:0f:59:d6:20:
1d:b6:d6:a0:71:57:10:e6:93:d4:2b:e9:ef:2d:17:
6c:8e:b7:53:08:7d:ea:a7:3e:6b:eb:6b:57:cd:15:
3c:95:04:8d:d0:b7:23:61:4e:22:8f:d5:5c:38:21:
3f:8b:89:9b:63:86:44:d6:dc:7f:ef:41:e9:09:78:
7c:0b:46:ef:a2:d9:f8:ef:91:3d:10:69:73:21:a2:
b1:db:27:28:ea:8e:af:cc:74:ec:e5:a9:f0:0a:b7:
23:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:E1:A4:1C:5A:25:3C:6F:9E:59:65:B0:96:97:50:C1:73:87:30:8E
X509v3 Authority Key Identifier:
keyid:8B:8A:F6:AF:57:DD:FC:5C:7A:A8:28:CF:22:5F:98:DC:E9:59:04:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1f2c8f-8ed9-4b7e-aa1e-d3c4f5dcbe4c/1/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1f2c8f-8ed9-4b7e-aa1e-d3c4f5dcbe4c/1/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:11:2e:88:27:39:33:97:b0:13:e7:ce:a8:65:42:78:65:7a:
90:72:33:9b:e7:46:86:fc:6e:1c:b0:75:fe:76:fa:8d:1f:5b:
a1:34:ea:03:36:ae:90:c9:70:35:73:47:c0:54:92:3e:be:03:
50:b8:dd:f5:78:c7:0b:8d:9e:6b:ff:11:29:d6:68:e9:0b:5c:
f3:4f:c3:a7:04:05:ae:4c:71:d9:2a:f3:8c:73:07:f4:de:8a:
62:74:59:bb:16:da:20:a2:4c:16:c1:31:1b:d8:26:26:eb:47:
4e:bc:5b:7c:ee:96:99:6b:9d:a1:75:d7:92:bb:24:b5:b2:1e:
1c:6f:6d:1d:3b:32:97:2e:9d:dc:1c:3c:e2:b7:4f:77:08:26:
e8:92:b6:7e:9b:74:1b:5a:2e:de:fd:35:b3:a9:57:45:50:84:
a6:96:57:14:fb:82:2d:e6:b4:d4:99:fe:38:bb:a9:84:14:33:
3a:0a:ca:db:77:a4:c8:73:b5:f7:c6:05:79:e8:a3:60:de:22:
30:38:41:aa:ad:df:a6:5a:9f:64:1f:75:63:9e:dd:97:66:8f:
b1:43:c5:fb:44:8a:bd:4d:77:17:a4:35:e4:ee:e9:bb:ab:71:
8f:05:87:f4:31:df:68:c0:cc:ac:96:92:5a:5a:5c:3a:cc:f6:
e2:e1:5c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:14:45 2026 by rpki-client