Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.mft
File: ixJLEklCpdfq1rt9N6ZOWMfm2kE.mft (raw, json)
Hash identifier: ms741T4AEg4tlwmck3GsSc4/vfwxRPk4WcER+j2bJ0s=
Subject key identifier: E2:F5:7E:6A:A1:13:38:6E:A1:35:EA:B1:82:48:B7:B1:BA:D6:87:83
Authority key identifier: 8B:12:4B:12:49:42:A5:D7:EA:D6:BB:7D:37:A6:4E:58:C7:E6:DA:41
Certificate issuer: /CN=8b124b124942a5d7ead6bb7d37a64e58c7e6da41
Certificate serial: 019DA3E6098EA1E4FDE3187680FD03ABC6B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ixJLEklCpdfq1rt9N6ZOWMfm2kE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.mft
Manifest number: 099A
Signing time: Sun 19 Apr 2026 04:00:54 +0000
Manifest this update: Sun 19 Apr 2026 04:00:54 +0000
Manifest next update: Mon 20 Apr 2026 04:00:54 +0000
Files and hashes: 1: 606JAzklsOqsRlrbcuzv28QnWpo.roa (hash: Ui6APTAkf1hdKOgIZctUG0CdW7HPm77LlztW2I8sf0k=)
2: ixJLEklCpdfq1rt9N6ZOWMfm2kE.crl (hash: /cV68oCCCR0k2jBDLl6jZ2mIqtMMpd7s5OxYnmCQEO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ixJLEklCpdfq1rt9N6ZOWMfm2kE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:09:8e:a1:e4:fd:e3:18:76:80:fd:03:ab:c6:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b124b124942a5d7ead6bb7d37a64e58c7e6da41
Validity
Not Before: Apr 19 04:00:54 2026 GMT
Not After : Apr 20 04:00:54 2026 GMT
Subject: CN=e2f57e6aa113386ea135eab18248b7b1bad68783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:7a:50:e2:46:17:ed:4d:cf:e9:1c:a8:10:df:
2d:03:21:f7:7d:3b:81:1c:2a:8b:6f:9f:b3:ca:e8:
e5:c4:f7:21:7c:68:a9:7f:c3:3e:8b:85:70:10:9a:
7f:7a:e3:d8:17:04:08:03:60:c8:70:f6:4b:2f:c2:
4b:55:5a:ca:78:9e:ca:af:8b:2d:20:31:36:0d:08:
d3:55:e1:65:2d:7e:34:c1:fd:51:bc:e6:fe:ab:53:
8d:71:cd:f1:81:93:08:1b:53:a8:68:ef:f8:5a:29:
ef:69:b7:e7:2e:bc:39:b8:55:e9:ef:60:f1:4f:0b:
10:3b:4c:99:ac:db:95:8e:42:8b:8a:b0:d2:03:cb:
32:36:13:89:2e:6d:68:43:41:18:91:04:46:57:c9:
c1:b4:c3:c7:b5:66:14:4c:c2:70:26:b8:4d:30:4d:
e4:50:b1:41:f3:db:cd:1a:ed:9e:a5:dc:da:18:b4:
7e:b1:ae:19:e9:8e:78:19:ba:91:af:d5:28:ae:1c:
9e:f7:78:e3:49:a0:c5:d5:df:43:b2:54:06:69:34:
d0:5a:20:2c:52:de:4a:f5:aa:66:0d:de:05:38:8c:
50:df:12:dc:a8:cc:3c:e8:0f:9f:af:2f:b1:7f:6a:
a5:75:9c:01:c1:fb:a0:13:c6:0a:7c:6a:f7:01:d9:
8a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:F5:7E:6A:A1:13:38:6E:A1:35:EA:B1:82:48:B7:B1:BA:D6:87:83
X509v3 Authority Key Identifier:
keyid:8B:12:4B:12:49:42:A5:D7:EA:D6:BB:7D:37:A6:4E:58:C7:E6:DA:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixJLEklCpdfq1rt9N6ZOWMfm2kE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:2f:0e:54:02:04:19:0c:81:be:02:32:bf:48:27:48:75:7a:
d4:29:da:e9:80:b1:2d:33:b5:7a:c9:5b:17:60:54:ef:9c:91:
58:c6:e9:fb:c2:21:24:66:fa:45:14:8a:ea:8e:f3:30:03:c2:
02:97:f2:db:06:43:05:45:d6:f1:12:b9:70:e9:02:b3:d1:d0:
e1:41:75:42:cc:82:43:5d:37:a5:8d:98:79:a4:95:cd:18:19:
a8:bd:8a:1a:71:5e:41:d2:1f:62:1c:f2:99:0d:bc:02:2e:8d:
3b:0d:0b:b8:f2:34:06:64:3e:cb:27:d7:5a:85:48:c0:c2:3c:
96:55:78:7a:3c:36:9b:c7:33:cc:c6:39:09:49:d9:0f:c5:e2:
67:20:cf:58:bb:c7:a0:74:51:4a:73:6e:50:11:01:02:ba:c8:
42:53:72:39:85:8e:d3:c3:3c:a3:97:2c:76:db:99:e5:b8:03:
41:da:2f:4c:e3:2f:04:c9:9d:b7:75:2c:0c:d5:9a:56:ed:d7:
d4:74:4d:a3:5d:45:35:50:d6:66:33:c9:e2:a6:95:51:fe:ec:
23:bf:a6:a8:99:68:77:7b:e0:54:12:f4:ba:4c:54:c3:b5:f2:
68:fd:93:9a:40:cb:1c:b7:eb:ac:d5:ef:33:5d:02:91:e7:23:
c4:02:5c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:42:29 2026 by rpki-client