Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/3e41d5-c7f1-4637-b930-184586602887/1/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.mft
File: IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.mft (raw, json)
Hash identifier: MBCjPHpxtcinkbqzrcc8+NHd70vwoKL35iIy3f0JaWU=
Subject key identifier: 15:4F:63:EC:4E:A5:1B:0C:19:11:14:F3:A2:F4:C8:C3:CE:84:81:46
Authority key identifier: 21:8A:F2:6F:9A:36:65:3F:4D:99:67:19:D4:A4:10:FE:84:AF:48:61
Certificate issuer: /CN=218af26f9a36653f4d996719d4a410fe84af4861
Certificate serial: 019D9BBE75B26549B917B533A761E0176B62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/3e41d5-c7f1-4637-b930-184586602887/1/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.mft
Manifest number: 0787
Signing time: Fri 17 Apr 2026 14:00:43 +0000
Manifest this update: Fri 17 Apr 2026 14:00:43 +0000
Manifest next update: Sat 18 Apr 2026 14:00:43 +0000
Files and hashes: 1: 0ID-AnVUhFUiMemh1sbAkCtku7k.roa (hash: AbzQcdesjBBWIHYWJC9zLMR7O1b0U/MWLPaNjpcLcdw=)
2: IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.crl (hash: SUkiOhWwudKUS7HJdLyXzJfKLGaG+MZl0VqnOU5uyhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/3e41d5-c7f1-4637-b930-184586602887/1/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/3e41d5-c7f1-4637-b930-184586602887/1/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:75:b2:65:49:b9:17:b5:33:a7:61:e0:17:6b:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218af26f9a36653f4d996719d4a410fe84af4861
Validity
Not Before: Apr 17 14:00:43 2026 GMT
Not After : Apr 18 14:00:43 2026 GMT
Subject: CN=154f63ec4ea51b0c191114f3a2f4c8c3ce848146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:75:5f:31:b7:6d:35:84:86:f3:11:bf:0e:af:
77:ba:cb:6a:26:13:cb:ab:fa:ac:db:5f:bb:c5:1d:
22:76:22:3c:dc:f0:ac:e0:cd:5a:8f:96:b3:d5:79:
62:56:22:52:95:1e:3f:f1:7c:71:0b:d7:8b:a1:87:
9d:3a:a1:3f:bd:ec:ef:88:2e:c1:d0:6c:5e:38:39:
4b:78:da:dd:e6:0b:1b:34:01:bf:35:7a:bf:d8:ea:
89:23:a7:b8:e8:1f:67:b4:f3:6b:48:ba:1b:2a:98:
65:63:30:76:1a:ae:bd:f0:b1:90:48:53:78:73:e9:
bf:fe:eb:1b:68:d5:b1:fc:32:5a:5d:c8:44:16:36:
7d:6c:8f:5d:ed:81:c2:64:ad:b0:54:f4:a1:6f:b6:
e7:d2:bd:f7:35:91:a7:3b:11:d5:43:40:63:cb:55:
14:e2:02:40:42:68:e5:d5:4e:ff:f5:0b:c3:c6:ad:
0f:56:60:c9:af:36:a1:4a:58:a8:00:3b:3b:9b:24:
ee:b4:29:c1:98:82:6a:91:0f:bd:f2:7c:56:8e:4e:
39:ee:b9:6f:0e:8b:a7:3c:7d:21:26:43:b0:d8:62:
9b:28:9b:79:0a:f4:00:5c:2f:36:b3:e5:d4:bd:03:
96:cb:9b:ed:b9:1a:f2:8e:59:88:c7:c8:91:3b:87:
26:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:4F:63:EC:4E:A5:1B:0C:19:11:14:F3:A2:F4:C8:C3:CE:84:81:46
X509v3 Authority Key Identifier:
keyid:21:8A:F2:6F:9A:36:65:3F:4D:99:67:19:D4:A4:10:FE:84:AF:48:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/3e41d5-c7f1-4637-b930-184586602887/1/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/3e41d5-c7f1-4637-b930-184586602887/1/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:c9:53:8a:c8:3c:55:48:9b:ca:a1:5a:26:da:f9:b4:37:08:
bb:94:4d:ad:a7:a9:69:a9:56:6e:f1:ee:b6:a5:96:63:c8:dd:
04:59:39:6f:2b:18:d7:8c:6d:8f:05:51:54:80:4c:64:8f:8b:
ec:f3:e2:c8:3d:16:3f:df:1b:01:5d:b2:cf:08:e4:37:48:2a:
d8:c3:43:3d:d4:d3:16:51:d0:87:e5:8c:a5:ca:2d:6a:c4:0b:
1d:5e:a1:78:76:99:1d:26:ff:46:d7:47:6b:23:fc:a5:98:22:
91:d1:da:70:f9:5a:44:91:1a:4b:c2:24:97:70:4c:de:1f:72:
79:4d:36:e5:95:ea:17:1f:78:e3:80:ad:4f:58:d1:18:4a:61:
6e:4b:11:9d:f3:ab:04:2c:f7:02:a3:f1:af:ca:46:66:3d:7f:
14:4f:9c:c1:bc:da:76:00:0e:b6:bc:f5:11:dc:98:b3:ad:a1:
67:55:c8:85:0c:ef:62:0b:8e:22:38:0a:ca:a3:83:f4:0e:66:
d1:20:7b:09:4e:15:20:a5:cb:69:6b:17:0a:91:19:bc:ed:7b:
bb:86:2f:ed:bf:44:41:53:89:b0:6a:fc:bb:d3:86:ad:f9:91:
98:b6:57:a8:21:0f:ea:70:e6:30:a3:9c:6e:e1:7a:81:ee:1b:
7f:c4:35:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:40:23 2026 by rpki-client