Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.mft
File: iXj_XaszxC2mX-Thq_vKTq-90qo.mft (raw, json)
Hash identifier: yoJHwlArJtDmQxi2CQZkLNNQ49FN5hgiFZ9sknK964I=
Subject key identifier: 01:16:CA:6D:15:B1:65:4B:53:71:13:8C:51:D9:BD:C8:FB:31:10:57
Authority key identifier: 89:78:FF:5D:AB:33:C4:2D:A6:5F:E4:E1:AB:FB:CA:4E:AF:BD:D2:AA
Certificate issuer: /CN=8978ff5dab33c42da65fe4e1abfbca4eafbdd2aa
Certificate serial: 019D99D04413F089262BA87937FB651760B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iXj_XaszxC2mX-Thq_vKTq-90qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.mft
Manifest number: 1470
Signing time: Fri 17 Apr 2026 05:00:56 +0000
Manifest this update: Fri 17 Apr 2026 05:00:56 +0000
Manifest next update: Sat 18 Apr 2026 05:00:56 +0000
Files and hashes: 1: IMFLS8lmXO1X5kPh5brIEnkKfS4.roa (hash: w30MlBbSWaBo/k7+866HLmrY83fawU5Z9usPbYOh250=)
2: P4iYo_pgPdMjfud17S1Pja-OB4g.roa (hash: V9YQ3Ly1AA0IvwxjFuA9aYy5KxQNhTDwIiK8jm1VIm0=)
3: iXj_XaszxC2mX-Thq_vKTq-90qo.crl (hash: YoCTUbbmKPfKV+tABtXCieOvriz2X2t0fGicCoLmW+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.mft
rsync://rpki.ripe.net/repository/DEFAULT/iXj_XaszxC2mX-Thq_vKTq-90qo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:44:13:f0:89:26:2b:a8:79:37:fb:65:17:60:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8978ff5dab33c42da65fe4e1abfbca4eafbdd2aa
Validity
Not Before: Apr 17 05:00:56 2026 GMT
Not After : Apr 18 05:00:56 2026 GMT
Subject: CN=0116ca6d15b1654b5371138c51d9bdc8fb311057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d5:a2:86:60:60:f2:1f:b5:cf:82:9e:60:ab:
82:71:68:cd:ae:7d:20:dc:95:0e:ea:e2:7d:c2:78:
15:d4:89:59:68:95:8c:b8:e3:ab:80:43:a2:37:58:
3f:f4:2f:c5:fc:c3:58:79:bb:96:67:5d:e1:82:51:
37:e3:1e:7f:c3:9e:9f:ac:69:37:52:55:cb:54:16:
65:e3:1e:67:77:82:08:46:12:bf:d8:ea:16:5c:9c:
99:5d:96:a4:e8:a2:9e:d0:17:55:cc:f9:2d:aa:bc:
5b:53:df:33:57:9b:0f:dd:1d:fb:ed:e9:3c:0a:2d:
bf:fe:46:45:af:31:f4:c0:f2:fa:78:45:5a:00:3a:
5a:de:02:ad:cf:c8:bd:aa:9e:39:88:bc:93:2a:1b:
1c:a7:5a:88:57:30:df:39:11:22:92:b3:d4:c4:d5:
69:9c:05:62:bb:74:45:0a:34:a6:5f:f6:87:a9:c1:
45:72:61:d9:74:09:33:67:1f:eb:a5:dd:4a:56:66:
a0:de:b1:da:15:ca:92:ed:b3:ca:e9:8c:a6:3a:18:
e4:0d:f8:66:de:1c:ef:8e:6f:4d:3a:96:d5:52:1a:
bc:d7:35:77:0d:f1:b0:05:6c:8b:9f:3b:17:4c:e0:
c5:11:6c:c3:5e:7d:78:59:2e:47:09:fe:b5:f6:2d:
aa:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:16:CA:6D:15:B1:65:4B:53:71:13:8C:51:D9:BD:C8:FB:31:10:57
X509v3 Authority Key Identifier:
keyid:89:78:FF:5D:AB:33:C4:2D:A6:5F:E4:E1:AB:FB:CA:4E:AF:BD:D2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iXj_XaszxC2mX-Thq_vKTq-90qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:2d:e7:cf:be:cc:3c:57:c9:6d:65:d1:cf:97:9d:0a:25:7a:
4d:1f:bb:f5:f8:12:0c:e1:b0:c9:9a:a9:d2:cc:d0:4c:17:53:
6d:2f:7b:2d:a7:3b:a9:8c:0a:cb:75:2a:18:42:0c:f0:58:77:
45:99:a2:84:7c:fb:fb:08:85:48:df:6e:88:4e:ee:3f:20:af:
ec:52:77:17:3b:35:c8:8e:b3:f6:e4:e1:b5:44:5a:e3:8a:01:
31:fd:3b:5d:dd:aa:13:12:a4:1d:9a:be:2f:18:2a:12:db:d6:
bb:cb:0f:34:c5:b9:4f:97:26:d8:ec:3a:06:af:7a:01:62:f8:
8c:56:de:58:28:d7:0c:07:26:d4:05:98:7e:17:3e:57:ac:34:
0d:1e:56:cf:8b:17:78:0d:2e:ab:5a:d2:25:a5:55:70:19:10:
c6:6e:cc:84:da:b5:96:2e:42:25:d5:69:67:7e:0c:3b:76:a9:
04:a6:a8:82:51:91:c9:d0:94:7a:f7:d3:ab:85:2b:4a:a0:26:
16:f3:91:e6:3e:4b:53:e3:7e:ce:6e:3b:00:ab:f9:35:18:a3:
38:f2:f5:4b:1d:ed:50:f4:84:19:3c:57:99:b6:8f:ae:8b:9a:
6e:11:c0:05:4b:08:0e:3c:52:5d:18:fd:1f:6d:96:07:f0:d7:
78:f5:91:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:00:47 2026 by rpki-client