Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft
File: I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft (raw, json)
Hash identifier: T1Q3kLRS852ckpRfaH7QQL2zNA7RDfBoWCAEyTvWN78=
Subject key identifier: FD:32:AF:F5:4A:94:BC:2C:12:C8:35:3D:BF:51:70:69:31:EC:B2:E3
Authority key identifier: 23:7C:83:44:7D:17:18:33:80:F4:89:BC:94:6C:8B:9E:30:0F:FB:1D
Certificate issuer: /CN=237c83447d17183380f489bc946c8b9e300ffb1d
Certificate serial: 019D992B602C4FD56841309418C5820C5858
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft
Manifest number: 1627
Signing time: Fri 17 Apr 2026 02:00:49 +0000
Manifest this update: Fri 17 Apr 2026 02:00:49 +0000
Manifest next update: Sat 18 Apr 2026 02:00:49 +0000
Files and hashes: 1: I3yDRH0XGDOA9Im8lGyLnjAP-x0.crl (hash: JZWMZqsIgLXCfsLkSDPeAjg9CW/BQZvqDJsOWn9aoYY=)
2: OEUQTsVKrLP-lQTQ6AZOPlYIssY.roa (hash: y4n6H8QWfTANHQ4V6doqPirRmfV8G8F5c8X9riuhcaE=)
3: Q11uKj3FZslGnPxLmnv1hIW3b48.roa (hash: czmZUe0UuJfveUL66FQWbR/8EoerZBPm+456KZ7ESgU=)
4: VqflXfUXT1r0F0vbFqX9njzAbjI.roa (hash: orkUX8LGXJNzs24vjBzkiZQ785fRhIrV2ujjICNJPbM=)
5: kprspPA2Qu5boxnWzJ_lU9Ab0AE.roa (hash: gEFYkhBGdlaWlWOzwy8lZShF5geJiJozavQlsbuA1Tk=)
6: sE_-Zfk_DwyvOa_qt-EocnU4lFc.roa (hash: euipXRTMWnefQBmfrbhq1BmgDtDdCzDjxCD9mCNPfqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft
rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:60:2c:4f:d5:68:41:30:94:18:c5:82:0c:58:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237c83447d17183380f489bc946c8b9e300ffb1d
Validity
Not Before: Apr 17 02:00:49 2026 GMT
Not After : Apr 18 02:00:49 2026 GMT
Subject: CN=fd32aff54a94bc2c12c8353dbf51706931ecb2e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bb:16:a2:f9:20:38:a2:d7:9f:37:c6:e2:6b:
36:1d:f4:80:2e:d8:ae:e6:03:05:a2:7b:04:8c:9d:
54:50:9c:bb:e6:83:6f:07:cf:a3:b8:d4:e3:82:c1:
92:92:46:e1:d1:47:73:42:75:af:fc:be:ee:4e:2a:
8e:bf:3f:b1:68:78:9d:cd:13:73:57:0a:47:95:5b:
41:16:18:8c:dd:e3:b6:25:94:d9:3e:5e:bc:c0:b0:
79:19:57:01:29:5f:5c:9c:b7:c8:cc:ef:c0:29:f7:
f8:94:91:5e:af:e7:b8:83:7c:6d:b0:87:b0:9e:7d:
ca:d8:4e:e2:bb:6a:a0:d2:45:e0:50:f6:c3:21:91:
f5:68:18:27:6c:1c:09:7b:0a:43:6e:4b:72:3f:6a:
1f:9c:5f:1a:48:fc:ff:10:03:7e:75:5e:3b:f8:86:
ae:5e:fb:e2:57:42:b3:fa:97:77:be:c3:40:8a:59:
3f:ec:ef:3c:d8:c9:15:3d:db:f8:2b:f2:3e:a6:bd:
ed:15:4b:74:ff:97:7c:73:68:35:c3:77:73:be:53:
c8:af:66:38:3a:2c:3d:bf:bd:32:06:e1:a4:96:68:
f2:d0:17:ce:5b:b6:f6:6a:40:57:7a:34:d2:da:b3:
27:9b:4b:d5:54:dd:92:e6:a7:21:a5:9c:d8:68:ed:
5d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:32:AF:F5:4A:94:BC:2C:12:C8:35:3D:BF:51:70:69:31:EC:B2:E3
X509v3 Authority Key Identifier:
keyid:23:7C:83:44:7D:17:18:33:80:F4:89:BC:94:6C:8B:9E:30:0F:FB:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:ca:b3:2a:fe:c6:de:cc:c5:f3:22:ee:58:b4:74:71:e2:f4:
cb:9c:e7:3d:dd:d5:5f:d2:9b:82:12:a1:98:d2:1b:be:e8:3f:
b5:8c:b9:91:27:8b:43:13:27:2c:8b:7f:9d:ef:02:ef:74:95:
b9:54:79:8f:d1:a3:3c:e2:b8:e8:98:ed:87:77:cf:a4:9c:1d:
af:34:b4:5b:0a:bf:d8:21:0a:b0:27:23:a6:2f:fc:19:cd:24:
81:8c:1a:79:8c:f2:6e:6c:90:1c:69:a4:18:f7:f7:06:c0:2b:
71:f1:6c:e8:54:78:dc:c3:e2:eb:08:48:a9:84:15:e8:ad:15:
b5:2e:19:1a:97:04:41:8e:0e:d0:2e:82:cf:05:65:c7:82:68:
a6:ee:10:29:23:e2:f8:05:d1:8a:7e:43:bf:76:ba:38:1a:23:
0c:18:ab:ce:03:10:21:9a:1a:7a:2d:2a:74:87:c0:38:eb:a5:
2b:8b:15:c3:11:9b:93:21:02:96:c5:fe:7f:c8:0b:e1:c9:5a:
47:86:60:7e:7a:6f:29:7a:a1:f6:0f:4c:72:3e:cf:47:6f:7d:
df:0f:8a:80:d5:ff:c3:bb:8a:53:d7:a4:7c:21:97:f3:96:42:
47:c8:83:54:35:b0:6c:1a:db:c4:2f:2a:74:b8:7f:1e:f5:e7:
24:51:30:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:46:34 2026 by rpki-client