Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/ixtym3XF-LLp0ViqKWOW1oC-cK0.mft
File: ixtym3XF-LLp0ViqKWOW1oC-cK0.mft (raw, json)
Hash identifier: zxqcD4/dnl8PHibWKQwYwtAPFf3ABHafEOgvCFMq2ao=
Subject key identifier: 25:E1:30:40:E4:5F:F4:33:09:BD:8E:D8:75:CC:E0:38:D2:AA:52:DE
Authority key identifier: 8B:1B:72:9B:75:C5:F8:B2:E9:D1:58:AA:29:63:96:D6:80:BE:70:AD
Certificate issuer: /CN=8b1b729b75c5f8b2e9d158aa296396d680be70ad
Certificate serial: 019D99990D0E13CCF1513218699EC42C2AAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ixtym3XF-LLp0ViqKWOW1oC-cK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/ixtym3XF-LLp0ViqKWOW1oC-cK0.mft
Manifest number: 0FE9
Signing time: Fri 17 Apr 2026 04:00:37 +0000
Manifest this update: Fri 17 Apr 2026 04:00:37 +0000
Manifest next update: Sat 18 Apr 2026 04:00:37 +0000
Files and hashes: 1: 6g9Sdo-eJYElfuGgjU1PsahjZn8.roa (hash: Q4WRD5ukCrgnTo+xu8mbOedNwPrNG14LcRDJEgtOWxI=)
2: ixtym3XF-LLp0ViqKWOW1oC-cK0.crl (hash: rhq1QJIb9Gkp9/D8QeDdyLUI5AfUieMLMXoW5NhPMxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/ixtym3XF-LLp0ViqKWOW1oC-cK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/ixtym3XF-LLp0ViqKWOW1oC-cK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ixtym3XF-LLp0ViqKWOW1oC-cK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:0d:0e:13:cc:f1:51:32:18:69:9e:c4:2c:2a:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b1b729b75c5f8b2e9d158aa296396d680be70ad
Validity
Not Before: Apr 17 04:00:37 2026 GMT
Not After : Apr 18 04:00:37 2026 GMT
Subject: CN=25e13040e45ff43309bd8ed875cce038d2aa52de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:bc:ab:74:6d:64:10:e7:76:b8:f2:db:4e:93:
47:7a:ec:01:38:6b:c0:2c:0f:1d:98:18:d9:a7:ff:
f1:da:cb:33:bf:d7:d5:b5:53:f7:7a:0c:5f:5e:cf:
d6:59:b6:e0:d1:63:4c:08:e8:7f:3a:48:73:cc:22:
1b:64:1c:4d:f2:7e:95:0e:15:16:de:7f:43:ec:d0:
7d:fb:93:26:0c:37:ba:33:66:53:a9:b5:36:9e:06:
ea:e1:07:36:a7:52:93:08:b8:bd:1f:e1:a1:bd:6d:
dd:3c:0b:7c:78:56:8b:a7:5b:61:c0:aa:76:29:bd:
95:27:ec:8b:cd:0b:ec:e4:e1:4a:93:35:44:25:e1:
2d:4c:24:6c:52:dd:46:7f:17:b4:6d:f3:e4:c1:1b:
6c:46:3d:08:0b:fe:65:58:ff:1b:9f:46:23:d8:6b:
77:47:a4:2a:f2:97:ff:db:4d:03:37:d3:71:2f:15:
d7:53:6c:14:87:1d:a5:6b:62:95:e1:c9:7a:77:41:
4b:a3:ba:37:d5:ae:18:8a:ee:36:18:01:47:1a:b7:
aa:38:7c:ac:05:08:51:44:69:50:86:55:ee:fd:46:
46:d1:65:c4:0e:3d:f8:5f:97:00:e1:09:0e:56:6f:
6f:eb:02:87:36:07:2e:3d:5b:32:e5:21:fa:71:4f:
21:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:E1:30:40:E4:5F:F4:33:09:BD:8E:D8:75:CC:E0:38:D2:AA:52:DE
X509v3 Authority Key Identifier:
keyid:8B:1B:72:9B:75:C5:F8:B2:E9:D1:58:AA:29:63:96:D6:80:BE:70:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixtym3XF-LLp0ViqKWOW1oC-cK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/ixtym3XF-LLp0ViqKWOW1oC-cK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/ixtym3XF-LLp0ViqKWOW1oC-cK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:7a:a1:fe:57:d0:9d:cd:bc:71:7c:64:c4:11:b8:61:44:b5:
93:cd:b2:e5:01:3a:f5:12:b5:3a:ea:c6:a5:8a:c1:12:71:03:
a9:b7:7f:f6:a8:42:85:3c:4a:44:c4:9c:4f:bb:ac:0b:7a:74:
b0:0f:3e:bd:39:94:9d:3a:ca:31:c9:01:74:30:ee:2f:c6:b9:
86:c3:be:45:12:26:22:24:81:e8:e5:bc:a3:af:f8:6a:c7:16:
4e:86:c7:51:5b:cd:25:ff:94:ff:b9:8f:f4:dd:42:ff:98:04:
25:06:8e:11:5e:db:df:a5:e1:ca:3d:22:c5:ce:c1:7e:be:64:
fc:e4:6d:c5:ad:8d:25:d2:ef:57:84:aa:b8:29:5f:ad:51:2d:
fb:58:2b:e1:e3:22:e1:e5:98:39:35:e1:5b:c3:5d:d2:b2:42:
5b:4d:99:5d:60:d6:10:b6:6c:ed:f4:4f:69:ef:5d:36:01:20:
ed:e7:48:db:03:cc:2d:0b:0b:4a:9e:65:d9:43:8b:fe:fb:a2:
10:20:47:ea:87:1f:dd:b4:70:31:74:28:31:63:b5:be:24:33:
68:7e:6d:44:65:18:2c:6e:73:b8:5d:5d:a3:ed:06:c8:b0:74:
4e:10:d0:fa:bb:e5:52:92:7d:5f:d2:16:47:aa:e1:85:bd:b2:
cf:a4:92:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:08:13 2026 by rpki-client