Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.mft
File: iVVHgNslskPAotNhl5sTCn8Txg0.mft (raw, json)
Hash identifier: 3NOQDmMUCY6ge4ArPqOJgvBGPcW5CncpWgRGyZrNuZI=
Subject key identifier: E3:5F:66:7A:86:DF:2F:EE:78:CF:1E:61:DC:21:0C:0C:4C:56:ED:0D
Authority key identifier: 89:55:47:80:DB:25:B2:43:C0:A2:D3:61:97:9B:13:0A:7F:13:C6:0D
Certificate issuer: /CN=89554780db25b243c0a2d361979b130a7f13c60d
Certificate serial: 019D99CFFA388F7EF34243C965571B5DB759
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iVVHgNslskPAotNhl5sTCn8Txg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.mft
Manifest number: 0DEB
Signing time: Fri 17 Apr 2026 05:00:37 +0000
Manifest this update: Fri 17 Apr 2026 05:00:37 +0000
Manifest next update: Sat 18 Apr 2026 05:00:37 +0000
Files and hashes: 1: 04FKSiNEBSVxxBYiPtE8VcsRvqM.roa (hash: iIsFB+u1yXou/MBTJQN92523XOZ49HIi4J+JzBjc0Vk=)
2: iVVHgNslskPAotNhl5sTCn8Txg0.crl (hash: 1AyltGpg40ApyJ5i1Bq9Cz+UCInvgdwkR23GXZS3pdg=)
3: yUZd6eY1ILFj_NVgWnntQzVJiGs.roa (hash: aYbs72JfiEw4WjwVxwNiVwxvegvGGWCTaf1wWunmceE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/iVVHgNslskPAotNhl5sTCn8Txg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:cf:fa:38:8f:7e:f3:42:43:c9:65:57:1b:5d:b7:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89554780db25b243c0a2d361979b130a7f13c60d
Validity
Not Before: Apr 17 05:00:37 2026 GMT
Not After : Apr 18 05:00:37 2026 GMT
Subject: CN=e35f667a86df2fee78cf1e61dc210c0c4c56ed0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:80:05:26:26:ac:50:9d:44:eb:4f:06:ba:1a:
0d:09:ce:af:04:5d:7b:a0:dd:cb:98:08:6c:be:d1:
0c:ce:af:f7:ca:33:72:5b:5b:b2:4f:3d:2b:9b:77:
e6:41:e4:85:46:9a:06:8c:40:32:e0:96:97:6a:6b:
de:39:77:41:ca:fd:94:92:15:40:84:fd:ad:44:96:
e3:a6:5b:af:ea:fd:75:a8:ee:8b:13:5a:6f:7a:f7:
7f:01:f4:45:0d:9e:f1:7a:6a:68:5a:95:20:69:b3:
7f:7a:ac:8f:82:16:e8:d3:06:f2:28:bf:4f:46:49:
da:06:00:ff:d4:d3:49:b7:7e:90:a1:33:7d:13:ea:
0e:96:0b:80:09:c7:94:32:a8:3e:ae:73:5e:fc:9a:
66:46:c8:89:e9:d3:64:cf:d8:fb:24:ed:31:ca:a1:
4b:f1:ea:85:74:d0:7b:1f:35:a7:0d:cc:43:ef:d9:
72:64:9d:1b:a1:33:16:59:3a:0b:a7:d1:7c:31:99:
13:9b:3e:56:ab:b0:89:10:2d:75:b9:a4:5f:6f:02:
a7:68:6e:eb:a1:3e:51:a9:9d:3d:1c:77:9a:34:3e:
75:29:75:bb:7e:0e:a0:ad:e8:13:21:46:cd:8e:95:
d7:c3:ca:9f:79:0a:cd:86:0a:44:9a:48:38:66:ca:
47:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:5F:66:7A:86:DF:2F:EE:78:CF:1E:61:DC:21:0C:0C:4C:56:ED:0D
X509v3 Authority Key Identifier:
keyid:89:55:47:80:DB:25:B2:43:C0:A2:D3:61:97:9B:13:0A:7F:13:C6:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iVVHgNslskPAotNhl5sTCn8Txg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:82:49:f1:02:f1:4f:ca:07:b7:dd:48:ee:62:e7:eb:d5:6b:
fe:fe:ff:29:11:8d:0c:87:7d:b5:b4:23:18:4b:d6:5b:dd:43:
85:01:72:d1:f7:33:e1:ec:9e:44:9f:c4:e2:95:17:4c:c8:32:
a9:6f:a8:2d:76:d3:35:95:37:fc:5e:6b:19:51:53:a4:3f:d9:
3b:9a:89:46:c4:97:9d:4a:b4:3b:58:a9:96:db:79:d1:37:c9:
c8:e8:72:1e:f6:51:ee:72:d9:3d:35:5c:f9:df:e8:c2:5f:33:
58:8f:0d:e6:e8:1a:ed:9c:32:03:8f:59:a0:a0:b3:1e:38:59:
72:c4:ed:3c:55:b7:7e:33:51:92:d4:1b:49:20:96:9d:b7:e5:
1f:0a:fe:95:d8:be:4d:16:6f:a7:f7:a1:e2:3c:36:25:bf:25:
f7:93:a2:d4:15:28:56:2b:85:ce:3c:9a:9a:bc:e5:80:66:6c:
b7:86:62:a2:93:2b:08:07:8c:88:9c:a5:87:5e:e7:07:5d:53:
5a:4b:75:12:08:19:3a:29:95:80:34:4b:85:11:f2:31:6e:66:
e2:6e:a0:0e:40:0f:3b:80:e6:bc:4c:fc:2a:c3:49:34:7c:d1:
d3:93:c8:9f:21:b6:e4:5b:80:82:40:58:09:cd:bd:2c:d7:9f:
19:23:ca:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:04:16 2026 by rpki-client