Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.mft
File: sIWATbFT63JMWFV8eTWcRAggVVA.mft (raw, json)
Hash identifier: JkyrweP44DRbX9x3SerjFxxN9DZpB2kxVw/tUW3+0JY=
Subject key identifier: DD:74:C4:0B:9E:EE:FE:56:A0:A1:80:02:4C:6A:3D:3D:FE:4B:A7:39
Authority key identifier: B0:85:80:4D:B1:53:EB:72:4C:58:55:7C:79:35:9C:44:08:20:55:50
Certificate issuer: /CN=b085804db153eb724c58557c79359c4408205550
Certificate serial: 019DA48B8A49F2459384C49A9AB7D7A07FD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sIWATbFT63JMWFV8eTWcRAggVVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.mft
Manifest number: 07A3
Signing time: Sun 19 Apr 2026 07:01:41 +0000
Manifest this update: Sun 19 Apr 2026 07:01:41 +0000
Manifest next update: Mon 20 Apr 2026 07:01:41 +0000
Files and hashes: 1: sIWATbFT63JMWFV8eTWcRAggVVA.crl (hash: i0zyPDoA4c6hZQtuCHGRPIfSRPb6VRBizBbM3W1MRHA=)
2: vlUmsnf6hFJJ_ExSqkIBAJq54y0.roa (hash: Lg+/aX3TWQ0Z5VlbPaXH4EbEoo4bdOS3f3c2Bb0++BI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/sIWATbFT63JMWFV8eTWcRAggVVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8b:8a:49:f2:45:93:84:c4:9a:9a:b7:d7:a0:7f:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b085804db153eb724c58557c79359c4408205550
Validity
Not Before: Apr 19 07:01:41 2026 GMT
Not After : Apr 20 07:01:41 2026 GMT
Subject: CN=dd74c40b9eeefe56a0a180024c6a3d3dfe4ba739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f1:55:58:cb:b4:4c:5a:fe:62:03:6e:3c:1b:
fd:24:e3:a7:29:f1:3f:6c:03:7b:70:cf:32:2b:f1:
8b:41:4b:1f:d0:1f:ec:1a:b2:19:ab:3e:c7:9c:97:
4a:5f:64:77:a1:6b:11:c9:9e:c7:02:b9:00:b2:aa:
8c:92:62:17:e3:73:9f:3d:b1:e0:b4:17:fb:f6:c3:
78:90:bb:31:00:4d:df:22:69:95:10:03:f7:7e:c0:
4d:3a:b8:cc:8a:d4:28:f6:72:55:9e:b8:0b:cf:a8:
6e:ae:42:a2:64:f5:e9:a0:db:21:65:57:6d:4b:9e:
dd:3c:2d:54:e0:9e:68:87:39:f9:15:fc:29:10:ce:
c1:f2:6e:0f:e5:56:e6:09:88:2d:c2:f4:c4:6d:cd:
3b:0e:c2:52:f1:5d:64:78:e1:de:73:ea:be:49:13:
56:d5:1a:f9:ad:3a:e1:ca:8d:d2:a5:9a:44:b5:2c:
db:dd:a6:70:7e:31:bd:2e:cb:98:67:ec:60:c4:b4:
6d:7f:57:ae:5f:1c:ef:76:8e:e7:ba:97:17:77:6a:
7b:20:cc:97:97:b7:30:da:55:0f:d8:f7:3b:bc:fe:
1f:48:0f:06:77:d6:41:70:80:69:76:02:7a:ed:dc:
48:b9:fd:4a:ab:e4:bc:c1:8c:d0:5c:8f:0d:2a:1c:
bf:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:74:C4:0B:9E:EE:FE:56:A0:A1:80:02:4C:6A:3D:3D:FE:4B:A7:39
X509v3 Authority Key Identifier:
keyid:B0:85:80:4D:B1:53:EB:72:4C:58:55:7C:79:35:9C:44:08:20:55:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sIWATbFT63JMWFV8eTWcRAggVVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:9b:16:23:00:06:c8:75:a5:a4:43:5d:1f:62:b7:1e:33:e2:
3e:b7:2c:14:69:a5:5c:7e:ac:24:4a:ac:01:0c:7f:d3:ea:30:
03:f3:fa:69:0a:8e:03:b4:09:59:8e:fc:86:27:84:ad:89:34:
53:df:19:52:81:81:2e:94:82:f2:5e:e3:e9:8a:65:22:97:53:
f4:26:54:05:9a:af:5d:aa:24:1e:77:3b:29:2b:a4:6c:05:f6:
de:78:07:a9:e7:a1:ef:6e:9d:ee:4e:26:68:e3:5e:4f:49:31:
97:87:e3:84:42:97:57:1c:39:af:d7:fe:66:82:ac:d0:32:b3:
03:d8:0c:39:f4:0e:0c:6a:81:4c:30:87:6b:43:c7:4a:05:bf:
ae:95:ae:8c:95:e8:30:03:9c:41:57:26:d6:c4:92:e0:8e:be:
95:79:cc:ca:d3:67:59:bc:2b:80:09:76:46:ff:a0:be:4f:ca:
fb:1a:73:36:0e:a3:b3:e4:b1:64:ba:b3:b4:0b:92:6c:32:37:
64:97:37:94:12:ca:8a:f9:d1:4c:31:2f:55:fa:08:ee:45:c4:
c5:80:89:45:97:3f:b3:c6:24:c4:bd:4e:4b:3c:26:e2:d8:21:
99:61:2e:71:0b:6a:01:c2:38:c8:da:08:45:35:d6:1b:8f:45:
fa:a3:c8:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:10:48 2026 by rpki-client