Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/dc2c04-59f6-4f22-b7bd-fe671c1d5150/1/I9NN09IR5cLqe9L1J6E-HploIOw.mft
File: I9NN09IR5cLqe9L1J6E-HploIOw.mft (raw, json)
Hash identifier: FvgRlcdhlFCjKydfXEK55Phai3ZwdNQgUIdaoMCG+C4=
Subject key identifier: BB:B1:5A:DF:9F:5D:7E:D5:46:9C:4C:4A:11:78:38:B7:FD:1E:09:7B
Authority key identifier: 23:D3:4D:D3:D2:11:E5:C2:EA:7B:D2:F5:27:A1:3E:1E:99:68:20:EC
Certificate issuer: /CN=23d34dd3d211e5c2ea7bd2f527a13e1e996820ec
Certificate serial: 019D992BA76D7038160F6DD2C0F887208766
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I9NN09IR5cLqe9L1J6E-HploIOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/dc2c04-59f6-4f22-b7bd-fe671c1d5150/1/I9NN09IR5cLqe9L1J6E-HploIOw.mft
Manifest number: 12BC
Signing time: Fri 17 Apr 2026 02:01:08 +0000
Manifest this update: Fri 17 Apr 2026 02:01:08 +0000
Manifest next update: Sat 18 Apr 2026 02:01:08 +0000
Files and hashes: 1: I9NN09IR5cLqe9L1J6E-HploIOw.crl (hash: yBCoUqWt1JNdQgxjht3maEE3Y+9dKZXSZikI9B0s+6E=)
2: l4SU9ie-aQFv3GaUgFkeH-xOaF8.roa (hash: PgarAlr827N/WHoU/7cGPWG2WCkz6pZoVQE96jRVrBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/dc2c04-59f6-4f22-b7bd-fe671c1d5150/1/I9NN09IR5cLqe9L1J6E-HploIOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/dc2c04-59f6-4f22-b7bd-fe671c1d5150/1/I9NN09IR5cLqe9L1J6E-HploIOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/I9NN09IR5cLqe9L1J6E-HploIOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:a7:6d:70:38:16:0f:6d:d2:c0:f8:87:20:87:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23d34dd3d211e5c2ea7bd2f527a13e1e996820ec
Validity
Not Before: Apr 17 02:01:08 2026 GMT
Not After : Apr 18 02:01:08 2026 GMT
Subject: CN=bbb15adf9f5d7ed5469c4c4a117838b7fd1e097b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:dd:24:3a:1c:b8:3f:e6:07:43:66:04:f3:cc:
6f:cf:60:2b:5c:70:a9:24:1f:82:0d:aa:ac:a1:74:
c8:19:5d:95:24:4c:93:00:b6:ff:73:f1:c7:48:ea:
49:90:34:57:ea:e6:eb:6d:bd:84:87:3b:92:22:24:
8a:c0:e4:f3:80:6e:7d:cc:2d:af:11:f0:93:d1:2f:
d8:95:97:2e:8e:05:35:d2:2d:df:b8:46:21:41:21:
9b:44:6f:94:e2:41:15:06:bd:93:f9:31:c7:8c:ed:
32:54:23:b4:4b:0c:58:e5:fe:b4:39:4c:60:70:21:
0e:1a:75:04:f2:d1:1a:81:cc:0a:56:3d:88:59:04:
33:cf:a6:69:8c:46:a6:0a:33:1b:f4:9a:ad:a1:a9:
51:50:95:b7:4a:3e:3d:ae:a0:02:7e:ea:71:8c:17:
0b:71:c7:d4:06:e9:24:47:a0:44:dd:87:72:f2:a9:
02:b6:d7:48:9a:c6:46:40:6f:17:be:0b:a2:bd:a8:
7e:ea:e4:c0:9b:c2:31:c9:d5:21:94:b4:1a:d9:e6:
58:2f:20:8a:5e:5a:98:5a:b0:91:c1:a4:06:eb:3a:
00:ea:5f:b0:1d:03:5e:9c:83:8b:ea:01:71:d4:88:
b1:ea:e0:56:b5:33:86:b3:6e:ca:75:a6:f9:11:45:
1e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:B1:5A:DF:9F:5D:7E:D5:46:9C:4C:4A:11:78:38:B7:FD:1E:09:7B
X509v3 Authority Key Identifier:
keyid:23:D3:4D:D3:D2:11:E5:C2:EA:7B:D2:F5:27:A1:3E:1E:99:68:20:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9NN09IR5cLqe9L1J6E-HploIOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dc2c04-59f6-4f22-b7bd-fe671c1d5150/1/I9NN09IR5cLqe9L1J6E-HploIOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dc2c04-59f6-4f22-b7bd-fe671c1d5150/1/I9NN09IR5cLqe9L1J6E-HploIOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:ae:12:0b:7f:2f:4b:ba:2c:a3:16:3f:8d:b0:5e:0e:38:5f:
38:91:e7:61:7e:a0:13:06:c0:38:43:14:ee:8a:ed:38:6c:09:
73:a6:6c:87:eb:a8:b5:e0:0c:a0:44:2f:05:da:94:3b:e3:65:
8e:aa:9d:c9:77:fd:2d:33:09:ca:82:da:a8:90:be:a1:3c:a6:
14:31:33:1b:18:81:10:0d:b6:9b:68:e8:48:25:f6:03:87:86:
5c:bc:7e:ad:e0:e3:ef:0b:97:96:26:28:e6:fc:23:32:f6:e8:
c2:62:19:01:03:98:9b:bd:0b:f6:6b:3a:44:cd:7b:c4:5d:14:
35:31:89:61:d6:88:da:46:ce:5e:04:da:71:4e:ef:c0:b3:e6:
a4:49:e6:8d:97:fd:97:58:88:cd:b0:76:4c:a6:80:00:99:3c:
ee:4e:59:01:4d:87:2c:45:16:3f:ac:bb:8e:ec:cd:84:f5:33:
4a:dd:7d:5e:e1:fb:1f:47:53:d6:12:35:d7:3a:86:2b:13:6b:
56:ab:89:11:31:f3:7b:7c:eb:ca:68:5c:81:65:45:9c:d1:ba:
b3:2d:16:06:73:ec:75:87:e5:7e:31:4a:03:db:b8:cd:dc:91:
5f:8b:d9:dd:3f:45:e6:ca:6e:9b:b9:78:b0:e7:79:12:eb:a9:
77:57:2a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:38:14 2026 by rpki-client