Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/853218-ac6e-4f9c-a959-3df549a06d5b/1/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.mft
File: I_jJmbMM4kjmxGjHhNZNcvlj6Tg.mft (raw, json)
Hash identifier: t1ikdDbDPZNgfpiC0CNBug/DvvXr8KvK6yyJQahglzw=
Subject key identifier: 05:21:8C:43:23:35:CA:A8:11:44:29:6A:CC:AB:C9:DC:88:7B:26:1C
Authority key identifier: 23:F8:C9:99:B3:0C:E2:48:E6:C4:68:C7:84:D6:4D:72:F9:63:E9:38
Certificate issuer: /CN=23f8c999b30ce248e6c468c784d64d72f963e938
Certificate serial: 019D9C2D3361594FF437E043B83AFC83BD3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/853218-ac6e-4f9c-a959-3df549a06d5b/1/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.mft
Manifest number: 1016
Signing time: Fri 17 Apr 2026 16:01:41 +0000
Manifest this update: Fri 17 Apr 2026 16:01:41 +0000
Manifest next update: Sat 18 Apr 2026 16:01:41 +0000
Files and hashes: 1: 5-dugcBchtXNBoxU8gQHmgyF3EY.roa (hash: d7JZa0tOh8DLsFD86kEU0q/71M3EzBvkFJCRMhMKG4c=)
2: I_jJmbMM4kjmxGjHhNZNcvlj6Tg.crl (hash: Ves3EA4O1YLOfN0stBIhq6UopwqRfAqjEfiJ3YKeDhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/853218-ac6e-4f9c-a959-3df549a06d5b/1/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/853218-ac6e-4f9c-a959-3df549a06d5b/1/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.mft
rsync://rpki.ripe.net/repository/DEFAULT/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2d:33:61:59:4f:f4:37:e0:43:b8:3a:fc:83:bd:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23f8c999b30ce248e6c468c784d64d72f963e938
Validity
Not Before: Apr 17 16:01:41 2026 GMT
Not After : Apr 18 16:01:41 2026 GMT
Subject: CN=05218c432335caa81144296accabc9dc887b261c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:75:51:79:78:0f:6e:85:a4:b8:06:6d:7a:9d:
0a:a6:c1:c2:3e:96:eb:1c:95:01:8e:0f:7b:a4:db:
26:dd:9e:a1:23:62:24:25:84:46:91:c4:5c:af:bd:
cd:f9:3e:94:b3:24:55:1e:46:de:48:e4:12:c6:fb:
4d:5c:bf:ee:0e:cd:dc:df:66:21:36:57:56:f5:34:
4e:98:3f:93:81:1c:b1:82:6e:0e:ef:ac:15:04:94:
03:ed:99:ab:e9:50:34:59:b4:21:46:ab:de:df:6d:
e1:dd:71:4d:eb:cf:51:cf:de:c2:96:c0:00:fe:50:
f9:b6:3c:4c:00:47:e8:02:2a:b4:4e:97:39:27:ca:
92:74:c5:bd:27:cd:c9:97:bb:f4:85:d9:4b:7d:e8:
62:0a:2c:d9:7d:37:89:b7:6a:fc:e2:4e:c0:25:5d:
c6:3c:4b:66:d4:3f:61:16:39:5c:23:93:d1:ac:41:
0a:d2:33:de:62:00:4c:3d:f6:6b:13:93:e6:2a:f7:
40:61:7a:e7:f3:56:74:e8:3b:57:0d:9c:d5:5e:4e:
23:88:f3:c2:c8:ab:cc:fd:ef:eb:d9:52:de:9d:71:
6e:f7:15:b8:b1:67:47:77:1d:7c:de:de:1e:9d:1c:
cf:e4:98:be:bd:22:e8:14:6a:00:59:75:fc:29:0d:
17:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:21:8C:43:23:35:CA:A8:11:44:29:6A:CC:AB:C9:DC:88:7B:26:1C
X509v3 Authority Key Identifier:
keyid:23:F8:C9:99:B3:0C:E2:48:E6:C4:68:C7:84:D6:4D:72:F9:63:E9:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/853218-ac6e-4f9c-a959-3df549a06d5b/1/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/853218-ac6e-4f9c-a959-3df549a06d5b/1/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:91:12:12:ce:bd:f7:fd:f2:86:18:37:be:78:0d:7d:95:5f:
95:43:4c:5a:71:2d:29:0d:97:64:f0:ee:65:19:49:5c:17:4d:
b3:5f:0c:a9:0d:f6:21:d4:16:3c:5a:41:8d:35:c6:41:67:87:
0c:0e:12:74:92:82:b7:ee:77:72:00:fe:3b:12:fc:f7:1d:99:
1e:72:7b:7f:a1:b1:b3:c0:e9:c7:12:e9:31:f5:27:9b:86:18:
2f:a2:a9:a1:d1:1d:82:ce:7b:a6:73:f5:d4:37:be:b4:c5:f0:
a3:e5:a8:25:79:61:32:72:ac:25:56:4d:2a:ec:55:eb:7b:09:
ad:e7:24:00:99:0b:1a:27:5c:2a:20:26:b8:9c:f7:cd:c8:fe:
ba:9d:2b:5f:44:fe:56:36:d6:d2:ab:cd:2e:da:e8:9b:ed:44:
72:6e:ef:bb:13:db:4f:6f:a1:79:eb:da:6f:e6:ab:39:1c:c7:
68:0d:97:0f:83:fc:bd:0b:31:33:01:b8:bf:7e:07:bb:0f:0d:
d2:e8:d8:cd:ab:27:51:41:ac:4c:b8:69:03:d6:41:22:f0:ab:
6f:54:f1:97:5f:b6:e5:99:e3:e6:a2:e1:8a:20:37:fd:4a:34:
0f:38:da:be:59:f1:86:8a:de:8c:ab:4f:53:38:24:84:cb:97:
a3:76:d5:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:07:41 2026 by rpki-client