Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d0c38d-9f02-418b-96b2-fb3111dbd1ca/1/i29IgAONVauY18tm38-ol7e6Eeg.mft
File: i29IgAONVauY18tm38-ol7e6Eeg.mft (raw, json)
Hash identifier: SZ7oNyiBsv8yhmyxeEDnr13hhjUCodfezIEppCXVZco=
Subject key identifier: AE:CE:DB:FE:EB:3C:A9:EF:60:C9:AB:BB:23:E1:16:4E:B2:1B:94:BF
Authority key identifier: 8B:6F:48:80:03:8D:55:AB:98:D7:CB:66:DF:CF:A8:97:B7:BA:11:E8
Certificate issuer: /CN=8b6f4880038d55ab98d7cb66dfcfa897b7ba11e8
Certificate serial: 019D99623B1661DDA3F28ED8AC046E68A85C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i29IgAONVauY18tm38-ol7e6Eeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d0c38d-9f02-418b-96b2-fb3111dbd1ca/1/i29IgAONVauY18tm38-ol7e6Eeg.mft
Manifest number: 073A
Signing time: Fri 17 Apr 2026 03:00:44 +0000
Manifest this update: Fri 17 Apr 2026 03:00:44 +0000
Manifest next update: Sat 18 Apr 2026 03:00:44 +0000
Files and hashes: 1: BPaDPKTEMEpX1Fzv_jvryI3ZhZs.roa (hash: dyyBL506kK/U4ZZnY6jdH+HEkq9epTy/PSVjs7aWPIM=)
2: i29IgAONVauY18tm38-ol7e6Eeg.crl (hash: r42JkEKBrkKA/DR6ulSE1pXJ4A7zvycEToEc3fYfbSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d0c38d-9f02-418b-96b2-fb3111dbd1ca/1/i29IgAONVauY18tm38-ol7e6Eeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/d0c38d-9f02-418b-96b2-fb3111dbd1ca/1/i29IgAONVauY18tm38-ol7e6Eeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/i29IgAONVauY18tm38-ol7e6Eeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:3b:16:61:dd:a3:f2:8e:d8:ac:04:6e:68:a8:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6f4880038d55ab98d7cb66dfcfa897b7ba11e8
Validity
Not Before: Apr 17 03:00:44 2026 GMT
Not After : Apr 18 03:00:44 2026 GMT
Subject: CN=aecedbfeeb3ca9ef60c9abbb23e1164eb21b94bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:98:76:d5:ad:73:77:7b:08:03:85:43:56:fb:
72:df:01:0d:a5:61:fb:a5:45:ab:d5:08:44:c6:49:
a2:61:48:79:ec:30:2a:6d:31:8f:42:c2:6d:b7:51:
80:5f:6d:b1:72:16:de:80:a9:3f:59:9b:b2:ef:be:
95:b3:b3:56:21:45:85:b2:c3:ef:85:72:11:e4:7d:
8f:bb:53:81:8d:a3:a2:cb:75:ac:81:4f:e0:d3:28:
b4:f2:95:52:00:2e:86:ee:ad:46:55:0b:46:88:14:
63:d8:8b:77:af:7f:e8:cb:b6:da:03:71:83:57:21:
9b:8e:40:f1:c0:78:92:3c:0b:86:15:f6:b5:2b:11:
db:e3:ee:d5:e5:40:53:c4:02:52:37:f6:d1:35:40:
37:67:cb:6d:31:52:03:75:10:0c:37:54:d1:d5:3f:
0f:7e:60:e8:6f:31:ca:fa:c3:ce:19:df:d8:91:d4:
8e:9b:0d:0f:33:4b:75:9f:69:cf:7e:e2:c4:06:79:
d7:b2:ff:25:b5:64:1d:7a:ee:f4:85:a4:07:f3:56:
5b:46:1c:64:6f:93:95:79:0b:5a:92:e4:8f:a3:4d:
e1:34:c5:a9:3b:be:01:53:d8:b4:90:c7:14:6c:f6:
14:0f:c4:20:c9:0c:1c:0c:b1:ae:60:82:bf:8d:5b:
dc:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:CE:DB:FE:EB:3C:A9:EF:60:C9:AB:BB:23:E1:16:4E:B2:1B:94:BF
X509v3 Authority Key Identifier:
keyid:8B:6F:48:80:03:8D:55:AB:98:D7:CB:66:DF:CF:A8:97:B7:BA:11:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i29IgAONVauY18tm38-ol7e6Eeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d0c38d-9f02-418b-96b2-fb3111dbd1ca/1/i29IgAONVauY18tm38-ol7e6Eeg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d0c38d-9f02-418b-96b2-fb3111dbd1ca/1/i29IgAONVauY18tm38-ol7e6Eeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:78:db:09:2f:fe:75:95:f2:89:94:f0:ce:1c:0c:26:1d:30:
a9:66:0f:54:c1:e5:05:80:44:d0:d3:12:58:70:58:85:b4:24:
1f:9b:2f:64:d9:2c:d1:d1:84:f6:17:f2:82:b1:2b:e2:95:b1:
74:76:02:7c:f7:82:49:84:d2:04:1c:6a:fc:2c:c1:1d:97:29:
5a:18:bb:a4:aa:09:fc:9e:46:1a:76:1e:40:0a:6e:c4:07:2f:
f1:14:32:42:ea:21:95:31:89:1f:a1:eb:00:22:39:92:d4:39:
b3:b0:a6:8f:67:93:17:d0:0e:da:43:a3:5e:59:dc:93:cd:b2:
59:21:8c:99:4f:a8:af:e1:03:5f:a5:7f:5d:a1:e3:6b:a0:31:
8a:82:a2:c2:7d:8d:81:0b:45:f3:3f:a5:4a:4d:fb:06:24:1e:
d1:c2:4c:8d:d6:5c:d9:f5:4f:79:e4:60:43:57:e2:00:84:82:
5b:22:f5:bf:9a:1d:98:9b:33:38:d7:00:f2:19:d1:ed:54:22:
32:6d:3a:13:a8:be:eb:ae:8a:a6:36:96:21:9b:23:63:c6:73:
7a:31:16:bf:74:a9:66:2f:33:4d:14:86:e1:a4:05:c9:ea:8e:
d5:5d:2e:29:36:d5:85:8b:52:e8:4d:8b:7b:05:9d:0e:ba:7a:
4c:ab:73:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:34:16 2026 by rpki-client