Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/IOuvVUyRRowQUkuvdC6ksaXQtJw.mft
File: IOuvVUyRRowQUkuvdC6ksaXQtJw.mft (raw, json)
Hash identifier: 1etC559O1Sxu9R1BMrK7ZwCXc4RmwnFFl4ZgMVLsCvg=
Subject key identifier: A0:23:A9:B2:B8:D4:7B:C5:4F:E5:58:A4:19:69:ED:0C:8D:19:C6:3E
Authority key identifier: 20:EB:AF:55:4C:91:46:8C:10:52:4B:AF:74:2E:A4:B1:A5:D0:B4:9C
Certificate issuer: /CN=20ebaf554c91468c10524baf742ea4b1a5d0b49c
Certificate serial: 019D9998F7E0B6645F4DE94ECD3CE253B8F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOuvVUyRRowQUkuvdC6ksaXQtJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/IOuvVUyRRowQUkuvdC6ksaXQtJw.mft
Manifest number: 16E0
Signing time: Fri 17 Apr 2026 04:00:32 +0000
Manifest this update: Fri 17 Apr 2026 04:00:32 +0000
Manifest next update: Sat 18 Apr 2026 04:00:32 +0000
Files and hashes: 1: IOuvVUyRRowQUkuvdC6ksaXQtJw.crl (hash: BS06fbGqnbcZsV3/3Le3j7uvsJvw76QQRaSnZv6XAcA=)
2: Vhdyvlmm2QhYL_DxOw7zRtqN9Zg.roa (hash: Fgu5qryHdVy6pShgsQWdQm6ItENpj8eEaKZ2+YL90F8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/IOuvVUyRRowQUkuvdC6ksaXQtJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/IOuvVUyRRowQUkuvdC6ksaXQtJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/IOuvVUyRRowQUkuvdC6ksaXQtJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:98:f7:e0:b6:64:5f:4d:e9:4e:cd:3c:e2:53:b8:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20ebaf554c91468c10524baf742ea4b1a5d0b49c
Validity
Not Before: Apr 17 04:00:32 2026 GMT
Not After : Apr 18 04:00:32 2026 GMT
Subject: CN=a023a9b2b8d47bc54fe558a41969ed0c8d19c63e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:06:85:58:97:c3:bd:c5:88:f9:01:90:56:26:
69:64:d7:e8:ca:ef:4b:24:58:e1:2e:29:8a:9f:42:
29:56:6e:f7:de:f3:95:f2:7b:2f:1f:76:4d:a9:91:
eb:ad:ec:d7:0f:cc:4d:3b:62:dd:4b:b6:db:9e:e5:
a5:05:27:fa:ac:b0:74:06:0c:c5:b4:ed:4f:a8:4d:
09:d3:d7:3b:4b:1b:ad:f1:3e:8b:dc:17:d8:2f:6b:
b8:a7:a0:70:5c:8d:8b:19:46:b1:cf:28:33:c3:5a:
91:5d:ad:1c:97:87:4e:dd:11:95:83:61:f7:9c:d9:
81:c0:ec:9a:e2:68:36:ce:db:f7:ba:a3:ff:15:96:
ed:55:43:10:9a:2d:7b:d3:0a:b7:f9:80:6b:b2:0f:
ab:3c:85:4b:c4:ab:6c:09:db:16:d0:1d:2a:06:53:
17:15:88:6e:15:8b:1f:45:0e:31:46:f1:83:75:10:
f1:d4:9a:e5:54:2f:1e:53:95:17:56:db:e9:bd:40:
18:35:53:7c:d3:54:01:cf:fe:bb:02:6a:ba:c3:76:
29:d6:03:c8:fa:35:f1:c4:5b:ef:df:0c:e5:3e:e1:
49:81:ed:dd:97:bc:08:fc:7f:5a:55:99:07:84:a9:
a4:14:64:92:a0:bc:01:6d:1e:36:ab:0a:4e:7e:d8:
0f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:23:A9:B2:B8:D4:7B:C5:4F:E5:58:A4:19:69:ED:0C:8D:19:C6:3E
X509v3 Authority Key Identifier:
keyid:20:EB:AF:55:4C:91:46:8C:10:52:4B:AF:74:2E:A4:B1:A5:D0:B4:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOuvVUyRRowQUkuvdC6ksaXQtJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/IOuvVUyRRowQUkuvdC6ksaXQtJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/IOuvVUyRRowQUkuvdC6ksaXQtJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:fd:0f:6c:0b:8f:21:d0:14:30:21:71:c0:0e:54:89:58:c2:
dc:2d:21:cb:3a:74:5a:14:7b:ba:bf:b9:93:d3:d8:01:b0:3b:
20:cb:b9:18:7a:82:e9:4a:49:e5:be:c8:40:22:d2:7b:ba:30:
cd:e0:14:7f:b9:ae:00:e1:4e:13:fa:28:b5:d3:76:73:a2:a2:
e4:f0:8e:7e:f8:11:f3:a2:71:34:a2:26:94:4e:8f:4f:fb:ab:
9f:3e:8e:2d:d1:28:23:1c:84:f9:40:43:22:76:7e:d5:9f:2c:
72:46:ef:69:f3:70:62:97:50:08:87:bb:09:a7:15:1e:74:7a:
25:65:60:5a:a8:18:50:bf:ef:b3:fc:bd:35:b6:34:a1:24:af:
4c:59:b1:dd:55:cc:bd:22:f8:6e:ef:73:9e:06:6d:f2:5d:4a:
e5:52:b2:34:b8:db:56:bf:b7:bc:54:55:cf:d6:52:5b:06:05:
54:b6:23:89:1d:dd:8e:9e:ea:0f:93:88:c5:b1:fb:f9:02:86:
2b:35:86:d6:56:54:49:08:51:1a:1b:b1:f5:84:69:7d:e6:00:
83:fc:95:1e:a4:a1:9d:ea:7c:07:7b:1f:d3:2e:f4:a2:54:78:
af:5c:df:0d:e0:54:82:ce:eb:06:32:4b:ee:21:1e:6d:f1:ce:
79:18:b0:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:08:50 2026 by rpki-client