Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/9bd122-d6a9-4a40-860b-b0efc01d4f9c/1/Mi2RtKqWzFcyV21CM1_d0OXWKU8.mft
File: Mi2RtKqWzFcyV21CM1_d0OXWKU8.mft (raw, json)
Hash identifier: /9aHNJLzhJvLFCq+DnXOTXp0JOv6L9o05/FqT78rC34=
Subject key identifier: 96:34:0B:07:4D:10:3A:A2:AB:45:C2:D3:2C:F9:D0:F5:FC:F8:F8:2F
Authority key identifier: 32:2D:91:B4:AA:96:CC:57:32:57:6D:42:33:5F:DD:D0:E5:D6:29:4F
Certificate issuer: /CN=322d91b4aa96cc5732576d42335fddd0e5d6294f
Certificate serial: 019D99D01FE9E74EEA13C78440B016A94DD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mi2RtKqWzFcyV21CM1_d0OXWKU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/9bd122-d6a9-4a40-860b-b0efc01d4f9c/1/Mi2RtKqWzFcyV21CM1_d0OXWKU8.mft
Manifest number: 0666
Signing time: Fri 17 Apr 2026 05:00:46 +0000
Manifest this update: Fri 17 Apr 2026 05:00:46 +0000
Manifest next update: Sat 18 Apr 2026 05:00:46 +0000
Files and hashes: 1: 1-iOJzCg7mS2QdSMBIdW2Guyn3hQ.roa (hash: PVKqYKVsrFFdzBy/HzOODB+3DNbkSFcoEgOpBYpqHGA=)
2: CqH1FECBpIHfp2xhFgzsj89DsXQ.roa (hash: FwLSU2137U6zawDtXqOxsfLW/s4zSGCVB1UE9CXia1Y=)
3: Mi2RtKqWzFcyV21CM1_d0OXWKU8.crl (hash: hh2kGaDPVXAWdJsRGd1quT5qRRCFIBILGniRfzjqS8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/9bd122-d6a9-4a40-860b-b0efc01d4f9c/1/Mi2RtKqWzFcyV21CM1_d0OXWKU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/9bd122-d6a9-4a40-860b-b0efc01d4f9c/1/Mi2RtKqWzFcyV21CM1_d0OXWKU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mi2RtKqWzFcyV21CM1_d0OXWKU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:1f:e9:e7:4e:ea:13:c7:84:40:b0:16:a9:4d:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=322d91b4aa96cc5732576d42335fddd0e5d6294f
Validity
Not Before: Apr 17 05:00:46 2026 GMT
Not After : Apr 18 05:00:46 2026 GMT
Subject: CN=96340b074d103aa2ab45c2d32cf9d0f5fcf8f82f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4c:00:e4:3d:ad:3b:4b:44:6c:24:65:aa:ee:
52:64:d2:bd:8f:fc:e4:14:c9:d6:91:0e:23:11:af:
c9:ac:a6:6e:5e:9e:91:c7:d3:77:3c:ca:41:79:65:
b2:d7:40:f4:b5:e9:b2:73:e6:25:91:9b:b6:e9:a5:
43:fd:fa:70:db:cb:0b:31:2f:0a:06:f8:fd:c9:8b:
90:93:65:f5:be:a8:cf:ba:d6:d2:b2:89:2d:d9:b6:
04:42:26:25:ba:35:36:fa:e5:24:4c:e3:ec:90:52:
d2:b9:ec:5f:86:89:36:b9:df:12:22:e3:74:39:8e:
82:ec:75:e9:22:e2:b9:02:35:59:7d:52:e1:4d:42:
6f:22:3f:cd:8d:b6:75:59:9f:b8:44:af:69:39:de:
85:fe:fa:4f:35:e6:3d:8b:b7:d2:58:ae:be:8c:75:
b4:e0:db:aa:94:f5:f2:d5:06:b9:c5:06:54:05:73:
d2:d2:9a:4e:20:d4:79:56:37:14:ce:cc:81:8a:c8:
39:ff:f0:01:62:a0:ba:e9:d1:07:99:2e:d3:67:72:
d8:5f:a3:1a:2f:44:24:a8:7d:c7:a7:66:b1:ef:8c:
b6:54:42:27:a1:f1:f2:35:ee:70:54:55:3c:9e:3f:
28:fa:e2:c1:03:e8:49:a7:e5:ee:e1:91:5e:d3:df:
dd:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:34:0B:07:4D:10:3A:A2:AB:45:C2:D3:2C:F9:D0:F5:FC:F8:F8:2F
X509v3 Authority Key Identifier:
keyid:32:2D:91:B4:AA:96:CC:57:32:57:6D:42:33:5F:DD:D0:E5:D6:29:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mi2RtKqWzFcyV21CM1_d0OXWKU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9bd122-d6a9-4a40-860b-b0efc01d4f9c/1/Mi2RtKqWzFcyV21CM1_d0OXWKU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9bd122-d6a9-4a40-860b-b0efc01d4f9c/1/Mi2RtKqWzFcyV21CM1_d0OXWKU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:bc:57:26:36:d9:d2:f8:16:7f:d5:a0:96:21:8a:75:24:ae:
84:68:a9:66:8c:68:2f:2f:eb:3e:43:f2:fa:03:f4:ac:db:64:
82:c5:21:8b:b5:4b:79:4a:68:5c:74:fe:fe:12:db:1d:df:e0:
ba:3d:4f:db:2d:e7:5c:13:21:eb:14:49:6b:72:1e:3f:23:de:
e9:d9:36:20:be:6f:66:68:ae:2e:6d:5e:5e:48:19:e7:74:fb:
5d:19:6a:a6:75:4b:e6:aa:85:77:7c:f7:d0:a9:44:6d:4d:8f:
33:23:5d:f7:f0:c5:0d:81:b8:df:63:b0:c6:fb:9f:76:d6:9d:
d8:b7:ce:38:27:b0:b6:f9:e7:80:bd:bf:a5:2d:f3:ae:ac:e0:
ff:96:db:b0:e8:63:a6:0b:44:9d:4d:db:d3:1c:df:07:ae:e5:
de:10:02:77:09:c7:9a:ff:7d:98:46:bf:68:25:36:8f:91:0f:
ca:85:3f:f9:17:01:c5:de:87:f3:80:01:6c:e0:e8:29:29:a8:
59:02:bf:77:8a:da:76:53:c8:60:1e:b8:87:80:15:ad:d0:e8:
d8:cb:49:62:4a:83:5c:f8:75:19:2c:9e:f1:a7:37:15:c4:c0:
0e:be:e4:34:d5:ca:0e:9e:cc:db:e2:b0:3a:d3:10:16:3f:91:
45:cc:0e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:29:59 2026 by rpki-client