Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.mft
File: ifTHhzt_6kn_brkNUCwdvDpfjDM.mft (raw, json)
Hash identifier: omIATlAFOgdzlTWjsBCKaJZJ+7IH8vQba4kOMfunkRI=
Subject key identifier: D9:9A:46:68:2E:90:A1:4D:65:D9:4B:1E:A2:51:63:AA:22:B8:38:2B
Authority key identifier: 89:F4:C7:87:3B:7F:EA:49:FF:6E:B9:0D:50:2C:1D:BC:3A:5F:8C:33
Certificate issuer: /CN=89f4c7873b7fea49ff6eb90d502c1dbc3a5f8c33
Certificate serial: 019D9AAB8DED04F948F94CFFC6FCFD5FF09C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ifTHhzt_6kn_brkNUCwdvDpfjDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.mft
Manifest number: 18A7
Signing time: Fri 17 Apr 2026 09:00:27 +0000
Manifest this update: Fri 17 Apr 2026 09:00:27 +0000
Manifest next update: Sat 18 Apr 2026 09:00:27 +0000
Files and hashes: 1: 6knPf4Z_Yom73fZwtAX7TGmnwWI.roa (hash: uMucpBFGP9VTEQFIpmoToKJaaBVJ7Z0HhGQfxWsojaw=)
2: ifTHhzt_6kn_brkNUCwdvDpfjDM.crl (hash: bWwYx7qo9+gj8fxUkcWkWIlk6hZiOYCzuMJ3LMrb8pU=)
3: jCfveam_XFqY1WaoDM8mc53l0-A.roa (hash: oYsXoD5qrvfH3xJxru02r9mxYtA0m3BelZFuFCg04Oc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ifTHhzt_6kn_brkNUCwdvDpfjDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:8d:ed:04:f9:48:f9:4c:ff:c6:fc:fd:5f:f0:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89f4c7873b7fea49ff6eb90d502c1dbc3a5f8c33
Validity
Not Before: Apr 17 09:00:27 2026 GMT
Not After : Apr 18 09:00:27 2026 GMT
Subject: CN=d99a46682e90a14d65d94b1ea25163aa22b8382b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:6c:a7:ec:ec:4f:8b:fb:86:45:b0:b3:42:35:
50:72:be:74:66:0f:f5:bf:f0:c1:1b:5b:c6:dc:39:
78:65:45:ac:1b:7c:28:4c:7f:d0:64:e9:ff:49:ad:
bd:03:fd:4a:a3:ff:67:7d:4b:3d:a3:6e:47:e7:22:
9d:80:89:bb:fc:ac:f9:32:33:77:27:ce:84:2a:1f:
60:34:50:16:3c:21:d8:78:38:df:6c:86:1b:59:6f:
78:8a:62:8d:85:7a:10:a0:13:ed:81:a7:8e:fe:12:
27:1c:fd:07:2e:11:9b:9f:d6:70:6e:a8:ed:ad:75:
1a:1f:a9:27:2f:e3:1a:4f:57:fd:2e:f5:38:b6:6f:
92:9f:9f:ea:83:08:83:75:3a:56:de:e4:d6:1c:7e:
ed:11:cf:fb:9d:c0:6b:da:4f:ec:ea:d2:26:09:b0:
2c:29:0e:a9:f8:72:69:22:83:36:0f:a0:ec:e7:45:
fb:8a:02:91:59:66:d1:88:0b:7d:3f:5f:5c:a0:1e:
65:da:f3:df:3a:e9:4f:e6:86:6f:28:14:98:1d:62:
40:30:25:0a:3b:e7:d6:1f:06:36:dd:60:a5:7d:a7:
f1:4d:75:da:d5:fc:86:e4:f8:fb:11:88:bf:f3:da:
ff:ad:7a:30:b6:97:13:71:19:8d:50:9f:e6:03:60:
6f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:9A:46:68:2E:90:A1:4D:65:D9:4B:1E:A2:51:63:AA:22:B8:38:2B
X509v3 Authority Key Identifier:
keyid:89:F4:C7:87:3B:7F:EA:49:FF:6E:B9:0D:50:2C:1D:BC:3A:5F:8C:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ifTHhzt_6kn_brkNUCwdvDpfjDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:fd:7e:d7:b1:71:c7:ee:80:e9:1f:ce:85:3a:61:44:37:62:
72:19:aa:b1:52:ee:fb:84:82:14:bc:d0:53:34:1b:de:ff:5f:
93:95:d8:2c:22:df:89:e7:18:22:30:c6:34:8b:f9:84:5c:93:
ca:58:f5:11:5b:03:1c:67:b8:16:31:86:c4:d0:f3:2b:7e:d5:
3d:15:9d:58:63:6f:52:9c:7c:b2:6a:ac:71:e7:78:85:6e:57:
ba:69:26:d4:3e:6d:5f:bf:4b:77:65:97:fb:49:db:d8:56:ef:
b3:95:b4:6b:f0:6f:4e:db:46:15:38:87:f2:cf:7b:ff:c4:96:
2e:69:af:d2:e9:db:ec:e6:cd:d1:f6:b9:8c:d2:a5:c0:aa:c3:
ac:f2:d1:98:1f:d7:34:f5:1d:b2:f9:ab:cc:94:e7:6c:37:6d:
c9:eb:40:02:49:50:35:f5:30:ed:38:ec:fe:ea:39:29:94:20:
5d:fb:5d:de:c1:b8:be:d0:5f:00:e7:d6:10:8b:e9:b1:54:ad:
9f:11:3d:2e:6b:ea:44:69:db:2c:78:1a:cb:89:69:9d:28:de:
e1:86:d4:c9:1e:27:04:67:67:48:ed:17:00:84:d7:42:28:69:
09:03:62:56:fa:b7:08:25:33:8c:3b:3c:75:99:74:66:c2:3b:
5e:d6:2d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:15:15 2026 by rpki-client