Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/079ddb-820a-4d51-bf8d-8d11ead3af8c/1/iK09YNkgV_8PoBH0UMNkbjUtpdg.mft
File: iK09YNkgV_8PoBH0UMNkbjUtpdg.mft (raw, json)
Hash identifier: A9Rq1HGY3FjzxHaRoidn4pMON8jbX0MPnQ9hpqNUsIU=
Subject key identifier: 8D:CD:57:11:A1:7E:67:10:40:D5:7B:CB:EB:EA:22:A5:CB:44:F6:B8
Authority key identifier: 88:AD:3D:60:D9:20:57:FF:0F:A0:11:F4:50:C3:64:6E:35:2D:A5:D8
Certificate issuer: /CN=88ad3d60d92057ff0fa011f450c3646e352da5d8
Certificate serial: 019DA41D26F9876C0786BB4E77E85A886BD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK09YNkgV_8PoBH0UMNkbjUtpdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/079ddb-820a-4d51-bf8d-8d11ead3af8c/1/iK09YNkgV_8PoBH0UMNkbjUtpdg.mft
Manifest number: 051B
Signing time: Sun 19 Apr 2026 05:01:06 +0000
Manifest this update: Sun 19 Apr 2026 05:01:06 +0000
Manifest next update: Mon 20 Apr 2026 05:01:06 +0000
Files and hashes: 1: iK09YNkgV_8PoBH0UMNkbjUtpdg.crl (hash: 8VrcCpJtiMuI3nYicPyqOrrbaKTyS+3QTVMMuSPFWHI=)
2: yqbpgiw4mc0aMG4KTKCsEcJRG_c.roa (hash: 4YOLQATWZxMITpIV7EuqFyHdneXTCs1dRQuvrVxOZss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/079ddb-820a-4d51-bf8d-8d11ead3af8c/1/iK09YNkgV_8PoBH0UMNkbjUtpdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/079ddb-820a-4d51-bf8d-8d11ead3af8c/1/iK09YNkgV_8PoBH0UMNkbjUtpdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iK09YNkgV_8PoBH0UMNkbjUtpdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:1d:26:f9:87:6c:07:86:bb:4e:77:e8:5a:88:6b:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88ad3d60d92057ff0fa011f450c3646e352da5d8
Validity
Not Before: Apr 19 05:01:06 2026 GMT
Not After : Apr 20 05:01:06 2026 GMT
Subject: CN=8dcd5711a17e671040d57bcbebea22a5cb44f6b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e7:c9:8b:5a:55:b5:f9:9c:f7:50:7c:e5:e9:
cc:8f:05:7d:be:0b:fd:6f:21:9f:9f:84:72:77:6e:
47:62:f3:2a:bb:81:e4:bb:46:cd:7c:72:28:a6:bd:
17:e2:16:71:80:08:32:1a:40:69:75:b0:24:7d:cd:
f8:b4:b2:c6:2b:52:9c:0d:d1:77:0b:49:bd:0d:e7:
d4:dd:4e:40:ce:62:45:6c:32:f1:b7:7c:24:50:a3:
2f:61:1e:53:f7:d1:cc:a9:63:66:75:c1:da:9e:53:
02:e5:b0:2d:f5:8b:6d:c6:58:ea:c5:a2:1b:20:1a:
6a:f4:49:c6:bc:40:59:ba:a9:b1:75:53:3f:c4:ec:
f3:60:40:41:1f:63:8e:25:43:18:13:1f:b9:81:2c:
21:7a:4d:f5:13:e8:28:1d:c8:f0:05:77:00:81:9b:
17:34:05:84:4d:7d:1f:ac:f4:02:27:cc:42:5e:5c:
20:9a:92:c4:6a:3b:cd:0c:99:6d:65:74:ec:63:36:
eb:e3:70:97:f8:54:23:d7:23:4d:19:f6:55:8f:fc:
69:8b:85:85:7d:4a:91:fe:2a:a8:69:ec:41:9a:dc:
9d:aa:eb:b5:12:cd:6b:70:a6:a7:fb:7b:f0:c8:57:
8d:79:e8:2a:78:c9:01:67:bf:23:98:ad:cf:aa:c1:
57:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:CD:57:11:A1:7E:67:10:40:D5:7B:CB:EB:EA:22:A5:CB:44:F6:B8
X509v3 Authority Key Identifier:
keyid:88:AD:3D:60:D9:20:57:FF:0F:A0:11:F4:50:C3:64:6E:35:2D:A5:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK09YNkgV_8PoBH0UMNkbjUtpdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/079ddb-820a-4d51-bf8d-8d11ead3af8c/1/iK09YNkgV_8PoBH0UMNkbjUtpdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/079ddb-820a-4d51-bf8d-8d11ead3af8c/1/iK09YNkgV_8PoBH0UMNkbjUtpdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:94:94:27:bc:83:1b:e4:8f:b6:ff:a3:58:b5:f4:2c:27:d1:
33:f0:ce:bd:cf:96:34:d2:25:5f:0f:21:57:ed:f6:fb:cb:fc:
2b:36:38:6f:c5:11:87:01:7f:8a:53:d5:73:5b:34:c6:51:25:
48:2d:49:87:b7:24:9c:ee:56:9f:d6:e3:96:11:cb:dc:3b:24:
df:5e:31:54:a6:d1:36:44:dd:e7:2a:80:6f:09:f5:6c:72:d0:
b3:7a:80:54:b4:a6:b8:55:8a:4f:e7:25:e1:ac:b5:92:af:7e:
96:5e:78:ad:9f:4b:8e:ec:24:fd:04:33:5a:2c:89:68:3a:e2:
70:e3:4c:cf:3f:fc:c5:ba:87:7b:41:51:41:07:33:e6:6f:d4:
b1:ec:9e:6b:94:a8:13:11:dc:10:38:d7:87:03:f3:58:30:b5:
7e:0c:b5:ff:fe:77:ba:84:0f:6c:3e:91:7d:2f:de:e6:3b:55:
0a:78:bf:77:15:01:61:3e:7d:c0:03:92:30:c9:b9:c3:61:f1:
e9:e5:d5:03:b0:f5:0d:e0:9d:86:2c:3e:8d:cc:f2:44:db:8f:
ef:2c:c1:85:1f:3a:b1:29:65:62:8d:ca:51:22:ff:39:51:ab:
f4:fb:b5:0a:b6:b0:71:3e:d2:81:24:9b:c7:8e:b7:bc:a3:ba:
13:be:a2:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:51:52 2026 by rpki-client