Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.mft
File: Iu6yQvsK-qA32cr1YExlh-QN47U.mft (raw, json)
Hash identifier: M9+ktSv/2es+gx1AIGpNcLB08m7nTOcHazEbd5W4DZ8=
Subject key identifier: 52:8E:6B:46:93:03:21:93:8C:19:33:12:2C:B5:4F:6C:84:0A:08:2C
Authority key identifier: 22:EE:B2:42:FB:0A:FA:A0:37:D9:CA:F5:60:4C:65:87:E4:0D:E3:B5
Certificate issuer: /CN=22eeb242fb0afaa037d9caf5604c6587e40de3b5
Certificate serial: 019D999987662BA22EB636B50FACC24F7FD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iu6yQvsK-qA32cr1YExlh-QN47U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.mft
Manifest number: 134C
Signing time: Fri 17 Apr 2026 04:01:08 +0000
Manifest this update: Fri 17 Apr 2026 04:01:08 +0000
Manifest next update: Sat 18 Apr 2026 04:01:08 +0000
Files and hashes: 1: AoZyCGmwWYOvTcBoBxppvgjx5wI.roa (hash: JjEnLVWUXr5ybK4HzaNHUGz7wgv3mVaZHLhSRwmw5kY=)
2: Iu6yQvsK-qA32cr1YExlh-QN47U.crl (hash: ndCze1Gyi5Gj9XYXpP7rv+hvy2l+LMrjHJkftUoslw4=)
3: MUCGMyUzZSrYs0HfPvn9wE8K0Vs.roa (hash: AJPgOXLo9blCFV8x9Zk5FOB9xhjaDRBtGEHIixQGenA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iu6yQvsK-qA32cr1YExlh-QN47U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:87:66:2b:a2:2e:b6:36:b5:0f:ac:c2:4f:7f:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22eeb242fb0afaa037d9caf5604c6587e40de3b5
Validity
Not Before: Apr 17 04:01:08 2026 GMT
Not After : Apr 18 04:01:08 2026 GMT
Subject: CN=528e6b46930321938c1933122cb54f6c840a082c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:92:e2:4d:fd:5b:3d:33:9f:97:14:0d:14:68:
5c:b1:3a:65:29:fb:02:d2:7d:f0:db:0e:33:39:2f:
c6:b8:59:cf:eb:1d:d1:e9:48:2f:f5:42:6f:ce:67:
a9:cf:28:2f:cb:f2:eb:4c:04:20:ce:ef:bd:64:68:
39:94:44:51:e8:1d:3b:46:0f:be:16:de:0e:14:90:
96:cf:bb:85:07:b7:a7:a5:0c:e4:c8:14:ae:93:a2:
80:3b:eb:2a:8c:8c:30:35:84:2e:6e:5f:95:55:d6:
fa:22:bc:1d:eb:9a:ef:b7:07:1b:30:ed:36:4f:db:
e4:84:40:5e:0f:87:03:f1:fa:a6:ef:21:69:0e:01:
20:bd:dd:82:34:21:68:1d:f4:f1:b4:19:04:0e:d7:
ec:d5:a6:16:7f:90:22:07:94:95:71:04:50:e6:db:
9f:76:5b:63:d1:ae:8d:35:f5:18:d3:ee:45:b9:42:
8b:b3:cc:2b:e2:54:90:2c:e1:ed:4d:5d:52:df:88:
0b:62:8c:72:78:cf:f3:5d:67:5f:74:ae:89:77:95:
b7:ee:99:18:96:5a:1a:6a:bc:65:94:91:18:63:4e:
69:aa:6c:a6:a8:26:fb:24:1c:fc:75:4c:62:35:27:
52:63:d6:03:0e:8a:8a:db:c7:1c:ff:c6:d3:c7:4f:
ec:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:8E:6B:46:93:03:21:93:8C:19:33:12:2C:B5:4F:6C:84:0A:08:2C
X509v3 Authority Key Identifier:
keyid:22:EE:B2:42:FB:0A:FA:A0:37:D9:CA:F5:60:4C:65:87:E4:0D:E3:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iu6yQvsK-qA32cr1YExlh-QN47U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:80:4b:4b:a4:0d:3c:fd:a5:fa:1c:68:12:03:67:66:4f:db:
ba:f3:32:18:90:9e:4a:78:5d:8b:c1:18:e4:35:b9:6e:5c:7b:
64:6d:69:fc:c0:0d:4a:58:6c:8b:de:8c:47:0f:be:a8:0d:03:
c2:35:5c:a7:e7:28:37:45:a4:20:54:96:7f:69:5b:c5:35:fb:
8b:09:20:0c:07:6d:2b:b6:c4:73:eb:7a:9f:47:d3:56:91:e0:
34:60:f4:72:f3:2b:da:32:54:09:4a:8a:01:79:48:16:48:57:
b6:84:9a:a5:ce:29:7f:fd:66:36:ee:96:3f:4b:3e:29:61:89:
3c:18:5d:83:80:91:67:10:28:bf:fa:94:54:bb:85:1c:9c:6c:
25:a8:c6:48:6d:96:e4:ce:37:de:32:90:27:2c:3c:bb:9c:26:
15:7d:c3:a8:63:de:73:2f:00:67:cd:bd:d0:5d:18:ce:57:2f:
8b:8c:cc:c6:c4:1e:d3:f1:1a:a6:ca:5d:58:fc:8a:a0:e9:b5:
c1:27:0d:c5:0c:37:e6:04:88:43:74:7c:91:08:75:8b:4e:a5:
b9:11:91:39:b8:b9:84:5c:d9:81:31:85:27:14:9b:66:7a:87:
8b:ca:94:f6:3b:79:71:57:46:af:f1:ee:b5:dd:02:1a:21:f7:
fc:0c:59:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:19:44 2026 by rpki-client