Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft
File: IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft (raw, json)
Hash identifier: qzQbd0Weo/jhtmY6VBUXirMotDRgYF/eQJMjgFEVqnk=
Subject key identifier: B6:31:B4:B4:94:86:31:BA:D4:A1:0E:AB:5E:82:D4:E1:5B:BA:06:E6
Authority key identifier: 21:A0:00:80:CD:2C:B1:BB:07:39:03:B3:2B:25:AD:66:0A:36:64:86
Certificate issuer: /CN=21a00080cd2cb1bb073903b32b25ad660a366486
Certificate serial: 019D661AB387585F1AC7944766D862FAF6B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft
Manifest number: 177C
Signing time: Tue 07 Apr 2026 04:01:58 +0000
Manifest this update: Tue 07 Apr 2026 04:01:58 +0000
Manifest next update: Wed 08 Apr 2026 04:01:58 +0000
Files and hashes: 1: IaAAgM0ssbsHOQOzKyWtZgo2ZIY.crl (hash: 0I9HPQwjGu31EKfqyNR3NDnKZDCHGsKEUf9kPoVcxGs=)
2: VND09LSiHkpjSOuhfnkKXr1ycfk.roa (hash: EuKqokjCANLNooQ3HgGRZe/o74jjpFvSm4Mcmm5yRzA=)
3: a8PSnoMbEUhv4Faq7MVolsfXT_Y.roa (hash: BPdIhgn9ulm4J7RgTCmSDSsMLRstDEKHEvI4iWcZR7s=)
4: u26fRlT_magCXskBSsLbW-Zc4HE.roa (hash: 9IYpduU01RzT9y1ftFaznGYathxT6zXqQawir2B1XDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Apr 2026 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:66:1a:b3:87:58:5f:1a:c7:94:47:66:d8:62:fa:f6:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21a00080cd2cb1bb073903b32b25ad660a366486
Validity
Not Before: Apr 7 04:01:58 2026 GMT
Not After : Apr 8 04:01:58 2026 GMT
Subject: CN=b631b4b4948631bad4a10eab5e82d4e15bba06e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6a:f0:26:7e:77:85:83:58:40:e1:49:cf:0f:
91:9f:fd:a7:e4:85:6f:e2:03:74:e9:dc:11:f7:48:
9b:d4:7e:1c:06:4d:3c:db:c1:8a:40:81:45:fd:a1:
a4:66:c4:01:a1:81:a6:8d:06:47:52:2b:3d:33:36:
29:54:2b:f0:96:99:45:16:da:98:44:59:d9:19:8b:
85:75:de:ed:4c:d2:d9:77:96:93:27:83:0f:df:56:
b6:13:8d:1a:fc:49:f9:5f:4c:53:e4:98:4d:4a:87:
56:11:4a:82:61:72:e8:92:69:f4:85:fd:26:ff:15:
c3:15:22:98:64:11:04:c9:e4:6d:b8:5a:8b:7c:e8:
61:b2:a4:3b:74:5e:db:64:a5:0b:5f:54:84:fe:49:
a5:b0:29:c7:72:fb:43:90:38:af:51:6c:22:80:03:
fe:f9:1e:74:2e:ed:6c:8e:55:95:87:75:36:f7:76:
ff:87:b4:1f:5f:d3:ae:79:19:9f:5f:f4:e6:22:92:
7f:80:d9:78:41:24:cd:b1:b5:80:8b:15:17:67:66:
82:96:f2:48:fe:06:e2:3f:06:5e:b9:2a:3f:8c:88:
3b:d2:7f:aa:fe:a6:6a:82:21:95:5a:2f:a1:07:b1:
95:81:19:28:a1:0f:98:49:7d:87:50:e2:92:d4:8c:
37:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:31:B4:B4:94:86:31:BA:D4:A1:0E:AB:5E:82:D4:E1:5B:BA:06:E6
X509v3 Authority Key Identifier:
keyid:21:A0:00:80:CD:2C:B1:BB:07:39:03:B3:2B:25:AD:66:0A:36:64:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:fc:a0:3d:db:42:b9:9a:40:bd:4c:61:77:96:fa:f4:04:26:
11:64:8b:de:db:df:b0:ad:0e:50:a3:e4:ce:48:8e:8b:f3:94:
7b:b1:dc:c8:76:11:20:ee:c1:eb:28:6e:1a:28:57:f5:4b:55:
81:93:a7:4d:5e:a9:fd:e5:25:77:e9:7f:15:0a:7c:db:dc:15:
b3:5e:b0:b4:bc:7b:b7:73:a3:0f:82:7e:98:b7:51:8f:5c:d4:
1a:68:bf:d9:ac:c8:86:62:b8:8f:f5:fb:57:8a:49:e5:aa:54:
b3:a6:2e:c4:5d:d6:1e:2d:49:83:0d:96:fe:ea:27:b5:31:97:
bf:7a:eb:bb:d4:f5:9f:c7:c1:1a:74:31:de:3e:dd:4b:0e:1c:
10:1a:7f:c1:25:97:32:32:c0:1e:7e:cc:51:a1:60:f1:5f:1a:
4c:65:46:b5:ec:1a:b8:79:2f:57:42:36:38:51:c3:96:60:b1:
bb:f4:f9:aa:d4:79:60:51:7b:38:3f:8b:3d:88:bc:9b:d5:eb:
49:9b:19:46:0e:ec:2c:80:51:81:d2:17:99:6c:b5:4c:17:5b:
e7:fc:ea:b7:c3:df:96:60:19:80:ea:5e:90:5f:84:84:0a:cb:
30:7d:c8:5b:d3:f1:b5:ba:21:90:0d:65:8e:d2:c9:c9:b2:0f:
cc:b7:a4:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 12:04:41 2026 by rpki-client