Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.mft
File: _INSXRQvv0uUs9FpRFNlxm3f3f0.mft (raw, json)
Hash identifier: BNvcRxP/Gq6+SBnz+65UNdUxS1Dj3jaP2hIJ2LLVnXQ=
Subject key identifier: 71:76:DA:1C:92:A2:F9:AA:0A:2B:FC:70:98:D3:B3:38:25:CC:21:DC
Authority key identifier: FC:83:52:5D:14:2F:BF:4B:94:B3:D1:69:44:53:65:C6:6D:DF:DD:FD
Certificate issuer: /CN=fc83525d142fbf4b94b3d169445365c66ddfddfd
Certificate serial: 019DD087B083824A27E04466A309B1EBC063
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_INSXRQvv0uUs9FpRFNlxm3f3f0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.mft
Manifest number: 0E8D
Signing time: Mon 27 Apr 2026 20:00:46 +0000
Manifest this update: Mon 27 Apr 2026 20:00:46 +0000
Manifest next update: Tue 28 Apr 2026 20:00:46 +0000
Files and hashes: 1: OL5rrlXEFbAHEW_QdLIMCi4ecYs.roa (hash: T+xEBt9Lq4aYkhbQVM/xBwICTcb1SM1e4Bt2/nU6Ejk=)
2: S-InCTEVIu9QziCJ2n1NkT5BoKA.roa (hash: xzCaGYolBOI0OvoZsN0FNOCdfRTLrPslHVZ2GGqD0wY=)
3: _INSXRQvv0uUs9FpRFNlxm3f3f0.crl (hash: KKlsBNyEbJeyBAEm54st/Ms7CepesyvD8DBfCwtGDZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_INSXRQvv0uUs9FpRFNlxm3f3f0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 20:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:87:b0:83:82:4a:27:e0:44:66:a3:09:b1:eb:c0:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc83525d142fbf4b94b3d169445365c66ddfddfd
Validity
Not Before: Apr 27 20:00:46 2026 GMT
Not After : Apr 28 20:00:46 2026 GMT
Subject: CN=7176da1c92a2f9aa0a2bfc7098d3b33825cc21dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b9:c5:a3:2c:56:04:e1:9b:74:cb:4d:63:29:
34:00:e8:05:ff:84:d6:9e:a4:a1:4b:05:fe:50:c5:
d8:d9:10:70:e6:09:bd:5c:f0:dd:f1:88:69:01:5e:
b9:57:42:c0:cf:20:8c:6c:fa:de:f5:73:2c:cc:bc:
22:9b:ff:38:bc:b7:5e:40:ba:f3:08:05:22:b2:55:
9c:23:88:8d:d3:25:fc:c3:fe:49:b3:e6:de:10:1f:
61:c4:e6:fc:3f:7e:b3:1d:f6:3b:ae:78:29:de:55:
ae:b6:09:f0:77:50:b6:34:e3:d5:bb:63:b7:7b:84:
f2:b4:71:ed:4e:21:f8:45:e5:67:f0:f5:33:30:6e:
9c:ce:5c:42:14:99:0c:15:3c:d2:2f:e5:a9:c2:8b:
c7:0b:29:43:fc:15:a5:16:0d:46:98:9e:22:6e:b4:
d8:64:08:9e:cf:01:a2:b9:4e:61:ca:24:3c:6b:a6:
17:cd:cb:68:f7:00:7c:7e:5d:2b:8a:95:bd:31:29:
28:55:64:21:71:a4:2c:53:d0:ed:64:c2:c9:6a:b8:
87:d4:b5:cf:10:22:70:c1:37:5f:f8:9a:7b:52:79:
ad:6d:0a:25:ef:8b:fb:bb:86:26:89:4f:98:da:fa:
45:5e:a0:a4:53:1b:19:ba:35:0b:62:ba:9e:5c:2a:
db:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:76:DA:1C:92:A2:F9:AA:0A:2B:FC:70:98:D3:B3:38:25:CC:21:DC
X509v3 Authority Key Identifier:
keyid:FC:83:52:5D:14:2F:BF:4B:94:B3:D1:69:44:53:65:C6:6D:DF:DD:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_INSXRQvv0uUs9FpRFNlxm3f3f0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:2b:5f:77:0f:8d:f4:1a:6a:3d:f8:ae:07:e4:6d:c8:e1:6f:
b7:89:b8:12:f5:e4:2e:52:c1:53:54:dd:ea:69:f1:64:0e:87:
ad:c5:85:4e:f3:fd:cd:ce:41:aa:0a:0a:f1:fb:30:73:d3:20:
7d:36:3c:0d:ec:e3:d5:c5:d4:19:a7:3b:21:be:30:50:00:63:
a6:3e:e6:f7:e0:b6:ab:ef:17:70:b6:04:eb:ed:25:8b:3a:e2:
4f:16:7a:ee:88:50:50:82:cb:7e:aa:bc:26:86:b4:27:b6:05:
d9:5e:6f:d9:28:38:6f:2f:8a:a9:6c:85:3b:c2:b4:b1:08:32:
90:b1:be:d2:8d:12:a5:b5:b8:fe:4f:94:b9:ee:4d:9b:33:42:
15:64:72:a5:6a:4e:99:51:8c:a0:f6:33:0d:6b:4b:70:d3:5c:
7a:21:e2:bd:f3:f9:fc:f9:77:4e:8f:42:76:63:15:73:ab:d7:
99:a4:28:4b:c4:7b:ef:b1:14:9f:d2:bc:a5:89:82:ad:c8:9f:
ed:90:34:7a:70:d0:19:3c:e8:5b:38:90:89:e9:4b:a7:bf:46:
ac:0a:51:06:f5:fa:66:cc:10:9b:0c:62:e3:4f:36:1b:56:f8:
9a:77:08:38:78:93:7d:ed:07:56:de:51:bb:f4:6f:b6:46:c7:
41:2a:34:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 04:49:06 2026 by rpki-client