Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft
File: I7oexPA1py36OekwrY7FQ2jrevQ.mft (raw, json)
Hash identifier: vxGzYI0opiQ2UmhaiDo/RnWsV6IB4YCz445lpo+9jfc=
Subject key identifier: 57:A4:AB:4B:64:7A:DC:D1:92:F0:FE:9A:CC:76:0F:05:4D:91:E1:F1
Authority key identifier: 23:BA:1E:C4:F0:35:A7:2D:FA:39:E9:30:AD:8E:C5:43:68:EB:7A:F4
Certificate issuer: /CN=23ba1ec4f035a72dfa39e930ad8ec54368eb7af4
Certificate serial: 019DBF26320C13B9D35073000CAAE4FE8AF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I7oexPA1py36OekwrY7FQ2jrevQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft
Manifest number: 18DB
Signing time: Fri 24 Apr 2026 11:00:44 +0000
Manifest this update: Fri 24 Apr 2026 11:00:44 +0000
Manifest next update: Sat 25 Apr 2026 11:00:44 +0000
Files and hashes: 1: I7oexPA1py36OekwrY7FQ2jrevQ.crl (hash: sIXC6K0qItSZfveXevtz6EGHfaTr2y1zLwaLAUKQzeo=)
2: YV5YbyzQ4v-R-M9sTv2X0MLou60.roa (hash: Wnl73KWmj3QlZUmHv6GR1P0QHj68SNwwAwR9VDBTafI=)
3: _IN-lUbsVoIujOIBhlqniYDIAj4.roa (hash: OVNWFTAvftStnpg3u2YMXcX4JyBnzVvFH9bIqxUH8FU=)
4: b0HKN9ab1P1Sr3YvvuEwkf7syng.roa (hash: 9hsVaqxhAVdgsjntPxtz6LrMJOjEjADE4hMXgvvmdoo=)
5: t_VAikl6AuDV7KY1lJg71qWe6PI.roa (hash: 5EWDR0oT5pCzdNuqq4gxPs1dK+scKpifLsg8E3R3q10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/I7oexPA1py36OekwrY7FQ2jrevQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:bf:26:32:0c:13:b9:d3:50:73:00:0c:aa:e4:fe:8a:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ba1ec4f035a72dfa39e930ad8ec54368eb7af4
Validity
Not Before: Apr 24 11:00:44 2026 GMT
Not After : Apr 25 11:00:44 2026 GMT
Subject: CN=57a4ab4b647adcd192f0fe9acc760f054d91e1f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0f:6c:e7:0f:52:53:a8:55:bc:80:c3:08:11:
e1:c4:76:a8:2b:cc:a2:6b:75:17:a8:63:39:e2:ae:
f9:7a:3d:66:92:ba:5d:ab:6c:f3:63:e0:4a:f5:95:
28:f9:06:1b:42:fe:ad:bb:5d:7b:75:b9:e2:6b:c3:
63:c2:6b:41:ff:a1:2f:b6:45:96:f1:49:e7:82:30:
96:33:91:91:32:b2:80:b7:39:3b:ca:6b:94:c7:1a:
9a:9c:a3:d1:4a:f9:60:e6:ad:e6:52:d8:5a:15:62:
84:66:f2:23:78:3b:9a:a8:c7:6e:17:ec:f0:23:6a:
62:25:83:6f:5c:04:02:00:8c:4c:3a:58:9a:aa:4e:
b0:6d:d8:3a:ba:e8:62:7a:42:d7:0a:6c:4e:07:b4:
ac:4a:c7:39:76:3b:15:0e:5a:f7:9a:8c:8f:aa:fc:
45:59:f6:4c:94:89:89:14:9b:10:c9:5a:a0:1f:99:
d6:82:66:91:d4:a0:b1:25:c9:73:32:f1:1c:71:81:
47:e3:7f:c2:d3:d4:e7:e3:fc:57:e9:a0:ec:26:19:
af:ea:10:26:79:e6:85:2a:7e:36:83:44:c8:1a:6b:
cf:48:70:67:e0:8e:a0:1e:2a:24:c1:24:4c:b3:55:
b4:cc:15:99:99:b8:d8:3c:99:da:0a:15:65:a3:69:
86:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:A4:AB:4B:64:7A:DC:D1:92:F0:FE:9A:CC:76:0F:05:4D:91:E1:F1
X509v3 Authority Key Identifier:
keyid:23:BA:1E:C4:F0:35:A7:2D:FA:39:E9:30:AD:8E:C5:43:68:EB:7A:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I7oexPA1py36OekwrY7FQ2jrevQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:72:bb:1e:09:d0:cf:2e:55:50:c5:6f:55:16:fe:04:4d:16:
b5:b6:68:12:85:84:5e:10:bb:8c:bf:b0:c6:4d:cb:df:70:67:
5d:de:51:d2:f2:4a:cf:55:f7:82:5d:a9:ed:16:65:a7:70:fd:
d5:fb:65:1c:67:4e:bf:66:9f:27:6a:98:c0:72:af:28:89:28:
d5:0f:a4:93:ea:d6:a0:f0:d5:56:e2:ba:b6:2d:35:09:71:3e:
04:00:a9:06:f1:52:e9:f0:32:3b:68:ed:2c:09:f8:9a:5a:49:
5b:61:89:d0:3c:b1:cc:20:80:49:3a:20:c5:19:99:2d:d7:85:
86:b0:53:77:12:65:9d:be:7d:7a:56:ec:24:02:89:df:f9:99:
d0:89:d4:ab:96:47:b5:cf:53:c2:e4:10:c9:b3:28:59:f4:c3:
24:dc:c4:dc:2c:f7:bf:9a:06:01:cf:04:7a:23:a8:d2:4f:e4:
7e:fd:49:28:25:35:e6:eb:bc:d9:20:b1:8c:6b:05:ea:52:d6:
d6:a9:71:e7:a9:1c:e5:be:f6:42:9e:79:38:8a:ba:61:a7:1c:
bc:14:34:c4:81:3e:4e:71:b9:fc:4a:04:10:f5:cf:42:8d:56:
55:a8:7d:23:73:3e:e7:f7:ae:e9:f2:f5:ee:ed:56:ac:73:07:
05:6b:93:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 24 15:51:42 2026 by rpki-client