Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.mft
File: iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.mft (raw, json)
Hash identifier: FKPZmqBADX8Pp0/upJoYtEAMcyghAboK4xRr8ohXOWE=
Subject key identifier: CF:F4:E7:3C:30:72:C8:65:43:7D:27:BF:52:8B:1E:86:7E:B4:25:19
Authority key identifier: 89:93:9F:F1:29:3B:7E:22:77:9F:C5:5B:4C:83:F1:3E:52:E9:44:28
Certificate issuer: /CN=89939ff1293b7e22779fc55b4c83f13e52e94428
Certificate serial: 019DCED074F3A633F73CD87EF337B8CE39C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.mft
Manifest number: 18B4
Signing time: Mon 27 Apr 2026 12:01:01 +0000
Manifest this update: Mon 27 Apr 2026 12:01:01 +0000
Manifest next update: Tue 28 Apr 2026 12:01:01 +0000
Files and hashes: 1: bze-DpbDaFlTujNEYrBpzXK9-lM.roa (hash: ooe09J/1o8+6+gKFLqTffzTatPXG8lw2mIe4kZHRs+0=)
2: iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.crl (hash: mTcLN2BGwTAzJT6wmtllTFDqUYaPjmSnwD0Sfqkg/+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 12:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:d0:74:f3:a6:33:f7:3c:d8:7e:f3:37:b8:ce:39:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89939ff1293b7e22779fc55b4c83f13e52e94428
Validity
Not Before: Apr 27 12:01:01 2026 GMT
Not After : Apr 28 12:01:01 2026 GMT
Subject: CN=cff4e73c3072c865437d27bf528b1e867eb42519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:87:ad:6d:c8:86:aa:b5:8a:30:46:7a:32:dd:
67:c1:a4:1e:26:14:e8:6b:4e:92:00:31:cc:0b:8e:
7e:0f:f9:db:be:59:b3:02:cb:91:66:2b:25:73:76:
d5:06:01:c0:08:f9:53:32:c5:87:e0:07:1b:0b:ca:
22:66:7d:53:25:9c:2d:41:d0:ae:8d:65:ef:0b:b1:
e8:11:db:b6:4a:2c:be:43:0a:1d:d7:67:28:87:72:
cd:84:1e:52:a2:66:c7:e6:b8:0e:fc:07:f8:73:19:
1f:6c:e2:a0:2e:52:41:80:26:3c:a8:ae:82:a2:f6:
a9:57:18:79:b4:5e:a7:09:14:c2:74:17:fe:6a:94:
90:a6:96:53:ff:20:e7:b2:01:2b:78:83:fb:48:60:
a8:44:ba:ef:52:74:bc:eb:f5:b3:26:1d:b8:16:f7:
0a:e0:00:03:a7:05:a6:88:88:0c:32:25:3f:ec:30:
f4:5d:0c:bf:b3:12:ba:a3:ef:45:74:49:34:8c:2b:
14:24:b8:f0:3b:7f:a5:0a:93:81:b4:4b:3f:22:43:
ba:ee:c6:0a:10:e2:84:b0:b8:19:b4:c5:db:27:e6:
31:a5:4f:a6:22:53:23:0c:15:46:50:35:5c:2e:0f:
97:07:d8:13:49:89:71:76:65:cf:d2:ee:80:d5:2e:
1e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:F4:E7:3C:30:72:C8:65:43:7D:27:BF:52:8B:1E:86:7E:B4:25:19
X509v3 Authority Key Identifier:
keyid:89:93:9F:F1:29:3B:7E:22:77:9F:C5:5B:4C:83:F1:3E:52:E9:44:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:53:6a:44:03:c5:e1:06:d5:9c:5e:a7:f6:0f:cf:ea:e9:ee:
27:d7:82:bd:a7:36:27:cc:9b:97:c9:76:7a:78:67:77:66:7b:
c7:c7:14:07:fb:e7:e8:0a:17:1e:5c:89:b7:4d:6b:cd:b5:0d:
73:4c:04:b5:05:54:28:08:3c:ab:37:06:cc:01:f6:dd:0e:aa:
38:5f:aa:3c:c0:69:e6:6e:0b:89:60:a6:11:3a:4b:ab:4d:c8:
52:78:6f:dc:84:42:bc:b5:e6:20:e3:fd:85:5d:8d:62:10:36:
f2:5f:fd:61:9b:9f:e0:f2:d5:f2:58:dc:f6:ec:47:67:27:35:
4a:1f:67:fe:1c:c3:43:87:92:34:15:33:33:06:3b:f8:d8:0a:
4e:d0:23:e8:86:9b:f9:15:6f:10:25:b1:c3:16:4d:e3:72:e4:
88:1c:cf:90:fa:39:90:c2:b7:38:96:85:fa:2b:55:fc:6f:e4:
57:54:55:b8:a0:bb:b1:fa:5d:c0:9d:60:57:15:21:c8:8b:88:
43:c4:37:dc:07:bb:8e:e3:e5:49:c0:22:3f:45:26:4b:7a:f2:
13:66:df:cf:46:c0:b6:c5:83:53:95:90:54:14:ac:7d:e8:4a:
21:26:6d:de:b3:bb:6a:b0:4e:4c:73:0e:c5:2b:94:2d:ae:03:
10:28:d8:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:06:22 2026 by rpki-client