Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/71015d-d0c7-4fa4-a56c-ced2e4128e85/1/ip9dwU9wdoEUkWKMoYghUL1fAQ8.mft
File: ip9dwU9wdoEUkWKMoYghUL1fAQ8.mft (raw, json)
Hash identifier: M4GyF8Xu776vI1eJO+2dsuZaZ+//01A/76h7MH1mj/E=
Subject key identifier: 0A:87:2B:25:C2:7C:6A:9C:91:42:C8:6E:CB:E5:A2:72:15:42:C1:6F
Authority key identifier: 8A:9F:5D:C1:4F:70:76:81:14:91:62:8C:A1:88:21:50:BD:5F:01:0F
Certificate issuer: /CN=8a9f5dc14f7076811491628ca1882150bd5f010f
Certificate serial: 019DDE0D1CF0556EE599342B266281428692
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ip9dwU9wdoEUkWKMoYghUL1fAQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/71015d-d0c7-4fa4-a56c-ced2e4128e85/1/ip9dwU9wdoEUkWKMoYghUL1fAQ8.mft
Manifest number: 016A
Signing time: Thu 30 Apr 2026 11:01:34 +0000
Manifest this update: Thu 30 Apr 2026 11:01:34 +0000
Manifest next update: Fri 01 May 2026 11:01:34 +0000
Files and hashes: 1: 5JsNsuuUapw5fDgkbUkuWEzMsLk.asa (hash: RxL4Yv7FvjiasU1GewN7L6R6PTxiHwL1wYEDnRLK5b8=)
2: Sxkhw8Fa5pO8BhRGtQeTU8fdya8.roa (hash: l1dlDAqaaU0qfv4ZGVF35Fo37aw65NRWppLOtUVD5ug=)
3: ip9dwU9wdoEUkWKMoYghUL1fAQ8.crl (hash: tIGTI9d5HpEAP0Qcuno5qsyUUn4ZbOxRX/VHdBsbfVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/71015d-d0c7-4fa4-a56c-ced2e4128e85/1/ip9dwU9wdoEUkWKMoYghUL1fAQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/71015d-d0c7-4fa4-a56c-ced2e4128e85/1/ip9dwU9wdoEUkWKMoYghUL1fAQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ip9dwU9wdoEUkWKMoYghUL1fAQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:de:0d:1c:f0:55:6e:e5:99:34:2b:26:62:81:42:86:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a9f5dc14f7076811491628ca1882150bd5f010f
Validity
Not Before: Apr 30 11:01:34 2026 GMT
Not After : May 1 11:01:34 2026 GMT
Subject: CN=0a872b25c27c6a9c9142c86ecbe5a2721542c16f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:38:2b:cc:6a:63:fb:5c:85:55:f1:ec:6d:e3:
98:8a:bc:54:69:3d:72:bc:07:fa:49:79:1b:dc:db:
b0:87:2a:b7:41:51:fc:d8:0b:03:68:ff:63:2f:83:
91:f7:bc:0b:30:c2:77:e2:0e:a4:65:35:33:84:d7:
f3:a2:97:c5:42:80:e3:96:be:c9:9e:39:4f:bd:3c:
55:f4:6a:9a:7e:a0:e5:02:c0:31:16:f5:38:c1:fb:
14:25:49:3e:a2:d2:0d:7f:5a:8a:0b:e4:1f:b7:8d:
da:6c:04:5f:9f:32:26:f5:8b:73:c3:e5:c3:dd:9a:
b6:66:3f:b1:36:9d:43:55:db:e5:23:d0:e0:7c:aa:
85:f9:c4:79:6f:52:f2:27:0b:e4:65:2c:91:4c:c6:
6b:dc:85:cb:06:4f:38:82:be:a9:fe:ff:53:5c:8f:
4c:b1:66:9b:73:f2:84:7c:8a:12:6c:e1:28:5b:b2:
cc:4d:1b:d9:c9:68:cc:91:bc:27:21:58:62:9d:4d:
3e:cc:a3:aa:da:e1:3f:86:d4:05:1d:53:5f:70:66:
ed:0f:59:b4:26:0b:4d:a0:e6:0b:db:9b:dd:73:90:
5f:87:cb:41:b0:74:f9:0b:13:cd:04:37:3d:24:7b:
1b:89:d6:6c:4a:d9:9d:39:19:9f:3b:9c:03:5e:38:
37:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:87:2B:25:C2:7C:6A:9C:91:42:C8:6E:CB:E5:A2:72:15:42:C1:6F
X509v3 Authority Key Identifier:
keyid:8A:9F:5D:C1:4F:70:76:81:14:91:62:8C:A1:88:21:50:BD:5F:01:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ip9dwU9wdoEUkWKMoYghUL1fAQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/71015d-d0c7-4fa4-a56c-ced2e4128e85/1/ip9dwU9wdoEUkWKMoYghUL1fAQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/71015d-d0c7-4fa4-a56c-ced2e4128e85/1/ip9dwU9wdoEUkWKMoYghUL1fAQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:ee:ab:1b:2b:db:68:aa:0a:45:45:a7:9c:34:9e:69:12:2d:
88:f7:92:dd:ec:bb:85:7b:d5:e0:e2:0d:47:e6:3e:79:67:42:
42:69:26:cd:5d:f8:ee:c1:9a:2d:17:28:6f:1c:63:04:f8:ee:
f0:1c:e3:34:76:8a:66:2e:05:5f:87:e1:d4:cb:9d:6b:b3:ad:
57:9e:80:da:01:44:c5:30:02:f8:f0:51:09:89:9b:87:05:3e:
93:d8:3f:57:2d:15:e5:b9:00:39:40:e7:e0:f8:29:80:ea:0f:
94:92:bd:fd:e0:74:40:56:11:fd:3b:8f:3a:94:66:88:aa:73:
01:ee:6f:6d:a3:d5:0e:c1:ea:78:b9:dc:d7:15:4a:6f:36:88:
98:44:0e:4d:bc:67:c3:cd:c2:62:b5:25:49:ab:6f:f5:be:3d:
30:05:2a:f3:61:cf:b5:38:2b:74:83:71:22:23:ba:38:3d:8e:
76:f6:5a:5c:ef:cd:16:16:8a:e3:09:ba:47:be:0a:23:23:3d:
12:77:53:19:60:be:7c:ab:8e:d1:1e:f0:d2:a2:10:4f:ec:39:
25:f6:dc:ad:13:cf:77:8c:b9:06:e6:e1:d1:27:78:54:a5:7e:
6e:64:bf:8f:95:81:9a:35:5e:94:ea:7c:65:ab:6e:45:a2:59:
39:4f:ae:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 12:48:32 2026 by rpki-client