Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft
File: iNEpp8ePtm0Hc7yZAINX5QfB574.mft (raw, json)
Hash identifier: UGXxUIJfR27bhfsC3P87Ufct6Z2KwmToLx1H0XzeJqQ=
Subject key identifier: 95:D6:34:02:FC:F5:41:E5:88:A1:09:B9:ED:71:32:60:58:AC:99:E5
Authority key identifier: 88:D1:29:A7:C7:8F:B6:6D:07:73:BC:99:00:83:57:E5:07:C1:E7:BE
Certificate issuer: /CN=88d129a7c78fb66d0773bc99008357e507c1e7be
Certificate serial: 019DEE5B693728D642AA22C3FB0DE7EF0C28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iNEpp8ePtm0Hc7yZAINX5QfB574.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft
Manifest number: 0A1F
Signing time: Sun 03 May 2026 15:01:01 +0000
Manifest this update: Sun 03 May 2026 15:01:01 +0000
Manifest next update: Mon 04 May 2026 15:01:01 +0000
Files and hashes: 1: WJ4tfO6kiSMSkG1grDmRdHg6U_4.roa (hash: Eb3yXv0Sg6PPztcKbZR4VGFXGGjS4jiVBjwDazfbRcs=)
2: iNEpp8ePtm0Hc7yZAINX5QfB574.crl (hash: F66GGZs859FsG6SjBtTUu8ajkqVu+zU65yacRIOHe2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft
rsync://rpki.ripe.net/repository/DEFAULT/iNEpp8ePtm0Hc7yZAINX5QfB574.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 May 2026 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ee:5b:69:37:28:d6:42:aa:22:c3:fb:0d:e7:ef:0c:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88d129a7c78fb66d0773bc99008357e507c1e7be
Validity
Not Before: May 3 15:01:01 2026 GMT
Not After : May 4 15:01:01 2026 GMT
Subject: CN=95d63402fcf541e588a109b9ed71326058ac99e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:10:b7:f4:b9:9b:d6:f0:0d:89:02:39:c8:f2:
d1:cc:67:7b:c8:03:46:68:33:a1:0a:35:95:82:5f:
1b:44:0d:2c:a5:a4:d9:ea:30:d2:66:04:a5:b0:a8:
5a:7d:58:fa:e9:b9:ff:de:3b:74:be:67:eb:e5:8f:
db:a8:af:ef:b2:1d:3c:25:fd:76:0b:80:d6:7e:16:
6c:cf:cc:30:ee:9e:53:7b:6f:a8:e7:96:ed:c0:a4:
11:e6:38:31:18:3c:f5:68:b0:0f:4b:da:ab:4a:d2:
fe:6a:7c:14:96:e1:77:a2:b4:75:2b:79:d5:30:c8:
02:6c:8c:23:e0:92:81:00:db:f9:6a:39:6b:0e:5c:
0f:49:53:06:26:60:3b:63:70:46:73:9a:e7:13:ef:
64:30:c6:18:a1:0e:ba:c8:87:88:d8:b2:c1:88:f3:
6a:45:ea:4e:5d:4f:c4:16:70:f2:35:1c:15:78:e6:
fc:d4:5a:8f:d2:22:d3:d1:09:03:7b:ce:67:b2:4e:
47:ed:95:66:a3:8e:36:56:b6:32:a5:24:7e:68:d4:
5d:e1:83:15:06:b9:78:77:dd:ab:29:d1:b8:e3:65:
4f:93:f1:56:a7:84:9f:dc:2a:8d:cb:72:3b:d8:f4:
a1:af:d5:e4:df:8c:61:a9:d1:df:98:d6:58:88:39:
1d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:D6:34:02:FC:F5:41:E5:88:A1:09:B9:ED:71:32:60:58:AC:99:E5
X509v3 Authority Key Identifier:
keyid:88:D1:29:A7:C7:8F:B6:6D:07:73:BC:99:00:83:57:E5:07:C1:E7:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iNEpp8ePtm0Hc7yZAINX5QfB574.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:e9:5f:e5:e3:ec:3a:2f:07:76:5a:d4:62:f9:29:fe:17:44:
21:a9:81:e3:4f:d0:67:20:0e:00:ee:4a:f0:1e:89:73:68:53:
3c:60:77:2c:a2:6f:4f:f7:de:28:14:f9:37:ea:14:13:cc:ed:
89:97:50:09:43:d7:21:3a:af:2a:42:7d:fe:7e:f8:c5:db:e7:
b2:3a:b5:bd:02:be:aa:da:73:05:0b:c4:1e:0d:37:10:9a:73:
6d:07:62:3d:9d:a0:40:fe:15:6e:e6:63:a9:34:63:3e:2d:bd:
45:54:93:9a:40:4b:dc:0c:64:a5:25:de:35:a1:bb:2d:5e:29:
24:8a:7f:6c:57:28:b4:0f:f6:1f:c9:14:52:6d:4a:52:cd:ab:
91:80:f7:c9:9b:39:1d:fd:02:c5:24:79:1a:85:3f:d7:1c:5a:
29:6d:85:1e:e2:02:bc:a8:3e:57:b2:cd:e9:99:6e:ef:af:24:
51:42:83:7b:41:46:2d:16:bd:1e:e0:b1:0a:36:c5:63:84:87:
aa:a5:ef:5d:02:ff:7f:8f:8a:cd:c9:01:85:7d:9f:5f:2d:a7:
62:eb:f8:7a:bc:45:16:09:24:a8:a9:9b:01:05:15:9f:28:5e:
31:0b:57:1e:84:ed:e9:aa:6f:e6:e9:29:bc:76:02:3c:39:d3:
f5:07:01:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 20:57:51 2026 by rpki-client