Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft
File: IixFhb2I-yfK3ynuW7ldZXX874M.mft (raw, json)
Hash identifier: ZliweGK/dAa8/xAa+iSf/tIO7xFi0i1s7IOMZqhzgkM=
Subject key identifier: C3:D8:BC:30:B0:70:B6:F5:22:F8:A3:62:61:66:85:04:D5:1A:BE:30
Authority key identifier: 22:2C:45:85:BD:88:FB:27:CA:DF:29:EE:5B:B9:5D:65:75:FC:EF:83
Certificate issuer: /CN=222c4585bd88fb27cadf29ee5bb95d6575fcef83
Certificate serial: 019DCD5027FD04183E9BA0CD2C317514C741
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft
Manifest number: 102E
Signing time: Mon 27 Apr 2026 05:01:15 +0000
Manifest this update: Mon 27 Apr 2026 05:01:15 +0000
Manifest next update: Tue 28 Apr 2026 05:01:15 +0000
Files and hashes: 1: 1lY-CsGva2obFTlBMU3iZDfCreA.roa (hash: Snn45LbsQALIONEF3gxNerrBtObVtDy584EK4tr9H6g=)
2: 2bVvxRffnJ6GQKgs2LoPDWvUcK4.roa (hash: er7wIVOxtiLCvuKAAvSBfYTSBvkd5n1t/IW0taeZM7Y=)
3: EKwGj8cGWTKa1emZfvaG-_KFnug.roa (hash: 0WqMi3eKQHHkupGYUjixsLx2D37mbsIXi9Fsl7hZLiw=)
4: IixFhb2I-yfK3ynuW7ldZXX874M.crl (hash: K1Q5YEnVPHjlGdCNl9oFjC3IY3Q+gHaClT6S0RJPAuM=)
5: QdRrKIrH4mGJmO4pGdzpank3gew.roa (hash: uL5ZvBd0SOggdi3Ll3eXsAHR4s6R5DvUqu2sa+EiNtI=)
6: TruqXXhyrBV8Cwe5yzCBt7QLsCE.roa (hash: Ab+jWWB0kPKqVoiUmBfNBgr0bDHAA/s+gzbI3fKh/Jo=)
7: YIiAdksRfvM2tL27jCCRXB5ju3Q.roa (hash: QClgQMgXCLixY3zPZ3xGliorGs5EkE6bJGcMO+wqsBg=)
8: hD3IqorNDrlwkzGUmybhJLv5L2k.roa (hash: ZaWNL4A6CBZBDeNroOwIUO67tG+ZeiSsCvPL+QQ5od4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft
rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 05:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:50:27:fd:04:18:3e:9b:a0:cd:2c:31:75:14:c7:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=222c4585bd88fb27cadf29ee5bb95d6575fcef83
Validity
Not Before: Apr 27 05:01:15 2026 GMT
Not After : Apr 28 05:01:15 2026 GMT
Subject: CN=c3d8bc30b070b6f522f8a36261668504d51abe30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ff:fa:38:e6:18:80:03:da:68:23:1e:4a:35:
7a:6e:64:8e:8d:1b:7d:0a:ef:42:ef:e9:19:a5:5e:
8d:b1:cc:24:7a:f5:e5:ea:f9:b6:e8:5d:f6:af:c5:
63:3e:95:f5:c4:a8:33:0a:d4:88:12:3a:c4:98:31:
43:3a:28:0f:1c:6b:6c:34:31:7f:92:b3:17:2c:ee:
42:ed:c3:31:39:a3:94:47:2c:6c:63:3d:0a:f3:15:
db:0d:62:c0:c0:85:83:10:46:e6:81:e5:20:e0:0d:
b1:16:b8:6a:03:e9:33:8c:bd:02:a7:52:f3:81:7b:
ad:f0:c5:6c:9c:77:1f:e2:75:1d:20:f9:db:88:cc:
da:dc:f2:78:d2:8d:c8:b6:a9:48:7d:16:d7:ec:ca:
eb:f8:a3:8c:5e:c8:c5:e5:83:02:cd:83:d0:fc:50:
60:51:85:a3:37:dc:a1:78:79:5d:91:ba:0e:c9:59:
69:a9:4b:9d:15:3c:61:f6:f7:c2:e4:d5:25:ac:a1:
d1:16:fc:13:9d:c5:9c:b8:5e:6b:95:9f:f2:af:c3:
4d:3b:0e:4f:98:3b:35:ea:37:f2:f2:3e:1a:32:0d:
43:9d:4b:00:d2:b4:47:77:18:53:0f:64:0c:70:e7:
de:07:6d:b8:17:ff:8d:05:72:15:80:da:0f:65:ad:
f6:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:D8:BC:30:B0:70:B6:F5:22:F8:A3:62:61:66:85:04:D5:1A:BE:30
X509v3 Authority Key Identifier:
keyid:22:2C:45:85:BD:88:FB:27:CA:DF:29:EE:5B:B9:5D:65:75:FC:EF:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:0f:b7:b0:ab:fc:fa:1c:7c:2e:44:6f:1b:81:ea:48:d6:90:
7b:12:58:16:24:2b:e2:d9:85:1c:cd:ca:7d:0a:cb:95:cd:74:
50:42:2a:bc:5b:32:e1:91:57:76:d0:81:10:c2:40:79:2f:1c:
f3:1b:2a:fb:f9:d1:cd:ea:12:80:9d:26:85:35:df:d4:58:4f:
2b:78:3a:23:5a:a2:2f:03:01:fd:28:fc:67:df:c1:47:66:38:
35:b1:d3:18:6b:8f:88:cc:a7:97:44:61:bc:a6:09:25:d2:c9:
63:98:e9:3f:d9:93:93:fe:cb:01:9c:ea:dd:b8:4b:3c:8d:bb:
bd:cd:d2:61:f3:ae:7b:28:43:c9:7d:4d:e7:d5:d3:f2:8d:67:
bb:98:9b:06:52:9a:cf:3c:11:44:89:7a:07:e4:d9:d7:9f:2b:
54:42:70:e8:eb:22:00:68:c2:c3:9b:6c:da:07:59:0b:e4:bc:
3d:57:fc:a6:15:d8:01:f2:84:bb:53:f1:53:c3:64:e3:45:a8:
b2:01:6f:25:8f:01:f8:73:26:15:63:92:29:ee:94:7f:56:10:
b9:7e:c7:15:3d:36:db:a6:a2:c3:33:5a:38:c6:14:4d:81:5e:
10:4b:bf:e2:d6:20:e3:ce:2f:aa:62:ae:d7:af:ca:69:a1:9b:
36:68:59:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 13:59:47 2026 by rpki-client