Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/cf130d-efd4-4dfb-a1a3-a2bf0a18cddc/1/i5PlZ68ZipTh_PBf4P58khCVqEo.mft
File: i5PlZ68ZipTh_PBf4P58khCVqEo.mft (raw, json)
Hash identifier: ytdo23imx4fEYAV5zfV2ldYYGLW1VaVqqv3FnQGTybw=
Subject key identifier: B9:E0:95:45:3B:3A:9D:1F:40:0C:55:2D:53:F1:77:F1:A8:A1:0A:32
Authority key identifier: 8B:93:E5:67:AF:19:8A:94:E1:FC:F0:5F:E0:FE:7C:92:10:95:A8:4A
Certificate issuer: /CN=8b93e567af198a94e1fcf05fe0fe7c921095a84a
Certificate serial: 019DD79CD8909E2E37F5CAD877745270E5A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5PlZ68ZipTh_PBf4P58khCVqEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/cf130d-efd4-4dfb-a1a3-a2bf0a18cddc/1/i5PlZ68ZipTh_PBf4P58khCVqEo.mft
Manifest number: 0D8B
Signing time: Wed 29 Apr 2026 05:01:13 +0000
Manifest this update: Wed 29 Apr 2026 05:01:13 +0000
Manifest next update: Thu 30 Apr 2026 05:01:13 +0000
Files and hashes: 1: i5PlZ68ZipTh_PBf4P58khCVqEo.crl (hash: wyaxNQ4agY/d/pHXUoljelxtr3r8IoAYp4CdGjPw0/8=)
2: p44ZTLaNJwPrOIP5p5pZUGavoYE.roa (hash: B8cHOO2fu5FxQlQTcxJxtbQRyHkAMsxsU+Gd1QwUliA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/cf130d-efd4-4dfb-a1a3-a2bf0a18cddc/1/i5PlZ68ZipTh_PBf4P58khCVqEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/cf130d-efd4-4dfb-a1a3-a2bf0a18cddc/1/i5PlZ68ZipTh_PBf4P58khCVqEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/i5PlZ68ZipTh_PBf4P58khCVqEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Apr 2026 05:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d7:9c:d8:90:9e:2e:37:f5:ca:d8:77:74:52:70:e5:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b93e567af198a94e1fcf05fe0fe7c921095a84a
Validity
Not Before: Apr 29 05:01:13 2026 GMT
Not After : Apr 30 05:01:13 2026 GMT
Subject: CN=b9e095453b3a9d1f400c552d53f177f1a8a10a32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:64:a5:d6:7c:3d:26:01:b8:c0:78:cd:83:06:
a4:72:91:f8:0a:f5:06:c3:0d:72:02:48:f8:d0:99:
39:ee:d5:df:82:fd:9d:2f:a0:bf:27:30:e7:71:9f:
a6:63:50:06:83:42:30:cb:85:ff:e9:6d:02:dd:a1:
f9:a6:d5:3c:8a:bb:22:ff:ac:0a:d5:ff:91:7d:cd:
b2:e6:fa:3b:f9:b2:a8:3e:3b:05:fe:e6:b2:08:22:
31:1e:6f:9b:f3:99:c4:95:e2:26:82:d5:44:4a:71:
ff:a6:51:36:f6:5b:d5:37:65:f9:42:63:1b:a9:68:
d2:06:14:3f:79:e9:57:8b:1b:37:f4:35:68:c2:0f:
00:af:d5:55:77:37:fc:b2:03:54:4e:56:df:7b:56:
0f:5f:01:24:90:2a:f7:e8:78:e3:09:9d:ac:58:92:
e9:f1:c5:af:9a:aa:66:f5:84:4b:21:0f:27:06:a9:
ed:98:ed:08:f4:70:56:c1:06:23:cc:88:83:6c:bb:
f3:f6:b0:63:0a:cb:a2:8c:18:00:5a:62:ac:da:b6:
7f:97:a1:a8:10:ce:40:c2:dd:c4:23:11:f7:2e:07:
8c:89:6a:d9:25:fd:e8:c7:fa:bc:35:31:87:1b:e1:
aa:39:7e:09:e7:71:b4:c1:a6:c5:39:39:27:a8:87:
21:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:E0:95:45:3B:3A:9D:1F:40:0C:55:2D:53:F1:77:F1:A8:A1:0A:32
X509v3 Authority Key Identifier:
keyid:8B:93:E5:67:AF:19:8A:94:E1:FC:F0:5F:E0:FE:7C:92:10:95:A8:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5PlZ68ZipTh_PBf4P58khCVqEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/cf130d-efd4-4dfb-a1a3-a2bf0a18cddc/1/i5PlZ68ZipTh_PBf4P58khCVqEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/cf130d-efd4-4dfb-a1a3-a2bf0a18cddc/1/i5PlZ68ZipTh_PBf4P58khCVqEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:22:13:39:78:7a:72:1c:11:3d:d6:6e:38:d1:c3:cf:36:69:
ee:73:2a:1c:8f:a4:a8:18:5f:83:8b:5d:a2:45:aa:9a:c4:ff:
31:37:94:78:51:de:3b:50:4e:1f:fc:a9:de:cf:0a:aa:99:29:
19:b0:26:96:5b:7f:d8:78:1c:d4:a3:5a:cc:06:17:62:fc:dd:
ed:3b:eb:ba:8f:3d:20:8f:77:7a:bc:0c:ec:20:45:c2:a4:d2:
4a:68:fb:d5:ee:c4:b5:ad:e9:b1:38:86:eb:0b:3b:8e:bd:73:
28:8e:9d:ed:bf:9e:37:0b:c2:c0:ce:f6:ae:52:e7:38:26:99:
41:75:10:dd:c0:9a:ec:c8:12:4d:6b:99:78:ed:8e:ab:09:23:
95:42:a6:21:e9:95:70:4d:9d:9e:3b:4f:93:cb:3f:5b:92:5d:
99:25:13:d1:2a:23:c1:6a:27:9c:38:70:6c:76:4f:a0:0f:f2:
52:37:c5:c2:ee:00:62:36:b3:22:c5:c6:0d:35:04:17:e3:81:
da:df:ce:26:46:31:b1:b2:19:28:a8:e6:f6:24:5e:fd:05:fe:
d6:fb:cb:07:5c:f9:4f:a4:23:43:6f:7c:44:14:82:38:67:65:
88:75:e2:d2:5d:25:b3:fb:c8:c0:37:97:aa:c8:ca:28:e2:bf:
70:7c:59:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 09:36:06 2026 by rpki-client