Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/54af6c-dc5a-4316-9056-35e39964dfdc/1/iDg0C7z4K84GXO6zeMuqR7mjLN0.mft
File: iDg0C7z4K84GXO6zeMuqR7mjLN0.mft (raw, json)
Hash identifier: fV88Vl0OYr7RSCMK6n7kLSPSo4Sn2f3TXQRn5UoShJc=
Subject key identifier: 01:0B:AE:61:AD:12:60:4B:AC:D8:AF:D9:DD:66:32:9D:66:F1:95:0B
Authority key identifier: 88:38:34:0B:BC:F8:2B:CE:06:5C:EE:B3:78:CB:AA:47:B9:A3:2C:DD
Certificate issuer: /CN=8838340bbcf82bce065ceeb378cbaa47b9a32cdd
Certificate serial: 019DD0509C06763430BA103FB782A75E17A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iDg0C7z4K84GXO6zeMuqR7mjLN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/54af6c-dc5a-4316-9056-35e39964dfdc/1/iDg0C7z4K84GXO6zeMuqR7mjLN0.mft
Manifest number: 012A
Signing time: Mon 27 Apr 2026 19:00:36 +0000
Manifest this update: Mon 27 Apr 2026 19:00:36 +0000
Manifest next update: Tue 28 Apr 2026 19:00:36 +0000
Files and hashes: 1: 82yqy0aGJzKzR4R_K7jhO-MXZ48.asa (hash: QLpjtYyVJWNod7Hjm1qgZ6D0o3OhLnBCKHSjT6fQXEI=)
2: iDg0C7z4K84GXO6zeMuqR7mjLN0.crl (hash: vp2D9fSJL684zjDc+eymUOt4VPgaBvD9mxClhELsYps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/54af6c-dc5a-4316-9056-35e39964dfdc/1/iDg0C7z4K84GXO6zeMuqR7mjLN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/54af6c-dc5a-4316-9056-35e39964dfdc/1/iDg0C7z4K84GXO6zeMuqR7mjLN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/iDg0C7z4K84GXO6zeMuqR7mjLN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:50:9c:06:76:34:30:ba:10:3f:b7:82:a7:5e:17:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8838340bbcf82bce065ceeb378cbaa47b9a32cdd
Validity
Not Before: Apr 27 19:00:36 2026 GMT
Not After : Apr 28 19:00:36 2026 GMT
Subject: CN=010bae61ad12604bacd8afd9dd66329d66f1950b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a7:65:9b:fb:1e:1e:16:47:0f:14:50:3d:5b:
c6:db:45:38:61:78:3e:85:e4:08:e8:3d:a0:47:78:
6e:f3:3b:ba:7c:7a:3b:92:9d:47:82:8e:ec:ef:0d:
8f:57:2b:d2:49:cf:78:fc:8a:d8:a8:f8:55:88:e8:
05:a8:34:c9:85:f1:4a:3a:30:1e:ef:2b:0d:d4:68:
1b:11:36:06:15:56:a5:e1:46:70:d1:fe:b6:d5:8f:
33:25:65:9c:94:44:a8:8d:9f:32:69:7f:88:f7:fe:
af:25:3b:8e:81:63:8a:1f:89:c1:0a:a4:b7:55:85:
12:7f:5d:7f:a3:29:24:e9:ad:80:ef:cf:fb:ea:a4:
33:dc:d5:27:e3:2c:49:10:b0:79:d4:c4:0e:91:7e:
bb:3f:06:d3:76:23:ce:4e:8e:05:2e:d0:3f:e4:e7:
97:1d:d9:f9:91:4e:6b:6c:a1:71:75:84:1d:6f:61:
5a:20:c9:20:44:b9:71:da:23:23:71:f8:c2:f4:60:
ef:40:6f:90:f9:9a:4d:82:e9:ba:aa:95:9d:fe:fb:
18:08:66:44:e9:ba:ed:58:80:51:f1:d5:5a:a2:57:
aa:1e:18:0f:f9:1a:ad:8c:10:18:29:c6:3a:68:f1:
3b:35:93:bd:72:83:e8:ae:27:26:3b:3c:ee:9f:35:
01:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:0B:AE:61:AD:12:60:4B:AC:D8:AF:D9:DD:66:32:9D:66:F1:95:0B
X509v3 Authority Key Identifier:
keyid:88:38:34:0B:BC:F8:2B:CE:06:5C:EE:B3:78:CB:AA:47:B9:A3:2C:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iDg0C7z4K84GXO6zeMuqR7mjLN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/54af6c-dc5a-4316-9056-35e39964dfdc/1/iDg0C7z4K84GXO6zeMuqR7mjLN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/54af6c-dc5a-4316-9056-35e39964dfdc/1/iDg0C7z4K84GXO6zeMuqR7mjLN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:df:b0:d4:8a:10:a3:28:2b:74:81:e8:f6:00:38:fb:b3:ca:
e2:f1:f1:b2:8f:76:e9:43:a7:b6:72:ea:f9:67:fc:37:d6:39:
5c:c6:09:0c:3a:48:d4:1a:f3:7d:56:24:63:da:fd:ed:e8:7d:
c5:53:b4:2f:67:4c:00:dd:4c:b1:85:09:4a:36:f6:74:a3:e6:
8d:86:93:78:42:59:04:8e:a1:84:24:a4:24:4c:5b:e4:f9:bd:
cb:28:80:5b:35:76:47:91:26:5e:e9:18:33:f6:e5:f0:8c:ac:
b0:b5:80:c0:a0:37:57:ac:7f:06:8f:fc:14:6f:ad:5a:75:f9:
28:dc:35:f1:c0:44:54:f0:26:b3:7e:b4:a7:21:5e:23:e4:ad:
d7:ba:8e:80:c7:0d:48:d4:c2:b0:83:30:e4:97:50:b7:b6:28:
8f:0b:3a:d6:d0:25:8c:0f:b9:97:10:30:26:8d:33:3e:02:08:
ae:3f:33:b9:8e:fb:77:36:58:f3:5f:0f:d7:62:31:0c:ac:83:
e6:d1:91:06:87:61:45:a5:60:6d:c9:ea:53:bb:f3:24:ff:4b:
89:3b:29:46:09:a4:4a:b1:85:0c:09:2f:c4:fc:53:da:0a:b1:
49:71:6e:93:df:ec:ee:63:32:e7:b0:6d:ca:ef:79:d3:54:a1:
1d:13:d2:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3QUJwGdjQwuhA/t4KnXhenMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4MzgzNDBiYmNmODJiY2UwNjVjZWViMzc4Y2JhYTQ3Yjlh
MzJjZGQwHhcNMjYwNDI3MTkwMDM2WhcNMjYwNDI4MTkwMDM2WjAzMTEwLwYDVQQD
EygwMTBiYWU2MWFkMTI2MDRiYWNkOGFmZDlkZDY2MzI5ZDY2ZjE5NTBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqdlm/seHhZHDxRQPVvG20U4YXg+
heQI6D2gR3hu8zu6fHo7kp1Hgo7s7w2PVyvSSc94/IrYqPhViOgFqDTJhfFKOjAe
7ysN1GgbETYGFVal4UZw0f621Y8zJWWclESojZ8yaX+I9/6vJTuOgWOKH4nBCqS3
VYUSf11/oykk6a2A78/76qQz3NUn4yxJELB51MQOkX67PwbTdiPOTo4FLtA/5OeX
Hdn5kU5rbKFxdYQdb2FaIMkgRLlx2iMjcfjC9GDvQG+Q+ZpNgum6qpWd/vsYCGZE
6brtWIBR8dVaoleqHhgP+RqtjBAYKcY6aPE7NZO9coPoricmOzzunzUB/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAELrmGtEmBLrNiv2d1mMp1m8ZULMB8GA1UdIwQY
MBaAFIg4NAu8+CvOBlzus3jLqke5oyzdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaURnMEM3ejRLODRHWE82emVNdXFSN21qTE4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS81NGFmNmMtZGM1YS00MzE2LTkwNTYt
MzVlMzk5NjRkZmRjLzEvaURnMEM3ejRLODRHWE82emVNdXFSN21qTE4wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS81NGFmNmMtZGM1YS00MzE2LTkwNTYtMzVlMzk5NjRkZmRj
LzEvaURnMEM3ejRLODRHWE82emVNdXFSN21qTE4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARN+w1IoQ
oygrdIHo9gA4+7PK4vHxso926UOntnLq+Wf8N9Y5XMYJDDpI1BrzfVYkY9r97eh9
xVO0L2dMAN1MsYUJSjb2dKPmjYaTeEJZBI6hhCSkJExb5Pm9yyiAWzV2R5EmXukY
M/bl8IyssLWAwKA3V6x/Bo/8FG+tWnX5KNw18cBEVPAms360pyFeI+St17qOgMcN
SNTCsIMw5JdQt7Yojws61tAljA+5lxAwJo0zPgIIrj8zuY77dzZY818P12IxDKyD
5tGRBodhRaVgbcnqU7vzJP9LiTspRgmkSrGFDAkvxPxT2gqxSXFuk9/s7mMy57Bt
yu9501ShHRPSqg==
-----END CERTIFICATE-----
Generated at Tue Apr 28 03:24:30 2026 by rpki-client