Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.mft
File: idpg8EnfujS-S06EGLn_SSElxEk.mft (raw, json)
Hash identifier: jLrv0dTfo2TefeG+bc8o3bER34ZJ6XrnyPG2fHL43A8=
Subject key identifier: 1B:E8:4F:52:49:2C:2A:94:C4:9F:D6:CD:9D:F9:DF:BE:5A:BF:50:26
Authority key identifier: 89:DA:60:F0:49:DF:BA:34:BE:4B:4E:84:18:B9:FF:49:21:25:C4:49
Certificate issuer: /CN=89da60f049dfba34be4b4e8418b9ff492125c449
Certificate serial: 019DD4651A5E4264C83F956F7D48973751F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.mft
Manifest number: 1911
Signing time: Tue 28 Apr 2026 14:01:28 +0000
Manifest this update: Tue 28 Apr 2026 14:01:28 +0000
Manifest next update: Wed 29 Apr 2026 14:01:28 +0000
Files and hashes: 1: 1qEKqAJdH_5JUlUOsEMtQdOuv-Q.roa (hash: OkbONL4Kv2cLwbDetNkEjbv+0531gLH+WXA/3kqlV9c=)
2: 9SsHjlBtd69QJ3ndqo-1KhdedKw.roa (hash: qiOm4Fr0eZzz2bsbkMUTFYSa9lmGOwKDeaQIOpLMzdY=)
3: JVABJxvLxkj1mSPSAUuE7d0cXpc.roa (hash: 1hA/cynNPGLtZN3nQtWNzvj3MUG4llVicN6VIwab6HU=)
4: gX9Z7p1Ob66YosJCGXnZh4miO-s.roa (hash: elm/BD7Osd0BcHbQbq55e8rpGxN0X0LtIG/FC4qO27s=)
5: idpg8EnfujS-S06EGLn_SSElxEk.crl (hash: JjLx/21EpKOCVzSWfDqla8V1gXy0xzn87njD/wP27JM=)
6: pDrr_bf7Ghe4a7lfLdGTUedQJ4s.roa (hash: hckgwXDzkDTS3YgN/PyJxO9PpMuWCR3QafiNrBSQrgA=)
7: sFz5mtE3Mde8lSIcx7T2y7lO-zw.roa (hash: NxGgl9GbDugZBPBW0o4P8z6yiV+CD/pDM33YvrxHjSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Apr 2026 14:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d4:65:1a:5e:42:64:c8:3f:95:6f:7d:48:97:37:51:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89da60f049dfba34be4b4e8418b9ff492125c449
Validity
Not Before: Apr 28 14:01:28 2026 GMT
Not After : Apr 29 14:01:28 2026 GMT
Subject: CN=1be84f52492c2a94c49fd6cd9df9dfbe5abf5026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:30:9c:6c:f6:b3:bc:76:55:e4:8a:2c:9c:4e:
6c:5c:30:c2:40:4a:d6:cf:f7:ed:47:1b:39:8f:e7:
33:b9:37:b0:58:90:92:74:ec:ee:07:e6:7c:9f:62:
43:13:0c:02:37:d7:f2:15:02:e1:e9:f2:df:7c:ab:
89:e6:8b:ff:88:df:15:a8:a2:ac:d0:67:fb:2c:00:
df:3d:4e:bf:77:8e:79:d5:7e:10:3f:b4:9a:3f:f8:
22:4a:15:23:05:97:1c:49:0e:c4:b5:8b:b0:b1:e5:
fa:e2:26:02:42:e8:12:69:9b:71:c6:9f:95:a2:be:
50:c3:b5:d7:31:9b:d8:5b:38:db:85:4d:af:7a:c8:
e2:b5:61:96:60:c5:25:c5:4c:ad:84:4d:9a:04:03:
dd:e9:96:ca:de:ca:37:1c:e5:62:a7:6e:c8:a4:9d:
42:39:31:cb:e8:9f:4c:a0:f6:3d:4d:78:61:04:fb:
d4:25:bf:ee:c5:47:af:e2:cf:f7:53:1a:7c:d9:1c:
b5:4a:ac:b8:42:9a:33:fa:e8:d0:3e:4c:8f:b2:92:
39:12:a3:b5:64:bb:cf:0e:b8:55:c4:78:a2:6c:0b:
18:c6:d4:d5:3c:41:b4:0e:4f:7d:b5:c7:1e:e0:c6:
89:dc:4c:00:00:c2:af:08:4f:6f:06:0e:a4:16:e9:
5c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:E8:4F:52:49:2C:2A:94:C4:9F:D6:CD:9D:F9:DF:BE:5A:BF:50:26
X509v3 Authority Key Identifier:
keyid:89:DA:60:F0:49:DF:BA:34:BE:4B:4E:84:18:B9:FF:49:21:25:C4:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:93:ea:a8:16:f9:85:ae:a8:94:55:0f:c6:45:42:1f:6b:db:
d7:15:59:93:40:c0:09:7f:30:af:9c:08:06:9b:c6:47:5a:69:
5c:83:f3:30:05:1e:29:fa:a6:47:ad:b6:93:72:7c:f1:e5:c6:
53:f2:c5:18:7a:50:d9:0f:07:d9:d7:91:6d:d0:fb:7b:15:ed:
29:7d:83:30:d6:94:91:66:ed:ec:34:d5:f1:10:db:f8:ff:1a:
2d:16:43:2b:f5:a9:60:ea:1e:db:68:1b:b6:cd:be:06:3b:7c:
78:01:57:de:9e:c9:13:8a:e6:f0:40:38:d9:bf:8f:59:16:38:
8a:19:6b:c5:a1:af:72:5d:03:fb:6b:58:b9:1f:07:ed:5d:90:
ca:d7:cb:7f:e5:3b:b9:1c:75:2a:f5:55:6e:8a:30:a3:e5:ec:
da:1f:5b:e4:6b:95:51:8c:17:9f:b8:77:cc:07:8d:16:cf:1d:
b5:14:ca:dd:7f:f7:29:5e:e6:97:4f:8c:1c:e1:be:4e:d8:87:
74:5d:5a:ab:0e:24:bf:a1:37:ac:93:ed:ab:23:68:d1:9b:bc:
72:12:d1:62:f1:df:bc:fa:dc:1e:81:89:95:1d:6a:f4:13:f3:
7e:bd:64:3e:85:8b:48:1b:9c:89:c3:3a:da:10:7f:ec:64:2e:
45:35:71:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 00:03:08 2026 by rpki-client