Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.mft
File: hI2YANad664Rt_gWHDzogYH957Q.mft (raw, json)
Hash identifier: d3zp0MsEtfDxmbHmUOQgsP6+fjdkIeQfPRfn/9DEd18=
Subject key identifier: 32:0B:6F:BB:59:E1:61:FA:FC:6B:15:12:F7:80:C2:56:D4:4E:13:21
Authority key identifier: 84:8D:98:00:D6:9D:EB:AE:11:B7:F8:16:1C:3C:E8:81:81:FD:E7:B4
Certificate issuer: /CN=848d9800d69debae11b7f8161c3ce88181fde7b4
Certificate serial: 019DD689E482FD7348160DB4E1C32E4985E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hI2YANad664Rt_gWHDzogYH957Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.mft
Manifest number: 0CDA
Signing time: Wed 29 Apr 2026 00:00:54 +0000
Manifest this update: Wed 29 Apr 2026 00:00:54 +0000
Manifest next update: Thu 30 Apr 2026 00:00:54 +0000
Files and hashes: 1: K_y2fKHPzfyMG_X9CTHflV0WLi0.roa (hash: KabNvipw1vq+vrMlPeKcdUkL/gp9b7QpFWkct8rC9KU=)
2: MmD4LpG9L1abWhzDe3zsHGjMcKk.roa (hash: BYA/AELd944eyEW5OY9zqZeNygCSSsS+zSrCK5eSS0g=)
3: hI2YANad664Rt_gWHDzogYH957Q.crl (hash: WZVK9pUtds9B2E76hAoWmzPmjx/CyERK7GX2Lxj1XTs=)
4: hKJDVK08o4RIWoWlt6lBuBhmgR0.roa (hash: MAApWzskbzneHqBQ6AJZbIOluhaLfJyDC3dItvxt1eM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/hI2YANad664Rt_gWHDzogYH957Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Apr 2026 00:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d6:89:e4:82:fd:73:48:16:0d:b4:e1:c3:2e:49:85:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=848d9800d69debae11b7f8161c3ce88181fde7b4
Validity
Not Before: Apr 29 00:00:54 2026 GMT
Not After : Apr 30 00:00:54 2026 GMT
Subject: CN=320b6fbb59e161fafc6b1512f780c256d44e1321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:fe:0e:3b:b0:41:77:34:5f:9e:df:12:fe:b8:
85:b2:6f:75:3e:93:0d:c4:b8:4d:1d:10:86:94:06:
75:4a:0b:16:89:80:4d:88:96:34:3e:a9:87:02:56:
f6:df:bc:be:47:71:e9:34:d2:83:fa:38:49:34:6c:
32:bf:aa:f6:c2:73:1b:55:79:ac:99:88:d2:a0:c6:
4a:c8:0e:3a:a3:af:f1:57:be:dd:77:a8:a0:a9:5e:
e3:e1:60:1c:cd:ab:f9:84:fd:33:45:48:fc:11:12:
25:9e:88:26:69:8a:f8:60:bd:7c:da:85:f2:78:c0:
dd:cb:4a:24:4c:ce:3d:e4:40:85:3f:57:b1:d8:73:
39:ee:fc:42:ff:5d:50:76:f6:c0:aa:2f:40:f0:05:
ce:e5:c7:a2:6a:ec:0c:4e:67:6b:b1:b2:c0:d8:2c:
aa:41:48:90:69:51:e0:6c:6a:95:f6:f0:bb:6b:41:
26:fe:b8:3e:38:a3:88:e1:d1:3b:aa:70:83:8c:34:
d4:d1:71:fd:c8:b1:3c:42:79:10:8c:61:da:a1:42:
6f:19:d9:51:2d:aa:1e:26:c0:ca:01:c0:c7:da:c2:
30:89:7a:bb:99:80:f6:05:e3:e7:9e:3e:70:1d:82:
af:a2:24:f3:22:4b:42:b7:73:b3:15:b1:50:62:38:
7e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:0B:6F:BB:59:E1:61:FA:FC:6B:15:12:F7:80:C2:56:D4:4E:13:21
X509v3 Authority Key Identifier:
keyid:84:8D:98:00:D6:9D:EB:AE:11:B7:F8:16:1C:3C:E8:81:81:FD:E7:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hI2YANad664Rt_gWHDzogYH957Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:1f:8d:a1:d9:12:c3:52:36:94:b2:f6:d2:fc:46:9e:0d:5e:
13:ee:91:e1:d0:02:5e:a2:c8:22:18:38:70:ce:91:9a:6d:b8:
de:96:18:50:60:03:05:75:e6:95:e5:36:7f:ed:a0:f7:59:7b:
41:87:e2:93:76:80:b0:12:4c:5f:76:d6:cb:2a:7d:34:75:cf:
95:28:42:2e:29:2b:94:aa:d6:8c:64:0e:53:85:b9:6a:f1:65:
1f:15:07:69:3c:33:66:65:fa:44:8c:9c:04:bd:53:c4:b1:41:
87:05:f8:07:2a:d4:83:54:12:65:7e:10:21:4f:29:ec:a4:e1:
59:77:a2:e9:42:43:10:fc:d0:17:6b:0b:2c:cb:bf:12:ba:e2:
0c:6f:54:10:ca:8c:ac:9b:d1:9d:b9:6a:c5:1f:89:7f:ab:bc:
29:fe:d4:58:86:f7:f1:6e:88:32:ee:8c:c2:20:c2:0d:9e:99:
76:eb:f1:4b:70:65:46:93:f6:5c:31:62:53:3d:21:77:00:b4:
ea:3a:12:2d:c8:24:de:e4:37:d0:19:2b:c0:be:3b:6c:eb:ec:
6f:58:c2:72:ae:e3:c0:fa:8e:60:70:c8:a3:e0:ea:04:90:78:
81:14:2d:e1:8e:5d:f3:c5:f9:9c:9a:78:03:e1:9e:78:fe:74:
a1:52:33:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 09:40:58 2026 by rpki-client