Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/981816-8860-4c2e-adf6-0d0bf2b56d59/1/iXO4_LiuetyaeZnhNn25WphaweY.mft
File: iXO4_LiuetyaeZnhNn25WphaweY.mft (raw, json)
Hash identifier: HrCKgMQ52fFof2V16pjf3OrbCLCR73r6hYRdTmM1A2k=
Subject key identifier: 3B:FA:96:FB:02:A8:34:AC:FB:D9:1F:FA:1A:0A:0D:20:5B:05:0C:6B
Authority key identifier: 89:73:B8:FC:B8:AE:7A:DC:9A:79:99:E1:36:7D:B9:5A:98:5A:C1:E6
Certificate issuer: /CN=8973b8fcb8ae7adc9a7999e1367db95a985ac1e6
Certificate serial: 019DD12C3D9141FBA74E5B07DFCB4C2E9959
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iXO4_LiuetyaeZnhNn25WphaweY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/981816-8860-4c2e-adf6-0d0bf2b56d59/1/iXO4_LiuetyaeZnhNn25WphaweY.mft
Manifest number: 1870
Signing time: Mon 27 Apr 2026 23:00:30 +0000
Manifest this update: Mon 27 Apr 2026 23:00:30 +0000
Manifest next update: Tue 28 Apr 2026 23:00:30 +0000
Files and hashes: 1: RL-eZBtLpxaBQ-5YuIvqntEMuKw.roa (hash: TSHPY7BwTTX7TS8z+UItG/ro0Zvg2N4BKXVug688uKo=)
2: iXO4_LiuetyaeZnhNn25WphaweY.crl (hash: pMVgMo5v9TuN3WsoEo6FLwQNfUxjtZXTEerGek8iQ0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/981816-8860-4c2e-adf6-0d0bf2b56d59/1/iXO4_LiuetyaeZnhNn25WphaweY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/981816-8860-4c2e-adf6-0d0bf2b56d59/1/iXO4_LiuetyaeZnhNn25WphaweY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iXO4_LiuetyaeZnhNn25WphaweY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d1:2c:3d:91:41:fb:a7:4e:5b:07:df:cb:4c:2e:99:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8973b8fcb8ae7adc9a7999e1367db95a985ac1e6
Validity
Not Before: Apr 27 23:00:30 2026 GMT
Not After : Apr 28 23:00:30 2026 GMT
Subject: CN=3bfa96fb02a834acfbd91ffa1a0a0d205b050c6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2b:ac:4a:c5:f8:d2:a7:03:00:e6:0a:ce:2d:
d7:e9:5e:54:65:fc:6a:b4:d8:e1:58:02:59:cb:3d:
f9:e4:57:d7:31:78:36:c0:d0:7d:8d:b7:54:49:59:
ee:d4:f0:1b:c1:5b:09:06:79:d0:22:eb:2f:44:5e:
f6:34:4d:cd:4b:7d:0b:d1:6a:5b:01:55:e8:d1:e2:
bb:7a:14:5e:87:f1:3f:e9:60:c6:bf:a3:d7:7a:e9:
20:0b:f1:4b:f4:f7:87:8a:82:b4:ba:9c:ae:87:1a:
9a:be:38:d8:4f:15:1d:a1:90:12:43:21:58:ad:a3:
7c:70:15:51:3f:49:57:68:96:f4:36:52:44:c1:f2:
22:e9:b0:db:0b:22:54:dd:be:19:85:b7:97:51:ea:
ae:a4:8a:46:ae:33:21:77:c0:e7:8f:cd:c3:6f:04:
5e:50:e3:7e:07:26:c1:ae:ad:4e:c4:67:7c:d0:15:
e7:18:51:ba:e9:ff:a5:34:02:79:0b:03:e2:fe:4f:
10:77:0a:c9:d8:0c:fb:0a:8e:c6:0c:07:bf:b1:44:
96:94:25:e4:41:f8:2b:1b:34:16:6b:28:c3:70:a6:
19:ac:93:00:0c:73:42:3b:a6:30:63:42:da:98:45:
eb:60:bc:c1:57:85:58:b0:78:79:68:19:8c:08:5a:
e7:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:FA:96:FB:02:A8:34:AC:FB:D9:1F:FA:1A:0A:0D:20:5B:05:0C:6B
X509v3 Authority Key Identifier:
keyid:89:73:B8:FC:B8:AE:7A:DC:9A:79:99:E1:36:7D:B9:5A:98:5A:C1:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iXO4_LiuetyaeZnhNn25WphaweY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/981816-8860-4c2e-adf6-0d0bf2b56d59/1/iXO4_LiuetyaeZnhNn25WphaweY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/981816-8860-4c2e-adf6-0d0bf2b56d59/1/iXO4_LiuetyaeZnhNn25WphaweY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:b8:d4:f7:9b:f0:aa:93:a6:6a:fc:10:3e:33:93:50:4e:83:
20:64:25:64:32:c0:16:25:d3:c9:15:a3:a3:6c:ee:f4:80:a8:
ee:56:66:69:ab:84:02:a1:09:31:c4:23:b3:51:ef:74:00:e0:
c1:a3:17:36:d0:f5:1a:0f:19:67:1a:92:21:45:33:02:66:4c:
7e:41:72:7a:05:9c:d2:62:f2:8e:83:ec:a3:ed:fe:29:2b:91:
17:0f:ae:a7:54:f4:38:7f:71:e1:04:1f:68:f4:0f:60:bc:7a:
ff:eb:57:ed:a0:b5:bb:8a:36:80:b3:e0:ba:45:f8:37:ba:60:
11:e2:41:43:80:b6:8a:b3:84:e3:f6:92:c2:13:44:4c:a9:e1:
f8:90:0c:87:0a:f8:e8:26:a0:12:1a:c8:87:cb:c3:3e:2d:11:
08:86:92:13:0d:22:83:90:58:6c:80:9d:35:fb:68:4f:db:4c:
57:2b:bb:18:19:8b:92:29:9e:8e:00:d0:db:e6:34:a2:76:f8:
7c:12:21:5b:e5:33:92:24:20:9b:34:9b:51:22:a9:dc:87:15:
96:d0:5b:64:dc:a0:a9:a9:2a:e5:22:55:82:46:33:10:e0:dc:
67:44:10:27:0f:00:29:b0:30:a6:ab:fa:db:9a:05:3a:c4:ac:
04:3a:e9:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3RLD2RQfunTlsH38tMLplZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5NzNiOGZjYjhhZTdhZGM5YTc5OTllMTM2N2RiOTVhOTg1
YWMxZTYwHhcNMjYwNDI3MjMwMDMwWhcNMjYwNDI4MjMwMDMwWjAzMTEwLwYDVQQD
EygzYmZhOTZmYjAyYTgzNGFjZmJkOTFmZmExYTBhMGQyMDViMDUwYzZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSusSsX40qcDAOYKzi3X6V5UZfxq
tNjhWAJZyz355FfXMXg2wNB9jbdUSVnu1PAbwVsJBnnQIusvRF72NE3NS30L0Wpb
AVXo0eK7ehReh/E/6WDGv6PXeukgC/FL9PeHioK0upyuhxqavjjYTxUdoZASQyFY
raN8cBVRP0lXaJb0NlJEwfIi6bDbCyJU3b4ZhbeXUequpIpGrjMhd8Dnj83DbwRe
UON+BybBrq1OxGd80BXnGFG66f+lNAJ5CwPi/k8QdwrJ2Az7Co7GDAe/sUSWlCXk
QfgrGzQWayjDcKYZrJMADHNCO6YwY0LamEXrYLzBV4VYsHh5aBmMCFrneQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDv6lvsCqDSs+9kf+hoKDSBbBQxrMB8GA1UdIwQY
MBaAFIlzuPy4rnrcmnmZ4TZ9uVqYWsHmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVhPNF9MaXVldHlhZVpuaE5uMjVXcGhhd2VZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC85ODE4MTYtODg2MC00YzJlLWFkZjYt
MGQwYmYyYjU2ZDU5LzEvaVhPNF9MaXVldHlhZVpuaE5uMjVXcGhhd2VZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC85ODE4MTYtODg2MC00YzJlLWFkZjYtMGQwYmYyYjU2ZDU5
LzEvaVhPNF9MaXVldHlhZVpuaE5uMjVXcGhhd2VZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcLjU95vw
qpOmavwQPjOTUE6DIGQlZDLAFiXTyRWjo2zu9ICo7lZmaauEAqEJMcQjs1HvdADg
waMXNtD1Gg8ZZxqSIUUzAmZMfkFyegWc0mLyjoPso+3+KSuRFw+up1T0OH9x4QQf
aPQPYLx6/+tX7aC1u4o2gLPgukX4N7pgEeJBQ4C2irOE4/aSwhNETKnh+JAMhwr4
6CagEhrIh8vDPi0RCIaSEw0ig5BYbICdNftoT9tMVyu7GBmLkimejgDQ2+Y0onb4
fBIhW+UzkiQgmzSbUSKp3IcVltBbZNygqakq5SJVgkYzEODcZ0QQJw8AKbAwpqv6
25oFOsSsBDrpZg==
-----END CERTIFICATE-----
Generated at Tue Apr 28 03:24:20 2026 by rpki-client