Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft
File: 20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft (raw, json)
Hash identifier: kECEEk88OjG5gI508shGYetlRVO5c9bhNcpfFXTmMD8=
Subject key identifier: 42:9B:E5:DD:0D:52:1A:7F:22:8F:FC:43:2B:B1:6F:6B:F0:93:7B:EB
Authority key identifier: DB:48:9F:BE:98:99:4C:BC:09:8C:87:6B:A6:3E:56:0A:C1:7E:5B:2F
Certificate issuer: /CN=db489fbe98994cbc098c876ba63e560ac17e5b2f
Certificate serial: 019DDE0D1EE891DBCC1C97A3290BFD70B5C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/20ifvpiZTLwJjIdrpj5WCsF-Wy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft
Manifest number: 149B
Signing time: Thu 30 Apr 2026 11:01:34 +0000
Manifest this update: Thu 30 Apr 2026 11:01:34 +0000
Manifest next update: Fri 01 May 2026 11:01:34 +0000
Files and hashes: 1: 20ifvpiZTLwJjIdrpj5WCsF-Wy8.crl (hash: yvIreJy8UZ69t4jTL+0USz1xioa8xgJOYlC3gr/gGv8=)
2: G8RD2uK8jegsTsE-7XQ_nINovw8.roa (hash: bbRv59/fFxUF7NCQBw4VIduLszpjkq+XNByjPQilIdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/20ifvpiZTLwJjIdrpj5WCsF-Wy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:de:0d:1e:e8:91:db:cc:1c:97:a3:29:0b:fd:70:b5:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db489fbe98994cbc098c876ba63e560ac17e5b2f
Validity
Not Before: Apr 30 11:01:34 2026 GMT
Not After : May 1 11:01:34 2026 GMT
Subject: CN=429be5dd0d521a7f228ffc432bb16f6bf0937beb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:03:ae:16:b9:9e:69:81:d0:e1:5b:da:37:38:
67:35:cb:c2:ca:0d:05:c8:41:08:89:e0:45:59:48:
47:29:ee:5e:6e:df:6a:a8:0d:9b:61:5d:3c:21:e4:
69:f0:6d:de:8b:b5:72:29:74:ca:77:4e:ed:0d:4b:
35:f1:7c:62:a9:61:d1:0f:4b:82:b4:d7:e2:03:2d:
06:c5:2a:82:9c:b9:d6:1e:48:b8:8a:75:02:0a:36:
5b:45:74:07:15:a4:7b:6a:19:d5:92:ab:7a:37:b8:
10:a1:63:0c:31:4c:66:97:ed:b3:c0:70:82:92:32:
d5:49:68:09:0a:16:66:c2:19:c7:c3:6e:22:91:65:
c1:9e:23:17:44:57:8a:0c:69:34:2d:d9:32:8b:2e:
ca:f6:e5:9b:eb:cb:36:d0:cf:ae:68:ef:ea:99:54:
fe:f4:9f:7e:d2:86:0e:ff:18:3d:12:a0:14:22:88:
ba:7b:78:6a:ba:d9:4e:d9:47:b0:a5:5c:56:b6:85:
fd:0c:8b:91:58:a4:4a:d7:e4:f6:a2:cd:ae:4b:52:
89:be:e3:1e:49:1a:91:73:9b:65:c5:71:0d:75:25:
79:39:42:34:ac:63:0e:06:96:f5:de:12:08:01:39:
44:b1:46:38:96:95:5b:34:01:0f:76:e9:d4:1a:b9:
02:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:9B:E5:DD:0D:52:1A:7F:22:8F:FC:43:2B:B1:6F:6B:F0:93:7B:EB
X509v3 Authority Key Identifier:
keyid:DB:48:9F:BE:98:99:4C:BC:09:8C:87:6B:A6:3E:56:0A:C1:7E:5B:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/20ifvpiZTLwJjIdrpj5WCsF-Wy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:7f:69:62:d2:6e:49:84:82:86:5e:60:4c:d5:08:65:01:8d:
1e:d9:e1:1d:44:08:67:85:4b:40:aa:61:39:a4:da:64:84:9c:
a4:0b:9f:92:f5:2d:9d:1e:cd:5a:a9:72:47:f3:e9:39:5d:ca:
3f:4e:bd:f2:bd:6f:b1:fd:1d:37:56:60:b8:68:22:76:c9:c6:
48:37:c6:8b:5f:fb:05:0b:27:06:94:4d:db:c0:4e:fa:e0:72:
f0:88:c7:77:da:b8:31:7d:5a:12:87:a4:1a:3d:a4:e1:81:2c:
6f:c0:3f:0e:da:c3:a5:4c:46:f6:16:48:3f:b0:88:f2:05:3e:
fd:97:47:a4:46:f8:c3:41:15:ea:96:b8:f9:52:ca:70:dc:47:
f6:ed:cd:86:3b:25:f0:58:24:d8:df:67:3f:6c:09:1c:11:60:
63:87:b2:cd:6e:b8:d8:71:d5:38:be:17:28:f0:9b:f5:db:72:
fe:41:83:62:8d:73:76:0d:ac:8c:5b:3f:41:77:9c:f0:06:ba:
1d:8f:e1:9e:96:75:9c:3b:d3:5a:97:21:59:53:cd:7b:ff:8a:
83:a7:e8:28:67:52:a0:e4:dc:7b:b5:76:24:09:90:fa:0a:ca:
7d:90:82:32:5c:93:08:52:77:d1:93:5d:d5:9b:79:a0:fa:8c:
e0:39:00:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 13:30:34 2026 by rpki-client