Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/bb8b5c-4964-442d-aa7f-3fc54a76ced5/1/I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.mft
File: I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.mft (raw, json)
Hash identifier: /mGtRjcYHA2eryw6Dn1jYjvWiQoHrO5PjywuKvsRmpA=
Subject key identifier: E7:79:34:80:7B:26:47:EC:E1:BF:F2:29:E7:03:E5:B3:8D:64:C3:76
Authority key identifier: 23:FD:1A:A1:9E:59:32:F2:4C:27:77:E7:EC:18:D8:A6:CA:92:4C:5E
Certificate issuer: /CN=23fd1aa19e5932f24c2777e7ec18d8a6ca924c5e
Certificate serial: 019DDE0D3393E21F1CB29748DC70DD2C3DEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/bb8b5c-4964-442d-aa7f-3fc54a76ced5/1/I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.mft
Manifest number: 86
Signing time: Thu 30 Apr 2026 11:01:40 +0000
Manifest this update: Thu 30 Apr 2026 11:01:40 +0000
Manifest next update: Fri 01 May 2026 11:01:40 +0000
Files and hashes: 1: I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.crl (hash: d5w02meaG39IONpQsU3cYMDQ7k+kgLYpt2tzV3Lh6uc=)
2: M_CYpRI8SqN2pbVtKePdOnYWUSE.asa (hash: M0fsFeA37g+aMXBHQ8+8jEtPr1DuQjy82Sio4c1x2i4=)
3: b1swFPJJREwO7cx297uALIQsAqo.roa (hash: OKc3LjMWMxGzGg+rjr90PHIdb2q9ia63zVSKKzhRN5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/bb8b5c-4964-442d-aa7f-3fc54a76ced5/1/I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/bb8b5c-4964-442d-aa7f-3fc54a76ced5/1/I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:de:0d:33:93:e2:1f:1c:b2:97:48:dc:70:dd:2c:3d:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23fd1aa19e5932f24c2777e7ec18d8a6ca924c5e
Validity
Not Before: Apr 30 11:01:40 2026 GMT
Not After : May 1 11:01:40 2026 GMT
Subject: CN=e77934807b2647ece1bff229e703e5b38d64c376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:56:33:9f:a5:db:82:e9:de:a6:38:1b:bb:78:
ec:59:12:5e:6a:8a:d6:f1:f6:0b:58:6d:87:59:ae:
5d:1a:fc:b0:17:4c:44:7e:9a:fa:d9:7d:6a:ba:49:
3b:51:8c:63:7a:58:b0:4d:f7:9b:ba:b8:97:4f:31:
1e:8f:25:04:c5:5d:17:55:31:95:7f:20:57:87:63:
53:c5:1f:91:47:66:35:66:c4:84:97:13:04:b7:86:
4c:75:42:7e:70:8a:2b:00:13:5c:1a:9b:2b:e9:68:
5a:8b:ea:1d:e2:a1:4d:d6:04:49:19:87:18:95:d0:
b9:d4:d1:2b:78:cf:a0:b7:4c:2e:da:59:51:96:5b:
68:77:79:1c:78:f4:e3:6f:bc:b5:3d:52:4d:70:e9:
f0:66:17:01:35:a0:53:fa:dd:94:8b:3a:4b:93:26:
fb:e6:3d:db:0f:6a:2c:75:82:45:03:2b:5a:84:3e:
ba:8b:cf:61:d1:7f:75:b2:a6:1f:a9:26:5e:ff:e1:
d5:66:e5:12:96:f5:86:9f:0f:bc:47:6e:b7:02:76:
4e:d7:b5:ed:a3:29:dc:ff:e4:7d:69:14:8e:c7:de:
d2:02:09:25:d5:33:6e:38:7a:70:5e:58:ea:85:db:
dc:ab:d4:71:de:02:c6:7a:88:b6:24:30:e1:6e:aa:
db:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:79:34:80:7B:26:47:EC:E1:BF:F2:29:E7:03:E5:B3:8D:64:C3:76
X509v3 Authority Key Identifier:
keyid:23:FD:1A:A1:9E:59:32:F2:4C:27:77:E7:EC:18:D8:A6:CA:92:4C:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bb8b5c-4964-442d-aa7f-3fc54a76ced5/1/I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bb8b5c-4964-442d-aa7f-3fc54a76ced5/1/I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:ff:ec:bd:0f:70:7c:eb:ba:7a:b7:3b:bb:19:0e:2a:2d:53:
ad:8d:cb:57:f7:cf:4c:42:f5:6d:93:6d:3b:22:5a:e2:2e:0c:
39:4c:e4:6e:5b:fc:9d:27:65:b3:8a:c5:d5:4e:96:8c:f7:63:
05:75:c2:76:86:41:c9:e1:55:76:89:6c:ce:fe:d8:5b:e8:d7:
8e:88:0d:eb:bc:dc:d2:4b:ac:64:8e:05:8d:6a:68:d3:ac:ba:
9c:0a:5d:9a:6d:5f:a2:c8:cf:d9:f9:dc:d3:b5:34:c0:33:57:
4e:cf:ce:2c:cc:b8:fe:8f:14:19:38:a7:6d:1b:4c:26:f6:e6:
06:70:1d:7b:0d:b2:aa:19:42:32:6b:23:10:6a:38:27:76:da:
04:90:6c:1c:e7:7d:c6:a9:9b:e3:8b:0a:79:05:7b:af:3d:eb:
66:35:f5:fc:be:64:44:44:d6:4c:7a:a4:be:04:48:cb:bb:5c:
3a:36:af:6f:a0:42:1a:fa:5f:6f:83:89:b2:2d:25:6c:d4:7b:
6b:38:6e:97:77:15:9e:3e:06:e2:bf:27:72:fd:ed:db:7e:5c:
39:c2:4c:ab:02:ef:a8:e6:f9:db:b3:58:90:a0:2e:95:30:f0:
1f:28:99:3c:df:b2:f3:0d:bc:f6:05:08:1d:7b:46:da:10:3b:
f4:05:10:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 13:09:35 2026 by rpki-client