Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft
File: i96i1KsTgPCjt_59T6eCjhyUNVg.mft (raw, json)
Hash identifier: +s1sIW2D6RSVnrVT8dAJjbNL1h50NWO/tIPxoNz/wrE=
Subject key identifier: FB:F1:49:33:CD:49:C4:C3:83:79:63:8A:E9:39:BF:8A:47:FB:42:EA
Authority key identifier: 8B:DE:A2:D4:AB:13:80:F0:A3:B7:FE:7D:4F:A7:82:8E:1C:94:35:58
Certificate issuer: /CN=8bdea2d4ab1380f0a3b7fe7d4fa7828e1c943558
Certificate serial: 019DD019BAF3B16F3EDC6E5070922B0923F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i96i1KsTgPCjt_59T6eCjhyUNVg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft
Manifest number: 18DF
Signing time: Mon 27 Apr 2026 18:00:40 +0000
Manifest this update: Mon 27 Apr 2026 18:00:40 +0000
Manifest next update: Tue 28 Apr 2026 18:00:40 +0000
Files and hashes: 1: WUGBWhMtlbuPeSgdJcR9TomYq_g.roa (hash: YpNprpEpdwv3WzbtNOJB6/axNyALJCziE+BSrnsp57Y=)
2: i96i1KsTgPCjt_59T6eCjhyUNVg.crl (hash: 93sOm9kln32O9k40+rekdejnafeIvPY+wUSHJIyRhUQ=)
3: iUaiCf92bE9L1AogU_P4Ws5OIvg.roa (hash: lB/aDmJbZNaICyqV1bdphm8nQcK/tHuDQZq5sC+egbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft
rsync://rpki.ripe.net/repository/DEFAULT/i96i1KsTgPCjt_59T6eCjhyUNVg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:19:ba:f3:b1:6f:3e:dc:6e:50:70:92:2b:09:23:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bdea2d4ab1380f0a3b7fe7d4fa7828e1c943558
Validity
Not Before: Apr 27 18:00:40 2026 GMT
Not After : Apr 28 18:00:40 2026 GMT
Subject: CN=fbf14933cd49c4c38379638ae939bf8a47fb42ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ae:13:c5:78:29:de:f9:47:e8:d1:8b:9a:34:
27:62:27:5a:65:88:52:e3:cb:01:84:0b:95:76:5d:
b8:55:a9:2e:5d:8a:08:e8:f3:a7:c1:4a:57:45:ba:
3a:b0:5e:fa:b8:76:98:dc:ac:b0:a6:4e:c4:96:b6:
0c:f6:b3:b6:3c:23:85:25:5d:4e:fa:25:0f:16:1a:
53:35:4e:ae:e8:5b:3b:55:b5:a5:96:83:c5:0a:50:
80:e4:ff:4f:cb:48:61:c7:af:d7:3d:3f:34:33:b8:
4e:76:be:bc:44:a2:7e:32:47:29:ad:71:5a:6a:fa:
fc:48:ad:21:ac:1f:75:49:7b:be:fe:0f:b0:a6:aa:
e1:2a:28:c9:c9:28:bf:34:bd:6d:60:32:a1:f5:6f:
4a:0f:65:66:c1:52:5d:72:9a:40:f9:13:00:04:43:
0a:e3:0e:51:a2:39:1e:d5:7e:8e:ca:f9:88:a4:96:
a6:ba:60:41:98:66:77:8f:9a:51:39:97:7b:7c:8b:
be:3c:12:6d:9a:ce:d8:2f:39:38:e7:4a:77:2d:56:
a2:1c:ed:ce:8a:c7:c2:d3:4a:48:bc:6b:8a:21:0c:
7e:81:10:f6:d5:cb:a8:2b:38:9c:b1:93:7b:4e:07:
ac:83:56:aa:fb:ba:e2:76:51:cf:5c:87:d1:87:65:
7e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:F1:49:33:CD:49:C4:C3:83:79:63:8A:E9:39:BF:8A:47:FB:42:EA
X509v3 Authority Key Identifier:
keyid:8B:DE:A2:D4:AB:13:80:F0:A3:B7:FE:7D:4F:A7:82:8E:1C:94:35:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i96i1KsTgPCjt_59T6eCjhyUNVg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:2f:a2:96:4e:34:47:ce:e3:ce:9a:b7:b9:32:dd:04:25:69:
0b:57:15:e8:14:dc:c7:79:ed:a0:ea:ff:50:b9:2f:5c:77:eb:
32:ed:6b:5e:ff:12:5b:23:13:26:16:bd:2b:b0:76:8c:ff:3c:
6c:58:c1:6a:9e:c0:7a:df:8e:2a:24:e5:7c:c6:f6:d4:b5:90:
c4:f5:d3:f7:34:28:dc:27:c2:43:d0:b0:39:f2:e7:2d:e7:e8:
cc:7e:c7:7b:a4:a6:41:44:b6:fc:51:d6:e1:65:f0:9b:c1:c6:
e7:df:74:c0:68:92:b8:28:76:19:eb:38:0b:91:36:cc:3d:1a:
c3:92:73:9c:d8:10:f2:73:39:82:9e:b8:cd:e0:f2:b7:f6:c4:
2c:d1:a0:9d:6f:62:46:c7:9f:b3:52:6b:c4:3d:b1:a7:6e:51:
07:42:50:e6:5d:ff:58:94:f5:4c:46:b8:ea:f4:8e:ef:7d:7d:
69:9a:5d:10:7a:c5:3e:1b:62:14:97:87:dd:a2:04:4a:70:e9:
c5:86:19:9d:00:a7:47:4c:01:c2:c8:d4:e7:16:21:6f:8e:61:
ee:a6:b9:06:5f:42:38:b5:60:d3:f7:3d:ce:76:8c:98:ff:6b:
fa:3d:cc:3a:c1:46:51:3f:34:24:fe:d1:5f:da:9e:a3:16:c6:
0d:5d:7c:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 00:52:57 2026 by rpki-client