Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.mft
File: iVVHgNslskPAotNhl5sTCn8Txg0.mft (raw, json)
Hash identifier: 4/SOiP6Hv1Ww4jAPsfLRQOFWHPzkI7j6VEXYQyV9PDU=
Subject key identifier: 27:40:41:0D:26:DB:51:E9:95:F4:1D:DA:55:E0:B5:9B:DC:E1:6B:F0
Authority key identifier: 89:55:47:80:DB:25:B2:43:C0:A2:D3:61:97:9B:13:0A:7F:13:C6:0D
Certificate issuer: /CN=89554780db25b243c0a2d361979b130a7f13c60d
Certificate serial: 019DCFE38B9FBB17E1E76A0170A5F088223D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iVVHgNslskPAotNhl5sTCn8Txg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.mft
Manifest number: 0E07
Signing time: Mon 27 Apr 2026 17:01:29 +0000
Manifest this update: Mon 27 Apr 2026 17:01:29 +0000
Manifest next update: Tue 28 Apr 2026 17:01:29 +0000
Files and hashes: 1: 04FKSiNEBSVxxBYiPtE8VcsRvqM.roa (hash: iIsFB+u1yXou/MBTJQN92523XOZ49HIi4J+JzBjc0Vk=)
2: iVVHgNslskPAotNhl5sTCn8Txg0.crl (hash: wJC00AS0m0UwdBGp/bWvZABXpVZ4MoptBKGUmS6+MZs=)
3: yUZd6eY1ILFj_NVgWnntQzVJiGs.roa (hash: aYbs72JfiEw4WjwVxwNiVwxvegvGGWCTaf1wWunmceE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/iVVHgNslskPAotNhl5sTCn8Txg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:e3:8b:9f:bb:17:e1:e7:6a:01:70:a5:f0:88:22:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89554780db25b243c0a2d361979b130a7f13c60d
Validity
Not Before: Apr 27 17:01:29 2026 GMT
Not After : Apr 28 17:01:29 2026 GMT
Subject: CN=2740410d26db51e995f41dda55e0b59bdce16bf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:03:7c:e1:eb:f7:16:5d:22:eb:dc:fe:09:0e:
74:a1:2a:d8:bf:ed:ca:4a:d1:83:4c:df:a5:ac:36:
d8:1a:7a:7b:f4:de:ee:30:2b:0c:9e:4d:d4:73:1d:
c9:15:6a:ad:b1:a4:38:4b:e2:d2:53:ae:d2:db:1e:
3a:12:fc:2e:07:8e:8f:d9:9f:94:e9:26:1b:47:95:
bd:32:c9:51:be:a7:22:36:ed:7b:9a:f5:f5:a7:39:
a0:a4:6a:23:d3:90:e1:18:16:00:62:1b:fb:bc:9e:
f9:62:5b:e9:d3:2f:b1:a1:9e:b3:b6:82:b0:ef:e2:
67:0f:df:c3:e7:3f:56:61:68:91:28:f4:47:61:a3:
b7:16:e9:45:b7:8e:20:6b:6e:ba:5c:52:e4:f7:a0:
ba:93:9c:02:71:8b:13:72:dd:c4:53:be:40:28:a1:
9e:83:4b:b1:98:3d:11:98:da:4c:1a:8d:cd:a7:81:
5c:1f:05:28:36:05:68:ab:56:d0:da:07:76:a8:bd:
76:06:9b:e6:fd:ae:a0:82:b7:ce:67:3a:48:b5:bd:
93:da:32:ae:5b:fa:e6:44:fb:dc:5d:ca:d9:f0:04:
c9:8f:84:91:18:25:31:fc:0f:f9:3e:b0:f1:a9:d0:
af:54:01:b7:97:c9:0b:80:6e:ac:a0:be:b3:c5:cb:
13:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:40:41:0D:26:DB:51:E9:95:F4:1D:DA:55:E0:B5:9B:DC:E1:6B:F0
X509v3 Authority Key Identifier:
keyid:89:55:47:80:DB:25:B2:43:C0:A2:D3:61:97:9B:13:0A:7F:13:C6:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iVVHgNslskPAotNhl5sTCn8Txg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:1d:ec:06:b1:5d:8c:98:ab:aa:7a:0c:8f:f8:32:79:43:bd:
ba:01:ac:d1:a1:bd:0a:fc:66:2a:80:d7:7a:92:6c:12:4e:33:
d1:06:9d:7a:45:1c:a8:42:34:a4:a3:de:e3:aa:16:a9:66:04:
90:b0:2a:72:32:bd:14:8c:0c:de:61:69:b9:67:7c:e7:60:f9:
1d:d6:21:07:d2:dc:e2:40:d3:29:ed:24:5e:9a:22:a2:90:2a:
6a:db:02:a8:18:a6:7f:ad:73:88:c7:56:07:f2:f7:31:30:0d:
56:cb:4f:f0:96:a9:2e:09:9a:72:3b:2a:1a:aa:60:b2:ac:dc:
5d:20:18:25:b0:d1:d8:91:ab:2b:07:07:01:dd:4e:83:6d:df:
87:99:47:ac:9f:9e:56:d2:7a:e2:ba:0f:8f:da:4c:ae:84:1e:
17:3d:77:48:7f:c3:7b:fd:52:9a:ba:33:74:2c:67:9c:c8:64:
54:0d:3e:d5:0b:43:c4:e7:74:f5:b5:aa:ce:31:d1:8d:71:d8:
1c:97:95:cd:e5:d7:92:6f:c7:75:55:7c:32:0a:fb:5f:77:31:
a0:f6:d3:2e:66:11:e9:45:a2:e1:66:c7:14:15:18:2e:19:d6:
fc:64:ee:b3:03:8a:68:f9:30:55:c1:f6:ba:bf:ca:5c:c5:3a:
7d:7d:55:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 23:45:14 2026 by rpki-client