Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/iBvRQCkk7CpkTo9U5plMtKyOJKY.mft
File: iBvRQCkk7CpkTo9U5plMtKyOJKY.mft (raw, json)
Hash identifier: rTNzVtOxzJQHzVOtdfegEbsIA792CkAckkuW0HQjPQY=
Subject key identifier: 43:61:A0:6A:78:BF:43:13:32:A2:17:19:84:0E:94:34:E3:8E:FC:A4
Authority key identifier: 88:1B:D1:40:29:24:EC:2A:64:4E:8F:54:E6:99:4C:B4:AC:8E:24:A6
Certificate issuer: /CN=881bd1402924ec2a644e8f54e6994cb4ac8e24a6
Certificate serial: 019DD050AE1A2AB088116350C54D0D6F1F89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBvRQCkk7CpkTo9U5plMtKyOJKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/iBvRQCkk7CpkTo9U5plMtKyOJKY.mft
Manifest number: 11A4
Signing time: Mon 27 Apr 2026 19:00:41 +0000
Manifest this update: Mon 27 Apr 2026 19:00:41 +0000
Manifest next update: Tue 28 Apr 2026 19:00:41 +0000
Files and hashes: 1: 8mKhApHYp_839P6yQXD0oAwm2qo.roa (hash: dEUbCXMVw9xAIsh0W5Y8ji1NQ46062f5dJUppcXKzCY=)
2: C3xZ11UfhI0GeWTbExlimKS-cZs.roa (hash: xhykIG9PAX9cR5qhXwtefG/7lrssloObCNE0+5PnTIg=)
3: ZQHzJnKmGMmYQF_x6i-pgoB3otk.roa (hash: y+ugl+hZqb559F4FeCaZ0WayeCgZERvzHW8L8s5FBBo=)
4: iBvRQCkk7CpkTo9U5plMtKyOJKY.crl (hash: U7txte/AK4Z50j2GgS0KDHzUmvSaNGg81zjR00meAu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/iBvRQCkk7CpkTo9U5plMtKyOJKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/iBvRQCkk7CpkTo9U5plMtKyOJKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iBvRQCkk7CpkTo9U5plMtKyOJKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 19:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:50:ae:1a:2a:b0:88:11:63:50:c5:4d:0d:6f:1f:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=881bd1402924ec2a644e8f54e6994cb4ac8e24a6
Validity
Not Before: Apr 27 19:00:41 2026 GMT
Not After : Apr 28 19:00:41 2026 GMT
Subject: CN=4361a06a78bf431332a21719840e9434e38efca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9a:d5:ee:da:c0:e4:ec:4d:61:ef:24:94:e0:
3a:04:1b:96:76:b0:4f:ff:4e:f3:23:6f:9a:f7:03:
f0:8f:2b:70:88:1b:ed:3b:3a:30:1f:6a:0c:f3:b4:
10:5c:9f:8c:07:7f:f2:45:ae:ad:e5:a8:b4:bd:da:
ed:bd:5a:be:1a:6c:3b:aa:96:97:60:51:12:0f:5b:
85:84:f0:36:42:55:dc:f1:f7:14:fd:12:fe:66:e3:
84:b6:3d:93:2b:34:df:e9:35:1c:01:6a:ac:17:5e:
91:d1:4b:33:f2:17:59:16:2d:41:45:7f:a9:1b:4b:
f6:7e:27:26:db:5d:06:99:31:b7:9d:b1:4a:85:26:
63:88:8d:05:0c:62:de:f0:b8:cc:a7:84:f0:25:d0:
f5:af:07:b3:7d:a4:96:b9:1d:fb:d2:16:a5:d9:54:
6a:10:b7:29:41:a7:11:18:db:59:22:e4:58:a4:a6:
89:54:76:e5:e8:9d:f1:eb:98:37:17:d1:d6:96:f9:
be:4a:42:db:0b:d3:d9:47:74:41:94:13:c7:48:9e:
35:8a:d8:80:1d:e5:40:d0:d5:bf:31:47:37:e5:96:
53:5f:48:67:3f:81:02:02:bd:c5:36:cc:e2:e0:6b:
7d:07:70:04:d0:6c:9a:ba:ed:ea:dd:d4:0b:59:16:
b9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:61:A0:6A:78:BF:43:13:32:A2:17:19:84:0E:94:34:E3:8E:FC:A4
X509v3 Authority Key Identifier:
keyid:88:1B:D1:40:29:24:EC:2A:64:4E:8F:54:E6:99:4C:B4:AC:8E:24:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBvRQCkk7CpkTo9U5plMtKyOJKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/iBvRQCkk7CpkTo9U5plMtKyOJKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/iBvRQCkk7CpkTo9U5plMtKyOJKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:d6:36:40:a8:3d:a1:be:c3:16:72:ee:38:67:d1:11:9a:c9:
48:08:31:16:75:b1:30:46:30:7f:1b:15:59:be:e0:0e:b2:4d:
11:42:51:c7:21:35:e0:63:d1:c1:9e:6e:66:36:11:4c:45:4a:
74:37:09:0a:4b:54:b7:bc:ba:75:3d:f9:d7:0b:b0:63:ff:c9:
83:12:ee:72:ca:f3:73:50:fd:e9:22:1c:94:36:e5:25:07:2c:
40:04:37:a2:27:d8:51:1f:c3:cf:ea:da:09:c1:bb:29:a3:c9:
b8:8a:e4:67:9b:76:33:56:a6:34:18:d1:64:1b:16:33:1f:ae:
03:8f:ba:88:be:52:53:a9:1a:4e:a8:42:3d:f3:3e:9f:c6:ba:
8c:d2:06:43:66:04:ca:15:9f:c9:a4:21:60:82:d2:83:bd:4a:
3d:21:90:9d:c1:b0:8c:d1:7f:fb:cf:55:ff:f2:ac:ac:56:25:
fa:28:43:14:8d:40:e8:72:4b:32:37:04:88:ec:91:45:d8:17:
10:06:6e:01:61:c7:df:5f:94:74:8b:f9:83:19:4a:e6:a1:00:
b7:76:9c:d3:47:56:d0:a9:25:47:84:d4:70:37:43:c8:69:8c:
35:a1:d2:11:36:9e:f1:e9:da:c5:55:02:4f:7d:78:a0:c4:01:
9f:9d:c7:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 04:49:22 2026 by rpki-client