Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.mft
File: IPY4EHq7hK5vsDzB2yz9G8RIf40.mft (raw, json)
Hash identifier: PejxHNdXCWvw04fqsyCvxLqRxzGMDx/xt1R2k3l9jSQ=
Subject key identifier: 4F:7D:60:74:32:CF:D6:1E:F3:D3:FF:A9:E6:B9:6A:2E:24:E6:D3:6D
Authority key identifier: 20:F6:38:10:7A:BB:84:AE:6F:B0:3C:C1:DB:2C:FD:1B:C4:48:7F:8D
Certificate issuer: /CN=20f638107abb84ae6fb03cc1db2cfd1bc4487f8d
Certificate serial: 019D2816E82D2293694640720B77BE2BB63C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPY4EHq7hK5vsDzB2yz9G8RIf40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.mft
Manifest number: 1258
Signing time: Thu 26 Mar 2026 03:01:23 +0000
Manifest this update: Thu 26 Mar 2026 03:01:23 +0000
Manifest next update: Fri 27 Mar 2026 03:01:23 +0000
Files and hashes: 1: IPY4EHq7hK5vsDzB2yz9G8RIf40.crl (hash: Jon4LjvMoKuZrI/p29UCghFPw9Rn0RjLvVElVKXDTnw=)
2: OIqVwV7eJRjge3Y7JoI6UT8DyHg.roa (hash: 1a+xm03EcG4NIWojKcu02C40HTOK/Zidn5fuQN++My8=)
3: RvjdrZHQvT2b90nWXdsgoaDdips.roa (hash: qK/UmJeSS3Eli2K0IV23Gv9PIRqLGK5MHBRUfrzwD3E=)
4: YfMmn3NTxzanjSoW2CgtmSyKoBw.roa (hash: R1/beSy+NbtBJBgUSOR66DtF7b/TO6ueQaOcS29ElbE=)
5: osG6SqIqqmIP3iBJplJkK58I_pQ.roa (hash: b1xSqqWBFOEz+K1E0t9Y9zbsAyRCIW7qvBJSCpg4lHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.mft
rsync://rpki.ripe.net/repository/DEFAULT/IPY4EHq7hK5vsDzB2yz9G8RIf40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:e8:2d:22:93:69:46:40:72:0b:77:be:2b:b6:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20f638107abb84ae6fb03cc1db2cfd1bc4487f8d
Validity
Not Before: Mar 26 03:01:23 2026 GMT
Not After : Mar 27 03:01:23 2026 GMT
Subject: CN=4f7d607432cfd61ef3d3ffa9e6b96a2e24e6d36d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e8:4e:2d:59:ec:7a:d3:65:fd:0d:bf:16:34:
0d:51:10:21:7e:0a:23:4d:2e:37:f3:39:ee:0e:3b:
b2:c4:b7:0a:08:05:40:5e:cc:25:64:53:51:c3:29:
f4:39:60:f8:59:26:f3:de:c6:c0:66:b7:a5:07:96:
84:a4:db:f0:4f:64:6c:bd:f1:cb:ad:d4:01:0e:d1:
18:23:83:bb:5f:39:64:7b:33:62:93:f7:33:ce:2e:
44:ff:d0:39:d0:3a:b6:c9:dc:b7:4f:1a:d5:6c:25:
53:ed:c0:2b:9a:22:cf:91:bf:f0:29:bc:53:6e:8d:
2e:e3:5f:34:a6:53:51:d0:64:e0:3b:7f:68:68:b1:
08:0a:e8:3c:0c:cf:9f:6d:e6:a8:b3:c8:41:f8:24:
af:37:3d:09:9a:7a:8c:63:a1:b8:ea:7f:d5:dd:c7:
11:3b:9a:d6:a2:f7:03:c5:b1:8e:af:47:ac:da:48:
92:55:c1:c4:d5:2e:46:54:40:e4:dd:34:8a:4e:f7:
8f:0a:d3:ab:df:d7:1a:a4:92:d2:46:24:1f:b5:54:
96:b9:f2:ca:dd:0c:6f:b9:80:65:24:bd:63:c5:e2:
f6:28:4f:08:d0:b5:59:f9:81:4d:84:75:ac:6a:3d:
18:52:9e:8b:ec:e8:71:8a:6f:6f:2a:c4:7b:53:af:
f6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:7D:60:74:32:CF:D6:1E:F3:D3:FF:A9:E6:B9:6A:2E:24:E6:D3:6D
X509v3 Authority Key Identifier:
keyid:20:F6:38:10:7A:BB:84:AE:6F:B0:3C:C1:DB:2C:FD:1B:C4:48:7F:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPY4EHq7hK5vsDzB2yz9G8RIf40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:3e:13:86:46:36:61:6e:a8:22:fd:1b:b4:4c:73:e7:7f:ad:
d6:54:b0:3c:66:bc:aa:9c:ee:f2:41:82:a8:e3:33:7e:3e:30:
e7:6a:55:9b:8d:11:e0:aa:85:af:c4:b4:f9:b7:ad:95:1e:bd:
33:0e:16:fa:09:bb:0b:50:83:81:a7:b1:fc:66:4b:f6:8e:b2:
b5:8c:7f:a6:f6:dd:bb:79:21:fe:3e:f8:46:31:2b:0a:af:91:
3d:5b:35:d9:b8:e2:8d:ff:80:96:36:93:b0:1d:9d:34:a7:02:
a2:1d:d3:4b:65:eb:83:ee:7e:70:a0:7e:d2:60:31:02:bd:8b:
c9:a4:98:66:f4:dc:7c:7b:cf:ef:5b:85:c4:fa:6f:a3:b7:71:
2d:f9:7b:b0:65:d5:52:6b:6b:30:08:8c:a7:27:4a:5f:1f:0b:
36:db:b0:73:70:48:13:7f:b0:e2:36:30:e4:12:2d:d1:7e:5d:
67:a8:6d:aa:8d:4e:f5:f7:0d:7b:3a:a0:58:b9:59:d5:99:5c:
ae:44:d2:5b:3b:7f:5b:e2:d8:4a:db:50:1a:aa:91:a8:bd:b6:
51:0e:c0:b5:a0:13:53:18:dc:fb:5d:ce:a2:2b:a7:33:78:f6:
84:88:cf:e4:ca:f1:bc:f1:6c:af:53:dd:ae:65:c9:fd:a4:61:
bb:33:e5:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:08:10 2026 by rpki-client