
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/9a6cf5-1342-4c3b-87af-160c24c66630/1/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.mft
File: iJjbjLhhu73R-3Vi3vTXfYZCwyQ.mft (raw, json)
Hash identifier: G0L/qT/+ijcnuEJQGjdBLTIyO/TSm+Rh5F6ytTUE9hk=
Subject key identifier: 20:C9:91:C0:FB:C2:ED:D0:FB:33:57:08:F3:76:AE:BF:68:61:64:10
Authority key identifier: 88:98:DB:8C:B8:61:BB:BD:D1:FB:75:62:DE:F4:D7:7D:86:42:C3:24
Certificate issuer: /CN=8898db8cb861bbbdd1fb7562def4d77d8642c324
Certificate serial: 019D9BBE8C874FE064FE6BA8630FCBD83A8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/9a6cf5-1342-4c3b-87af-160c24c66630/1/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.mft
Manifest number: 15E5
Signing time: Fri 17 Apr 2026 14:00:49 +0000
Manifest this update: Fri 17 Apr 2026 14:00:49 +0000
Manifest next update: Sat 18 Apr 2026 14:00:49 +0000
Files and hashes: 1: iJjbjLhhu73R-3Vi3vTXfYZCwyQ.crl (hash: zcnx4T08G1lxl6RX5/XxL5nwAq7kvU4b5JC0zaYKIOU=)
2: sR4ns811nFIbjvjg3wltUzH6BEI.roa (hash: ZbJugbRHpIt2Y4hqLk7H0rTD6BGfncHuX2f1Y5HnqGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/9a6cf5-1342-4c3b-87af-160c24c66630/1/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/9a6cf5-1342-4c3b-87af-160c24c66630/1/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:8c:87:4f:e0:64:fe:6b:a8:63:0f:cb:d8:3a:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8898db8cb861bbbdd1fb7562def4d77d8642c324
Validity
Not Before: Apr 17 14:00:49 2026 GMT
Not After : Apr 18 14:00:49 2026 GMT
Subject: CN=20c991c0fbc2edd0fb335708f376aebf68616410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7f:7d:7f:b0:88:19:e0:ce:44:30:f0:cd:49:
6e:89:a5:1a:a5:e8:33:6e:ee:4e:66:06:c8:9b:3a:
3d:7e:ef:34:46:ec:a1:30:68:1d:fd:c1:40:df:0b:
ee:a9:72:ab:43:db:aa:dd:ba:99:c5:d3:83:c6:72:
80:d4:4d:be:9f:22:e6:91:1e:cb:bd:3d:ef:13:fa:
3c:31:8d:7f:18:92:f1:3e:fb:9b:27:d2:ce:4c:ca:
28:4e:ef:a0:10:9e:69:1c:9d:e9:bc:80:eb:dd:1d:
b8:30:6b:7f:a5:af:ad:1f:84:49:4d:52:e2:4c:08:
21:e5:31:61:45:7b:0e:26:2d:91:51:62:de:b6:aa:
d6:c0:39:ea:a8:02:c2:b0:46:18:d0:35:c2:88:b8:
f0:35:32:19:8d:b0:c9:53:0a:30:13:75:20:97:2a:
6f:6a:73:53:fd:24:c0:21:7e:97:02:6b:1f:47:e9:
80:20:55:7f:33:a4:b9:f7:85:a0:43:83:4a:fd:e1:
f9:33:ba:e1:d5:b9:ff:ca:e6:69:5f:3a:5c:df:cc:
fb:44:dc:f2:4a:01:0f:c4:e0:0e:c0:08:d1:12:6b:
e1:e2:1c:33:37:84:58:d6:67:ec:4c:09:6f:49:d6:
2a:c8:ee:cc:f0:ab:08:fc:03:47:e9:76:a3:67:c5:
b0:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:C9:91:C0:FB:C2:ED:D0:FB:33:57:08:F3:76:AE:BF:68:61:64:10
X509v3 Authority Key Identifier:
keyid:88:98:DB:8C:B8:61:BB:BD:D1:FB:75:62:DE:F4:D7:7D:86:42:C3:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a6cf5-1342-4c3b-87af-160c24c66630/1/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a6cf5-1342-4c3b-87af-160c24c66630/1/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:4f:db:4d:7d:d2:f8:ae:d8:b2:dd:03:ca:90:a8:23:9c:86:
94:76:88:3a:f8:75:0f:00:a7:36:76:66:28:3e:27:bc:59:62:
56:0a:c7:10:3c:85:df:19:d8:57:71:a1:f5:ae:42:70:1e:bb:
77:37:c0:13:61:0f:ee:17:2b:7b:2e:04:a9:cc:20:80:82:11:
90:fe:e9:41:7f:79:60:95:7f:62:a3:7a:59:48:07:dd:92:88:
16:1c:f9:ea:b7:52:0b:6e:c6:31:f0:01:e6:b1:af:6e:4b:9b:
14:24:46:8c:f2:4d:21:fc:ce:d9:70:7e:db:8f:c5:c5:bd:ff:
61:3d:82:2d:5d:5e:f7:ae:3a:3b:76:46:4c:3e:3c:c2:3d:a7:
a5:e3:5e:bb:5e:69:d2:47:94:0e:ed:b9:b2:6a:8f:51:a0:43:
16:81:1b:42:67:ea:a2:5a:58:f6:2b:a7:cf:ca:55:73:52:5f:
cf:9d:ec:37:bb:6b:84:7d:85:5d:0e:f1:5f:4f:98:af:8d:42:
3a:da:43:66:dc:43:50:04:65:48:bb:05:0d:72:73:31:d3:e0:
69:3e:43:37:b7:19:0c:06:1a:4b:36:bb:be:cc:37:fe:cd:83:
8d:65:62:bf:aa:2b:b7:aa:fc:3c:a7:af:49:28:43:d7:1f:ef:
7d:16:3d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:08:04 2026 by rpki-client