Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.mft
File: IGXO2CnAEc21q7OBwWR4Le0WJ-A.mft (raw, json)
Hash identifier: HoM2YQ1nInr4mzXDnzLlrxOEHyvfwL1j0d5k8qVBdj4=
Subject key identifier: 38:47:48:92:EC:3F:84:3F:20:C8:2D:E2:05:68:4A:38:E8:99:BA:83
Authority key identifier: 20:65:CE:D8:29:C0:11:CD:B5:AB:B3:81:C1:64:78:2D:ED:16:27:E0
Certificate issuer: /CN=2065ced829c011cdb5abb381c164782ded1627e0
Certificate serial: 019D99D0960195E812A41810D4C976E7CFE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IGXO2CnAEc21q7OBwWR4Le0WJ-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.mft
Manifest number: 05DB
Signing time: Fri 17 Apr 2026 05:01:17 +0000
Manifest this update: Fri 17 Apr 2026 05:01:17 +0000
Manifest next update: Sat 18 Apr 2026 05:01:17 +0000
Files and hashes: 1: IGXO2CnAEc21q7OBwWR4Le0WJ-A.crl (hash: +2L/VetlVf3Dh17VVP7asPEisi1Z7hs8f8KlHCJwNNU=)
2: fmfMKVUT1v23IOfvxsOu3DSMyz8.roa (hash: u2kyNqDKTbLApMvC0LB9zT5i0g/bvpJwVbX+TwLXl+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/IGXO2CnAEc21q7OBwWR4Le0WJ-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:96:01:95:e8:12:a4:18:10:d4:c9:76:e7:cf:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2065ced829c011cdb5abb381c164782ded1627e0
Validity
Not Before: Apr 17 05:01:17 2026 GMT
Not After : Apr 18 05:01:17 2026 GMT
Subject: CN=38474892ec3f843f20c82de205684a38e899ba83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:80:a3:84:aa:bb:0d:65:e0:24:25:c1:d2:72:
0e:c5:1b:8e:1c:ee:19:2d:66:b7:e1:1e:d3:6b:a1:
79:a4:07:6d:3a:01:e9:d7:e4:98:14:8c:ed:99:93:
ed:f7:84:64:ba:04:9e:69:c2:76:c9:dc:97:c5:0f:
85:2b:28:5e:5e:45:4d:0f:e1:a2:74:a1:2c:1f:58:
a4:2e:f8:6e:c0:88:1d:f6:68:b9:ac:3b:0f:68:68:
01:c3:a2:29:43:87:a4:24:af:73:aa:06:d7:f2:3c:
e7:31:73:9a:e2:88:8b:79:91:57:57:70:48:38:b8:
87:67:06:f3:4f:8c:aa:03:76:6f:2a:d8:01:66:f6:
8e:f4:3c:4a:b5:28:18:da:8b:32:6d:f3:e8:72:ad:
fe:0d:ac:fe:52:31:1d:24:04:2a:3f:57:4e:9b:e3:
ac:31:cc:db:ac:23:c8:e0:93:28:db:0b:e9:24:bf:
83:ad:1c:65:e0:73:4b:b4:8b:b4:89:bf:79:52:d5:
6b:6c:a9:68:ea:9f:bd:e4:96:e4:0a:90:d6:40:d4:
2c:b6:b1:32:f4:d1:d0:1d:f9:37:74:22:fb:28:65:
16:0a:ae:d3:68:8e:3a:a4:ad:b4:13:aa:7b:48:28:
14:7c:52:1c:73:ab:54:c0:98:57:77:6b:f4:8e:c7:
ad:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:47:48:92:EC:3F:84:3F:20:C8:2D:E2:05:68:4A:38:E8:99:BA:83
X509v3 Authority Key Identifier:
keyid:20:65:CE:D8:29:C0:11:CD:B5:AB:B3:81:C1:64:78:2D:ED:16:27:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IGXO2CnAEc21q7OBwWR4Le0WJ-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:24:c4:84:21:73:62:80:71:77:93:f2:fe:b0:cc:e1:fb:ad:
96:d2:a2:59:49:f5:78:52:a0:c6:d5:55:92:09:00:02:95:08:
ff:4d:7a:bd:fd:27:0e:47:e8:08:74:cd:71:75:6a:64:3c:e9:
d5:1d:32:aa:c8:a4:50:35:a9:66:c6:35:77:dd:43:81:dc:a3:
ae:73:08:a8:32:90:25:eb:a1:72:d2:b0:4b:90:3a:e9:f7:93:
22:13:43:07:65:e9:af:db:64:7c:0f:ff:24:ca:22:47:e2:1d:
1a:54:89:7b:56:10:c1:97:51:c4:7c:0f:81:90:0e:2a:7f:3a:
b5:33:23:0e:1c:30:23:5d:87:f1:6c:6a:9e:0f:df:94:8f:28:
bd:37:59:84:54:12:d3:b7:a0:07:45:09:c0:33:98:ac:c6:37:
8b:0c:06:81:50:2b:d2:8e:a2:33:c5:6c:cf:bf:99:ce:05:d7:
ba:11:b2:3a:37:0d:a8:c0:ea:8f:c0:d1:9a:a3:ba:d2:f6:d8:
c8:db:31:37:db:72:09:05:a0:3b:7b:76:41:7d:08:26:f1:82:
8d:44:9a:42:f0:57:18:cf:8c:be:06:0d:0b:8b:34:af:2e:3d:
89:a7:62:fd:1c:2f:ff:8e:dc:d5:88:60:b9:5b:05:fc:9f:cd:
6b:47:6e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:40:29 2026 by rpki-client