Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft
File: IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft (raw, json)
Hash identifier: QJdVWvsVHT10IzEGpXwKfs6b0FSMUCsYinIoEH2zO0A=
Subject key identifier: CC:E7:34:CB:4A:AE:69:32:BC:BF:63:41:64:BF:6B:CE:2D:FD:C1:DE
Authority key identifier: 22:92:D9:6D:FB:66:CB:18:06:9D:8B:D1:5C:9E:90:CD:91:24:F0:03
Certificate issuer: /CN=2292d96dfb66cb18069d8bd15c9e90cd9124f003
Certificate serial: 019D9C2C7866D45436FF5C54199D3DF0CA98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IpLZbftmyxgGnYvRXJ6QzZEk8AM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft
Manifest number: 0D5A
Signing time: Fri 17 Apr 2026 16:00:53 +0000
Manifest this update: Fri 17 Apr 2026 16:00:53 +0000
Manifest next update: Sat 18 Apr 2026 16:00:53 +0000
Files and hashes: 1: 3_EpI3KZKzbfeK2XXEoAgU5pxR8.roa (hash: nhz/XR/19vb+kuAg/iFUKPIFqPbUWtZOaM60Y8UGbXw=)
2: 4Hbh9kgEtk0ETbC9Jsg3Fsu3-DI.roa (hash: qkbQr2FGRu+j6lNNaiItQZd0nGSc0yYN6c1c29qls04=)
3: IpLZbftmyxgGnYvRXJ6QzZEk8AM.crl (hash: jRYDPDEsX6qAa5HZCzoMsCFesqbLt0MqLpcVqDBkFy4=)
4: oerPqNmEjqxbGPl4Gs_7bUETdN0.roa (hash: EfuWXG0YIgrPAIfQYw0siImFKnCmmDF+zPQxYy5oo28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IpLZbftmyxgGnYvRXJ6QzZEk8AM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2c:78:66:d4:54:36:ff:5c:54:19:9d:3d:f0:ca:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2292d96dfb66cb18069d8bd15c9e90cd9124f003
Validity
Not Before: Apr 17 16:00:53 2026 GMT
Not After : Apr 18 16:00:53 2026 GMT
Subject: CN=cce734cb4aae6932bcbf634164bf6bce2dfdc1de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a8:cc:0e:9f:e9:86:91:c9:2b:bb:b0:4c:18:
ae:e4:2d:bc:2f:71:77:25:bf:0f:92:49:d8:02:9b:
8a:cd:e4:b4:12:fb:6e:0e:33:1e:bf:14:f5:a7:56:
7b:5d:e0:99:28:30:32:bd:22:57:24:19:a8:da:fa:
11:75:4c:8b:6b:e1:73:81:0f:42:b3:3c:41:34:77:
be:81:ca:82:50:cc:39:3e:b1:8f:ac:48:b7:17:78:
6f:d5:98:b7:08:07:99:4c:67:d9:53:f1:8f:a8:04:
66:27:8b:67:9f:a8:94:bc:fb:6b:da:b9:87:7e:74:
5e:d1:dd:7d:d3:0d:ea:c9:43:fc:34:2a:d8:3c:7e:
f3:bf:ce:de:36:de:ac:a6:c2:70:18:e8:cb:dc:43:
65:a0:6b:f4:eb:0a:b2:42:77:4d:33:46:3b:4b:a1:
12:e7:55:66:69:dc:4c:ec:1f:05:a5:1b:f3:12:89:
8f:e7:08:e5:d3:4c:ec:42:4e:f6:2e:22:98:8c:76:
15:1f:51:38:ee:e5:ba:66:e3:48:eb:45:42:16:f0:
6c:77:ab:f2:e8:cf:e3:29:05:40:01:5b:4c:1c:a1:
36:db:a0:02:cc:3d:2e:d7:7d:de:62:6d:e5:90:9b:
c6:81:28:c5:a2:15:4c:28:a2:7b:7f:b2:16:16:66:
ac:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:E7:34:CB:4A:AE:69:32:BC:BF:63:41:64:BF:6B:CE:2D:FD:C1:DE
X509v3 Authority Key Identifier:
keyid:22:92:D9:6D:FB:66:CB:18:06:9D:8B:D1:5C:9E:90:CD:91:24:F0:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IpLZbftmyxgGnYvRXJ6QzZEk8AM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:97:ae:29:2f:bb:48:56:89:42:95:ce:83:42:3d:f8:61:33:
b9:6f:e6:56:2b:15:68:9b:8d:3f:1d:2d:b3:4e:79:7c:2f:1b:
87:d6:c1:0d:21:0b:ac:84:95:6a:5a:46:e8:b9:96:e2:b9:4e:
f8:30:1d:c3:39:9b:6c:75:5e:f3:20:8e:15:a6:cf:28:6e:37:
81:a1:fe:2e:5b:2b:4d:e8:88:c4:7f:a4:ce:c4:5f:a8:86:74:
03:1e:ab:f9:d2:d9:91:4b:85:91:bb:19:cf:25:8a:aa:46:17:
65:87:95:ae:c0:49:74:41:93:2f:f2:fd:5a:35:2b:44:41:a9:
b1:1b:f3:33:be:36:ce:79:dd:57:83:42:e5:3f:97:d6:5f:57:
0c:f2:d3:3d:cd:56:44:d1:c7:9f:e5:0a:6d:d6:d1:71:4a:3b:
a2:78:e4:7e:7b:c1:88:17:e9:d0:a2:45:ed:19:e1:5d:03:e7:
8a:d4:81:79:66:07:85:63:4d:6c:f1:2a:e5:24:5d:21:b3:2e:
9f:6e:40:3d:fa:29:71:9d:e4:e8:8b:4f:35:10:45:19:0d:10:
a7:7c:aa:6d:44:45:63:c5:92:2c:77:bd:e4:7a:f3:7a:7e:d2:
6f:76:7c:3f:8e:e2:15:75:b4:56:ca:ef:c3:f3:bb:d4:05:1d:
55:3b:64:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:01:38 2026 by rpki-client