Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft
File: IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft (raw, json)
Hash identifier: zBSpFByNUUtz0AuE4ZHGdl2B8PF3KkFayTMPtNMRITw=
Subject key identifier: B2:5A:89:BB:EE:48:ED:70:D5:51:E6:1A:0E:DB:C4:9B:EE:18:72:F7
Authority key identifier: 22:92:D9:6D:FB:66:CB:18:06:9D:8B:D1:5C:9E:90:CD:91:24:F0:03
Certificate issuer: /CN=2292d96dfb66cb18069d8bd15c9e90cd9124f003
Certificate serial: 019D9A3DE8FFDB9F88F5AF58AE5B118603BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IpLZbftmyxgGnYvRXJ6QzZEk8AM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft
Manifest number: 0D59
Signing time: Fri 17 Apr 2026 07:00:41 +0000
Manifest this update: Fri 17 Apr 2026 07:00:41 +0000
Manifest next update: Sat 18 Apr 2026 07:00:41 +0000
Files and hashes: 1: 3_EpI3KZKzbfeK2XXEoAgU5pxR8.roa (hash: nhz/XR/19vb+kuAg/iFUKPIFqPbUWtZOaM60Y8UGbXw=)
2: 4Hbh9kgEtk0ETbC9Jsg3Fsu3-DI.roa (hash: qkbQr2FGRu+j6lNNaiItQZd0nGSc0yYN6c1c29qls04=)
3: IpLZbftmyxgGnYvRXJ6QzZEk8AM.crl (hash: v0RepJEVVsgPhWe6WfYNApxAZFU5EVp7VHl4hPkgQLw=)
4: oerPqNmEjqxbGPl4Gs_7bUETdN0.roa (hash: EfuWXG0YIgrPAIfQYw0siImFKnCmmDF+zPQxYy5oo28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IpLZbftmyxgGnYvRXJ6QzZEk8AM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3d:e8:ff:db:9f:88:f5:af:58:ae:5b:11:86:03:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2292d96dfb66cb18069d8bd15c9e90cd9124f003
Validity
Not Before: Apr 17 07:00:41 2026 GMT
Not After : Apr 18 07:00:41 2026 GMT
Subject: CN=b25a89bbee48ed70d551e61a0edbc49bee1872f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9e:6b:a3:03:5c:c8:1b:06:1b:69:74:f2:ab:
ab:b9:ea:35:66:87:c0:ac:cb:4f:62:b6:3e:a2:49:
45:11:50:92:1a:67:7b:ed:37:21:d1:00:e6:bf:a0:
ef:9c:90:c8:5b:bc:e7:2c:99:e3:00:3a:c1:39:3c:
01:83:cb:55:60:b5:db:13:f5:52:56:97:64:b9:b9:
b7:99:0b:10:b6:4f:56:3f:79:c9:b4:af:76:c7:aa:
78:9e:b8:f4:55:fe:38:87:a4:8c:2f:79:ce:36:58:
b0:4b:62:08:88:37:8b:5e:65:74:4a:42:7c:33:82:
14:e1:60:d1:d2:94:38:09:fb:c3:fa:a6:85:b7:53:
09:f1:ad:6e:59:12:d2:6d:18:a0:93:91:93:90:9b:
f5:b2:08:d4:e1:f3:d5:f4:aa:42:fb:05:20:3d:37:
09:0b:75:24:a7:5d:5a:2a:99:57:21:84:f0:be:bd:
bc:ef:86:6b:65:73:70:98:8c:71:0a:2e:6d:65:e2:
60:0a:f3:44:14:f9:4a:cb:49:60:b4:d4:03:11:08:
4f:e5:84:26:c6:69:09:ce:82:c4:4a:18:2e:df:df:
6d:91:d3:3c:6e:2f:c7:60:29:c6:65:4d:12:a7:5a:
da:ab:52:ce:2b:78:b1:71:c4:fe:5c:68:b5:a7:16:
32:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:5A:89:BB:EE:48:ED:70:D5:51:E6:1A:0E:DB:C4:9B:EE:18:72:F7
X509v3 Authority Key Identifier:
keyid:22:92:D9:6D:FB:66:CB:18:06:9D:8B:D1:5C:9E:90:CD:91:24:F0:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IpLZbftmyxgGnYvRXJ6QzZEk8AM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:38:d4:d2:e1:b6:71:44:57:f3:9f:e8:c9:62:e7:3a:96:34:
e1:04:26:84:2f:63:f2:f6:4d:17:dc:ea:a0:b5:c9:1f:cb:e7:
62:b6:92:49:37:2b:3b:71:ea:e1:33:24:10:63:e6:fd:ec:ac:
e7:09:4b:35:87:63:62:1b:74:da:ec:e3:8d:f8:69:96:10:f4:
94:d8:25:c8:34:15:f7:ff:9c:ee:df:ed:0e:71:e6:7b:bf:bf:
cf:5a:ae:9d:96:1c:74:be:d8:54:47:dc:34:2c:da:1d:82:ad:
92:b1:81:6c:8d:27:14:a7:14:6c:92:1d:a3:1d:4f:b6:2e:5f:
a6:02:4e:db:6f:1a:25:f0:ff:5b:bb:e9:25:1b:13:ce:76:b1:
d6:77:68:1c:e9:47:6b:0d:f9:e1:94:66:48:1b:96:b5:01:24:
be:e0:f8:42:c8:1e:51:0f:a3:8f:a1:07:e7:6c:53:40:16:02:
b8:f7:88:ed:0e:ff:05:bd:04:aa:51:f2:11:ac:16:16:0b:8b:
85:c8:54:b1:18:c1:c7:7a:05:17:db:a3:4d:9a:49:c5:a5:02:
31:3b:00:d3:ec:65:aa:98:34:7b:c3:cb:02:e5:f2:60:37:3e:
6c:fd:75:35:49:02:6e:f8:c5:4f:35:68:62:a4:e7:ab:8a:0c:
df:9b:88:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:40:38 2026 by rpki-client