Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/IwqhYKbohsED2tvkSyPCd3YFc5E.mft
File: IwqhYKbohsED2tvkSyPCd3YFc5E.mft (raw, json)
Hash identifier: D3QK5gekPbKClGYoCgGcCxuj4Uw3Y/uryLbN4aOQQqI=
Subject key identifier: 51:30:94:6D:62:56:B1:E8:AD:3E:26:7D:B5:3A:44:80:7E:52:EE:8F
Authority key identifier: 23:0A:A1:60:A6:E8:86:C1:03:DA:DB:E4:4B:23:C2:77:76:05:73:91
Certificate issuer: /CN=230aa160a6e886c103dadbe44b23c27776057391
Certificate serial: 019DA3786B0D2D34809D127F9EBA48976CD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IwqhYKbohsED2tvkSyPCd3YFc5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/IwqhYKbohsED2tvkSyPCd3YFc5E.mft
Manifest number: 1066
Signing time: Sun 19 Apr 2026 02:01:11 +0000
Manifest this update: Sun 19 Apr 2026 02:01:11 +0000
Manifest next update: Mon 20 Apr 2026 02:01:11 +0000
Files and hashes: 1: EG_Id09DvFvq6OjCzlCxHI8GXVg.roa (hash: SEYIizAUZ8Gr2yBztTyZlf2jtywb5D92XRV6mbkv9uw=)
2: IwqhYKbohsED2tvkSyPCd3YFc5E.crl (hash: w/Dp9WHevzjhU4p+fck162izQWRb3mqk8PfO4aOHhr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/IwqhYKbohsED2tvkSyPCd3YFc5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/IwqhYKbohsED2tvkSyPCd3YFc5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/IwqhYKbohsED2tvkSyPCd3YFc5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:6b:0d:2d:34:80:9d:12:7f:9e:ba:48:97:6c:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=230aa160a6e886c103dadbe44b23c27776057391
Validity
Not Before: Apr 19 02:01:11 2026 GMT
Not After : Apr 20 02:01:11 2026 GMT
Subject: CN=5130946d6256b1e8ad3e267db53a44807e52ee8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:43:04:65:07:68:f1:ce:33:7e:79:d8:34:87:
60:f2:e8:bb:6d:51:bd:d6:7e:ae:13:a5:3c:81:9b:
07:c5:b7:05:82:98:6d:e1:3c:f4:cd:3b:2b:46:6f:
7a:6e:2a:31:f2:54:58:43:48:c0:e9:49:52:55:29:
21:79:42:5d:33:ff:af:af:f8:10:53:26:fd:9b:d9:
89:41:5e:75:67:e0:fa:2b:32:9f:3b:cb:16:c1:f6:
24:f8:2b:67:3c:7c:6f:a7:da:88:6f:d7:44:ea:45:
02:6c:68:e5:d4:87:c0:86:d9:6d:25:91:8d:1d:a4:
be:2e:93:7c:75:55:16:ae:dc:2a:d8:e7:a2:63:65:
da:08:60:cc:c6:61:28:18:4e:e2:5d:4f:78:ce:ce:
b3:82:7a:4b:55:73:db:aa:34:51:df:34:71:10:ba:
1b:e7:1d:c6:49:fc:01:86:de:65:b3:95:05:6f:fe:
c7:4f:e9:bd:d5:1b:ed:a5:0c:9c:da:db:20:db:64:
dc:a0:54:95:f2:37:be:2a:0c:90:b1:e8:aa:89:1e:
09:97:bc:b5:f2:ca:4a:34:da:99:b2:02:21:68:a9:
58:99:44:cc:9e:9d:89:ad:7f:18:c2:69:f4:cf:2c:
21:3b:7f:c6:ad:ff:c8:10:d1:67:e5:cc:11:da:a5:
3d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:30:94:6D:62:56:B1:E8:AD:3E:26:7D:B5:3A:44:80:7E:52:EE:8F
X509v3 Authority Key Identifier:
keyid:23:0A:A1:60:A6:E8:86:C1:03:DA:DB:E4:4B:23:C2:77:76:05:73:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwqhYKbohsED2tvkSyPCd3YFc5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/IwqhYKbohsED2tvkSyPCd3YFc5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/IwqhYKbohsED2tvkSyPCd3YFc5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:8d:3e:11:71:cc:1e:17:ff:b1:17:01:7b:56:63:8b:fd:cd:
e6:58:10:4f:dc:3a:9d:ee:3b:db:0f:71:33:25:ef:33:4d:11:
81:22:8e:17:83:13:70:0c:c7:3f:c1:09:16:e9:63:7c:2d:68:
d6:f4:60:02:1f:e2:32:1a:44:25:df:86:b1:7b:e3:4c:78:d4:
73:1f:df:26:09:7c:74:d6:5e:68:9b:18:05:cd:b0:68:fb:1c:
b8:6e:0c:d3:9f:60:8b:f5:88:3e:82:f7:c9:4c:9a:9d:41:92:
97:5d:de:a6:bd:63:87:a7:c9:2a:61:d9:ee:54:73:68:0b:94:
b1:ee:d8:e3:ac:c6:10:e1:1a:27:bf:ec:9e:5d:63:09:77:3f:
4d:9b:ae:b1:b2:03:78:6e:ee:c9:ea:ba:07:1a:29:9d:22:de:
9d:c1:ad:79:da:54:41:95:c4:7f:e0:0d:ca:48:c4:ae:d6:a6:
38:6c:77:a2:c4:c1:6f:cc:a3:9f:66:1c:fd:5b:6f:b1:55:ae:
c3:e7:c4:e3:87:af:cb:f3:48:95:c2:26:78:56:06:37:c1:21:
66:16:de:2d:63:e4:34:be:29:20:b9:fe:c2:b6:de:47:76:c4:
a8:0e:02:ff:07:8e:79:55:73:1d:96:4e:d6:79:b2:7a:2f:ae:
3c:86:95:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:21:36 2026 by rpki-client