Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/IjayuK-mA20sjoMXc2-qpy2AxPI.mft
File: IjayuK-mA20sjoMXc2-qpy2AxPI.mft (raw, json)
Hash identifier: kPF5Ot9NmIHGZXU/l/pg43h6HHVk39N8tpsi10WF8ec=
Subject key identifier: 64:0F:B7:BC:F7:EA:27:74:8E:5E:83:4F:73:2A:96:50:AD:6A:C3:4B
Authority key identifier: 22:36:B2:B8:AF:A6:03:6D:2C:8E:83:17:73:6F:AA:A7:2D:80:C4:F2
Certificate issuer: /CN=2236b2b8afa6036d2c8e8317736faaa72d80c4f2
Certificate serial: 019D984FA995EE3A2DD66635BEE2E4E671F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IjayuK-mA20sjoMXc2-qpy2AxPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/IjayuK-mA20sjoMXc2-qpy2AxPI.mft
Manifest number: 18C4
Signing time: Thu 16 Apr 2026 22:00:50 +0000
Manifest this update: Thu 16 Apr 2026 22:00:50 +0000
Manifest next update: Fri 17 Apr 2026 22:00:50 +0000
Files and hashes: 1: IjayuK-mA20sjoMXc2-qpy2AxPI.crl (hash: y4Rw5hCEmpzXXBZxnj1YXYEcKzXH3FKzZfl0w/mvj24=)
2: KTUGLKw4lT-j5fxDHCDXoM2-FbI.roa (hash: 9VOAz2Y+xG383GmXb/Qw7x9sWxBBSQzGbBFfCAhlucM=)
3: mH0FJ23Xhvhl7yPzg_J0QLsXN6c.roa (hash: bc3Tff2F8YDhVYuMIKbuPGvXcTjpv3hF+6MXk1AVTa4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/IjayuK-mA20sjoMXc2-qpy2AxPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/IjayuK-mA20sjoMXc2-qpy2AxPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IjayuK-mA20sjoMXc2-qpy2AxPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:a9:95:ee:3a:2d:d6:66:35:be:e2:e4:e6:71:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2236b2b8afa6036d2c8e8317736faaa72d80c4f2
Validity
Not Before: Apr 16 22:00:50 2026 GMT
Not After : Apr 17 22:00:50 2026 GMT
Subject: CN=640fb7bcf7ea27748e5e834f732a9650ad6ac34b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:fe:2d:d0:9b:a0:3e:9e:e9:28:e8:83:e7:32:
47:10:b8:98:93:20:e3:dd:7f:5c:01:c8:b8:47:45:
a0:53:ed:ec:33:53:d7:26:1e:bc:06:f2:68:b2:5e:
ee:ee:e5:11:15:76:1e:1c:56:3b:9a:9d:cb:8c:70:
7f:d9:fa:84:df:61:0a:b7:ed:ab:7e:1e:fb:39:6f:
67:6e:dd:3f:da:02:e8:d2:09:c6:45:e1:24:4b:12:
84:71:a7:7f:08:f8:fa:f0:59:1a:4f:0f:8a:41:07:
7a:9c:5a:d9:7f:10:c7:ba:a9:0f:5d:5c:e8:01:b1:
8e:e6:bd:04:d5:65:94:8c:7b:08:83:15:bb:57:87:
43:d9:46:ee:ed:5e:6f:6c:63:e7:6b:59:51:b3:df:
dc:52:52:c2:a9:ee:8b:6f:ae:2f:77:1b:60:0c:0a:
10:c1:38:1e:02:04:bc:e6:ed:2b:40:23:3a:3e:ff:
2d:f0:8d:aa:4e:04:84:c1:f0:23:43:2d:eb:f5:87:
79:98:8f:af:6b:59:1a:27:d2:25:f0:c2:02:05:e7:
26:ed:d8:2d:ff:b5:d1:8d:3c:6d:c2:75:28:1d:11:
2d:26:be:b0:2a:8a:a5:3b:ac:ce:3e:36:aa:a5:0a:
48:cf:36:81:fc:68:d4:45:c2:31:63:31:da:39:e9:
6e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:0F:B7:BC:F7:EA:27:74:8E:5E:83:4F:73:2A:96:50:AD:6A:C3:4B
X509v3 Authority Key Identifier:
keyid:22:36:B2:B8:AF:A6:03:6D:2C:8E:83:17:73:6F:AA:A7:2D:80:C4:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IjayuK-mA20sjoMXc2-qpy2AxPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/IjayuK-mA20sjoMXc2-qpy2AxPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/IjayuK-mA20sjoMXc2-qpy2AxPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:79:9d:50:93:5c:c4:9f:21:d7:ec:d9:c1:85:f4:92:40:42:
a3:5c:f5:9c:5a:af:a6:08:9b:a8:07:d9:dd:3b:1b:fc:05:41:
a5:c0:44:07:74:db:de:0c:b0:77:80:43:8e:80:35:7a:ac:c1:
38:31:31:b1:1c:da:40:c3:a9:4c:f2:2c:ab:c3:c0:26:91:63:
2d:b7:0c:70:81:1d:8e:46:ff:17:76:fb:d8:2a:b8:fc:9c:3e:
8d:85:60:3e:da:fe:ae:b9:3d:1b:81:ed:1a:4a:b9:89:1f:5d:
d6:56:a0:3f:88:aa:97:f1:84:3d:87:39:d0:82:cd:5e:5b:2f:
de:8a:56:93:99:66:43:69:93:c8:6f:45:fb:cb:de:6d:cb:2c:
b9:e1:c0:04:c3:cc:b9:42:49:8b:f6:8a:df:72:06:22:9e:41:
95:95:0a:27:bb:ec:1c:64:86:65:01:0b:95:be:16:ff:f8:e2:
4a:25:87:e4:32:bc:fb:2a:01:94:92:5e:ac:0f:c8:d9:c2:8a:
c1:07:85:63:d8:4b:4f:7a:7c:94:f1:5c:e5:61:84:9d:99:47:
a1:21:ae:6d:8c:48:b7:de:d0:e1:30:ed:24:82:cd:17:d2:b0:
f4:d6:bf:cf:d0:8f:77:0c:f0:10:90:96:8c:bf:35:9c:7d:01:
1d:e3:36:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:41:48 2026 by rpki-client