Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/9af78b-41c4-47b7-af95-37b0a2ab3cd6/1/iiJ8Nfko2ci4_3wlch79R6kNy2c.mft
File: iiJ8Nfko2ci4_3wlch79R6kNy2c.mft (raw, json)
Hash identifier: XhSZF+IZnmmU0DgCIneHg0uNR1+/jeNKO/Osae7EIpw=
Subject key identifier: D2:0F:D0:DD:80:FD:61:4C:A7:77:6A:4F:F9:CA:EB:B7:4C:2C:BA:B0
Authority key identifier: 8A:22:7C:35:F9:28:D9:C8:B8:FF:7C:25:72:1E:FD:47:A9:0D:CB:67
Certificate issuer: /CN=8a227c35f928d9c8b8ff7c25721efd47a90dcb67
Certificate serial: 019DA453B7D53631AB8597535501517D1DBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iiJ8Nfko2ci4_3wlch79R6kNy2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/9af78b-41c4-47b7-af95-37b0a2ab3cd6/1/iiJ8Nfko2ci4_3wlch79R6kNy2c.mft
Manifest number: 15CF
Signing time: Sun 19 Apr 2026 06:00:43 +0000
Manifest this update: Sun 19 Apr 2026 06:00:43 +0000
Manifest next update: Mon 20 Apr 2026 06:00:43 +0000
Files and hashes: 1: JcXMDE3ebWSqfHBZs7VE5S6oxiE.roa (hash: qKO6wgBeY/Sj/PEf+kS+5gKnDMaY8bARW2HNfD5qpA0=)
2: iiJ8Nfko2ci4_3wlch79R6kNy2c.crl (hash: jSA4sitELp9JVPFeIm+9cYgCwswWiv00SCw1ISgXU6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/9af78b-41c4-47b7-af95-37b0a2ab3cd6/1/iiJ8Nfko2ci4_3wlch79R6kNy2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/9af78b-41c4-47b7-af95-37b0a2ab3cd6/1/iiJ8Nfko2ci4_3wlch79R6kNy2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/iiJ8Nfko2ci4_3wlch79R6kNy2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:53:b7:d5:36:31:ab:85:97:53:55:01:51:7d:1d:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a227c35f928d9c8b8ff7c25721efd47a90dcb67
Validity
Not Before: Apr 19 06:00:43 2026 GMT
Not After : Apr 20 06:00:43 2026 GMT
Subject: CN=d20fd0dd80fd614ca7776a4ff9caebb74c2cbab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:62:7a:aa:97:53:5c:83:33:63:b2:a5:f5:c3:
7b:78:1a:df:d5:6a:15:f2:f6:ab:15:53:79:54:03:
8e:ef:bb:dd:86:b1:3b:bb:be:02:61:b5:6b:e1:a8:
85:90:bb:ab:b9:3a:26:ef:d9:60:b3:42:24:e0:fe:
d0:21:cd:67:87:41:bc:35:44:b5:e5:c6:c3:cc:8f:
d4:fe:19:fd:6f:74:d7:0b:ab:12:70:28:df:07:94:
b6:b8:49:74:c2:11:2f:0d:11:e4:2d:c4:ce:b6:5d:
3a:ee:44:63:a5:28:74:5f:ce:0e:e6:40:45:86:02:
ca:06:5b:da:97:9c:94:d2:28:84:ee:b8:02:24:f6:
1d:ec:dd:0e:6c:dd:de:16:2f:3f:b7:f3:4b:5d:2e:
8c:5a:03:30:06:49:98:e0:45:8b:b9:55:4a:a4:c0:
8f:55:3f:86:8f:fb:42:2e:3b:44:65:8f:89:db:f8:
01:3c:af:ba:bf:83:c0:32:04:67:ea:34:4f:03:c5:
fa:20:e1:14:e1:80:c1:af:34:fe:d0:8a:d4:b4:a3:
6c:6f:83:a1:34:91:19:be:e8:7c:f5:44:4f:bd:1d:
43:f2:1c:82:6c:c0:47:73:e7:61:46:4a:ef:98:92:
5b:63:46:77:ec:dd:ad:e4:9a:fd:dd:48:0d:62:31:
a4:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:0F:D0:DD:80:FD:61:4C:A7:77:6A:4F:F9:CA:EB:B7:4C:2C:BA:B0
X509v3 Authority Key Identifier:
keyid:8A:22:7C:35:F9:28:D9:C8:B8:FF:7C:25:72:1E:FD:47:A9:0D:CB:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iiJ8Nfko2ci4_3wlch79R6kNy2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9af78b-41c4-47b7-af95-37b0a2ab3cd6/1/iiJ8Nfko2ci4_3wlch79R6kNy2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9af78b-41c4-47b7-af95-37b0a2ab3cd6/1/iiJ8Nfko2ci4_3wlch79R6kNy2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:bb:1d:21:3b:1e:f3:91:b1:b0:94:b8:80:00:4d:77:df:27:
96:00:e9:4e:cc:d3:3f:cf:8c:83:78:98:82:90:83:d3:58:62:
23:86:3b:4b:95:b7:00:51:5c:1c:d9:6e:85:c7:1b:07:0d:3a:
7f:57:45:ff:3d:ed:89:b4:8c:a5:41:3e:6e:64:65:0a:f3:57:
d0:f6:09:f7:0d:36:07:6f:a9:6b:9e:54:9e:1c:1c:55:68:24:
02:07:69:21:3e:fb:04:bb:72:4f:47:d9:69:7c:f0:f4:c7:4d:
85:42:31:48:95:17:cf:23:e4:e7:08:d0:1a:dc:e9:b7:4b:0c:
85:80:f6:13:14:7c:74:8b:b5:8e:47:e4:9d:f0:32:48:29:db:
c5:3f:4b:36:d8:65:0e:e2:24:96:44:05:43:95:43:43:01:f6:
a6:86:65:af:07:e4:19:78:fd:7d:4f:47:59:b2:b1:8e:de:90:
23:95:ad:61:d4:3e:75:20:b8:36:d5:f4:62:2a:2f:22:b3:ad:
13:1f:f3:5d:c9:1f:71:98:4d:16:d7:d9:57:78:3c:cf:54:79:
e0:ca:f5:94:52:c7:63:ff:ba:9a:07:ed:bc:2f:3f:a2:17:0a:
9d:b1:c8:41:dd:3f:45:ab:b6:ee:72:39:8f:22:83:8a:f8:b0:
b9:54:dd:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:50:09 2026 by rpki-client