Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.mft
File: IPX_B2cEUj_2vogrh-76gHsYiqk.mft (raw, json)
Hash identifier: 8fuMlO6dHq4j7ioTRjdpQVbQdy/35hj4+NXIfrr8yD0=
Subject key identifier: F6:A6:4B:89:D3:88:44:BA:82:CC:C2:89:44:38:F6:05:39:04:E0:ED
Authority key identifier: 20:F5:FF:07:67:04:52:3F:F6:BE:88:2B:87:EE:FA:80:7B:18:8A:A9
Certificate issuer: /CN=20f5ff076704523ff6be882b87eefa807b188aa9
Certificate serial: 019D9B1A08B145701E5B0BAF49844BB4FF95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPX_B2cEUj_2vogrh-76gHsYiqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 11:01:07 +0000
Manifest this update: Fri 17 Apr 2026 11:01:07 +0000
Manifest next update: Sat 18 Apr 2026 11:01:07 +0000
Files and hashes: 1: IPX_B2cEUj_2vogrh-76gHsYiqk.crl (hash: zQuLU5/mGDOgIvr670dxLt/yAkvYtHNU8L2wAdKPIis=)
2: tQHKW_5yxjpKOHe3d-ZP6p2sC64.roa (hash: 3+Hu+PFHtyBzCp4FY8HXvj0Pcdpyb0FAw5+YbzrL8sU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IPX_B2cEUj_2vogrh-76gHsYiqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:1a:08:b1:45:70:1e:5b:0b:af:49:84:4b:b4:ff:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20f5ff076704523ff6be882b87eefa807b188aa9
Validity
Not Before: Apr 17 11:01:07 2026 GMT
Not After : Apr 18 11:01:07 2026 GMT
Subject: CN=f6a64b89d38844ba82ccc2894438f6053904e0ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:fa:9a:4a:1f:ea:a3:b4:d2:c4:16:6f:ee:72:
c5:ef:5c:09:5a:6d:34:04:c3:cf:ef:87:93:a3:70:
04:fa:58:2c:02:25:b7:58:29:f5:5c:5b:e6:f0:25:
3f:67:33:7f:15:b1:a5:bd:4d:1b:46:6b:86:e6:d1:
1f:82:d1:42:e9:b9:da:5d:b4:ac:08:a8:21:81:51:
65:cc:d6:c6:fc:4e:ad:9d:03:27:a8:d2:0c:4c:9b:
ea:cd:80:52:df:1f:d1:77:38:53:56:8a:c0:ca:9a:
f0:12:8e:60:4b:59:b8:39:88:84:98:a8:35:f2:5d:
5a:50:6d:15:f8:67:19:be:b2:f2:5d:a8:5d:a8:80:
c0:23:47:ad:64:1c:3a:d1:cb:64:61:3a:79:2f:73:
fb:dd:8b:0c:7a:53:72:00:23:d8:89:90:d3:ee:85:
db:f7:f9:0a:7f:5a:80:50:95:ad:a0:ae:5c:02:be:
9e:fe:87:3f:73:7a:2e:6c:41:d7:ea:ed:e5:aa:72:
d2:7b:15:53:59:a7:8b:7e:f2:d2:69:22:22:a5:2b:
8b:14:fc:6e:6c:f5:fe:11:96:19:ba:31:ae:c4:0f:
06:d9:5c:50:a1:0a:94:e4:22:a6:a0:0c:b4:14:8c:
e9:83:cd:b6:e3:b1:46:7e:a3:60:8f:08:8b:ae:c3:
56:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:A6:4B:89:D3:88:44:BA:82:CC:C2:89:44:38:F6:05:39:04:E0:ED
X509v3 Authority Key Identifier:
keyid:20:F5:FF:07:67:04:52:3F:F6:BE:88:2B:87:EE:FA:80:7B:18:8A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPX_B2cEUj_2vogrh-76gHsYiqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:4c:41:db:c6:80:23:24:4a:a2:71:8f:b0:e3:cc:4a:c7:cc:
02:f4:fb:dd:c2:c7:59:4b:4a:ea:ed:a2:fa:58:27:77:d2:b9:
7f:12:aa:6f:23:19:61:25:bf:c2:ef:b9:ce:03:20:8b:ea:d0:
ce:36:b2:d7:76:6e:c6:ae:db:92:ce:0d:08:a1:50:1d:37:63:
f5:60:cc:40:55:f3:e9:ae:0c:f8:80:7e:af:da:4e:8f:81:82:
ea:e1:3e:67:d4:06:fe:be:76:6c:fe:55:e0:70:1c:8d:1c:fd:
f6:d2:86:e2:07:29:fa:32:2e:cf:5d:e9:2f:b3:4c:81:86:5c:
3a:99:04:ca:fc:e1:d0:a5:0d:42:4d:91:ce:1c:46:71:cd:ec:
ea:e8:28:c1:72:c4:d3:75:96:48:95:1b:c7:59:42:4a:45:0b:
5f:93:4d:05:60:a8:3e:fb:c2:9a:f8:e7:e9:55:6f:b8:46:b0:
e3:aa:7e:a0:dd:de:7a:b6:94:ad:b9:d1:73:3e:12:91:4a:f9:
fb:87:2e:ce:a5:ae:6a:58:bb:b1:44:15:cf:aa:0d:24:a2:53:
d0:24:6f:1e:91:2c:97:e0:7a:e8:29:28:e2:a6:36:b1:b7:31:
19:01:78:1a:d9:52:b4:a8:f4:53:12:69:00:22:74:bc:e5:52:
9f:7d:87:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:24:33 2026 by rpki-client