Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/d68dff-95e1-4c90-9ec6-55029280fec1/1/IaqfF_jMpH37krSQLSwrMgPb7aY.mft
File: IaqfF_jMpH37krSQLSwrMgPb7aY.mft (raw, json)
Hash identifier: knqRaOShmOnlul44DoB/zRE752/ikd7BVaTiZYqFUp0=
Subject key identifier: F9:3D:FA:96:FF:A7:8A:12:E3:BF:5E:ED:46:B5:97:BC:04:5B:0F:9B
Authority key identifier: 21:AA:9F:17:F8:CC:A4:7D:FB:92:B4:90:2D:2C:2B:32:03:DB:ED:A6
Certificate issuer: /CN=21aa9f17f8cca47dfb92b4902d2c2b3203dbeda6
Certificate serial: 019D9AE275D0B72326F91DADCCCE916B93B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IaqfF_jMpH37krSQLSwrMgPb7aY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/d68dff-95e1-4c90-9ec6-55029280fec1/1/IaqfF_jMpH37krSQLSwrMgPb7aY.mft
Manifest number: 095E
Signing time: Fri 17 Apr 2026 10:00:25 +0000
Manifest this update: Fri 17 Apr 2026 10:00:25 +0000
Manifest next update: Sat 18 Apr 2026 10:00:25 +0000
Files and hashes: 1: IaqfF_jMpH37krSQLSwrMgPb7aY.crl (hash: ns45iT84LIQG1r7jnuCkQI5AcC9UTNKosmAdTVaZ+tI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/d68dff-95e1-4c90-9ec6-55029280fec1/1/IaqfF_jMpH37krSQLSwrMgPb7aY.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/d68dff-95e1-4c90-9ec6-55029280fec1/1/IaqfF_jMpH37krSQLSwrMgPb7aY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IaqfF_jMpH37krSQLSwrMgPb7aY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:75:d0:b7:23:26:f9:1d:ad:cc:ce:91:6b:93:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21aa9f17f8cca47dfb92b4902d2c2b3203dbeda6
Validity
Not Before: Apr 17 10:00:25 2026 GMT
Not After : Apr 18 10:00:25 2026 GMT
Subject: CN=f93dfa96ffa78a12e3bf5eed46b597bc045b0f9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:dd:1f:12:90:37:03:91:5c:ad:75:a4:1f:9b:
e2:96:e2:f3:9e:dd:11:8f:f3:ed:60:4b:b0:0b:d2:
86:99:d5:55:14:23:41:f9:8f:1d:c8:d4:4e:81:54:
52:4a:74:16:c0:92:ab:fb:28:f6:d8:26:a9:49:75:
28:96:dd:fb:3a:18:44:c8:3f:01:b2:9b:d1:58:bd:
3d:f5:d7:e6:b1:0c:a2:18:76:8f:a4:c6:9a:9a:83:
4b:29:6b:3f:75:0b:2c:68:69:29:3f:dc:4f:f2:22:
7a:0e:01:bb:21:90:a5:92:48:58:a5:a5:2a:e2:ae:
17:33:ff:db:9a:a4:03:e9:8e:19:b1:7b:a3:ed:da:
64:3f:2e:a5:ed:a4:39:2d:93:f4:8f:7d:1b:0a:31:
7f:67:5a:24:28:25:50:8d:db:62:9a:a5:fa:81:16:
99:72:7e:ae:3c:02:94:78:08:b3:69:c6:68:aa:ba:
89:06:8a:ff:0f:63:ca:73:ff:69:e6:be:22:83:fe:
07:37:3b:00:ee:ad:95:68:a9:ab:6a:4d:87:0c:df:
87:66:90:b9:e7:9c:9b:ae:08:9a:b4:52:0f:6d:61:
73:1c:f4:be:e4:90:5a:a1:28:d8:6f:a2:0f:e2:cc:
b1:41:a7:bf:bd:e8:a7:e0:13:eb:2c:c1:e7:ab:c8:
8b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:3D:FA:96:FF:A7:8A:12:E3:BF:5E:ED:46:B5:97:BC:04:5B:0F:9B
X509v3 Authority Key Identifier:
keyid:21:AA:9F:17:F8:CC:A4:7D:FB:92:B4:90:2D:2C:2B:32:03:DB:ED:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IaqfF_jMpH37krSQLSwrMgPb7aY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d68dff-95e1-4c90-9ec6-55029280fec1/1/IaqfF_jMpH37krSQLSwrMgPb7aY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d68dff-95e1-4c90-9ec6-55029280fec1/1/IaqfF_jMpH37krSQLSwrMgPb7aY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:d6:3d:e4:48:23:f9:b0:2a:78:f7:82:73:20:b1:6f:53:9f:
ad:0d:66:39:d1:32:5e:ad:1b:a9:b0:44:dd:dc:a1:ef:fd:9d:
18:4c:0f:fa:a8:7f:60:34:6e:3f:37:5d:54:da:45:99:fe:c1:
9f:eb:e9:25:3f:a1:b4:66:ea:73:9d:17:1e:cd:42:c2:2e:41:
ea:5f:07:e7:ac:cb:cd:9c:e1:e5:8f:73:d9:ef:e4:41:22:a7:
31:61:7e:16:42:81:23:a3:a4:45:c6:80:9c:9b:ca:ba:9f:35:
44:cb:88:b8:51:82:aa:54:d5:35:7f:cc:fa:83:e5:e2:b5:52:
f5:6e:6f:a7:c4:8c:df:7d:73:56:1e:42:b2:c2:3f:37:1e:f0:
69:11:2e:83:0a:36:2b:8b:5a:01:93:df:09:c6:eb:04:f7:40:
30:03:b0:76:11:84:d2:13:c5:2d:19:a8:04:c3:91:13:bb:11:
e6:41:bc:9f:5b:08:1c:55:6d:d3:b5:c7:d1:1f:bd:7d:47:0a:
fc:4e:f2:71:4d:e3:01:99:6c:48:bd:dc:88:28:bc:44:40:63:
ac:40:6c:37:de:10:2b:84:fe:b6:ed:a6:ed:a0:b9:f3:29:ce:
a1:d9:62:da:6a:0f:d8:f9:cc:b9:5b:b1:83:ee:e2:b8:72:ba:
eb:78:f4:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2a4nXQtyMm+R2tzM6Ra5O5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxYWE5ZjE3ZjhjY2E0N2RmYjkyYjQ5MDJkMmMyYjMyMDNk
YmVkYTYwHhcNMjYwNDE3MTAwMDI1WhcNMjYwNDE4MTAwMDI1WjAzMTEwLwYDVQQD
EyhmOTNkZmE5NmZmYTc4YTEyZTNiZjVlZWQ0NmI1OTdiYzA0NWIwZjliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk90fEpA3A5FcrXWkH5viluLznt0R
j/PtYEuwC9KGmdVVFCNB+Y8dyNROgVRSSnQWwJKr+yj22CapSXUolt37OhhEyD8B
spvRWL099dfmsQyiGHaPpMaamoNLKWs/dQssaGkpP9xP8iJ6DgG7IZClkkhYpaUq
4q4XM//bmqQD6Y4ZsXuj7dpkPy6l7aQ5LZP0j30bCjF/Z1okKCVQjdtimqX6gRaZ
cn6uPAKUeAizacZoqrqJBor/D2PKc/9p5r4ig/4HNzsA7q2VaKmrak2HDN+HZpC5
55ybrgiatFIPbWFzHPS+5JBaoSjYb6IP4syxQae/vein4BPrLMHnq8iLlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPk9+pb/p4oS479e7Ua1l7wEWw+bMB8GA1UdIwQY
MBaAFCGqnxf4zKR9+5K0kC0sKzID2+2mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWFxZkZfak1wSDM3a3JTUUxTd3JNZ1BiN2FZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9kNjhkZmYtOTVlMS00YzkwLTllYzYt
NTUwMjkyODBmZWMxLzEvSWFxZkZfak1wSDM3a3JTUUxTd3JNZ1BiN2FZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi9kNjhkZmYtOTVlMS00YzkwLTllYzYtNTUwMjkyODBmZWMx
LzEvSWFxZkZfak1wSDM3a3JTUUxTd3JNZ1BiN2FZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAONY95Egj
+bAqePeCcyCxb1OfrQ1mOdEyXq0bqbBE3dyh7/2dGEwP+qh/YDRuPzddVNpFmf7B
n+vpJT+htGbqc50XHs1Cwi5B6l8H56zLzZzh5Y9z2e/kQSKnMWF+FkKBI6OkRcaA
nJvKup81RMuIuFGCqlTVNX/M+oPl4rVS9W5vp8SM331zVh5CssI/Nx7waREugwo2
K4taAZPfCcbrBPdAMAOwdhGE0hPFLRmoBMORE7sR5kG8n1sIHFVt07XH0R+9fUcK
/E7ycU3jAZlsSL3ciCi8REBjrEBsN94QK4T+tu2m7aC58ynOodli2moP2PnMuVux
g+7iuHK663j0rw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:47:11 2026 by rpki-client