Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.mft
File: Iv9bz3ObBzL7G823F-xxf28csOI.mft (raw, json)
Hash identifier: qGZrE7ybd6cpVU/my9neWCLeiRpNy7+smjbFnbbJYmE=
Subject key identifier: 83:27:9F:8A:A8:40:81:27:FD:CF:75:F6:0B:01:52:B4:F3:AC:54:15
Authority key identifier: 22:FF:5B:CF:73:9B:07:32:FB:1B:CD:B7:17:EC:71:7F:6F:1C:B0:E2
Certificate issuer: /CN=22ff5bcf739b0732fb1bcdb717ec717f6f1cb0e2
Certificate serial: 019D985055F3DB85E0C7D06EDA2B1A9BE027
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iv9bz3ObBzL7G823F-xxf28csOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.mft
Manifest number: 16C2
Signing time: Thu 16 Apr 2026 22:01:34 +0000
Manifest this update: Thu 16 Apr 2026 22:01:34 +0000
Manifest next update: Fri 17 Apr 2026 22:01:34 +0000
Files and hashes: 1: Iv9bz3ObBzL7G823F-xxf28csOI.crl (hash: GLy5uS7QH1l2zkSuy3+9r6yWd/i9eoiVOANP8o2+7Yw=)
2: KGVSyU1wIj7N4iY-yGjJQ4nk1wo.roa (hash: JwvzeqlxWkg3az+woqZ5+VwCzs4K2YIxQ2yc7nZEKzM=)
3: _1spXT-fNgBWQ52DMUTuvrFr3B8.roa (hash: 0BaKLx6BfvTvlAXkJodDBjYBD7kri1g1ufdyiNOpYl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iv9bz3ObBzL7G823F-xxf28csOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:55:f3:db:85:e0:c7:d0:6e:da:2b:1a:9b:e0:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22ff5bcf739b0732fb1bcdb717ec717f6f1cb0e2
Validity
Not Before: Apr 16 22:01:34 2026 GMT
Not After : Apr 17 22:01:34 2026 GMT
Subject: CN=83279f8aa8408127fdcf75f60b0152b4f3ac5415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b3:0f:23:2e:b8:c4:6d:dc:29:65:b4:75:bd:
3a:6c:03:0a:a7:ed:4a:29:d7:10:e7:57:79:a0:57:
97:45:50:7d:6a:be:a1:5e:65:52:9a:2f:1b:f2:a8:
5c:e0:c7:4d:e2:bf:07:ab:2d:fb:bf:f4:d2:4b:2f:
48:31:b5:d1:81:c0:5b:6c:ed:4b:44:bf:ae:5f:6d:
f7:3a:49:2b:60:75:df:ea:55:36:61:11:3b:7d:bf:
fb:a6:fa:09:6b:71:ac:48:0a:13:45:48:af:df:c7:
8d:c6:2e:e6:a9:07:d8:73:56:b2:0a:20:94:47:d9:
94:9c:54:20:36:78:c4:7a:0a:d6:10:05:1f:24:1c:
16:ad:09:a4:8b:02:a9:6b:5f:7b:ae:cb:6c:de:e4:
d2:81:93:16:37:61:ff:4c:65:58:6a:fe:b7:53:b7:
93:2d:33:6b:94:f2:17:92:84:02:9b:8a:93:41:4d:
8b:02:e3:3d:81:48:44:e4:71:71:05:e4:c8:3a:b8:
4f:5f:69:26:f1:25:86:d2:3b:83:ed:16:7f:02:62:
9a:58:40:48:aa:16:97:d1:08:3d:8d:76:20:7d:ac:
48:9b:9e:d4:38:18:fd:6b:f5:8b:53:ea:43:62:d7:
95:f4:00:c4:74:75:e9:54:85:37:92:90:d0:c1:92:
84:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:27:9F:8A:A8:40:81:27:FD:CF:75:F6:0B:01:52:B4:F3:AC:54:15
X509v3 Authority Key Identifier:
keyid:22:FF:5B:CF:73:9B:07:32:FB:1B:CD:B7:17:EC:71:7F:6F:1C:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iv9bz3ObBzL7G823F-xxf28csOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:d4:93:a4:76:05:2d:dd:23:13:3a:d0:53:14:2d:21:cb:27:
13:10:dd:6d:57:6b:61:94:34:d0:16:7e:26:53:fd:a2:3e:06:
58:1f:b1:34:3b:d7:ce:98:46:15:04:2d:7f:7e:9d:f3:a7:25:
f4:34:b9:78:35:3f:2a:a6:f9:14:f2:cf:e9:cf:56:d4:09:04:
51:0d:fa:cd:11:73:53:76:38:2d:64:6e:34:52:e1:0e:d0:4c:
1b:36:1b:a4:43:42:dc:f3:76:90:e4:16:40:af:a6:d0:bf:b1:
f1:57:a2:cc:95:38:2d:66:bd:7e:66:da:12:0d:42:c7:db:c0:
ab:10:38:b8:c9:ef:6c:41:57:7c:f5:2c:ef:60:08:2f:81:b5:
5c:c6:4f:b9:d1:f0:77:72:1b:c4:07:81:03:23:24:6d:2f:aa:
27:33:70:2f:a6:94:19:c0:9f:3e:53:fc:00:7b:68:54:08:0a:
11:d1:f6:52:01:60:8d:f3:15:b9:4c:fd:13:5a:11:4c:ee:22:
7c:ab:fc:74:56:97:4b:c8:f4:6b:30:a3:b3:94:84:fb:57:14:
ba:ea:76:6a:eb:92:6e:4a:35:4d:74:ca:be:13:0c:6d:8e:92:
be:3b:10:d3:ca:c6:f4:2c:27:60:12:6f:ff:8d:49:35:74:7c:
44:66:7d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:54:26 2026 by rpki-client