Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/38c26f-25a2-4b20-9ecd-0e6bced00463/1/IMnySVGbH_R5NQ8xclT0Bei_yr0.mft
File: IMnySVGbH_R5NQ8xclT0Bei_yr0.mft (raw, json)
Hash identifier: MSu3jt3C8iiAnk6p7I9e3gGepd3ojXgPsM81jOkofno=
Subject key identifier: 0A:60:F0:96:92:1F:04:C7:99:5E:D2:0D:65:BD:4F:68:B4:69:58:97
Authority key identifier: 20:C9:F2:49:51:9B:1F:F4:79:35:0F:31:72:54:F4:05:E8:BF:CA:BD
Certificate issuer: /CN=20c9f249519b1ff479350f317254f405e8bfcabd
Certificate serial: 019D99D0880E3B13370920B835D85E3C27E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMnySVGbH_R5NQ8xclT0Bei_yr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/38c26f-25a2-4b20-9ecd-0e6bced00463/1/IMnySVGbH_R5NQ8xclT0Bei_yr0.mft
Manifest number: 12B7
Signing time: Fri 17 Apr 2026 05:01:13 +0000
Manifest this update: Fri 17 Apr 2026 05:01:13 +0000
Manifest next update: Sat 18 Apr 2026 05:01:13 +0000
Files and hashes: 1: IMnySVGbH_R5NQ8xclT0Bei_yr0.crl (hash: VMZs0VCU8Bin5tRx/bchDBVWt2tVK+nMa0Zw3McvCsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/38c26f-25a2-4b20-9ecd-0e6bced00463/1/IMnySVGbH_R5NQ8xclT0Bei_yr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/38c26f-25a2-4b20-9ecd-0e6bced00463/1/IMnySVGbH_R5NQ8xclT0Bei_yr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IMnySVGbH_R5NQ8xclT0Bei_yr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:88:0e:3b:13:37:09:20:b8:35:d8:5e:3c:27:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20c9f249519b1ff479350f317254f405e8bfcabd
Validity
Not Before: Apr 17 05:01:13 2026 GMT
Not After : Apr 18 05:01:13 2026 GMT
Subject: CN=0a60f096921f04c7995ed20d65bd4f68b4695897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f0:b3:a7:da:ae:14:c8:4d:59:77:e3:ad:5b:
1e:6d:05:38:78:2b:8c:6b:70:76:25:50:b8:45:cd:
87:60:3b:ba:d7:97:fa:a4:26:d7:d6:ef:e0:ef:dc:
64:ed:4f:4d:0a:74:4b:a6:4d:55:8d:a7:12:32:02:
aa:53:0a:ba:56:d3:79:c0:31:a0:c5:33:29:58:13:
52:59:c0:6d:09:0b:0c:03:3e:8a:18:a6:28:33:f0:
a1:a6:95:70:c0:d5:98:2a:8d:e8:d3:a5:18:09:f4:
1b:fd:fa:be:6d:01:69:b7:ff:22:11:2c:61:7b:06:
09:96:c5:ea:1a:44:39:7e:8a:f2:3c:98:02:90:90:
03:3e:c4:58:a4:03:5e:c7:cc:8d:d3:4e:6f:64:c1:
ee:15:c0:9e:ea:82:2f:4b:bf:a7:d5:21:07:eb:8c:
8a:fc:55:f8:83:d4:51:ae:38:29:bc:1a:91:00:01:
14:fb:d0:bb:5d:e3:6a:e0:5d:d2:9c:76:bb:60:7d:
27:92:e6:5a:f9:9c:43:b1:dc:01:b0:be:64:ce:e6:
4c:6e:76:35:97:38:05:91:65:ae:7e:da:be:69:e6:
b8:01:18:b1:41:57:80:2f:f7:58:57:3c:00:02:71:
fe:13:99:4c:c5:c9:29:aa:6a:ae:ac:29:e7:c4:47:
d4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:60:F0:96:92:1F:04:C7:99:5E:D2:0D:65:BD:4F:68:B4:69:58:97
X509v3 Authority Key Identifier:
keyid:20:C9:F2:49:51:9B:1F:F4:79:35:0F:31:72:54:F4:05:E8:BF:CA:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMnySVGbH_R5NQ8xclT0Bei_yr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/38c26f-25a2-4b20-9ecd-0e6bced00463/1/IMnySVGbH_R5NQ8xclT0Bei_yr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/38c26f-25a2-4b20-9ecd-0e6bced00463/1/IMnySVGbH_R5NQ8xclT0Bei_yr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:7d:bf:4a:fd:a9:71:16:21:26:ff:fb:a1:9f:1b:f2:7e:e4:
0c:d7:b6:cd:77:a4:b1:5c:a8:54:4b:48:41:24:24:a8:02:bb:
ac:e4:10:86:e4:f7:82:c2:47:36:ea:26:ea:e8:43:fc:bf:14:
ed:0b:62:30:67:b8:33:15:42:c6:90:cf:53:bc:d5:72:16:6f:
a5:51:1c:7f:6b:93:02:bc:6c:21:10:fe:85:f2:3d:5c:ee:e8:
9d:a0:48:b8:ff:10:ae:7f:7c:1e:12:26:3a:1c:81:de:f3:ee:
c8:56:77:b2:4c:88:02:3a:0a:5b:7c:eb:bc:d9:03:a8:75:84:
c0:10:55:4c:c8:15:f1:34:6f:6c:80:b5:34:59:aa:64:bf:ad:
c1:bc:bd:11:27:94:94:bc:42:e4:00:50:4a:64:7f:7a:4d:10:
61:bc:86:0d:a9:40:6e:70:84:62:93:81:86:61:7b:94:a2:fc:
d5:78:37:08:3f:46:61:4a:d1:fd:9d:f2:07:d4:a5:8e:dc:99:
0f:fe:37:3c:5a:7c:de:a5:30:22:4a:68:99:98:68:be:8f:12:
31:5c:47:ab:12:7e:fa:a8:72:68:84:4a:76:e4:73:5d:00:f9:
1a:6f:67:09:cc:51:f8:1d:40:da:7c:bf:69:d4:d4:e3:ee:f9:
bf:0d:36:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:41:05 2026 by rpki-client