Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/09f6d3-972f-4b05-b27a-b77c1f9729ff/1/igr5b5WYkhMXjTPWXwcOj7L-N98.mft
File: igr5b5WYkhMXjTPWXwcOj7L-N98.mft (raw, json)
Hash identifier: Gx/9cF5QHY/KSwdfcCuogQ50n/WWdqU7dluNlSdO0KI=
Subject key identifier: 3A:7A:80:FE:C0:6A:04:DD:B5:4F:8C:FE:5A:4E:18:2A:B7:2E:44:08
Authority key identifier: 8A:0A:F9:6F:95:98:92:13:17:8D:33:D6:5F:07:0E:8F:B2:FE:37:DF
Certificate issuer: /CN=8a0af96f95989213178d33d65f070e8fb2fe37df
Certificate serial: 019DA29C65779F7B2C70FA3297656906936E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igr5b5WYkhMXjTPWXwcOj7L-N98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/09f6d3-972f-4b05-b27a-b77c1f9729ff/1/igr5b5WYkhMXjTPWXwcOj7L-N98.mft
Manifest number: 096D
Signing time: Sat 18 Apr 2026 22:00:51 +0000
Manifest this update: Sat 18 Apr 2026 22:00:51 +0000
Manifest next update: Sun 19 Apr 2026 22:00:51 +0000
Files and hashes: 1: igr5b5WYkhMXjTPWXwcOj7L-N98.crl (hash: /dVkyCFDOyaLy0UWA5LxdSr4IGCZ1a3ZFKRehiWDKis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/09f6d3-972f-4b05-b27a-b77c1f9729ff/1/igr5b5WYkhMXjTPWXwcOj7L-N98.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/09f6d3-972f-4b05-b27a-b77c1f9729ff/1/igr5b5WYkhMXjTPWXwcOj7L-N98.mft
rsync://rpki.ripe.net/repository/DEFAULT/igr5b5WYkhMXjTPWXwcOj7L-N98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 22:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a2:9c:65:77:9f:7b:2c:70:fa:32:97:65:69:06:93:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a0af96f95989213178d33d65f070e8fb2fe37df
Validity
Not Before: Apr 18 22:00:51 2026 GMT
Not After : Apr 19 22:00:51 2026 GMT
Subject: CN=3a7a80fec06a04ddb54f8cfe5a4e182ab72e4408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:dd:40:be:58:e3:56:b2:e9:35:8d:a9:31:44:
a9:ed:21:01:f3:8b:e3:07:7d:47:d4:aa:81:87:67:
45:3f:40:ee:b7:1b:42:b9:6d:b5:55:3c:cc:e7:67:
12:9c:0a:60:ff:27:4c:28:d3:30:bb:be:bb:bf:cb:
1f:29:54:bc:93:54:cc:37:73:d3:dd:de:2d:df:b2:
09:e3:29:ed:a8:10:ef:f1:0b:1e:94:4e:01:d6:55:
ed:3f:ad:91:da:12:a9:82:44:44:58:d4:a5:c2:d0:
a1:82:2b:b1:78:01:1c:99:a5:47:c0:40:24:22:26:
28:62:8c:94:f3:0f:1b:7c:93:56:18:e9:be:32:0f:
f8:5b:56:b8:6d:89:c1:c4:89:9e:c2:94:ce:26:8f:
c7:0d:f2:1e:92:49:54:bc:0c:89:e4:e1:b6:6c:c8:
4b:aa:7f:44:d6:ce:e5:b0:32:1c:f6:18:e3:29:24:
31:92:e7:1a:ad:82:3f:73:56:3e:ca:82:03:0b:fc:
b5:e6:3f:63:26:0f:79:35:5f:b9:d8:62:7d:a7:24:
94:7f:5a:82:01:39:f9:54:bf:d2:ab:90:cc:fc:f0:
27:fa:c1:cc:3d:51:d1:9e:3c:e1:6e:11:15:78:02:
de:c2:da:59:d8:c9:4b:b9:f4:51:59:e7:1d:a8:4f:
9f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:7A:80:FE:C0:6A:04:DD:B5:4F:8C:FE:5A:4E:18:2A:B7:2E:44:08
X509v3 Authority Key Identifier:
keyid:8A:0A:F9:6F:95:98:92:13:17:8D:33:D6:5F:07:0E:8F:B2:FE:37:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igr5b5WYkhMXjTPWXwcOj7L-N98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/09f6d3-972f-4b05-b27a-b77c1f9729ff/1/igr5b5WYkhMXjTPWXwcOj7L-N98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/09f6d3-972f-4b05-b27a-b77c1f9729ff/1/igr5b5WYkhMXjTPWXwcOj7L-N98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:49:48:82:f9:b1:00:51:fe:5e:0b:1e:59:f3:e8:2d:1c:1b:
4b:f7:c9:68:2a:c0:ba:7d:1f:20:4a:75:02:46:78:1e:ae:e2:
0d:66:39:50:11:49:9a:b5:7d:a8:17:5e:3a:27:c0:5d:28:0d:
06:b2:e7:09:fb:dd:cc:48:1c:92:bb:55:31:a6:24:81:38:46:
77:26:a4:4e:6c:1d:76:bd:6a:e5:4c:e9:97:d2:49:de:09:c5:
fb:e7:a2:20:4d:13:e6:a1:bf:69:63:76:00:ce:47:b4:43:fd:
55:17:d7:40:b3:69:c1:d2:ec:a0:53:bb:70:9a:20:7e:b7:8c:
61:ef:36:c2:b8:b2:77:72:82:8d:b7:b0:6a:0f:4f:44:21:f5:
91:60:a3:fc:0f:71:2f:36:2a:93:3c:27:46:d2:17:a8:b2:65:
5d:50:5f:b4:f9:93:a7:7f:45:c7:8f:ae:2b:98:09:7f:87:18:
ff:8b:f6:f0:18:2f:c5:97:cc:04:b6:25:14:55:1b:0e:7c:e8:
cf:34:31:7e:e2:76:04:45:d5:37:c4:ad:43:fc:34:a9:d9:e7:
87:42:34:07:93:8e:7f:33:d6:be:c5:0c:a5:be:79:43:e4:0e:
fc:ea:85:9b:b8:cd:8f:ca:58:5d:ab:b3:67:38:03:9f:9a:ad:
4f:b8:3d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:46:08 2026 by rpki-client