Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/9e5cbd-4d5a-4ed6-b1c2-4ef9cc751517/1/IATWKTJ0OW9ajWkUhdaHagogcdk.mft
File: IATWKTJ0OW9ajWkUhdaHagogcdk.mft (raw, json)
Hash identifier: C8QHh/ZT+EGIMNc3Uxgl2QgXYMP/KDv1N9bmB2RXcYE=
Subject key identifier: 6D:26:11:DE:3D:65:D4:9E:18:01:FD:13:46:C8:E8:E2:35:BA:E0:63
Authority key identifier: 20:04:D6:29:32:74:39:6F:5A:8D:69:14:85:D6:87:6A:0A:20:71:D9
Certificate issuer: /CN=2004d6293274396f5a8d691485d6876a0a2071d9
Certificate serial: 019D98BDC5616B60C4ADDD46A93413D3FC20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IATWKTJ0OW9ajWkUhdaHagogcdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/9e5cbd-4d5a-4ed6-b1c2-4ef9cc751517/1/IATWKTJ0OW9ajWkUhdaHagogcdk.mft
Manifest number: 1562
Signing time: Fri 17 Apr 2026 00:01:06 +0000
Manifest this update: Fri 17 Apr 2026 00:01:06 +0000
Manifest next update: Sat 18 Apr 2026 00:01:06 +0000
Files and hashes: 1: IATWKTJ0OW9ajWkUhdaHagogcdk.crl (hash: K8nv8KNZVzBpCyZk2bVEyWC4ppja+NustEZnNa9sDHQ=)
2: hnmnA26xKXY54jFPUcSN_0PAckk.roa (hash: iZnIOMbwxqj7gdSqvCeT/1vFVrhvoJ0Z39/9nmcH68s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/9e5cbd-4d5a-4ed6-b1c2-4ef9cc751517/1/IATWKTJ0OW9ajWkUhdaHagogcdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/9e5cbd-4d5a-4ed6-b1c2-4ef9cc751517/1/IATWKTJ0OW9ajWkUhdaHagogcdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IATWKTJ0OW9ajWkUhdaHagogcdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:c5:61:6b:60:c4:ad:dd:46:a9:34:13:d3:fc:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2004d6293274396f5a8d691485d6876a0a2071d9
Validity
Not Before: Apr 17 00:01:06 2026 GMT
Not After : Apr 18 00:01:06 2026 GMT
Subject: CN=6d2611de3d65d49e1801fd1346c8e8e235bae063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ec:cd:99:6a:e1:b0:b6:29:15:a5:48:78:0d:
da:b9:32:c3:c9:6c:a5:6d:aa:7a:7b:5b:2e:21:78:
33:50:9f:9a:1b:8f:f9:56:01:4e:e5:0a:27:32:ba:
43:85:d4:73:52:9a:49:f0:45:73:20:3f:3f:cd:78:
12:8b:03:fc:75:1e:7e:79:b5:fd:a4:66:64:dc:76:
9c:38:d7:c8:25:5e:5e:9e:0b:4d:3f:bf:cb:d1:ed:
96:a3:dc:de:f1:33:79:b0:1a:14:ac:9c:05:ab:8f:
a1:ea:bd:e6:09:e6:58:9b:c8:54:d2:13:3c:a8:40:
e1:7b:09:11:d3:8d:9c:dc:7f:7f:e1:5c:79:82:9a:
3a:2a:9f:13:83:e3:54:b2:6e:44:a6:d0:56:66:b1:
6f:e9:e9:cd:b3:8c:79:00:6d:2c:48:02:32:a8:24:
3f:78:e3:0e:62:c1:34:b6:fd:5c:14:c0:34:3d:ca:
61:f7:c4:78:e9:38:a9:e8:2e:a3:af:f7:14:60:65:
e8:61:95:1d:0c:03:6c:50:19:76:05:3a:13:2e:3f:
c8:53:65:c3:60:82:83:5d:04:7c:64:6e:1e:7a:3e:
ae:55:24:cc:24:f7:a8:f0:93:95:72:63:5d:5a:07:
e6:e2:08:dc:a5:fa:17:25:a3:77:4d:c1:92:ac:df:
93:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:26:11:DE:3D:65:D4:9E:18:01:FD:13:46:C8:E8:E2:35:BA:E0:63
X509v3 Authority Key Identifier:
keyid:20:04:D6:29:32:74:39:6F:5A:8D:69:14:85:D6:87:6A:0A:20:71:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IATWKTJ0OW9ajWkUhdaHagogcdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9e5cbd-4d5a-4ed6-b1c2-4ef9cc751517/1/IATWKTJ0OW9ajWkUhdaHagogcdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9e5cbd-4d5a-4ed6-b1c2-4ef9cc751517/1/IATWKTJ0OW9ajWkUhdaHagogcdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:99:d2:8e:c8:d4:5c:4e:e9:cf:3b:53:6c:0f:f5:0a:6d:16:
a9:a8:25:06:d0:0e:99:00:c8:36:69:41:dc:2b:69:89:95:0c:
c1:d9:a7:6e:8e:10:f4:30:2b:70:25:9a:89:c0:35:79:81:b8:
98:3c:90:ee:a2:64:5f:59:65:df:95:9f:1a:48:0c:69:07:2e:
a2:17:a4:cb:32:20:f0:5e:82:d3:ce:76:f8:3b:fb:12:4c:79:
b2:f1:9b:91:9b:48:72:62:52:3e:26:14:1d:48:f4:9a:c6:ce:
0c:7e:ed:fe:f4:5d:74:ce:5d:44:50:c6:37:f7:53:cd:96:e5:
b5:18:07:8a:0c:e0:3f:f6:f8:aa:83:2a:b3:0a:a5:9c:a7:7b:
19:37:50:d3:12:f0:c6:42:7c:5c:11:02:f2:64:2d:78:e1:50:
23:d5:67:c9:c1:80:2a:b1:3f:64:9d:09:0c:16:ca:ce:90:9c:
38:13:96:f8:86:2a:9f:a2:c7:f2:74:86:47:1c:86:e9:31:a5:
65:48:fc:cc:51:25:93:6d:ee:35:e2:bb:f5:f0:ea:64:24:c6:
ba:9a:36:a8:b6:0e:02:f6:60:19:d9:91:e1:ad:e0:1b:2b:78:
0d:e4:4b:13:5a:b2:b1:3b:70:78:68:d9:36:47:20:03:60:64:
f8:81:fc:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:16:28 2026 by rpki-client