Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.mft
File: IBjvCLVd2yDIgWpiGkWc25J7MgE.mft (raw, json)
Hash identifier: FS1ygtK6CMQgmSRXM/xVEMj4H5Kkh0dIRGx+6QqYBvQ=
Subject key identifier: 40:9C:CC:FC:AF:32:85:6F:39:71:FC:F2:C0:B0:AF:3D:F2:46:7F:CF
Authority key identifier: 20:18:EF:08:B5:5D:DB:20:C8:81:6A:62:1A:45:9C:DB:92:7B:32:01
Certificate issuer: /CN=2018ef08b55ddb20c8816a621a459cdb927b3201
Certificate serial: 019D984F92C96D464BBE46D149B85AB8FF2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IBjvCLVd2yDIgWpiGkWc25J7MgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.mft
Manifest number: 1854
Signing time: Thu 16 Apr 2026 22:00:44 +0000
Manifest this update: Thu 16 Apr 2026 22:00:44 +0000
Manifest next update: Fri 17 Apr 2026 22:00:44 +0000
Files and hashes: 1: 46TfkgzFvsJA-mkb18CtoR7-ZNU.roa (hash: UwZqgkhkMSRcZLQ/mfRr2bDwJWvzPxqmUX74IwjVtQk=)
2: IBjvCLVd2yDIgWpiGkWc25J7MgE.crl (hash: SQrOoOlp0J2YbvN+/8oHJu93Lw4hvNjBrDxSGFYIyHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/IBjvCLVd2yDIgWpiGkWc25J7MgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:45:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:92:c9:6d:46:4b:be:46:d1:49:b8:5a:b8:ff:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2018ef08b55ddb20c8816a621a459cdb927b3201
Validity
Not Before: Apr 16 22:00:44 2026 GMT
Not After : Apr 17 22:00:44 2026 GMT
Subject: CN=409cccfcaf32856f3971fcf2c0b0af3df2467fcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:db:e6:54:7e:e4:bf:25:a9:2d:d7:6d:71:2f:
03:72:8a:44:df:fd:21:83:10:3d:37:ad:46:66:a0:
14:9a:42:5d:5f:2d:f9:ac:05:cc:44:11:ea:33:27:
5e:86:49:5e:d6:75:d8:e0:0b:f7:65:1c:4e:3a:06:
44:d5:df:46:47:a9:c9:ff:dd:8f:4f:27:e7:2c:75:
dc:57:d5:0e:ae:34:3c:2c:ae:78:d8:fb:d6:41:2d:
5a:d0:15:2d:27:90:9f:cf:46:61:04:8f:7d:1e:5c:
c6:31:f8:57:cb:40:fb:c0:19:4a:1e:7b:72:0f:3d:
17:52:33:58:06:4f:fe:32:0c:71:27:ae:2f:7b:d4:
8e:b7:81:0e:30:f9:db:c9:56:e7:ee:58:35:e7:73:
68:54:5f:88:f1:c8:4c:cf:a3:44:11:c6:e4:4b:be:
06:d0:36:49:32:8b:99:51:af:c6:0d:80:72:f7:7d:
a8:10:a2:d9:aa:12:8d:43:22:31:08:d5:08:22:2b:
48:48:0d:22:37:44:27:6b:00:55:35:8a:14:19:90:
23:60:d1:c2:c3:52:0b:b8:91:2a:22:0d:f0:07:e2:
54:61:77:76:25:17:2f:e4:ac:70:f2:f4:79:20:53:
3b:c2:f5:bf:f3:65:bf:d8:37:98:6d:f5:2f:d2:51:
9c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:9C:CC:FC:AF:32:85:6F:39:71:FC:F2:C0:B0:AF:3D:F2:46:7F:CF
X509v3 Authority Key Identifier:
keyid:20:18:EF:08:B5:5D:DB:20:C8:81:6A:62:1A:45:9C:DB:92:7B:32:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IBjvCLVd2yDIgWpiGkWc25J7MgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:e7:93:90:21:ef:a2:ae:26:3d:23:bc:12:bc:73:6a:e7:43:
08:7d:19:70:22:73:22:02:8d:ff:1a:9e:83:7b:c8:45:bd:bb:
c0:49:34:a4:4b:62:92:96:e9:fa:42:d6:66:0a:e2:9d:ff:4d:
95:b5:71:fc:17:1d:ce:f1:d0:d8:b2:b3:ff:70:08:da:37:fc:
93:05:0f:88:b4:c1:1d:cf:ba:cd:eb:ac:1e:4c:79:ba:43:43:
cb:52:a2:a6:42:40:d1:d1:f9:45:a7:34:04:df:d3:80:5b:ed:
1c:5e:b9:db:28:30:3d:ce:39:e6:2a:e9:68:2b:eb:7f:30:24:
8a:c3:68:3c:e5:36:62:95:34:c3:91:48:ae:47:c5:e1:f6:4a:
8f:07:05:ab:25:82:8e:99:79:1e:ec:ae:d4:81:de:a1:80:b2:
9e:ed:d4:4e:76:fd:50:29:64:b3:19:2c:ee:d5:75:c4:c5:f7:
7d:8b:e8:13:8c:ad:a0:06:7a:9a:bb:4c:0c:8d:fd:55:a3:84:
a0:8e:b8:36:1a:6d:ef:13:9d:f1:eb:33:16:60:26:93:15:fa:
3a:49:40:b6:c3:7d:7d:7a:83:e9:bd:81:59:43:76:f4:ee:bc:
81:b9:22:c3:00:e7:48:7e:46:43:db:65:bf:0e:71:77:b5:c0:
ef:f3:15:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 00:03:01 2026 by rpki-client