Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/IMz236cJVzqCG2PEy2lWBf0maAs.mft
File: IMz236cJVzqCG2PEy2lWBf0maAs.mft (raw, json)
Hash identifier: Z/PNARnySfJkcbzZC8N4CcPeSsAFYbRoxjeavEUG0S4=
Subject key identifier: 58:5F:65:92:D4:82:53:9A:94:53:B6:C6:D3:0C:B9:99:78:44:7A:9F
Authority key identifier: 20:CC:F6:DF:A7:09:57:3A:82:1B:63:C4:CB:69:56:05:FD:26:68:0B
Certificate issuer: /CN=20ccf6dfa709573a821b63c4cb695605fd26680b
Certificate serial: 019DA3AF164988D9FC9A01DF20818AB7EC3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMz236cJVzqCG2PEy2lWBf0maAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/IMz236cJVzqCG2PEy2lWBf0maAs.mft
Manifest number: 05CD
Signing time: Sun 19 Apr 2026 03:00:53 +0000
Manifest this update: Sun 19 Apr 2026 03:00:53 +0000
Manifest next update: Mon 20 Apr 2026 03:00:53 +0000
Files and hashes: 1: IMz236cJVzqCG2PEy2lWBf0maAs.crl (hash: FMd2O2Z9V2NPdkeKnAHKZgJ4dancsIcyph3nva3b1gM=)
2: wyv5vBa47PAsnMwdHNximNKw3Uk.roa (hash: 7tiep6Gb67cUku8Kl/ICbKHtHb5PWFafeqQ40Zk2Vqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/IMz236cJVzqCG2PEy2lWBf0maAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/IMz236cJVzqCG2PEy2lWBf0maAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/IMz236cJVzqCG2PEy2lWBf0maAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:af:16:49:88:d9:fc:9a:01:df:20:81:8a:b7:ec:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20ccf6dfa709573a821b63c4cb695605fd26680b
Validity
Not Before: Apr 19 03:00:53 2026 GMT
Not After : Apr 20 03:00:53 2026 GMT
Subject: CN=585f6592d482539a9453b6c6d30cb99978447a9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:2a:f6:1d:6f:9a:ac:f6:06:cf:82:2d:52:de:
d6:b9:51:b7:62:07:b3:87:1d:79:9a:26:53:76:76:
b2:a0:b2:68:74:12:49:ee:cf:70:ba:99:37:11:3d:
80:7e:05:4b:3f:71:06:87:9a:e5:c1:6e:bf:6c:b6:
94:4e:3a:be:07:79:7f:2d:1f:ba:d1:60:c7:9a:1e:
d9:b5:44:c7:8b:38:1f:f6:b3:bf:30:27:4e:5f:01:
fb:dd:78:e5:58:99:f2:79:70:93:c1:7f:ac:37:5e:
57:5b:40:23:3c:cb:aa:73:a8:12:d1:04:06:e6:e5:
fa:79:da:ba:5d:4e:02:22:eb:c6:95:90:3b:fe:0e:
eb:2d:d0:7a:46:7d:f8:bf:9d:11:a7:5d:a2:11:88:
51:ec:61:ae:a9:1a:9e:35:67:23:eb:ca:da:de:98:
b5:7e:b4:3b:cc:31:3e:b8:b3:88:62:c9:e8:6a:37:
11:fe:71:07:7f:1a:c5:9c:77:3d:8c:8d:8e:86:81:
d9:c8:fa:35:7c:32:6a:c4:ae:d5:89:59:0f:c8:06:
08:2a:f5:3f:6f:e3:99:e7:f8:71:65:8d:2a:31:cd:
1f:f2:a2:4c:8b:a6:5f:fa:97:34:84:dc:7b:59:c4:
67:b6:1d:3f:4f:46:b1:00:3e:31:3f:ce:6a:ac:c4:
30:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:5F:65:92:D4:82:53:9A:94:53:B6:C6:D3:0C:B9:99:78:44:7A:9F
X509v3 Authority Key Identifier:
keyid:20:CC:F6:DF:A7:09:57:3A:82:1B:63:C4:CB:69:56:05:FD:26:68:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMz236cJVzqCG2PEy2lWBf0maAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/IMz236cJVzqCG2PEy2lWBf0maAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/IMz236cJVzqCG2PEy2lWBf0maAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:e9:d4:0f:8c:5d:91:ff:8f:57:84:74:b6:52:3b:74:59:1b:
01:3b:26:33:60:61:86:4c:99:df:0e:99:ea:f3:b5:60:e9:a8:
a4:44:be:28:61:57:4f:b8:8c:2a:a4:d1:e5:c4:af:e8:11:86:
94:9a:0e:35:e6:4f:d3:49:a4:68:27:ba:9d:a3:c2:99:bc:1c:
f2:73:28:16:bd:8a:6f:46:bf:e7:fe:2a:a9:74:b8:f8:4e:35:
32:7d:c9:16:0e:52:6d:19:99:01:7f:0c:0b:28:96:51:81:98:
b2:f6:99:6c:e8:92:0f:bd:75:72:52:c6:74:81:ea:2a:a2:e4:
65:1f:e9:ef:8a:a5:1c:c0:81:26:ad:21:1d:b0:09:84:41:42:
01:95:f9:61:e6:ab:d1:04:be:24:f4:1d:c0:97:c1:5a:b6:47:
52:83:b6:e1:0f:0d:a2:14:ec:08:06:e8:68:21:d3:92:92:36:
2a:30:78:0e:f1:a1:ce:05:cf:37:24:8a:28:49:8b:c5:c8:cc:
1f:2b:8b:f2:ab:2e:1f:c6:11:21:32:2e:36:63:aa:ce:5b:08:
13:61:52:6b:71:2e:9d:7a:f7:5f:eb:28:e5:a0:c1:48:72:31:
a5:f8:46:91:e0:12:5c:7b:88:b1:9c:06:a9:75:d5:b7:63:d0:
a8:5c:c8:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:54:56 2026 by rpki-client