Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft
File: IjbtX1Yj7et5EKzTHV9u6B5csX4.mft (raw, json)
Hash identifier: 6Mxr5317c915PyceJCfBGTrqPQ3OKK18wRulNEywth4=
Subject key identifier: D0:4D:AE:F6:84:EF:39:7B:04:17:0C:09:B6:DE:DF:63:F0:C8:A1:1B
Authority key identifier: 22:36:ED:5F:56:23:ED:EB:79:10:AC:D3:1D:5F:6E:E8:1E:5C:B1:7E
Certificate issuer: /CN=2236ed5f5623edeb7910acd31d5f6ee81e5cb17e
Certificate serial: 019D99997DA6AE1D9EFC4BC3A47C3AEC52A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IjbtX1Yj7et5EKzTHV9u6B5csX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft
Manifest number: 10A8
Signing time: Fri 17 Apr 2026 04:01:06 +0000
Manifest this update: Fri 17 Apr 2026 04:01:06 +0000
Manifest next update: Sat 18 Apr 2026 04:01:06 +0000
Files and hashes: 1: CPndinjPYr6tuDu76KQaJ-aGMwI.roa (hash: nrsdPAkRRrAV3pIEBSnHKX1eqjnFVOeohTv704UK0JA=)
2: IjbtX1Yj7et5EKzTHV9u6B5csX4.crl (hash: MqJrE2vv4hVNE+iXzIP3lE2isiM2T/XYnwsjobawsTU=)
3: RoT_BRy5K5T_EFywyXjf2sUOgfA.roa (hash: 3g9pqCZcoGTGtwQJjCoF4vdhAm5IX+/HPg+Sn5/5ZvI=)
4: b9-WVQZEPxKTQu4HO3vpyGGIgyM.roa (hash: zJruMssE6fAWn+HUVB4+RJJ7aVS5WNO5nmK7xyX8S+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IjbtX1Yj7et5EKzTHV9u6B5csX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:7d:a6:ae:1d:9e:fc:4b:c3:a4:7c:3a:ec:52:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2236ed5f5623edeb7910acd31d5f6ee81e5cb17e
Validity
Not Before: Apr 17 04:01:06 2026 GMT
Not After : Apr 18 04:01:06 2026 GMT
Subject: CN=d04daef684ef397b04170c09b6dedf63f0c8a11b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:6d:26:2c:ce:5f:24:e7:4a:21:5c:11:4a:f2:
0b:6b:48:9f:54:b6:8b:c0:c2:d5:d9:cc:b1:6b:89:
1a:aa:38:9c:67:e2:69:6e:34:4c:fa:09:be:07:a7:
0d:6a:b7:88:c9:be:c9:f6:7a:54:cd:86:98:bb:cb:
22:5a:5d:bb:a4:a5:8b:80:e9:1b:d7:60:89:58:23:
f7:a0:6e:5a:bd:a5:57:5f:3a:cb:ed:e9:3c:ae:87:
06:17:a1:6b:ec:cc:e3:e1:fc:53:84:18:3e:a8:ad:
78:03:ca:ee:4e:e1:54:7b:62:c6:a3:55:30:38:9e:
ca:39:1b:70:29:6d:07:f2:6d:ed:de:7d:98:c7:b2:
e0:d5:74:c3:8e:08:7d:6c:f6:71:28:3d:b8:38:3e:
2f:88:2a:64:cc:cd:bc:33:e8:86:7c:97:96:bf:7d:
8a:80:b9:2a:1a:f8:4d:9a:c8:1c:55:08:fc:bf:4b:
26:ef:e3:3a:1f:f6:34:83:56:d7:7b:5d:77:65:b1:
80:55:fa:6e:bc:a3:ca:00:bb:cd:5e:fc:1a:43:a6:
15:1d:a1:64:72:51:17:e6:35:43:f8:50:f0:c5:21:
f7:97:cd:f0:43:8e:1c:f3:c5:52:3d:62:fe:2e:31:
6b:a8:10:7e:70:82:f9:e6:e8:93:17:e4:fe:85:0c:
e9:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:4D:AE:F6:84:EF:39:7B:04:17:0C:09:B6:DE:DF:63:F0:C8:A1:1B
X509v3 Authority Key Identifier:
keyid:22:36:ED:5F:56:23:ED:EB:79:10:AC:D3:1D:5F:6E:E8:1E:5C:B1:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IjbtX1Yj7et5EKzTHV9u6B5csX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:3a:46:04:92:28:e3:17:fc:95:ca:9c:b5:22:39:d3:7a:ef:
0d:ba:18:9c:13:41:ce:2b:c7:4f:47:b6:1c:ce:cc:15:20:c8:
bb:c6:81:73:f2:d5:50:83:82:c1:ad:ee:78:ff:8d:bb:53:06:
27:4d:2d:1f:76:d3:aa:f4:4c:17:6d:4e:4d:43:eb:8c:44:61:
10:c6:c9:de:a9:f1:30:e8:61:11:ae:87:88:a4:c6:c7:7f:c4:
f5:65:a1:93:4e:89:d6:24:fd:73:64:97:27:9b:26:2b:38:91:
1d:e1:97:dd:9c:42:79:33:46:d7:3b:15:fe:04:79:19:61:37:
7c:66:d2:65:ed:dc:29:4b:bb:7f:04:05:8f:5b:b2:c0:b4:7e:
a8:06:3a:55:1c:d8:b2:79:67:e9:8b:c9:50:26:5f:00:a6:74:
46:6f:c7:4a:10:64:81:96:f1:ac:a6:07:44:f2:3c:53:69:32:
9d:27:a7:2f:7a:9e:a4:e5:2d:b7:d8:db:44:09:ce:a5:56:85:
b7:61:65:ca:74:3e:74:93:3b:ae:e5:6e:c7:ba:69:2c:b8:b4:
bc:4a:b3:0f:ad:8c:2f:22:7a:ac:3f:01:82:a9:b4:39:b8:39:
b6:c9:99:c8:50:e5:cb:6b:24:48:9c:4c:7a:f0:08:e0:fc:58:
a8:f1:a4:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZmX2mrh2e/EvDpHw67FKmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyMzZlZDVmNTYyM2VkZWI3OTEwYWNkMzFkNWY2ZWU4MWU1
Y2IxN2UwHhcNMjYwNDE3MDQwMTA2WhcNMjYwNDE4MDQwMTA2WjAzMTEwLwYDVQQD
EyhkMDRkYWVmNjg0ZWYzOTdiMDQxNzBjMDliNmRlZGY2M2YwYzhhMTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6G0mLM5fJOdKIVwRSvILa0ifVLaL
wMLV2cyxa4kaqjicZ+JpbjRM+gm+B6cNareIyb7J9npUzYaYu8siWl27pKWLgOkb
12CJWCP3oG5avaVXXzrL7ek8rocGF6Fr7Mzj4fxThBg+qK14A8ruTuFUe2LGo1Uw
OJ7KORtwKW0H8m3t3n2Yx7Lg1XTDjgh9bPZxKD24OD4viCpkzM28M+iGfJeWv32K
gLkqGvhNmsgcVQj8v0sm7+M6H/Y0g1bXe113ZbGAVfpuvKPKALvNXvwaQ6YVHaFk
clEX5jVD+FDwxSH3l83wQ44c88VSPWL+LjFrqBB+cIL55uiTF+T+hQzpFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNBNrvaE7zl7BBcMCbbe32PwyKEbMB8GA1UdIwQY
MBaAFCI27V9WI+3reRCs0x1fbugeXLF+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWpidFgxWWo3ZXQ1RUt6VEhWOXU2QjVjc1g0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8xZDlkZGEtMmFkZi00NmJkLThhZjct
NGQxNmJlOWJhMTMyLzEvSWpidFgxWWo3ZXQ1RUt6VEhWOXU2QjVjc1g0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC8xZDlkZGEtMmFkZi00NmJkLThhZjctNGQxNmJlOWJhMTMy
LzEvSWpidFgxWWo3ZXQ1RUt6VEhWOXU2QjVjc1g0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAADpGBJIo
4xf8lcqctSI503rvDboYnBNBzivHT0e2HM7MFSDIu8aBc/LVUIOCwa3ueP+Nu1MG
J00tH3bTqvRMF21OTUPrjERhEMbJ3qnxMOhhEa6HiKTGx3/E9WWhk06J1iT9c2SX
J5smKziRHeGX3ZxCeTNG1zsV/gR5GWE3fGbSZe3cKUu7fwQFj1uywLR+qAY6VRzY
snln6YvJUCZfAKZ0Rm/HShBkgZbxrKYHRPI8U2kynSenL3qepOUtt9jbRAnOpVaF
t2FlynQ+dJM7ruVux7ppLLi0vEqzD62MLyJ6rD8Bgqm0Obg5tsmZyFDly2skSJxM
evAI4PxYqPGkkA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:57:26 2026 by rpki-client