Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ac0694-1e22-436d-82c9-17ce620e74f1/1/IE19hlKpn8F__y197MSeVWqg64A.mft
File: IE19hlKpn8F__y197MSeVWqg64A.mft (raw, json)
Hash identifier: T8mDAyDmFB9q+cWEMGPhGNZPGaWvkVRtd38azvCuIR8=
Subject key identifier: A2:F4:18:B7:4E:18:7E:FC:9D:77:FC:D6:3F:D6:62:A0:9A:CF:ED:27
Authority key identifier: 20:4D:7D:86:52:A9:9F:C1:7F:FF:2D:7D:EC:C4:9E:55:6A:A0:EB:80
Certificate issuer: /CN=204d7d8652a99fc17fff2d7decc49e556aa0eb80
Certificate serial: 019D9B50CC13C84BE8986226858A382153A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IE19hlKpn8F__y197MSeVWqg64A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ac0694-1e22-436d-82c9-17ce620e74f1/1/IE19hlKpn8F__y197MSeVWqg64A.mft
Manifest number: 05C7
Signing time: Fri 17 Apr 2026 12:00:56 +0000
Manifest this update: Fri 17 Apr 2026 12:00:56 +0000
Manifest next update: Sat 18 Apr 2026 12:00:56 +0000
Files and hashes: 1: IE19hlKpn8F__y197MSeVWqg64A.crl (hash: 3MmaGW3zIw2+/w+CpqHoNas7NKrT/cAWmT2cDX3htSo=)
2: Ii6wwqE-ee-CRo8hd4o4rFr06SY.roa (hash: Ta+qzjiPCmFIkSNPxrZ151ZxOc0vieQ/q0h1vtHvBVQ=)
3: Xw9tVyuPLJRqNzDdc3wN3NyB9IA.roa (hash: nQERgQoU1LcOAXZoSGkitr1IswJcoffSa8r7ceEkAJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/ac0694-1e22-436d-82c9-17ce620e74f1/1/IE19hlKpn8F__y197MSeVWqg64A.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/ac0694-1e22-436d-82c9-17ce620e74f1/1/IE19hlKpn8F__y197MSeVWqg64A.mft
rsync://rpki.ripe.net/repository/DEFAULT/IE19hlKpn8F__y197MSeVWqg64A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:cc:13:c8:4b:e8:98:62:26:85:8a:38:21:53:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=204d7d8652a99fc17fff2d7decc49e556aa0eb80
Validity
Not Before: Apr 17 12:00:56 2026 GMT
Not After : Apr 18 12:00:56 2026 GMT
Subject: CN=a2f418b74e187efc9d77fcd63fd662a09acfed27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:bc:05:e0:27:e9:13:2a:6a:95:b4:e1:39:6b:
d7:a0:c2:1e:a7:d1:ff:67:df:9c:79:d5:5f:cf:08:
93:c3:cc:ae:ed:b9:4d:94:df:3e:03:80:95:1f:1b:
c7:81:72:cc:59:00:b3:fd:04:e5:ee:ce:94:67:44:
58:d4:aa:65:05:24:4b:51:fa:11:67:c3:82:92:27:
78:35:e6:3d:62:9e:28:84:60:7e:51:a9:42:6f:2f:
ea:8f:4d:75:99:99:d4:2d:2d:f9:b7:99:3c:fd:28:
bd:f6:e9:4f:bd:9d:de:7a:28:cd:1e:35:7f:2b:63:
b5:e4:88:69:07:06:99:f6:1d:11:6a:9b:25:19:eb:
1b:c6:af:6e:6d:ae:1a:fb:17:07:9a:45:d0:2b:c4:
1e:88:dc:12:c2:84:aa:c8:31:a2:35:02:fd:4f:be:
ff:aa:f6:31:b0:00:22:f9:4a:43:00:47:05:4e:33:
a3:c6:fa:ee:78:52:f4:12:3b:e7:e7:a7:d0:e7:ce:
43:b9:7b:77:84:89:00:16:d4:df:b5:93:42:a7:fd:
73:71:06:cd:7a:3a:d6:6f:52:54:a0:1b:47:e9:cd:
a9:73:9c:f3:a2:68:14:b6:2a:8a:1e:87:75:2e:09:
82:6c:26:35:2f:ed:40:c9:9d:fe:21:c6:bc:1e:8d:
6b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:F4:18:B7:4E:18:7E:FC:9D:77:FC:D6:3F:D6:62:A0:9A:CF:ED:27
X509v3 Authority Key Identifier:
keyid:20:4D:7D:86:52:A9:9F:C1:7F:FF:2D:7D:EC:C4:9E:55:6A:A0:EB:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IE19hlKpn8F__y197MSeVWqg64A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ac0694-1e22-436d-82c9-17ce620e74f1/1/IE19hlKpn8F__y197MSeVWqg64A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ac0694-1e22-436d-82c9-17ce620e74f1/1/IE19hlKpn8F__y197MSeVWqg64A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:3b:99:22:e4:bb:84:64:8d:19:4b:46:32:53:c3:92:36:a9:
95:11:dc:26:66:66:99:d5:9c:1d:48:34:c1:22:72:ec:ae:ba:
84:88:a5:15:6c:66:04:9d:66:85:14:75:11:aa:54:4a:dd:f6:
26:f8:fc:08:50:58:c0:9b:45:96:f9:bf:b7:b0:de:8b:ee:11:
23:08:90:9a:d0:7c:2d:58:eb:b6:c2:01:3a:e7:6c:2e:78:26:
33:70:b5:6e:3a:9f:c9:e7:a3:6c:7a:51:ee:9e:60:19:17:94:
17:95:7b:1d:db:fb:a3:8e:cf:10:98:fb:f0:36:21:af:ad:00:
45:ff:a9:03:fa:a7:f7:ce:5b:09:2c:bc:60:f1:66:c7:40:6d:
01:83:c6:78:7f:9a:dd:55:4d:3c:e8:cd:6c:2b:c5:67:b9:0c:
1e:c6:8e:d9:40:17:ad:a6:a4:f8:4f:aa:16:e3:8f:e1:03:93:
63:e0:db:58:1d:35:51:89:aa:72:86:2d:78:42:ef:bd:3c:54:
43:e0:53:9b:42:a7:fb:7d:8d:3c:1b:48:58:25:fe:ff:cb:c7:
77:f3:dc:01:d6:21:fb:b4:16:10:86:d5:6a:53:0d:f0:bb:18:
b3:ae:20:7e:7f:1c:1c:6b:b3:0c:a0:06:c1:e3:88:b4:14:79:
20:64:d6:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:46:32 2026 by rpki-client