Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft
File: ifKArlGVUMen9JU6sn16593rE0E.mft (raw, json)
Hash identifier: wsJmsgnidz36ElWBg6oj1KDZ8LYX0k1jAA655QKcf+Y=
Subject key identifier: D5:02:F8:95:25:A0:38:85:36:64:AE:23:D8:24:37:34:16:80:86:8D
Authority key identifier: 89:F2:80:AE:51:95:50:C7:A7:F4:95:3A:B2:7D:7A:E7:DD:EB:13:41
Certificate issuer: /CN=89f280ae519550c7a7f4953ab27d7ae7ddeb1341
Certificate serial: 019DA567211E30D80672C6761CA3E2C84529
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ifKArlGVUMen9JU6sn16593rE0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft
Manifest number: 185A
Signing time: Sun 19 Apr 2026 11:01:32 +0000
Manifest this update: Sun 19 Apr 2026 11:01:32 +0000
Manifest next update: Mon 20 Apr 2026 11:01:32 +0000
Files and hashes: 1: 6CW7JYEKskJr6yo0DDu4CWa4jUI.roa (hash: adF3q2VLnpMi1Z/r5xi4cFiAP5apevVr8J5nUI/Kilc=)
2: ifKArlGVUMen9JU6sn16593rE0E.crl (hash: e/z0/Zy7s3lX5fZeSZpIpNTCsNpgZJqK4U+DrUTc080=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ifKArlGVUMen9JU6sn16593rE0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:67:21:1e:30:d8:06:72:c6:76:1c:a3:e2:c8:45:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89f280ae519550c7a7f4953ab27d7ae7ddeb1341
Validity
Not Before: Apr 19 11:01:32 2026 GMT
Not After : Apr 20 11:01:32 2026 GMT
Subject: CN=d502f89525a038853664ae23d82437341680868d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:a8:46:16:ec:9e:3e:87:79:76:a1:31:79:40:
82:61:23:6b:72:e0:0c:30:d9:ff:7c:0f:57:a2:1c:
6a:9a:4e:50:ba:88:57:aa:b0:1d:d7:34:18:28:94:
4d:d9:73:57:f2:3d:f1:bf:f3:04:b8:55:23:92:90:
c1:01:c3:b2:6e:63:e5:ad:84:88:c1:da:ed:3d:ec:
35:d2:7d:a7:1e:40:bf:84:61:8a:5c:af:19:60:d9:
ff:df:d9:7c:34:da:b6:18:a5:c0:fa:cc:f7:d1:6f:
8d:7a:74:75:92:e0:83:cc:bb:fd:f9:6b:cf:ea:a5:
cb:5b:97:f1:5a:60:db:e0:52:83:85:85:6b:18:0d:
85:c4:c5:6f:f8:d9:8b:f9:d4:05:b9:07:0f:c4:09:
46:b2:8d:5c:9c:7c:98:9d:03:ec:8d:8b:19:50:fd:
59:9f:93:66:29:d5:d2:f9:9b:e8:5e:06:b2:9d:de:
7f:ce:df:8b:92:2f:e0:5d:54:0e:74:6b:cf:97:ee:
d2:9c:d7:32:ea:79:c0:55:8b:2b:82:9d:65:a0:74:
fe:1e:5b:f2:89:50:fb:09:b6:ce:7e:1a:97:61:89:
4d:3b:73:7c:9f:c2:0d:ce:25:0f:c4:c5:df:dc:d0:
c1:27:a6:47:c7:af:a3:60:e6:17:6d:65:b5:9a:21:
3d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:02:F8:95:25:A0:38:85:36:64:AE:23:D8:24:37:34:16:80:86:8D
X509v3 Authority Key Identifier:
keyid:89:F2:80:AE:51:95:50:C7:A7:F4:95:3A:B2:7D:7A:E7:DD:EB:13:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ifKArlGVUMen9JU6sn16593rE0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:dc:c8:df:f5:60:f5:60:44:ba:79:83:7d:51:43:66:81:d7:
de:6a:ea:1f:45:7d:e9:a9:92:b8:e4:37:5c:ce:83:0b:27:65:
b5:84:70:6d:45:8e:ee:2e:d0:fe:9c:6b:55:fb:b9:06:7b:40:
e4:66:85:8c:7a:c0:33:29:ef:1d:92:22:6c:87:30:9c:7b:f5:
87:fc:97:55:64:64:19:9a:4c:80:07:4f:8f:62:e5:41:34:4c:
92:e7:30:1e:22:8b:31:ea:b8:53:05:c2:ca:7c:4a:4a:1e:8f:
62:c9:14:93:a4:62:59:f1:e5:2b:72:8e:e5:2e:bb:dc:91:5e:
5c:80:27:31:9a:b9:db:47:bc:a6:77:6f:86:e9:b0:6b:e7:40:
69:36:33:d6:d1:7c:b7:d5:68:86:59:cc:23:e4:28:75:83:2e:
6b:aa:35:e8:ce:e9:48:ff:72:b1:89:a5:2b:6f:f7:68:94:bf:
9e:4d:b4:4f:ff:22:58:c3:73:5a:ee:ca:91:0a:e1:d2:4f:d4:
b4:cb:c5:e5:52:8f:4b:aa:8b:1b:e2:15:71:4b:dc:f4:47:18:
fa:c4:74:64:8e:dd:17:b2:32:52:71:59:58:43:5e:14:83:da:
8a:fd:57:be:42:9e:8b:1f:df:71:02:83:90:d6:64:29:69:e7:
c3:37:3a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:54:26 2026 by rpki-client