Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/50ca35-bde6-4508-b80f-236789587997/1/Iss2-FBsEYv8QfXa42ImSpaBSZA.mft
File: Iss2-FBsEYv8QfXa42ImSpaBSZA.mft (raw, json)
Hash identifier: h2BzlJtvSuBlofj/F2vEpFlf2FEXqw8xhaS782psYAg=
Subject key identifier: B4:E4:58:D7:87:6E:C3:17:22:68:1A:6C:85:5D:54:55:EE:DF:C6:68
Authority key identifier: 22:CB:36:F8:50:6C:11:8B:FC:41:F5:DA:E3:62:26:4A:96:81:49:90
Certificate issuer: /CN=22cb36f8506c118bfc41f5dae362264a96814990
Certificate serial: 019D9F64A42A0CDF3E5237BF563E6E021026
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iss2-FBsEYv8QfXa42ImSpaBSZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/50ca35-bde6-4508-b80f-236789587997/1/Iss2-FBsEYv8QfXa42ImSpaBSZA.mft
Manifest number: 01BC
Signing time: Sat 18 Apr 2026 07:01:06 +0000
Manifest this update: Sat 18 Apr 2026 07:01:06 +0000
Manifest next update: Sun 19 Apr 2026 07:01:06 +0000
Files and hashes: 1: DUhtAD3_xxy9gOvcTDplBUTPnms.roa (hash: v0tLLjc7rS1SBtzsfai4mMe4+DHfyEXAvDNb2xkmOp4=)
2: Iss2-FBsEYv8QfXa42ImSpaBSZA.crl (hash: OQcftbCIgGuwmCryiZrOLeLOpOrVjAZKN1LJ1I7ZkNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/50ca35-bde6-4508-b80f-236789587997/1/Iss2-FBsEYv8QfXa42ImSpaBSZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/50ca35-bde6-4508-b80f-236789587997/1/Iss2-FBsEYv8QfXa42ImSpaBSZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iss2-FBsEYv8QfXa42ImSpaBSZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 01:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9f:64:a4:2a:0c:df:3e:52:37:bf:56:3e:6e:02:10:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22cb36f8506c118bfc41f5dae362264a96814990
Validity
Not Before: Apr 18 07:01:06 2026 GMT
Not After : Apr 19 07:01:06 2026 GMT
Subject: CN=b4e458d7876ec31722681a6c855d5455eedfc668
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:03:5b:c1:0c:ba:7e:fd:c5:d0:cc:c6:bf:42:
c2:d2:84:f0:ac:2e:40:29:7c:0d:a0:07:56:7a:3e:
f8:23:cb:39:03:97:64:d5:7a:5a:c1:71:fd:74:66:
a9:77:72:b9:b2:b7:55:ea:e8:c9:e8:cb:2a:fb:cd:
b8:75:96:3f:97:6a:af:f6:fe:26:99:89:64:f0:14:
bc:0b:cc:a9:e4:04:e6:29:97:02:45:60:6d:98:f5:
3f:64:8e:c8:4c:84:c7:da:f3:25:21:c0:89:25:73:
c6:d6:2f:66:fb:57:7a:12:e3:29:39:09:bc:f1:fb:
68:09:1a:3c:74:08:4b:f1:d5:aa:7c:68:34:8d:04:
ca:87:ca:43:ac:75:8d:38:63:bb:7c:d9:b7:00:11:
16:09:0d:38:42:6c:1e:c9:76:2c:61:d0:09:7f:36:
34:f6:10:8b:3e:e0:7f:d5:ad:e1:6c:a0:71:9c:24:
d2:d0:d6:42:f3:fc:6c:63:48:33:52:cb:b0:60:80:
71:f9:49:6a:ce:ea:63:7d:5e:2a:2f:6c:53:b4:19:
3b:95:9d:18:c8:4b:b9:c3:3a:82:84:36:55:76:a5:
9f:a7:7b:43:b1:6a:1d:43:6f:7e:f2:68:71:ec:98:
1a:e0:d8:95:03:05:22:e3:1b:ec:21:86:17:12:32:
f4:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:E4:58:D7:87:6E:C3:17:22:68:1A:6C:85:5D:54:55:EE:DF:C6:68
X509v3 Authority Key Identifier:
keyid:22:CB:36:F8:50:6C:11:8B:FC:41:F5:DA:E3:62:26:4A:96:81:49:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iss2-FBsEYv8QfXa42ImSpaBSZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/50ca35-bde6-4508-b80f-236789587997/1/Iss2-FBsEYv8QfXa42ImSpaBSZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/50ca35-bde6-4508-b80f-236789587997/1/Iss2-FBsEYv8QfXa42ImSpaBSZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:2c:d5:ef:c6:a5:22:6a:0a:96:0e:37:8f:e2:1c:ff:d0:25:
4d:db:50:31:77:aa:26:a9:a1:f7:74:36:ca:9b:91:c5:3e:1d:
7b:7e:c9:43:63:0e:da:c0:b1:54:b2:1d:84:a8:5d:92:dc:ac:
f5:d8:17:da:61:85:1f:6f:a0:33:b7:ea:bb:97:84:30:88:2a:
0c:d6:67:8a:07:cb:41:d8:27:b3:4b:66:5a:17:15:08:64:5d:
9c:62:05:3f:53:64:8f:da:d9:6d:c7:5d:5d:77:7f:89:7a:94:
ad:0a:5e:01:78:09:c6:46:3a:c5:2a:06:b3:b9:20:27:68:ea:
9b:3e:c9:76:04:40:a7:38:3b:dd:38:cd:00:4e:b5:a7:e5:6e:
c3:fe:af:0f:22:17:77:13:30:48:21:bf:26:32:f5:b8:c5:be:
4d:54:1b:ee:72:91:eb:bf:75:88:00:e5:99:4f:bd:71:ec:20:
c0:94:98:47:f5:7f:9a:f6:f7:23:2e:57:ff:c5:ae:0a:cb:34:
4c:da:80:e1:ef:20:95:5e:4d:ed:45:f9:ee:e2:d3:cf:28:69:
4b:3b:53:da:0c:ac:fb:3c:16:99:91:d7:45:a9:9a:33:0e:a5:
46:46:cb:b6:fd:aa:1d:f8:12:d2:e1:d4:59:86:cd:01:04:57:
84:3c:e8:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 10:27:24 2026 by rpki-client