Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1d7f08-e77c-4338-9a39-8e19c0db86c2/1/I5Vy3fyrYpHmQQzNToYO42AA5mg.mft
File: I5Vy3fyrYpHmQQzNToYO42AA5mg.mft (raw, json)
Hash identifier: ZtLTnPlftY9Zq4Oyl5jkg0aGXtO0w42zlVEj6yn/zP4=
Subject key identifier: FB:E8:0B:AA:D6:5B:11:77:20:03:AE:1F:7A:20:7D:AD:DF:53:C8:98
Authority key identifier: 23:95:72:DD:FC:AB:62:91:E6:41:0C:CD:4E:86:0E:E3:60:00:E6:68
Certificate issuer: /CN=239572ddfcab6291e6410ccd4e860ee36000e668
Certificate serial: 019DA453FB3FE0E6032E353349914D5F5DD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I5Vy3fyrYpHmQQzNToYO42AA5mg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/1d7f08-e77c-4338-9a39-8e19c0db86c2/1/I5Vy3fyrYpHmQQzNToYO42AA5mg.mft
Manifest number: 18C9
Signing time: Sun 19 Apr 2026 06:01:00 +0000
Manifest this update: Sun 19 Apr 2026 06:01:00 +0000
Manifest next update: Mon 20 Apr 2026 06:01:00 +0000
Files and hashes: 1: I5Vy3fyrYpHmQQzNToYO42AA5mg.crl (hash: 8gpjufQ15TOedATnNgpNlHuE5kXTxSpTRzvWG6IMQIE=)
2: MkZDnhBWSDVFNPdTIbLySY13AZo.roa (hash: G0tZaVek6hHuGJJA8eubBZEIhMXdNUS6nfdqgnLslHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/1d7f08-e77c-4338-9a39-8e19c0db86c2/1/I5Vy3fyrYpHmQQzNToYO42AA5mg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/1d7f08-e77c-4338-9a39-8e19c0db86c2/1/I5Vy3fyrYpHmQQzNToYO42AA5mg.mft
rsync://rpki.ripe.net/repository/DEFAULT/I5Vy3fyrYpHmQQzNToYO42AA5mg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:53:fb:3f:e0:e6:03:2e:35:33:49:91:4d:5f:5d:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=239572ddfcab6291e6410ccd4e860ee36000e668
Validity
Not Before: Apr 19 06:01:00 2026 GMT
Not After : Apr 20 06:01:00 2026 GMT
Subject: CN=fbe80baad65b11772003ae1f7a207daddf53c898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3f:c9:76:9d:39:a1:f7:47:e6:db:e6:b3:82:
56:0b:60:d4:04:ee:61:01:f7:d8:5e:07:af:f8:fd:
b9:ec:16:7a:dc:1c:b0:5e:b3:61:12:f1:73:1c:05:
0b:59:66:61:ec:39:86:b3:8f:2d:66:4b:cc:b6:12:
ac:8c:be:28:67:cb:d4:ff:ca:8f:36:b6:64:c8:27:
25:5c:7a:20:35:dc:39:c8:33:2d:45:79:da:71:a5:
e6:a8:a8:de:06:88:13:d4:ae:d3:0a:2b:56:4c:62:
bd:97:82:d2:7c:41:3f:f5:1b:cc:a4:c5:23:e4:9c:
4e:c5:6b:24:87:5b:1d:eb:9f:9f:25:b5:1a:9a:ab:
b0:39:0a:7f:35:f7:12:2e:fb:36:9d:3a:e9:11:43:
cc:a8:44:1c:d6:bc:31:a8:eb:9c:24:91:a6:51:c0:
83:50:d8:84:c2:83:60:0e:9a:86:2e:2f:74:3b:96:
20:4e:fa:33:96:aa:4c:81:b5:a1:07:bd:d0:c7:3f:
82:02:59:2a:5d:89:6a:a3:0c:d0:30:f1:7f:f1:88:
b9:bc:f5:be:11:6d:1e:9c:fe:7a:f9:47:e5:51:89:
d4:f8:4e:7d:35:de:86:fb:b7:ed:91:43:d9:f6:42:
68:92:63:d3:ac:6a:ea:3b:7d:c9:7e:8a:6b:1d:42:
94:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:E8:0B:AA:D6:5B:11:77:20:03:AE:1F:7A:20:7D:AD:DF:53:C8:98
X509v3 Authority Key Identifier:
keyid:23:95:72:DD:FC:AB:62:91:E6:41:0C:CD:4E:86:0E:E3:60:00:E6:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I5Vy3fyrYpHmQQzNToYO42AA5mg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1d7f08-e77c-4338-9a39-8e19c0db86c2/1/I5Vy3fyrYpHmQQzNToYO42AA5mg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1d7f08-e77c-4338-9a39-8e19c0db86c2/1/I5Vy3fyrYpHmQQzNToYO42AA5mg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:e2:b6:f0:39:47:3f:75:7c:4e:a2:1e:d9:5a:0d:38:f8:2c:
37:82:66:7a:85:19:2a:5f:91:2f:ce:e6:d0:4d:8a:8e:f1:c9:
63:c2:59:31:a0:f0:2b:22:7f:85:92:ef:88:94:31:a0:17:f4:
03:3d:fe:41:90:eb:0e:66:76:64:0b:48:20:49:b8:34:4b:d1:
db:bd:04:b9:6f:30:09:fa:6e:29:8e:37:36:cd:9c:4d:aa:2b:
b5:88:2d:0a:8b:1a:a9:b0:e3:25:e2:5f:c8:ce:ac:68:b3:25:
89:c5:6a:58:fb:87:eb:ab:95:98:4e:83:49:39:ae:77:1c:30:
6f:44:b1:51:85:65:d3:48:92:27:29:47:d9:22:a6:42:ab:7b:
bf:10:e5:58:a7:2d:7c:df:7a:76:4f:4b:90:2f:39:f9:07:c4:
77:06:ab:17:a0:8e:4c:c4:84:e8:fd:e7:1f:91:77:82:33:58:
54:cd:dc:72:41:aa:fc:55:e1:7c:d4:cc:b7:60:e0:f8:c5:2b:
ba:32:0d:d7:df:9f:b3:cd:b9:c9:fe:6b:c0:1a:54:28:52:ad:
d3:7d:85:a9:b3:94:04:f1:87:d4:1f:09:04:aa:39:6a:27:c0:
79:b9:4a:05:ff:d5:03:c1:31:d7:92:dd:de:d7:c8:3b:e6:5c:
c4:3e:8d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:55:18 2026 by rpki-client