Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a6cffc-be64-4d08-94a6-a15f0e78a5a9/1/Iz44KEEbr6sAbnX9DdX1-e9V7CU.mft
File: Iz44KEEbr6sAbnX9DdX1-e9V7CU.mft (raw, json)
Hash identifier: 85xOhIsLH5vJEc886j6+7CimTENiqHFPKJUarumnmmU=
Subject key identifier: 12:D0:5E:2F:11:BF:3A:FC:E9:D3:43:A5:00:1F:10:0D:09:CB:E3:8D
Authority key identifier: 23:3E:38:28:41:1B:AF:AB:00:6E:75:FD:0D:D5:F5:F9:EF:55:EC:25
Certificate issuer: /CN=233e3828411bafab006e75fd0dd5f5f9ef55ec25
Certificate serial: 019D98BD8F737FEEC4D2C775B112640ABAA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iz44KEEbr6sAbnX9DdX1-e9V7CU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a6cffc-be64-4d08-94a6-a15f0e78a5a9/1/Iz44KEEbr6sAbnX9DdX1-e9V7CU.mft
Manifest number: 156F
Signing time: Fri 17 Apr 2026 00:00:52 +0000
Manifest this update: Fri 17 Apr 2026 00:00:52 +0000
Manifest next update: Sat 18 Apr 2026 00:00:52 +0000
Files and hashes: 1: Iz44KEEbr6sAbnX9DdX1-e9V7CU.crl (hash: s8cGVCrAQISpw3ExFl7DQw0Ti0jqpnlQ3fgAKZMsthA=)
2: UKQ5Gx_xeBxacDeIbWDFvI2sD3w.roa (hash: QrqhBBMsTTwSodsla3NMIT0+aTJqntAImLif4CjmD3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a6cffc-be64-4d08-94a6-a15f0e78a5a9/1/Iz44KEEbr6sAbnX9DdX1-e9V7CU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a6cffc-be64-4d08-94a6-a15f0e78a5a9/1/Iz44KEEbr6sAbnX9DdX1-e9V7CU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iz44KEEbr6sAbnX9DdX1-e9V7CU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:8f:73:7f:ee:c4:d2:c7:75:b1:12:64:0a:ba:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=233e3828411bafab006e75fd0dd5f5f9ef55ec25
Validity
Not Before: Apr 17 00:00:52 2026 GMT
Not After : Apr 18 00:00:52 2026 GMT
Subject: CN=12d05e2f11bf3afce9d343a5001f100d09cbe38d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:00:76:1a:0e:79:15:20:fb:ce:17:9c:ef:f2:
4f:8a:01:cf:4f:96:a3:0c:65:c7:f1:7e:91:1f:fa:
ab:33:4f:21:fb:de:d4:70:11:eb:5f:6a:df:4f:2e:
a1:ba:69:76:aa:03:80:c8:35:31:13:4a:06:04:3d:
1a:0f:9c:cb:ca:13:ce:78:33:e8:fa:6d:e8:f2:3c:
ce:5d:48:4c:d4:6c:79:a5:f2:41:b1:07:ea:0d:9e:
67:04:0d:55:60:b1:00:5b:48:56:cf:23:b2:7f:88:
f4:37:18:97:e7:b2:61:0d:2f:f6:f2:00:28:41:66:
57:63:21:bd:c9:e0:ff:c9:1a:63:40:7f:de:ae:b1:
d4:e7:7f:73:7f:93:87:14:4a:bf:c1:5c:a3:cd:b0:
7b:c3:b8:68:00:a1:80:b5:94:25:91:a4:c5:00:a1:
8c:c7:15:2b:7b:e6:64:9a:f7:d4:15:61:a2:25:e5:
94:c1:4a:9b:c1:80:5e:99:bd:8c:28:6f:e2:23:01:
73:84:35:c7:6a:90:65:22:ab:0b:df:4e:6f:3b:1e:
a4:25:d7:3f:28:96:3a:4f:35:53:5c:80:05:69:55:
b5:3e:7d:51:23:76:71:e2:51:66:c1:a9:6e:9a:87:
b3:6d:c2:cb:bf:35:48:3f:6f:77:4d:02:ac:ff:00:
cc:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:D0:5E:2F:11:BF:3A:FC:E9:D3:43:A5:00:1F:10:0D:09:CB:E3:8D
X509v3 Authority Key Identifier:
keyid:23:3E:38:28:41:1B:AF:AB:00:6E:75:FD:0D:D5:F5:F9:EF:55:EC:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iz44KEEbr6sAbnX9DdX1-e9V7CU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a6cffc-be64-4d08-94a6-a15f0e78a5a9/1/Iz44KEEbr6sAbnX9DdX1-e9V7CU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a6cffc-be64-4d08-94a6-a15f0e78a5a9/1/Iz44KEEbr6sAbnX9DdX1-e9V7CU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:6d:e6:a8:c9:62:dd:eb:02:17:01:38:e8:de:0e:81:73:ba:
43:e6:bd:08:fe:d9:17:6f:bf:6a:51:fb:4d:e6:06:7f:7a:60:
45:7d:a7:26:03:b7:8c:e2:ab:f6:e6:1a:48:da:eb:ff:8e:6b:
f0:3a:64:a1:c3:b4:f1:47:4c:8f:6f:45:b6:6d:78:46:8e:2f:
d4:34:70:1a:54:ac:c8:2b:8a:fb:4a:9b:04:0c:70:95:66:6a:
8d:4c:9b:ff:1e:20:b4:3a:b7:dd:60:6f:c3:6d:e5:8a:02:7b:
31:fb:fb:e7:47:48:22:93:7c:da:4f:a7:2e:1c:64:22:04:3f:
82:e9:e6:dc:40:4f:8d:0e:5e:3c:6b:17:db:5d:20:44:7e:4b:
21:05:f6:48:aa:a9:ec:d3:59:f4:09:a7:50:96:84:87:c1:9f:
3b:57:46:13:f6:5c:41:a7:de:5b:3b:58:82:ba:2f:5b:9a:c7:
63:13:66:ec:54:ce:c9:9f:b4:0f:0a:e1:0f:86:70:aa:14:c8:
1e:26:19:a1:f6:91:c6:a3:35:7a:e6:b9:47:6a:b2:fc:68:f9:
f3:b6:ce:8d:ac:f8:43:93:43:3c:db:02:d8:05:16:9d:d9:cb:
75:75:d1:3c:57:d4:bc:0d:44:c0:08:8e:79:00:63:2a:d6:a1:
e2:4c:90:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:22:54 2026 by rpki-client