Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/fd22ad-f792-475c-8bae-26024e2a5f3e/1/ije4wOFZfNHaZcmgf6wFrNhEzGo.mft
File: ije4wOFZfNHaZcmgf6wFrNhEzGo.mft (raw, json)
Hash identifier: 6LVPRpp+e2fz9FDBtaxjmZN1tQYH3DgBzf943HOA6Iw=
Subject key identifier: AA:B5:68:24:E4:06:5A:74:9D:9A:AE:93:A8:7D:0F:AD:50:1F:DB:01
Authority key identifier: 8A:37:B8:C0:E1:59:7C:D1:DA:65:C9:A0:7F:AC:05:AC:D8:44:CC:6A
Certificate issuer: /CN=8a37b8c0e1597cd1da65c9a07fac05acd844cc6a
Certificate serial: 019D98F46C89BFC0A5B6F44D4E33AC0D4B13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ije4wOFZfNHaZcmgf6wFrNhEzGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/fd22ad-f792-475c-8bae-26024e2a5f3e/1/ije4wOFZfNHaZcmgf6wFrNhEzGo.mft
Manifest number: 13AD
Signing time: Fri 17 Apr 2026 01:00:48 +0000
Manifest this update: Fri 17 Apr 2026 01:00:48 +0000
Manifest next update: Sat 18 Apr 2026 01:00:48 +0000
Files and hashes: 1: ije4wOFZfNHaZcmgf6wFrNhEzGo.crl (hash: UkjlckMoIkZ/tICZ3ksiJOrP6MicpXkzrYz9eae9Qb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/fd22ad-f792-475c-8bae-26024e2a5f3e/1/ije4wOFZfNHaZcmgf6wFrNhEzGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/fd22ad-f792-475c-8bae-26024e2a5f3e/1/ije4wOFZfNHaZcmgf6wFrNhEzGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ije4wOFZfNHaZcmgf6wFrNhEzGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:6c:89:bf:c0:a5:b6:f4:4d:4e:33:ac:0d:4b:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a37b8c0e1597cd1da65c9a07fac05acd844cc6a
Validity
Not Before: Apr 17 01:00:48 2026 GMT
Not After : Apr 18 01:00:48 2026 GMT
Subject: CN=aab56824e4065a749d9aae93a87d0fad501fdb01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:34:b0:72:4b:14:91:0b:d8:20:e6:dc:a0:e3:
7c:8e:69:38:bc:34:08:cf:29:1a:dd:65:78:ae:79:
c5:99:b5:7d:87:4d:46:2e:53:ce:8d:fe:b0:9f:f0:
14:c2:dc:31:ac:3f:4f:ba:f6:cd:30:7f:71:7a:17:
e0:16:05:21:fa:cf:ba:b2:27:3e:45:de:5e:90:d9:
77:2b:0d:d1:d2:89:7e:89:2e:a0:4a:36:1a:b2:fb:
20:b3:bc:b8:07:ee:c6:b4:7b:6f:48:63:d2:21:e9:
7f:a5:d1:5c:44:e1:05:a7:d0:9a:0c:e1:55:4c:ab:
6c:07:5c:17:54:8b:97:1d:17:52:ed:40:87:ed:00:
40:f8:08:a2:57:4c:e8:f6:1d:9a:44:78:89:a7:04:
d1:cd:fd:c1:85:5c:30:e2:7e:e2:6b:84:90:0a:50:
e0:17:58:e5:d2:f2:34:6d:1a:c4:b6:11:76:fc:36:
06:d7:52:b6:75:8b:db:4e:81:60:fd:e0:4a:7b:89:
fa:2d:8b:a1:e8:ef:a5:07:9f:79:e4:27:f9:ed:84:
b3:7b:e6:a9:30:31:64:21:4a:30:f0:fb:95:c3:96:
0f:d5:13:48:bd:81:8d:25:a4:e0:8b:74:a1:78:c8:
56:b8:5f:35:ad:e3:75:5d:51:71:13:92:07:c0:7b:
f5:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:B5:68:24:E4:06:5A:74:9D:9A:AE:93:A8:7D:0F:AD:50:1F:DB:01
X509v3 Authority Key Identifier:
keyid:8A:37:B8:C0:E1:59:7C:D1:DA:65:C9:A0:7F:AC:05:AC:D8:44:CC:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ije4wOFZfNHaZcmgf6wFrNhEzGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/fd22ad-f792-475c-8bae-26024e2a5f3e/1/ije4wOFZfNHaZcmgf6wFrNhEzGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/fd22ad-f792-475c-8bae-26024e2a5f3e/1/ije4wOFZfNHaZcmgf6wFrNhEzGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:0c:81:21:15:c9:5b:f7:5d:2f:97:48:c8:92:1a:0a:c9:3b:
65:2b:e4:69:cc:8a:af:1e:9b:5a:3a:3d:28:86:ac:5f:16:58:
94:43:da:15:29:8c:2d:8b:75:0f:f9:cd:8e:32:40:45:83:2d:
65:2c:b9:9d:03:29:6d:8b:80:f4:7b:b1:d9:c1:9a:ea:31:83:
50:70:4a:65:10:0e:14:1a:b3:3d:d8:a3:ec:8f:d4:11:06:0b:
81:4a:4b:0d:70:e5:1a:b0:86:c2:26:86:be:37:40:50:24:50:
fc:3e:ca:b0:35:fc:b9:75:8e:72:2f:0a:32:1a:eb:bd:fe:44:
fe:df:24:e7:5e:cb:1a:64:8c:e3:7c:e6:2d:ee:11:1d:1c:f0:
86:c6:85:b9:ce:ca:9e:c9:72:43:d5:0c:7f:01:dc:38:62:08:
3b:35:e0:a7:d9:61:9c:05:cf:47:01:e1:37:bc:8c:3e:d7:8c:
02:70:db:5d:80:36:a5:a5:74:87:52:7f:48:49:4c:c2:9b:89:
ca:e5:b7:8a:38:1a:86:e3:d8:16:47:bb:2e:4c:cc:57:7c:14:
10:31:a8:92:47:6e:27:67:7c:ff:78:e2:ea:78:31:65:c7:fb:
ed:fa:18:14:ef:d7:48:2f:15:ac:b7:63:56:33:b5:63:46:cd:
e4:45:00:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9GyJv8CltvRNTjOsDUsTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhMzdiOGMwZTE1OTdjZDFkYTY1YzlhMDdmYWMwNWFjZDg0
NGNjNmEwHhcNMjYwNDE3MDEwMDQ4WhcNMjYwNDE4MDEwMDQ4WjAzMTEwLwYDVQQD
EyhhYWI1NjgyNGU0MDY1YTc0OWQ5YWFlOTNhODdkMGZhZDUwMWZkYjAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzSwcksUkQvYIObcoON8jmk4vDQI
zyka3WV4rnnFmbV9h01GLlPOjf6wn/AUwtwxrD9PuvbNMH9xehfgFgUh+s+6sic+
Rd5ekNl3Kw3R0ol+iS6gSjYasvsgs7y4B+7GtHtvSGPSIel/pdFcROEFp9CaDOFV
TKtsB1wXVIuXHRdS7UCH7QBA+AiiV0zo9h2aRHiJpwTRzf3BhVww4n7ia4SQClDg
F1jl0vI0bRrEthF2/DYG11K2dYvbToFg/eBKe4n6LYuh6O+lB5955Cf57YSze+ap
MDFkIUow8PuVw5YP1RNIvYGNJaTgi3SheMhWuF81reN1XVFxE5IHwHv1fQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKq1aCTkBlp0nZquk6h9D61QH9sBMB8GA1UdIwQY
MBaAFIo3uMDhWXzR2mXJoH+sBazYRMxqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWplNHdPRlpmTkhhWmNtZ2Y2d0ZyTmhFekdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9mZDIyYWQtZjc5Mi00NzVjLThiYWUt
MjYwMjRlMmE1ZjNlLzEvaWplNHdPRlpmTkhhWmNtZ2Y2d0ZyTmhFekdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9mZDIyYWQtZjc5Mi00NzVjLThiYWUtMjYwMjRlMmE1ZjNl
LzEvaWplNHdPRlpmTkhhWmNtZ2Y2d0ZyTmhFekdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARgyBIRXJ
W/ddL5dIyJIaCsk7ZSvkacyKrx6bWjo9KIasXxZYlEPaFSmMLYt1D/nNjjJARYMt
ZSy5nQMpbYuA9Hux2cGa6jGDUHBKZRAOFBqzPdij7I/UEQYLgUpLDXDlGrCGwiaG
vjdAUCRQ/D7KsDX8uXWOci8KMhrrvf5E/t8k517LGmSM43zmLe4RHRzwhsaFuc7K
nslyQ9UMfwHcOGIIOzXgp9lhnAXPRwHhN7yMPteMAnDbXYA2paV0h1J/SElMwpuJ
yuW3ijgahuPYFke7LkzMV3wUEDGokkduJ2d8/3ji6ngxZcf77foYFO/XSC8VrLdj
VjO1Y0bN5EUAxA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:45:11 2026 by rpki-client