Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.mft
File: IGfzCg2Q0tFymS6a6m9znQGyh5I.mft (raw, json)
Hash identifier: ZHf+O2zOCZDP4zuspgCeV509r7HPVeR6yjc6L2DpNOc=
Subject key identifier: D4:E7:2A:5F:C9:B9:1B:68:12:E2:98:48:A9:F3:B8:3B:9F:DA:48:23
Authority key identifier: 20:67:F3:0A:0D:90:D2:D1:72:99:2E:9A:EA:6F:73:9D:01:B2:87:92
Certificate issuer: /CN=2067f30a0d90d2d172992e9aea6f739d01b28792
Certificate serial: 019DA453E8C805967ECD3E9357C4952C957B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IGfzCg2Q0tFymS6a6m9znQGyh5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.mft
Manifest number: 0B8E
Signing time: Sun 19 Apr 2026 06:00:55 +0000
Manifest this update: Sun 19 Apr 2026 06:00:55 +0000
Manifest next update: Mon 20 Apr 2026 06:00:55 +0000
Files and hashes: 1: IGfzCg2Q0tFymS6a6m9znQGyh5I.crl (hash: SLM6vX0K+NJGgpUExg5ceoWEcjF1q4L0Ov/G9TOlUQE=)
2: PiRgJdP5MCWuU1jNKZLwDVvXfxA.roa (hash: cpBd4dfM6upcsIz22a2feCu0xP3o+cF4Qb/mGhUm2S0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/IGfzCg2Q0tFymS6a6m9znQGyh5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:53:e8:c8:05:96:7e:cd:3e:93:57:c4:95:2c:95:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2067f30a0d90d2d172992e9aea6f739d01b28792
Validity
Not Before: Apr 19 06:00:55 2026 GMT
Not After : Apr 20 06:00:55 2026 GMT
Subject: CN=d4e72a5fc9b91b6812e29848a9f3b83b9fda4823
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:1b:67:93:4a:70:21:00:91:82:f2:3e:21:cc:
f4:c0:1a:77:5a:b5:7d:87:46:b3:6e:16:fe:e8:0c:
c4:dd:8d:45:59:dc:17:86:45:0f:71:08:00:00:fa:
e7:09:11:1a:be:5a:e4:ff:2a:a7:5f:d5:ae:25:91:
73:18:ba:cf:ef:e5:f2:d9:c9:95:55:13:db:2a:bb:
7f:97:db:d1:f5:61:d4:d6:dc:0e:8f:7c:72:29:e7:
68:12:00:20:69:6f:ca:31:c8:db:00:5a:07:7a:9a:
17:5f:24:0f:00:6e:c5:98:b7:57:4f:b8:a9:16:1e:
32:0a:55:86:bc:30:42:68:a4:77:b1:60:cf:e4:52:
fd:3c:1b:e5:49:a0:89:5b:fb:3b:7a:07:24:8f:c1:
73:c6:cf:ca:76:60:91:56:50:36:33:31:35:1b:84:
e2:fa:ea:0b:8a:57:cf:40:3e:39:79:db:91:a2:f3:
bf:c0:d6:1d:a2:c3:be:72:78:c8:12:e5:00:e4:ca:
e1:e1:3a:5d:1b:f1:4e:a8:fa:3f:f4:e2:8e:63:6d:
7f:ba:a8:31:5d:e0:f2:ab:d3:a3:e1:a4:08:44:b1:
2a:fa:19:cd:44:b9:1e:81:84:46:4f:61:8f:b2:74:
ac:02:9c:7b:89:9d:0b:3e:c0:fc:be:cd:92:82:b7:
71:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:E7:2A:5F:C9:B9:1B:68:12:E2:98:48:A9:F3:B8:3B:9F:DA:48:23
X509v3 Authority Key Identifier:
keyid:20:67:F3:0A:0D:90:D2:D1:72:99:2E:9A:EA:6F:73:9D:01:B2:87:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IGfzCg2Q0tFymS6a6m9znQGyh5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:1f:51:0d:e7:35:22:44:97:aa:07:78:d7:51:79:a3:98:50:
90:3f:56:7e:b9:13:38:85:5d:fb:dc:5f:b5:b4:2b:27:f3:a9:
96:52:7c:fb:2d:ac:05:a1:c4:0e:bf:1f:b0:66:b2:34:43:8a:
b1:97:d2:46:8b:f1:09:07:f5:ff:db:bf:e4:76:08:b0:6e:ca:
de:f0:d5:90:0a:61:f2:2b:13:4d:2f:bb:42:e3:38:72:ef:16:
91:33:f9:97:38:01:30:a0:04:23:57:31:ab:9b:b5:f6:d2:1b:
94:4b:11:1c:bc:86:a4:01:bf:59:e6:2c:dd:ad:32:82:2a:2f:
b0:71:72:86:54:d7:ec:61:6d:d1:03:4e:d8:1b:ac:50:62:3b:
cc:f0:49:a9:7f:48:e8:b5:e7:1a:03:7c:91:8e:72:ea:ce:71:
d2:5b:64:f7:36:a9:05:4b:38:b5:c0:91:49:e3:05:b6:67:a1:
26:6c:af:f5:79:30:e9:a2:cd:1f:3b:7f:93:e1:66:b5:d4:05:
c4:17:53:3b:de:8a:c4:17:d1:91:3d:db:ba:96:b0:32:2a:5a:
93:78:7a:b9:68:e8:db:de:bf:66:0f:fa:4a:4c:29:76:62:3b:
9a:23:8f:e0:22:bb:14:b8:0f:b6:b1:c5:6d:12:51:7f:93:00:
02:a4:39:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:02:47 2026 by rpki-client