Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.mft
File: IJ2ng837PLbZvILBktbXKrtKM20.mft (raw, json)
Hash identifier: fhpTxrfUetMG/44begisaoFsT30ICblwuO6344Vtcv4=
Subject key identifier: C6:EF:1B:4B:92:D9:C8:34:2E:76:88:9B:71:DE:2C:FC:34:9E:CE:56
Authority key identifier: 20:9D:A7:83:CD:FB:3C:B6:D9:BC:82:C1:92:D6:D7:2A:BB:4A:33:6D
Certificate issuer: /CN=209da783cdfb3cb6d9bc82c192d6d72abb4a336d
Certificate serial: 019D9A3E2661D37698C30ABAED90625AB6AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IJ2ng837PLbZvILBktbXKrtKM20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.mft
Manifest number: 0503
Signing time: Fri 17 Apr 2026 07:00:57 +0000
Manifest this update: Fri 17 Apr 2026 07:00:57 +0000
Manifest next update: Sat 18 Apr 2026 07:00:57 +0000
Files and hashes: 1: 3xmlsxTNDAPRt4_0q9JN37-J_fo.roa (hash: hrh+PtmNTziEnO3zB1N3sBXi6xmDSdZWbvKSyvj1sho=)
2: IJ2ng837PLbZvILBktbXKrtKM20.crl (hash: 9XwyjC+1h8se8135zfx57koaSdZj7TyI9srXntZsY7A=)
3: pmOgP6lJVCEt59Qkk4t1jrCJur0.roa (hash: jMdmf86ejjzlc+CFJdZFf5qZkdpQs78Wj3mu5HwUV0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.mft
rsync://rpki.ripe.net/repository/DEFAULT/IJ2ng837PLbZvILBktbXKrtKM20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:26:61:d3:76:98:c3:0a:ba:ed:90:62:5a:b6:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=209da783cdfb3cb6d9bc82c192d6d72abb4a336d
Validity
Not Before: Apr 17 07:00:57 2026 GMT
Not After : Apr 18 07:00:57 2026 GMT
Subject: CN=c6ef1b4b92d9c8342e76889b71de2cfc349ece56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0c:20:c9:54:59:12:4b:06:85:94:e1:df:2b:
e3:49:1e:5f:86:d7:0c:1b:27:3b:b2:a9:6f:66:64:
4c:a5:45:d9:08:55:31:d1:fd:8f:ef:7f:6c:d9:ab:
73:b7:91:7f:78:41:60:ad:d6:b7:91:e6:0b:46:7b:
4e:ac:31:e3:6c:9f:fa:17:78:4b:ba:d5:f2:e3:e2:
2c:36:e7:64:f5:5c:42:bf:50:36:75:9b:47:de:03:
2c:15:3e:74:d2:ae:a2:b8:36:31:11:a0:a0:a5:a6:
de:8e:7b:9d:41:dc:45:35:c8:91:97:10:e3:f6:56:
b9:c4:91:94:c0:9d:f2:af:08:8f:6c:c6:7b:92:5a:
5c:ec:b0:14:c6:5c:ea:6f:b4:62:24:7b:f5:47:6b:
01:fa:ec:a2:84:2b:86:f4:42:3c:c2:3a:6d:89:ca:
b1:ca:f1:03:fd:ef:6d:e5:0d:7a:f7:d0:81:bb:c8:
ce:28:af:f0:43:7a:59:33:08:85:e5:72:b3:db:97:
b8:9d:23:05:97:43:50:c3:d3:4b:a3:1e:91:bd:31:
df:e5:a1:6b:4c:97:28:0a:b2:2f:fa:f0:17:cf:9b:
09:35:99:92:37:b6:df:72:00:49:d2:d6:57:96:8f:
c5:05:02:bf:f1:08:3f:dc:57:73:15:76:1f:44:ab:
07:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:EF:1B:4B:92:D9:C8:34:2E:76:88:9B:71:DE:2C:FC:34:9E:CE:56
X509v3 Authority Key Identifier:
keyid:20:9D:A7:83:CD:FB:3C:B6:D9:BC:82:C1:92:D6:D7:2A:BB:4A:33:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IJ2ng837PLbZvILBktbXKrtKM20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:78:76:ca:e7:17:39:f7:cd:05:82:0d:dd:2d:58:e4:e4:11:
0f:b5:db:77:13:31:0b:ba:c8:4c:fc:4e:4d:16:e5:63:b1:9c:
86:77:6a:2a:36:b9:b5:91:70:fe:53:4a:f6:56:6c:3f:e0:db:
d7:95:6a:b5:09:f2:29:71:6d:1d:87:62:25:59:ab:9d:ae:53:
af:49:0b:19:54:b8:51:30:0f:62:5b:49:f2:a1:d3:55:e4:dd:
ae:c9:11:d8:c3:43:16:d2:55:c4:61:03:b2:f5:3d:94:3b:92:
7e:f8:67:00:67:e7:2f:1a:01:5e:04:68:ae:c9:dc:00:fe:b7:
d1:84:2f:e9:fa:2d:89:31:ac:23:a0:f5:96:48:c7:54:17:31:
16:5f:b3:e5:9d:f7:21:f7:66:9d:21:88:2a:e6:2c:d9:a8:50:
51:0b:8f:ff:29:fe:70:b0:ed:53:5b:20:fa:1b:cd:47:04:c8:
92:ac:01:0b:f1:1a:39:08:70:a2:d2:8c:a2:2b:cb:da:c3:2d:
d7:76:ae:10:67:46:38:91:53:4f:e1:ee:17:70:d0:2c:8d:24:
5e:6d:80:30:17:df:11:68:d8:d2:ba:ea:d1:b0:bc:73:4e:75:
82:aa:a2:47:cc:d5:7f:bf:a6:f2:2e:e6:fe:94:fe:aa:1d:dd:
b8:50:cf:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:32:49 2026 by rpki-client