Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.mft
File: IUblYKP1ysfGT-DxO-Zj2UyHFFM.mft (raw, json)
Hash identifier: wQHdUfB6eY22WAafUSQpTaeeKEgur0aB929FlGSZmlA=
Subject key identifier: EB:92:6C:30:ED:E5:75:A3:C5:02:0A:33:49:06:F9:70:75:66:AB:4F
Authority key identifier: 21:46:E5:60:A3:F5:CA:C7:C6:4F:E0:F1:3B:E6:63:D9:4C:87:14:53
Certificate issuer: /CN=2146e560a3f5cac7c64fe0f13be663d94c871453
Certificate serial: 019D9A3E412D72C577F9C5895DE2519AE696
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IUblYKP1ysfGT-DxO-Zj2UyHFFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.mft
Manifest number: 0747
Signing time: Fri 17 Apr 2026 07:01:04 +0000
Manifest this update: Fri 17 Apr 2026 07:01:04 +0000
Manifest next update: Sat 18 Apr 2026 07:01:04 +0000
Files and hashes: 1: IUblYKP1ysfGT-DxO-Zj2UyHFFM.crl (hash: 1RcSvn3F+f9BcfpT2OI6sBl2qdeZ8PeUn+dOlPBXRjQ=)
2: LjoyTAIqIdVonXqWj6vk4FoukK0.roa (hash: bQBFj6QQOo1AQBEY/tE2iTw4IsOMKBpMDv9YhAGGsps=)
3: PAUyEeyz0ynlGNIPQlDkGnYP9qw.roa (hash: rPWU+wKJ+ccuMgvRWcLsdSjoKQhoTdU4QLcfL/aRiOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IUblYKP1ysfGT-DxO-Zj2UyHFFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:41:2d:72:c5:77:f9:c5:89:5d:e2:51:9a:e6:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2146e560a3f5cac7c64fe0f13be663d94c871453
Validity
Not Before: Apr 17 07:01:04 2026 GMT
Not After : Apr 18 07:01:04 2026 GMT
Subject: CN=eb926c30ede575a3c5020a334906f9707566ab4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:75:8f:35:8a:5a:d5:c6:89:51:18:5b:ba:7f:
96:35:d2:87:49:56:7d:16:f8:71:7d:f5:d0:fc:ed:
8a:91:05:36:f9:6e:a1:c4:22:62:ca:37:c9:06:80:
0a:13:06:46:8b:3f:d1:ca:c9:a4:ef:13:69:c1:fe:
fc:ec:34:d8:cb:86:68:cf:06:52:a9:c5:7c:10:6d:
52:4e:d3:e8:51:e4:22:6f:d3:49:f0:45:80:6e:13:
11:a1:f8:3f:d9:b3:f3:66:7d:e8:87:ed:d3:5a:52:
6b:8f:17:18:cb:b6:e7:11:22:34:79:63:da:d8:b4:
61:1b:9f:3e:d8:7b:80:85:b1:7b:4c:26:a0:dd:7d:
eb:da:25:14:33:bd:69:02:d7:8c:95:81:df:50:3f:
6a:c3:9f:87:a5:db:27:32:d3:7a:4c:8c:da:58:85:
e3:09:36:69:69:4c:eb:69:6e:65:ed:97:c2:bd:0a:
fa:09:40:37:54:32:0a:d8:5b:6d:c3:cf:34:1a:88:
0b:76:be:43:b1:74:a9:77:a4:cd:78:ce:ad:16:95:
67:a0:82:19:80:48:f4:74:a1:5b:40:16:ab:69:a7:
56:82:27:2f:e8:0a:90:14:af:95:4a:af:15:2c:31:
8d:e9:d5:23:f9:41:88:d0:d5:8b:76:15:99:26:53:
47:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:92:6C:30:ED:E5:75:A3:C5:02:0A:33:49:06:F9:70:75:66:AB:4F
X509v3 Authority Key Identifier:
keyid:21:46:E5:60:A3:F5:CA:C7:C6:4F:E0:F1:3B:E6:63:D9:4C:87:14:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IUblYKP1ysfGT-DxO-Zj2UyHFFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:eb:24:8e:09:14:8d:14:a1:f2:96:ca:e5:fd:22:56:79:27:
26:e6:73:5b:41:33:35:00:29:98:2e:1e:50:75:02:3f:6a:fa:
44:d4:1a:3d:cb:5d:89:f6:7c:a2:67:74:94:3e:5f:82:fa:1a:
6f:03:f8:8b:48:79:69:17:ad:03:fb:6d:ba:a0:0e:4d:3d:a3:
78:1d:00:1c:06:04:31:72:ac:59:ec:38:ae:f7:83:a8:fe:b3:
74:41:61:b6:31:8e:84:17:0c:ed:81:79:e6:6b:a8:1a:91:25:
20:13:92:35:8c:c2:c4:b3:88:f0:ea:64:7c:9d:0f:f7:a7:cb:
e3:a2:c5:0f:2a:55:a3:7d:48:d3:07:e9:08:5a:74:91:b5:27:
b7:db:63:b4:96:fe:dc:75:30:c7:81:9b:fa:2d:fc:c5:07:01:
b8:82:a9:49:23:24:69:05:9c:09:e8:f5:3f:23:21:46:39:0d:
34:34:16:a8:cb:54:e7:a1:2b:10:d6:62:50:1a:94:d6:96:3e:
7e:18:85:45:78:6e:63:22:80:bd:cf:6b:2e:71:ad:7a:0f:4a:
02:ac:af:fd:d2:a9:50:24:81:da:7f:a2:10:ee:42:ec:be:f0:
4b:b9:4d:ff:31:05:2b:12:7a:2f:fd:9a:da:d7:b8:d3:a5:6e:
77:36:9a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:20:01 2026 by rpki-client