Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/bb8b5c-4964-442d-aa7f-3fc54a76ced5/1/I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.mft
File: I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.mft (raw, json)
Hash identifier: uvdtMc6Urfv0viX1JK/IHIZqeLtCF5cKvyxeovBvLW8=
Subject key identifier: 18:F3:9F:1F:86:CA:0C:2C:C3:C0:BD:F1:EF:3E:A5:66:A6:7C:BA:94
Authority key identifier: 23:FD:1A:A1:9E:59:32:F2:4C:27:77:E7:EC:18:D8:A6:CA:92:4C:5E
Certificate issuer: /CN=23fd1aa19e5932f24c2777e7ec18d8a6ca924c5e
Certificate serial: 019DA41CB8744CB59E6BA41E44D2B64A3CBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/bb8b5c-4964-442d-aa7f-3fc54a76ced5/1/I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.mft
Manifest number: 68
Signing time: Sun 19 Apr 2026 05:00:38 +0000
Manifest this update: Sun 19 Apr 2026 05:00:38 +0000
Manifest next update: Mon 20 Apr 2026 05:00:38 +0000
Files and hashes: 1: I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.crl (hash: eKg0NMbK8iTxkilhPx9TEqyaKRrN+gIgUEEzMF3D37k=)
2: M_CYpRI8SqN2pbVtKePdOnYWUSE.asa (hash: M0fsFeA37g+aMXBHQ8+8jEtPr1DuQjy82Sio4c1x2i4=)
3: b1swFPJJREwO7cx297uALIQsAqo.roa (hash: OKc3LjMWMxGzGg+rjr90PHIdb2q9ia63zVSKKzhRN5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/bb8b5c-4964-442d-aa7f-3fc54a76ced5/1/I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/bb8b5c-4964-442d-aa7f-3fc54a76ced5/1/I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:1c:b8:74:4c:b5:9e:6b:a4:1e:44:d2:b6:4a:3c:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23fd1aa19e5932f24c2777e7ec18d8a6ca924c5e
Validity
Not Before: Apr 19 05:00:38 2026 GMT
Not After : Apr 20 05:00:38 2026 GMT
Subject: CN=18f39f1f86ca0c2cc3c0bdf1ef3ea566a67cba94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:83:ec:93:79:49:6e:40:65:db:77:60:ac:f0:
cf:ad:9a:9e:cf:b9:4e:bc:54:26:b7:7c:ff:c3:7b:
08:3b:93:e9:b9:b1:83:9c:36:e5:fc:19:54:1f:1a:
e5:13:3b:e4:82:e5:ab:c8:b3:a3:3c:95:c9:78:be:
98:7b:0c:5b:fd:26:00:54:93:6a:b7:72:14:93:59:
81:1e:13:1b:cb:94:41:91:d4:f5:0e:40:d3:f0:52:
5d:42:f2:c2:ad:0c:a6:f9:c3:c4:cc:64:7e:64:d1:
1b:be:c8:d3:d7:6b:c6:dc:56:fa:ab:3d:18:5d:d1:
47:e8:9b:35:bf:ad:03:7d:bd:5b:94:e9:99:4c:8f:
4f:92:6a:73:3c:6f:87:9b:f0:a8:44:b3:67:27:52:
0c:3a:b8:02:41:2d:af:a2:09:e9:20:6c:7b:ca:2b:
09:90:50:1d:7f:03:5e:9f:4a:c7:6a:16:a5:74:e6:
69:f6:e0:78:37:9d:ea:5b:6f:13:6a:7e:a4:b6:a1:
0f:54:d1:40:85:88:53:59:37:6f:35:03:e2:20:a1:
da:9b:9a:39:90:d9:99:5c:db:35:42:51:67:cb:ec:
2d:75:c6:8e:13:77:c1:64:73:1a:44:e2:44:c6:78:
6a:f0:5d:04:79:a5:93:e2:12:bf:0d:5d:22:4a:c2:
00:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:F3:9F:1F:86:CA:0C:2C:C3:C0:BD:F1:EF:3E:A5:66:A6:7C:BA:94
X509v3 Authority Key Identifier:
keyid:23:FD:1A:A1:9E:59:32:F2:4C:27:77:E7:EC:18:D8:A6:CA:92:4C:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bb8b5c-4964-442d-aa7f-3fc54a76ced5/1/I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bb8b5c-4964-442d-aa7f-3fc54a76ced5/1/I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:72:f2:cf:59:0b:1d:db:95:24:7c:5d:02:2c:9a:1f:d6:72:
c1:94:5f:ea:99:77:a1:1f:ad:6c:db:d1:e5:6e:71:6b:73:b5:
62:b0:ca:8b:b7:5b:17:64:f5:8b:76:ce:b2:ec:fd:30:a4:72:
a7:da:fc:10:95:a9:34:24:b2:7d:42:c8:8f:7c:5d:6f:cd:c5:
32:2d:9e:5d:01:07:7a:33:e4:48:5b:97:c3:5a:50:14:3e:01:
15:60:73:a4:f4:af:4f:1a:3b:9e:b7:1f:05:16:8b:b1:41:eb:
eb:67:10:74:e0:bb:53:1f:0f:98:c4:c1:a5:3e:9f:ea:fc:72:
0b:54:9f:07:89:9d:63:db:6a:05:43:ff:f2:10:4c:d0:b6:1a:
91:29:06:d8:63:5c:93:ed:a3:78:f6:54:5a:e3:ee:ee:65:22:
a6:e2:3f:96:01:2a:ba:47:c8:06:57:41:4a:92:d1:56:90:a5:
a8:e3:05:5a:a5:d9:10:d5:4f:26:f2:a9:c8:ef:42:bf:94:ae:
47:67:61:a1:d6:0a:5b:fe:ac:ac:42:7a:de:d0:99:cb:4d:0d:
de:ef:8f:96:1d:4c:1c:82:42:0b:24:fe:ea:c6:3f:5e:ea:6e:
ac:63:45:58:31:1b:9c:5e:4c:fe:0d:37:31:32:67:fb:11:b5:
1f:1f:e5:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2kHLh0TLWea6QeRNK2Sjy8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzZmQxYWExOWU1OTMyZjI0YzI3NzdlN2VjMThkOGE2Y2E5
MjRjNWUwHhcNMjYwNDE5MDUwMDM4WhcNMjYwNDIwMDUwMDM4WjAzMTEwLwYDVQQD
EygxOGYzOWYxZjg2Y2EwYzJjYzNjMGJkZjFlZjNlYTU2NmE2N2NiYTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4Psk3lJbkBl23dgrPDPrZqez7lO
vFQmt3z/w3sIO5PpubGDnDbl/BlUHxrlEzvkguWryLOjPJXJeL6Yewxb/SYAVJNq
t3IUk1mBHhMby5RBkdT1DkDT8FJdQvLCrQym+cPEzGR+ZNEbvsjT12vG3Fb6qz0Y
XdFH6Js1v60Dfb1blOmZTI9PkmpzPG+Hm/CoRLNnJ1IMOrgCQS2vognpIGx7yisJ
kFAdfwNen0rHahaldOZp9uB4N53qW28Tan6ktqEPVNFAhYhTWTdvNQPiIKHam5o5
kNmZXNs1QlFny+wtdcaOE3fBZHMaROJExnhq8F0EeaWT4hK/DV0iSsIA6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBjznx+Gygwsw8C98e8+pWamfLqUMB8GA1UdIwQY
MBaAFCP9GqGeWTLyTCd35+wY2KbKkkxeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSV8wYW9aNVpNdkpNSjNmbjdCallwc3FTVEY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9iYjhiNWMtNDk2NC00NDJkLWFhN2Yt
M2ZjNTRhNzZjZWQ1LzEvSV8wYW9aNVpNdkpNSjNmbjdCallwc3FTVEY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC9iYjhiNWMtNDk2NC00NDJkLWFhN2YtM2ZjNTRhNzZjZWQ1
LzEvSV8wYW9aNVpNdkpNSjNmbjdCallwc3FTVEY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl3Lyz1kL
HduVJHxdAiyaH9ZywZRf6pl3oR+tbNvR5W5xa3O1YrDKi7dbF2T1i3bOsuz9MKRy
p9r8EJWpNCSyfULIj3xdb83FMi2eXQEHejPkSFuXw1pQFD4BFWBzpPSvTxo7nrcf
BRaLsUHr62cQdOC7Ux8PmMTBpT6f6vxyC1SfB4mdY9tqBUP/8hBM0LYakSkG2GNc
k+2jePZUWuPu7mUipuI/lgEqukfIBldBSpLRVpClqOMFWqXZENVPJvKpyO9Cv5Su
R2dhodYKW/6srEJ63tCZy00N3u+Plh1MHIJCCyT+6sY/XupurGNFWDEbnF5M/g03
MTJn+xG1Hx/lMQ==
-----END CERTIFICATE-----
Generated at Sun Apr 19 14:40:31 2026 by rpki-client