Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.mft
File: ibMy1XzhT6sevXRoF91wEGLHSog.mft (raw, json)
Hash identifier: 4fcbnWYNHBZUgWujX2z9H51jUR1Z2Ed8419yPrZ1aA0=
Subject key identifier: 4A:EB:6B:7D:06:6D:E7:A9:7B:42:CC:3A:82:EF:4F:EE:5C:F5:BE:DD
Authority key identifier: 89:B3:32:D5:7C:E1:4F:AB:1E:BD:74:68:17:DD:70:10:62:C7:4A:88
Certificate issuer: /CN=89b332d57ce14fab1ebd746817dd701062c74a88
Certificate serial: 019D99D0D953ED5B03441C6F65D94D292A4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ibMy1XzhT6sevXRoF91wEGLHSog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.mft
Manifest number: 18CC
Signing time: Fri 17 Apr 2026 05:01:34 +0000
Manifest this update: Fri 17 Apr 2026 05:01:34 +0000
Manifest next update: Sat 18 Apr 2026 05:01:34 +0000
Files and hashes: 1: KuMp-T9rHWOUUL9bo8UBMERxJdY.roa (hash: h2sZnCOwhT2tqn40Qa1cfFPCyVBeCwa6Egkx9SNG7y8=)
2: W_9CizajI-Jq4yu8EOHAH-58qn0.roa (hash: ak8K9GcxXdSZ7IyX+XNEN4b3nMc5HWmOv+1OxaewRRQ=)
3: ibMy1XzhT6sevXRoF91wEGLHSog.crl (hash: 896506yDG8SD5CEkwkoo2ll50YpAnzggFLHDQN9psZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.mft
rsync://rpki.ripe.net/repository/DEFAULT/ibMy1XzhT6sevXRoF91wEGLHSog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:d9:53:ed:5b:03:44:1c:6f:65:d9:4d:29:2a:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89b332d57ce14fab1ebd746817dd701062c74a88
Validity
Not Before: Apr 17 05:01:34 2026 GMT
Not After : Apr 18 05:01:34 2026 GMT
Subject: CN=4aeb6b7d066de7a97b42cc3a82ef4fee5cf5bedd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ed:ad:7f:37:a5:67:ab:9c:40:df:07:33:8a:
e0:2b:74:bb:84:7a:af:69:af:6d:31:7d:8e:3b:06:
77:06:89:f4:e1:e9:49:4c:d6:32:f7:5a:2b:9d:fc:
ac:1b:3c:79:0c:40:2e:fe:e7:91:8a:7a:b6:50:ac:
7f:77:20:9a:8b:7c:79:ac:81:cd:cf:09:1c:b7:a4:
58:93:85:5c:96:c8:84:63:aa:b1:5b:9b:e9:21:dd:
01:ed:13:e0:da:34:fb:04:db:49:c1:2a:c2:89:ff:
8b:05:f6:ba:80:08:35:d6:3b:9a:4e:39:5b:ca:b3:
49:c0:a3:0b:59:f0:73:be:24:39:c9:bc:eb:e2:af:
6e:b9:a7:84:c4:e2:e5:c8:17:d9:04:83:a8:49:ff:
ca:9e:9a:60:58:a0:4e:c0:2a:07:2b:3c:3e:23:50:
e6:9d:64:fb:79:d5:94:c2:bd:62:34:25:3d:f4:8f:
2d:59:33:d6:3a:a2:d2:fd:26:37:7d:77:ec:8a:55:
98:32:f5:16:fc:0f:5a:cf:c0:31:a1:ad:5c:38:76:
c9:40:45:37:99:0b:5f:1d:1f:27:5f:e7:8a:16:d8:
43:60:a9:1e:a7:0c:5b:4f:11:57:15:25:90:83:e8:
78:53:c4:a6:f4:fa:a8:87:9c:af:c2:38:8c:4f:4d:
54:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:EB:6B:7D:06:6D:E7:A9:7B:42:CC:3A:82:EF:4F:EE:5C:F5:BE:DD
X509v3 Authority Key Identifier:
keyid:89:B3:32:D5:7C:E1:4F:AB:1E:BD:74:68:17:DD:70:10:62:C7:4A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ibMy1XzhT6sevXRoF91wEGLHSog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:00:2b:15:03:02:cd:1a:c3:2c:b8:18:67:cb:59:20:7e:a8:
44:88:51:9b:17:ec:e2:91:1b:7a:c6:bc:5b:8b:f7:85:f5:35:
d3:a5:c1:1a:28:6d:e5:10:cc:55:13:3e:fe:d6:3a:a9:c0:af:
c3:53:c9:72:8e:31:c2:b7:65:c7:9c:e2:27:65:e5:86:63:f8:
9c:f7:d5:f4:28:3c:4c:6f:8a:9a:77:b8:d0:c5:1d:1e:56:5c:
3f:6f:ca:69:60:aa:28:89:73:1a:82:f5:4c:3a:e2:b0:3b:3e:
99:cb:51:bd:73:5c:60:cd:d5:24:3b:cb:0f:39:c5:11:1c:c7:
f7:7a:51:c0:10:52:67:74:e7:5d:f3:0a:f5:f6:5b:72:6d:c7:
84:86:83:d4:b6:c3:75:20:a4:f9:40:1c:a5:6b:11:d0:35:cb:
e0:a8:66:cc:2e:e5:39:b2:38:3d:ee:bc:a7:3c:f7:80:08:32:
be:a5:fd:65:00:11:db:fb:b1:1e:24:f7:61:a0:03:24:e2:9d:
5f:27:eb:26:2b:c6:5e:27:03:3e:33:54:aa:1a:ab:88:96:cf:
1b:65:59:06:d8:e5:0b:85:7d:72:77:b3:88:c0:77:9d:52:08:
e6:3f:e9:90:fc:c2:53:b9:c9:e3:da:e7:97:f2:e8:68:ad:59:
1d:01:28:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:56:18 2026 by rpki-client