Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.mft
File: IzDiYGCRPHWBN0iL_Xqxv-nhCuI.mft (raw, json)
Hash identifier: RPAVJBZKmlHbO9WxLPaUrnynw/xH1dhDBcos3ea1pIg=
Subject key identifier: 1A:27:35:80:30:24:11:0C:3A:64:B8:53:D6:3A:B1:0E:8B:1C:1D:AD
Authority key identifier: 23:30:E2:60:60:91:3C:75:81:37:48:8B:FD:7A:B1:BF:E9:E1:0A:E2
Certificate issuer: /CN=2330e26060913c758137488bfd7ab1bfe9e10ae2
Certificate serial: 019D9A074A768521FAC3EAB637FF7F9EA5FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.mft
Manifest number: 0E40
Signing time: Fri 17 Apr 2026 06:01:02 +0000
Manifest this update: Fri 17 Apr 2026 06:01:02 +0000
Manifest next update: Sat 18 Apr 2026 06:01:02 +0000
Files and hashes: 1: IzDiYGCRPHWBN0iL_Xqxv-nhCuI.crl (hash: QrZTjwSmvtJ7YuuKQb1TOc6sk/k5n+mx//BcoWeiraQ=)
2: hve1g89vqIvma0mEJM2c9FaOAR4.roa (hash: HbqakuOkdoxtcbllvOJXcVdhzYdrz2GQYaxEe8AoMDY=)
3: viTS2vSEXyeqZB76Pw9I_-D3ags.roa (hash: qbDefb8T1pktEql1YHYnA/oWSC1dlY1F7XizmBxKWF8=)
4: yyWfsmvh8Jt4JXufZsjnXpoUQ3k.roa (hash: N3wiJ0eaYZUQRz5A0bfAdbir/LiyJpdrbnxqvsu++rU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:4a:76:85:21:fa:c3:ea:b6:37:ff:7f:9e:a5:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2330e26060913c758137488bfd7ab1bfe9e10ae2
Validity
Not Before: Apr 17 06:01:02 2026 GMT
Not After : Apr 18 06:01:02 2026 GMT
Subject: CN=1a2735803024110c3a64b853d63ab10e8b1c1dad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:04:eb:9d:40:d5:b7:06:84:62:a7:ca:2b:cb:
17:ff:e0:7a:b1:ad:74:0f:35:fd:89:28:f8:84:e0:
74:31:25:60:2f:0f:1e:d1:24:ad:51:a4:ad:69:01:
75:88:44:da:c6:d9:5e:97:bd:a5:f6:19:90:32:4d:
c4:95:18:dc:76:51:bd:cf:bf:99:56:52:c8:2a:a2:
22:62:2c:f5:0a:4f:bb:3e:86:ec:ea:fd:02:3c:6d:
1f:4a:af:6d:49:74:29:a3:65:40:f7:10:1a:4e:ae:
a4:95:a1:ee:ca:5f:22:ee:6e:87:ac:98:47:44:43:
2f:88:b5:5e:3d:56:ca:c3:86:dd:0f:6c:8a:32:b1:
0e:2a:d9:af:bb:c2:8f:5e:91:ec:fc:e1:ba:0e:0d:
18:fe:9c:6a:7b:fa:9d:f7:85:4b:21:13:d1:bc:b7:
54:87:1b:53:81:9f:1e:3c:55:ef:dd:6d:b7:c3:ac:
49:76:88:95:e7:67:0b:02:ab:b3:19:c0:93:96:f4:
a4:12:0f:27:72:7d:5c:d3:0c:f8:22:61:f3:7b:99:
4a:2d:36:93:f4:8b:88:d3:7a:e4:b8:4a:5c:0d:ec:
42:b8:a3:02:92:2f:40:1f:ff:62:34:37:b5:20:ed:
3a:c4:5a:0e:c9:1d:d7:b5:9c:5f:0d:bb:55:0c:38:
e2:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:27:35:80:30:24:11:0C:3A:64:B8:53:D6:3A:B1:0E:8B:1C:1D:AD
X509v3 Authority Key Identifier:
keyid:23:30:E2:60:60:91:3C:75:81:37:48:8B:FD:7A:B1:BF:E9:E1:0A:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:4f:80:94:2c:f5:60:81:43:33:45:eb:3f:7c:45:ef:f2:28:
4c:f3:1e:45:51:d3:bc:3a:2a:93:5a:a7:64:a0:00:d1:da:36:
88:52:9d:f9:0e:b3:04:84:07:4f:64:d3:93:8e:68:b0:76:57:
a2:60:b1:ba:8b:b6:0c:45:4f:e3:68:6a:37:fc:5a:f4:7c:a2:
44:c4:f2:69:64:ce:4d:5b:ce:6a:6e:f0:7e:d6:cb:7d:9b:95:
08:ff:e7:95:01:a0:8a:0e:c7:29:3f:d8:5a:d8:ad:52:19:8f:
89:95:ed:b4:2f:fd:b5:5d:7f:82:85:8c:02:dc:31:51:20:7b:
62:9a:ab:8c:bd:29:df:b5:ac:de:56:e7:95:4f:49:28:2d:11:
93:94:9f:b7:a0:b8:92:ed:b3:53:42:8e:4b:42:71:e1:3a:57:
36:8b:40:cc:89:9c:c4:40:22:2b:a2:29:eb:e3:90:ed:44:6d:
b6:ba:f1:77:ca:c3:18:4c:f2:e1:48:20:44:20:0f:6b:4f:f1:
81:75:18:f1:50:b5:8a:18:1a:1a:31:e2:e9:7b:d6:54:45:79:
07:5d:81:78:a8:02:e4:d6:6a:19:b5:5a:8f:c2:75:58:89:b5:
87:4d:e9:57:46:e3:6a:da:6a:91:47:ee:47:44:6d:61:a5:f0:
87:7d:73:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:57:46 2026 by rpki-client