Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.mft
File: IxMMmax6pAhscXVxFKQWP4AJAUI.mft (raw, json)
Hash identifier: YAhlzpAEpeskCiU6/xC53TeY2dO15HpjwMdSX9WjFH0=
Subject key identifier: C7:AD:9D:D3:27:F4:3C:78:48:01:BF:47:58:FB:06:19:F2:45:AB:20
Authority key identifier: 23:13:0C:99:AC:7A:A4:08:6C:71:75:71:14:A4:16:3F:80:09:01:42
Certificate issuer: /CN=23130c99ac7aa4086c71757114a4163f80090142
Certificate serial: 019DA3E6ADFC54CCDC9774844330D5C21089
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IxMMmax6pAhscXVxFKQWP4AJAUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.mft
Manifest number: 0C10
Signing time: Sun 19 Apr 2026 04:01:36 +0000
Manifest this update: Sun 19 Apr 2026 04:01:36 +0000
Manifest next update: Mon 20 Apr 2026 04:01:36 +0000
Files and hashes: 1: IxMMmax6pAhscXVxFKQWP4AJAUI.crl (hash: mjiZIKfJgJtx/fqOzWUfwrYjqG/yeo1gsUqNMyOf/4o=)
2: M7AsOPJRuDvyqpdVNAPIyt4dy4E.roa (hash: VA2KwTkb4NGqo/O9WoJ31YAHnrH27JkWDC9odiYJKyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IxMMmax6pAhscXVxFKQWP4AJAUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:ad:fc:54:cc:dc:97:74:84:43:30:d5:c2:10:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23130c99ac7aa4086c71757114a4163f80090142
Validity
Not Before: Apr 19 04:01:36 2026 GMT
Not After : Apr 20 04:01:36 2026 GMT
Subject: CN=c7ad9dd327f43c784801bf4758fb0619f245ab20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6a:ff:86:db:81:62:93:72:bd:09:a0:ae:3d:
f7:ef:95:b1:0b:1d:5d:eb:df:f0:72:b5:60:85:21:
5c:c8:7a:ce:84:47:27:ae:30:80:2d:64:f7:55:6e:
fd:25:a1:e4:40:ae:2c:83:1b:8c:09:73:16:de:b0:
ea:64:5f:aa:01:8d:f5:0d:00:a4:24:d9:ce:8e:79:
1e:15:9f:65:c8:55:93:96:6d:56:72:97:22:f7:4a:
66:86:66:ae:21:03:b6:e7:09:a6:94:3d:4b:df:35:
bc:f8:71:8e:86:1d:6b:9c:ba:0e:59:32:de:0e:e8:
82:3c:cd:6b:61:68:56:41:08:b3:36:77:e1:c5:39:
29:cc:d1:85:f5:07:cb:23:49:96:3e:fd:3c:96:7c:
ea:69:e4:9d:e7:e5:0d:d8:a4:9d:6f:76:bb:37:a3:
2f:7e:f2:cd:1c:e8:f8:74:c6:17:34:e4:c6:34:d5:
a3:25:92:49:f0:5d:b7:ef:7c:8b:4d:3e:b9:37:90:
a5:c6:cf:a1:06:5a:09:b3:19:82:12:71:ec:6e:b1:
20:c1:e0:e5:66:ea:7f:dd:84:41:b9:b5:5d:66:61:
90:e0:c1:7c:d6:33:e6:39:28:3e:e3:31:73:62:33:
8e:55:b1:35:82:63:47:13:af:5f:e4:dc:dd:8e:80:
b5:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:AD:9D:D3:27:F4:3C:78:48:01:BF:47:58:FB:06:19:F2:45:AB:20
X509v3 Authority Key Identifier:
keyid:23:13:0C:99:AC:7A:A4:08:6C:71:75:71:14:A4:16:3F:80:09:01:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IxMMmax6pAhscXVxFKQWP4AJAUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:1a:41:a5:63:a9:48:53:dd:d5:24:0d:aa:23:65:d4:39:73:
e2:01:96:44:4a:ce:74:37:86:c1:bb:86:54:c5:64:fb:b2:fb:
45:5d:6c:04:d9:a1:e5:76:58:bc:c0:67:74:e3:4d:cd:a9:9d:
c6:37:8f:05:ed:9a:f9:a1:54:9a:c0:f9:fc:a5:34:46:d2:f5:
18:d5:08:b6:11:d9:5d:55:cb:68:f8:56:29:d0:30:85:85:66:
00:7a:dc:46:f1:1e:82:ff:3d:3d:2e:67:df:bb:17:0e:00:83:
75:9d:40:f3:d6:97:12:05:93:54:b8:99:fd:7c:4b:36:70:c9:
3d:a3:72:75:c0:86:46:1a:ba:e4:cd:38:a9:54:84:bb:f0:6f:
6d:5f:2a:7d:1f:d8:dc:29:8b:f2:04:50:f1:ed:8f:87:57:7c:
7e:cf:08:25:96:f7:e7:f9:9b:4f:f2:cd:ff:ef:4d:04:93:47:
01:16:69:15:55:cb:b5:0d:90:7b:b3:2e:d7:cb:96:18:e5:9f:
60:53:e8:2c:ca:e2:4e:2e:2d:0a:ca:72:94:1b:5e:17:bb:a6:
e2:e0:3b:61:79:3e:70:5b:7f:a0:25:81:77:50:8e:13:dc:05:
5a:b9:6b:9f:b3:a6:7b:58:4e:fe:1f:f3:cc:2f:b6:22:1f:bd:
19:8d:ef:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:47:27 2026 by rpki-client