Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/06b317-9114-426b-9983-9a229780e0be/1/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.mft
File: IJGnf3xCTpEnOYRzv6OiuXJ-u0U.mft (raw, json)
Hash identifier: stU62NgJv0XuGgfQY7SOQcEtC29SVYCqq1RvtuoE6wc=
Subject key identifier: 3C:24:8C:BF:14:5F:5B:C9:A6:7D:90:16:3D:F2:A2:DD:58:BB:15:BC
Authority key identifier: 20:91:A7:7F:7C:42:4E:91:27:39:84:73:BF:A3:A2:B9:72:7E:BB:45
Certificate issuer: /CN=2091a77f7c424e9127398473bfa3a2b9727ebb45
Certificate serial: 019D9D3F887DE60ABF0C3E494CF592D9C7F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/06b317-9114-426b-9983-9a229780e0be/1/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.mft
Manifest number: 0BE4
Signing time: Fri 17 Apr 2026 21:01:19 +0000
Manifest this update: Fri 17 Apr 2026 21:01:19 +0000
Manifest next update: Sat 18 Apr 2026 21:01:19 +0000
Files and hashes: 1: IJGnf3xCTpEnOYRzv6OiuXJ-u0U.crl (hash: 3zyLBePK0qV69fjSDEgt+vFlDJGrnoGMO8xyH0S7E50=)
2: X5cruhSfs-bcqraXt11JGdkkWoM.roa (hash: ZSQ2DG8b3yrrUNbqmElYxiRoLHUdomd9OU/pi5rywfU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/06b317-9114-426b-9983-9a229780e0be/1/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/06b317-9114-426b-9983-9a229780e0be/1/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:3f:88:7d:e6:0a:bf:0c:3e:49:4c:f5:92:d9:c7:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2091a77f7c424e9127398473bfa3a2b9727ebb45
Validity
Not Before: Apr 17 21:01:19 2026 GMT
Not After : Apr 18 21:01:19 2026 GMT
Subject: CN=3c248cbf145f5bc9a67d90163df2a2dd58bb15bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2d:09:bf:83:17:ed:15:b5:0a:e2:3c:d4:c8:
79:d1:46:a1:50:c9:e2:9e:39:81:5b:4c:27:b1:ca:
1d:96:22:e0:9b:81:a1:dd:38:11:0f:a6:42:7b:06:
86:20:b1:a5:ff:8d:a6:e3:ed:1f:4d:e5:f2:17:c5:
cb:ab:2a:a4:e3:53:00:c0:c3:c5:5d:ff:9c:cc:1c:
21:8b:79:f3:ea:21:7b:ad:43:d0:b4:f8:9c:ae:9a:
3c:30:1f:aa:85:f1:c3:b3:a7:dd:fb:eb:1c:a1:49:
de:93:76:46:9f:da:67:ef:41:22:73:7d:46:85:66:
09:bf:a4:5a:a0:c1:28:e2:fd:92:3f:4d:68:58:d3:
45:32:38:96:e4:0c:69:e2:a5:77:f0:e4:a4:d8:67:
d4:b2:24:4a:37:91:5c:fc:28:e7:cb:bd:77:38:7f:
33:a8:ee:14:f3:f6:97:59:fa:dc:00:ee:29:c1:90:
cc:ef:13:ed:65:75:3b:b1:bc:9f:05:69:ab:83:82:
9d:46:6b:20:2e:74:b1:a1:42:c4:55:93:c7:2f:6c:
7a:2b:c9:d4:12:09:ad:e5:84:58:72:7f:83:54:ff:
ba:6e:64:12:2f:17:bc:23:2b:ba:64:99:7d:71:e9:
aa:bb:87:ce:e3:91:21:d2:2b:88:64:7b:71:dd:ad:
d9:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:24:8C:BF:14:5F:5B:C9:A6:7D:90:16:3D:F2:A2:DD:58:BB:15:BC
X509v3 Authority Key Identifier:
keyid:20:91:A7:7F:7C:42:4E:91:27:39:84:73:BF:A3:A2:B9:72:7E:BB:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06b317-9114-426b-9983-9a229780e0be/1/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06b317-9114-426b-9983-9a229780e0be/1/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:d1:f2:0f:a5:22:de:64:ed:66:71:68:d9:b2:f5:46:c0:c2:
56:32:45:89:fd:f9:05:24:15:f9:bf:78:a6:12:d9:b8:6b:d8:
2d:49:4e:c7:80:95:d7:dd:86:3e:8b:27:67:11:30:c7:a0:94:
d3:05:37:8f:22:60:33:0b:9a:7b:d2:77:5f:ba:ce:c3:06:4e:
29:c0:35:c0:39:e1:ac:1a:d5:5a:3d:53:16:2d:b5:23:a4:16:
15:af:c3:48:5f:58:8a:f8:81:dc:77:88:10:7c:0b:a5:fb:a7:
b6:07:a3:a6:ce:dc:e4:32:6d:93:0f:79:43:0e:35:1d:1e:f5:
a6:d3:fc:3e:09:62:2c:a0:9e:a6:34:11:2b:e2:6d:32:24:c4:
39:65:f3:37:4d:3e:7a:d4:77:0b:db:64:5e:68:2c:46:24:43:
61:d7:a0:20:b3:d7:91:82:a7:d9:16:fc:38:a5:49:04:f6:8d:
06:44:e8:23:e7:41:3b:7f:1f:4d:e5:18:75:65:ae:80:58:57:
c1:d5:d6:8e:21:a2:dd:ca:2a:a7:81:84:34:35:6e:75:8a:43:
48:25:30:d0:e1:c9:0c:d2:f5:65:61:88:23:42:e7:38:67:59:
e3:07:f7:c6:a5:a4:27:81:c6:f4:49:84:f2:de:80:4c:89:be:
fe:cd:a1:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:33:11 2026 by rpki-client