Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.mft
File: IgX-Y4AklCVVaD12Xt9_qT8uhDA.mft (raw, json)
Hash identifier: xWUSYSne7h+0kTourEC0en1WsaWctzjr/TyEi/33438=
Subject key identifier: 19:28:55:96:99:2C:78:C6:2B:60:65:1C:7D:FE:08:E1:9F:8F:98:BF
Authority key identifier: 22:05:FE:63:80:24:94:25:55:68:3D:76:5E:DF:7F:A9:3F:2E:84:30
Certificate issuer: /CN=2205fe638024942555683d765edf7fa93f2e8430
Certificate serial: 019D97E231BEEBA54A1B19078B9DAAFB8B22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IgX-Y4AklCVVaD12Xt9_qT8uhDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.mft
Manifest number: 13CD
Signing time: Thu 16 Apr 2026 20:01:16 +0000
Manifest this update: Thu 16 Apr 2026 20:01:16 +0000
Manifest next update: Fri 17 Apr 2026 20:01:16 +0000
Files and hashes: 1: DtLePmxN_wJv4PSLH6EKntHcVY0.roa (hash: U7UziCjdX8EIkcuGoidh45rKj+4qBu43u+i8Cgl9CBQ=)
2: IgX-Y4AklCVVaD12Xt9_qT8uhDA.crl (hash: VhZULti3XbxFjrIKvf6qkU61EaLajJz1RJSEAee6qKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IgX-Y4AklCVVaD12Xt9_qT8uhDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e2:31:be:eb:a5:4a:1b:19:07:8b:9d:aa:fb:8b:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2205fe638024942555683d765edf7fa93f2e8430
Validity
Not Before: Apr 16 20:01:16 2026 GMT
Not After : Apr 17 20:01:16 2026 GMT
Subject: CN=19285596992c78c62b60651c7dfe08e19f8f98bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:15:9d:7d:c9:18:58:4d:72:62:4e:0d:69:ca:
3e:e0:a8:ae:4f:c7:2d:a6:eb:07:60:e2:a7:41:6e:
80:b4:cc:ff:47:65:b4:ad:aa:de:28:ba:da:ac:2c:
c0:07:3c:f4:b9:61:1e:6b:3f:b9:3b:d0:6c:58:2e:
dd:a3:03:2e:74:e9:96:af:a9:20:38:14:42:0b:d3:
90:28:2a:ef:c0:cb:14:8c:d9:b5:e4:a2:61:a1:00:
8c:a0:5d:18:b0:c9:66:e0:ce:31:5b:18:6f:80:ca:
56:63:6c:ce:a2:0a:ab:58:83:44:12:27:58:08:6b:
35:79:17:d4:78:7a:77:a6:12:cd:d7:b9:13:50:b1:
48:93:fd:78:ab:5a:5c:25:54:a1:53:05:d5:3d:ee:
7a:e2:1b:f2:e2:a0:66:a2:97:10:e9:ce:4f:d8:b1:
f8:ef:56:a1:04:05:03:18:09:37:53:0d:bd:e1:1e:
7b:c8:07:f7:50:37:6b:f2:8a:9c:ef:3a:cb:d1:12:
e1:48:19:87:cd:bf:00:a4:08:82:56:49:9b:4b:3f:
79:c2:be:6f:ef:ab:83:fa:a6:d9:8a:d1:00:d6:62:
77:31:50:e1:d6:b6:98:97:23:87:49:fc:ac:b1:e3:
9f:69:82:41:01:25:85:d7:9c:59:7e:dc:9c:db:c2:
f3:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:28:55:96:99:2C:78:C6:2B:60:65:1C:7D:FE:08:E1:9F:8F:98:BF
X509v3 Authority Key Identifier:
keyid:22:05:FE:63:80:24:94:25:55:68:3D:76:5E:DF:7F:A9:3F:2E:84:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IgX-Y4AklCVVaD12Xt9_qT8uhDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:1b:f5:d6:23:30:ac:06:ea:b3:95:f5:16:13:de:a9:11:08:
3e:da:22:74:5d:18:27:6e:6c:23:ed:73:ad:f2:c4:3c:8a:57:
16:6b:b5:0b:2f:de:50:e0:c9:86:f7:c3:6d:aa:04:78:b1:10:
6f:48:11:50:6a:e5:46:8e:23:f8:f0:39:27:14:13:93:81:cb:
a5:83:3b:17:e0:23:81:af:c4:dd:cd:33:ef:aa:00:0f:47:b8:
6b:b5:2f:71:3b:bb:9f:b3:36:df:e5:21:bd:0d:16:99:a3:92:
17:3f:3f:ad:c5:36:22:52:17:03:a7:e8:d5:f0:f9:62:8b:36:
9f:5b:f8:99:0b:d1:4a:28:53:a2:0a:c3:81:cb:c8:88:fb:d4:
e0:d6:86:43:c2:70:b5:dc:69:ab:e0:d6:f3:c0:83:a2:d0:ad:
5f:09:a7:72:c1:15:c6:da:7f:8f:c3:4b:f8:cc:9d:73:9d:c6:
4d:29:cc:25:10:1d:e8:5b:57:85:cd:84:43:f6:e9:c1:af:ef:
67:22:19:31:be:23:23:60:c0:c5:f4:3c:b4:07:ef:8c:07:f4:
c1:bb:00:4e:9b:8a:43:23:4c:56:c5:ef:25:28:9d:c8:b6:b8:
3b:7a:49:d5:f2:ac:9f:ba:13:01:99:f1:6b:64:25:ae:1e:77:
cc:59:27:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:24:13 2026 by rpki-client