
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/664cab-ba9a-4c40-97f4-af98e49f11ae/1/I9SAsHlWF-Libm4YJkN356lsePM.mft
File: I9SAsHlWF-Libm4YJkN356lsePM.mft (raw, json)
Hash identifier: iv5naHdS/2YVjJVCS1Z/cO+96ttNLALXTLcUUh8PatQ=
Subject key identifier: E7:A9:89:8C:CF:FF:3E:BB:EB:CA:A3:48:8A:0B:78:B9:99:1E:1C:E8
Authority key identifier: 23:D4:80:B0:79:56:17:E2:E2:6E:6E:18:26:43:77:E7:A9:6C:78:F3
Certificate issuer: /CN=23d480b0795617e2e26e6e18264377e7a96c78f3
Certificate serial: 019DA4541C811AF691734A934A11E916CAE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I9SAsHlWF-Libm4YJkN356lsePM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/664cab-ba9a-4c40-97f4-af98e49f11ae/1/I9SAsHlWF-Libm4YJkN356lsePM.mft
Manifest number: 1751
Signing time: Sun 19 Apr 2026 06:01:08 +0000
Manifest this update: Sun 19 Apr 2026 06:01:08 +0000
Manifest next update: Mon 20 Apr 2026 06:01:08 +0000
Files and hashes: 1: I9SAsHlWF-Libm4YJkN356lsePM.crl (hash: Qvnl6o/d0kgBhgredt0fOW6UkesXS0HA7P4HXfYSGtY=)
2: Oe-SeoCCIXN5ycDnQlV6M_dI1XI.roa (hash: D3QDtFMR0sLy/F2jguYpH4IAE7IC8B7SWcgluJtwmKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/664cab-ba9a-4c40-97f4-af98e49f11ae/1/I9SAsHlWF-Libm4YJkN356lsePM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/664cab-ba9a-4c40-97f4-af98e49f11ae/1/I9SAsHlWF-Libm4YJkN356lsePM.mft
rsync://rpki.ripe.net/repository/DEFAULT/I9SAsHlWF-Libm4YJkN356lsePM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:54:1c:81:1a:f6:91:73:4a:93:4a:11:e9:16:ca:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23d480b0795617e2e26e6e18264377e7a96c78f3
Validity
Not Before: Apr 19 06:01:08 2026 GMT
Not After : Apr 20 06:01:08 2026 GMT
Subject: CN=e7a9898ccfff3ebbebcaa3488a0b78b9991e1ce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a9:68:fb:77:a1:90:5a:8a:87:d2:d0:a3:46:
82:c9:85:fe:56:b2:29:3a:95:85:27:f2:3c:55:fb:
58:a3:0a:17:29:5c:c1:ea:f2:8f:a8:88:9b:16:d6:
07:fc:f1:1b:05:6b:73:3a:3e:fe:ac:43:e5:ef:31:
f9:b4:93:24:44:bf:c4:79:1b:bb:c3:3a:0f:83:98:
e7:e4:f0:4f:24:a7:32:3d:4f:5e:43:23:da:e9:e1:
7c:83:5f:18:b1:88:d7:1d:24:12:5e:d0:4b:13:14:
44:83:92:c2:de:da:18:61:e7:53:27:08:cd:18:38:
f5:70:4a:cc:76:14:d5:8b:1c:1a:f3:7b:a4:af:7d:
36:1b:13:d1:fe:18:f2:f7:1a:1e:ed:33:97:8e:f1:
4b:18:f1:34:ce:b7:36:94:69:2b:1e:63:9e:21:c5:
5b:8f:ef:d4:e9:1f:af:8f:a8:b5:14:1f:71:d0:88:
de:b4:63:bf:a3:05:2d:ef:c8:0c:66:50:e5:02:9f:
8d:db:c6:a0:b3:94:25:23:6a:48:60:47:20:9e:f7:
2b:39:43:19:96:5a:d5:33:ff:45:b6:fa:86:0d:e8:
00:64:cd:1f:72:61:12:1d:0b:61:c8:c2:4d:96:2b:
c8:a1:b2:52:6c:fe:f6:fe:92:82:3a:7f:cb:be:b2:
08:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:A9:89:8C:CF:FF:3E:BB:EB:CA:A3:48:8A:0B:78:B9:99:1E:1C:E8
X509v3 Authority Key Identifier:
keyid:23:D4:80:B0:79:56:17:E2:E2:6E:6E:18:26:43:77:E7:A9:6C:78:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9SAsHlWF-Libm4YJkN356lsePM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/664cab-ba9a-4c40-97f4-af98e49f11ae/1/I9SAsHlWF-Libm4YJkN356lsePM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/664cab-ba9a-4c40-97f4-af98e49f11ae/1/I9SAsHlWF-Libm4YJkN356lsePM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:0e:6a:3d:7f:c2:06:71:4e:71:8f:5e:1e:d4:f8:76:98:f8:
c4:5a:ea:22:99:07:c8:31:9a:6a:0b:2d:5f:6e:10:28:ac:34:
da:51:b2:80:54:54:98:83:d3:df:eb:4b:73:35:33:4b:d2:0e:
3a:67:8b:f9:58:a9:43:87:b9:a6:7d:a7:85:30:7a:c7:ef:65:
ba:13:74:3b:f3:06:3e:c0:98:e6:36:c7:a0:26:0b:be:d9:b9:
78:25:f7:7f:2f:97:34:cc:21:15:a4:b8:4b:69:3c:f4:33:bc:
83:f6:3c:35:f2:74:70:35:44:08:a9:66:bb:b8:70:d9:ef:db:
14:a1:e5:50:e5:88:4f:d8:2c:08:16:5b:92:a8:f5:3d:06:9e:
53:9a:7f:b3:62:0f:4f:7e:b1:41:0d:8b:fa:ff:af:c9:bc:4c:
5e:a1:30:26:d0:b3:6c:e5:a7:98:d2:a3:5f:40:7b:90:70:eb:
7e:87:18:69:8c:95:db:01:6e:45:53:a2:8a:b2:cf:ce:18:34:
15:74:9e:a2:e3:14:14:5c:c8:6f:e8:fa:45:4e:9c:09:d7:1b:
7e:c8:de:64:71:8f:51:df:c9:60:ec:77:48:79:bb:33:ca:d3:
81:c0:35:c7:4c:31:a4:12:18:95:5e:60:ab:fc:2d:9f:77:60:
6b:98:25:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:12:47 2026 by rpki-client