Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.mft
File: IJejEXyhwdYpKuUpEbTwyk-OkBk.mft (raw, json)
Hash identifier: ZBxI3WG3tLjM0MTw9RZZ+LWJ6yR9J2uHI3UrbdTwgJI=
Subject key identifier: CE:BA:84:B6:33:BC:55:4F:C9:EB:9C:E1:B5:C1:B1:54:DE:D5:29:85
Authority key identifier: 20:97:A3:11:7C:A1:C1:D6:29:2A:E5:29:11:B4:F0:CA:4F:8E:90:19
Certificate issuer: /CN=2097a3117ca1c1d6292ae52911b4f0ca4f8e9019
Certificate serial: 019D9AABABD960EC75798F77CFB83579AFA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IJejEXyhwdYpKuUpEbTwyk-OkBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 09:00:34 +0000
Manifest this update: Fri 17 Apr 2026 09:00:34 +0000
Manifest next update: Sat 18 Apr 2026 09:00:34 +0000
Files and hashes: 1: IJejEXyhwdYpKuUpEbTwyk-OkBk.crl (hash: xRBgsBH1NJm5//FneWL7IlV24yGKBqRGmFvLFa/pit8=)
2: KA5g_HNHUEKe_cvpril1qZT7WME.roa (hash: h+IZFf9Go1iBnD4l0ji1OQ+Otog1vzczX/D4h1/qh78=)
3: d7CeX97gO-ipX3QBzFbXz8P0wTI.roa (hash: Qut1PV0++44yG4RR3eDPMqfYLiMgZvD3UqCPDmMsQWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IJejEXyhwdYpKuUpEbTwyk-OkBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:ab:d9:60:ec:75:79:8f:77:cf:b8:35:79:af:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2097a3117ca1c1d6292ae52911b4f0ca4f8e9019
Validity
Not Before: Apr 17 09:00:34 2026 GMT
Not After : Apr 18 09:00:34 2026 GMT
Subject: CN=ceba84b633bc554fc9eb9ce1b5c1b154ded52985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:df:00:5d:d7:81:9e:c8:87:56:1a:cd:05:9b:
ed:15:16:09:be:bd:da:a8:0e:f1:a2:e4:af:32:22:
27:ba:d3:7f:4f:48:e4:88:e7:d7:03:f7:33:3b:40:
2c:84:1d:59:68:18:5d:40:66:72:d3:f6:16:8d:44:
d4:5c:9c:1f:2e:d9:c3:89:be:b2:9d:30:6a:40:8c:
5d:73:c0:b3:02:02:72:3e:29:71:c6:32:f7:54:0b:
73:ef:79:54:8b:6b:10:27:90:20:35:e7:cb:d7:b3:
20:9e:7f:c7:94:14:41:9a:20:91:b7:1e:5e:d9:cb:
02:fe:91:f1:3d:67:f5:5d:10:d0:15:99:6d:a1:9c:
c8:b1:73:5e:67:8b:3a:15:31:b1:7c:ad:22:93:35:
f8:12:8b:57:ad:97:b9:37:ee:b5:25:f8:b4:9f:33:
43:ec:41:98:41:86:54:1a:c0:10:bf:8a:5d:17:8c:
c4:ea:d9:a5:6b:b1:95:d5:51:09:9b:9a:74:45:ab:
ee:8f:da:5b:8e:cc:f8:d5:68:53:44:a7:e2:3b:da:
01:0a:39:1b:e1:e4:70:7b:b8:74:19:55:6e:6d:69:
a1:58:15:12:94:75:a7:1c:c3:0b:75:6f:26:55:b7:
ab:db:93:83:a3:d3:4f:88:8a:73:89:70:ea:f9:20:
ef:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:BA:84:B6:33:BC:55:4F:C9:EB:9C:E1:B5:C1:B1:54:DE:D5:29:85
X509v3 Authority Key Identifier:
keyid:20:97:A3:11:7C:A1:C1:D6:29:2A:E5:29:11:B4:F0:CA:4F:8E:90:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IJejEXyhwdYpKuUpEbTwyk-OkBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:0a:b4:39:fe:a6:21:c7:fe:78:41:c8:59:cf:d8:41:dc:1a:
6c:f0:e1:50:a5:16:76:60:58:b2:41:c6:e7:c6:2a:79:a3:df:
47:68:5e:63:64:a2:4a:c6:76:1b:cc:76:e5:48:ed:1b:d9:da:
4e:c7:fb:d7:15:73:05:c8:81:a4:1a:70:22:5b:fe:cf:d3:08:
72:1f:5a:57:a0:d8:61:83:3d:d4:04:11:e5:07:37:70:32:c8:
23:8d:39:1d:10:6b:44:69:ba:fe:f2:54:bf:5e:47:f3:63:90:
d8:c7:f5:39:ac:a3:53:5e:85:e5:aa:60:8d:f2:4f:41:e7:95:
fe:ed:90:ba:2f:1a:a3:a6:ef:ff:6b:af:a2:84:7d:a9:c5:e7:
2c:00:c8:22:dd:0e:58:55:41:d3:8e:6f:0d:5b:f9:59:39:6b:
36:36:63:2d:b2:8b:b1:a0:4a:2a:1f:11:25:52:34:6d:5d:8a:
3d:72:c8:9c:49:d1:b4:23:d4:35:93:c6:0d:fc:3b:0a:e8:93:
8f:f4:4c:41:3e:59:37:6e:57:a4:b7:99:8b:8d:0b:80:e7:ed:
0e:a2:26:58:cc:19:c5:20:d7:93:69:6d:a3:e9:01:b3:45:83:
45:91:c5:70:02:0f:bb:14:d6:dc:f4:de:3c:1e:4e:a0:dd:f0:
78:ee:70:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:16:58 2026 by rpki-client