Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.mft
File: IuSOFh5JBZI_bUqirgohUw8t4gs.mft (raw, json)
Hash identifier: PAi8+gxOaxMpluYBIhruwkhI1eA2HbVsmwwZfkQNbOs=
Subject key identifier: EB:92:7E:A2:BF:3D:FD:39:23:29:54:4A:C4:1D:CA:DD:FC:DC:B5:74
Authority key identifier: 22:E4:8E:16:1E:49:05:92:3F:6D:4A:A2:AE:0A:21:53:0F:2D:E2:0B
Certificate issuer: /CN=22e48e161e4905923f6d4aa2ae0a21530f2de20b
Certificate serial: 019DA3E67B11DE8D3B13E4E72AB04E99DB23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IuSOFh5JBZI_bUqirgohUw8t4gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.mft
Manifest number: 18C5
Signing time: Sun 19 Apr 2026 04:01:24 +0000
Manifest this update: Sun 19 Apr 2026 04:01:24 +0000
Manifest next update: Mon 20 Apr 2026 04:01:24 +0000
Files and hashes: 1: IuSOFh5JBZI_bUqirgohUw8t4gs.crl (hash: /l+JIxgfprABCzNDFieI4MwHpyyrZ/9As1WRYEv3ieA=)
2: WjnU7eVkPkVNVM9MOmgLUUUpMzM.roa (hash: +R4Zj+vw0Ft1e0nUhwZse4EmeZXGoZD55vZpzhImACo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.mft
rsync://rpki.ripe.net/repository/DEFAULT/IuSOFh5JBZI_bUqirgohUw8t4gs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:7b:11:de:8d:3b:13:e4:e7:2a:b0:4e:99:db:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22e48e161e4905923f6d4aa2ae0a21530f2de20b
Validity
Not Before: Apr 19 04:01:24 2026 GMT
Not After : Apr 20 04:01:24 2026 GMT
Subject: CN=eb927ea2bf3dfd392329544ac41dcaddfcdcb574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:65:0e:e3:06:42:c0:2f:2e:0b:2f:f3:21:dc:
36:79:ce:41:d3:54:77:81:73:d2:b1:28:17:8d:11:
a3:14:20:f4:17:f9:fe:64:4f:e4:59:c6:e9:da:c4:
e5:91:2a:3a:51:37:89:db:47:28:a8:c0:30:54:80:
7d:d9:78:0b:67:fc:f3:49:76:03:63:af:26:99:a4:
9e:1c:4c:86:45:e5:30:25:b4:72:99:fe:12:88:a4:
7b:62:57:5d:29:e2:91:94:85:f7:8a:4e:78:f2:f0:
b6:d6:f4:ca:20:68:0d:b4:d0:79:9f:83:c7:fc:b6:
46:c7:7d:c5:92:98:91:3c:2a:dd:71:28:c9:38:ee:
bb:e7:14:19:23:ea:49:4c:fb:92:ff:4b:db:f4:4e:
a9:0a:a9:b5:24:34:61:1f:17:63:95:42:a2:27:fc:
08:91:48:0f:58:59:dd:15:11:68:b9:df:f6:80:8b:
d9:4b:98:dd:2f:ac:25:1f:33:21:b8:3e:cf:c1:5d:
23:4b:2c:24:d8:a6:32:2a:bc:7e:4d:48:19:9a:24:
4f:9d:f2:13:31:40:9c:2c:53:c6:87:54:6c:ee:8c:
2b:2c:a5:23:8f:50:28:73:44:49:ab:9d:ad:36:0e:
4c:14:3d:71:8e:bd:4d:0f:02:61:a8:6b:70:d6:2d:
f5:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:92:7E:A2:BF:3D:FD:39:23:29:54:4A:C4:1D:CA:DD:FC:DC:B5:74
X509v3 Authority Key Identifier:
keyid:22:E4:8E:16:1E:49:05:92:3F:6D:4A:A2:AE:0A:21:53:0F:2D:E2:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IuSOFh5JBZI_bUqirgohUw8t4gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:47:38:6a:68:8e:20:fb:03:90:a7:96:4b:9a:61:6c:ef:05:
f9:51:dc:a0:27:5c:0b:85:ed:35:6e:c0:82:30:4b:a8:90:e4:
30:98:7a:9b:cc:90:4b:cf:ad:2e:e4:29:a4:1a:6d:0d:e7:86:
35:ee:b1:0a:18:c2:e8:dd:1f:b7:aa:29:65:2a:15:27:03:02:
94:2b:1b:00:13:ce:ba:1b:12:06:05:55:6a:b4:ef:9e:76:bd:
a6:f1:23:01:ee:4f:ff:c4:ce:47:18:5a:30:d4:c4:b4:25:a2:
7d:a8:7a:15:4b:ab:40:c4:ea:05:9d:d5:b1:b7:1c:e5:41:5a:
1a:0b:ee:7e:59:ab:ac:fb:b4:27:1b:2d:5d:98:07:fa:cf:c4:
03:d1:0f:c7:79:66:a2:93:2a:28:26:29:e5:17:11:e0:9c:f5:
69:bc:15:d4:a8:15:20:f3:ad:43:7f:7e:d8:27:2f:d3:e5:be:
ec:3f:c9:3d:bd:f2:54:36:1a:d0:57:8f:99:23:df:42:e2:8e:
6e:9d:7c:1e:79:d4:ae:26:5d:d2:25:c2:b7:57:72:c8:d7:75:
0b:c7:c1:a9:ae:04:ce:f8:f2:f5:6e:0d:b8:9d:39:56:84:2f:
5f:1d:c0:91:47:83:8c:a4:59:c9:9b:17:bf:2c:67:6a:10:53:
e9:17:0b:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:29:40 2026 by rpki-client