Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/iCGjmu2dpO46tmOdJEUI-h6NIPY.mft
File: iCGjmu2dpO46tmOdJEUI-h6NIPY.mft (raw, json)
Hash identifier: saZ2mgwTzNBdp1e5PIm5NFyKs+tI5/GDs47JhwCEfa4=
Subject key identifier: 06:80:5B:84:DC:75:2E:E3:5C:91:51:84:BC:0A:28:6A:CD:88:44:07
Authority key identifier: 88:21:A3:9A:ED:9D:A4:EE:3A:B6:63:9D:24:45:08:FA:1E:8D:20:F6
Certificate issuer: /CN=8821a39aed9da4ee3ab6639d244508fa1e8d20f6
Certificate serial: 019DA22E4CAE132A2E4776D4BEAA488331C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iCGjmu2dpO46tmOdJEUI-h6NIPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/iCGjmu2dpO46tmOdJEUI-h6NIPY.mft
Manifest number: 15E9
Signing time: Sat 18 Apr 2026 20:00:36 +0000
Manifest this update: Sat 18 Apr 2026 20:00:36 +0000
Manifest next update: Sun 19 Apr 2026 20:00:36 +0000
Files and hashes: 1: DoG1nIvAyF6Ofk7B7oBXD9fCbWY.roa (hash: 9biYSv6POYCwfleLHgkM4hjjkLE1P6h07qcPCt2vZ8Q=)
2: Ku186Y-Tu0woDCZbFinpqq7ZdFE.roa (hash: v4Tz8TXIdty6/ZjbJ1ivX2W0EU7wX33Cwf/C7mVCK74=)
3: _yFrTYVVOzem6SAvOPOzP_wE_MM.roa (hash: 5prdT05UIi7fhKfl8B0EiaHRzoodJuHLB7r7onONbos=)
4: iCGjmu2dpO46tmOdJEUI-h6NIPY.crl (hash: peMuteb1f8f7cr3BHTWRlkWKE1RO6GH4AHwEZUGXw9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/iCGjmu2dpO46tmOdJEUI-h6NIPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/iCGjmu2dpO46tmOdJEUI-h6NIPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iCGjmu2dpO46tmOdJEUI-h6NIPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 17:59:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a2:2e:4c:ae:13:2a:2e:47:76:d4:be:aa:48:83:31:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8821a39aed9da4ee3ab6639d244508fa1e8d20f6
Validity
Not Before: Apr 18 20:00:36 2026 GMT
Not After : Apr 19 20:00:36 2026 GMT
Subject: CN=06805b84dc752ee35c915184bc0a286acd884407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c6:e1:95:6c:16:43:d5:04:c4:68:12:c3:84:
61:8e:35:0b:26:ff:c2:08:ab:1a:e1:88:4a:f9:33:
f1:3c:96:ed:fb:8d:11:53:96:7f:8d:77:77:2c:e8:
4c:1b:e6:37:76:ea:8d:06:26:eb:2f:76:ec:d2:a2:
9c:b5:17:90:a1:6b:34:82:38:21:e9:24:40:94:31:
eb:cf:c0:8c:e4:f6:fb:ea:94:a6:0c:ec:b0:bb:3a:
83:07:fd:22:53:f1:31:94:e6:cd:5b:6b:5e:2f:0e:
5a:75:86:c2:db:98:c4:97:14:82:63:a4:11:46:04:
65:6a:9f:d3:92:59:df:de:fd:c4:9d:54:82:91:57:
34:fa:bf:65:90:c2:76:4d:b5:22:93:e8:99:ee:0f:
ae:42:fc:55:81:e0:a3:99:3e:15:a3:9a:6f:bb:7d:
01:47:8d:28:da:f4:f3:bc:18:3e:6c:94:70:d1:2d:
c8:07:b2:55:24:1d:58:8b:18:0b:31:85:8d:fc:b0:
9d:4c:59:d3:e8:73:61:b6:b7:21:f6:79:3c:94:25:
45:3a:d8:1b:fa:8b:8e:7b:90:0c:18:aa:be:bd:9a:
e3:f2:fe:43:d5:85:6c:a2:02:8f:b9:c8:9c:3a:f3:
ac:42:bc:9b:bd:90:8e:f4:92:d7:8a:61:18:c2:ad:
07:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:80:5B:84:DC:75:2E:E3:5C:91:51:84:BC:0A:28:6A:CD:88:44:07
X509v3 Authority Key Identifier:
keyid:88:21:A3:9A:ED:9D:A4:EE:3A:B6:63:9D:24:45:08:FA:1E:8D:20:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iCGjmu2dpO46tmOdJEUI-h6NIPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/iCGjmu2dpO46tmOdJEUI-h6NIPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/iCGjmu2dpO46tmOdJEUI-h6NIPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:a5:c5:ed:cc:ac:7d:ff:33:80:7a:9c:06:b5:04:92:7b:4d:
19:e0:42:2b:88:ad:72:ed:ea:30:48:fe:36:ae:9c:e8:fb:5b:
f8:44:04:0a:a8:7b:9a:06:4a:7f:5e:2a:d8:a4:5c:4a:99:b4:
2c:cb:27:0d:1e:18:be:3f:31:02:41:44:a4:55:9f:59:eb:a1:
3d:93:3a:d1:a8:1b:78:e7:90:21:9d:8a:ff:40:13:95:1a:28:
e1:42:05:54:1b:8a:e4:b6:73:ef:0b:b9:64:f8:f7:d0:91:98:
bc:84:45:f7:1a:c7:1f:0c:cf:2d:43:aa:50:c8:fd:fd:fe:68:
a4:03:23:ab:ce:ea:a4:03:8c:79:c4:b4:28:d7:87:26:d4:4b:
f1:8d:d8:b0:2b:30:84:4c:d4:48:98:be:99:2e:7f:ac:01:17:
c4:04:2b:9a:e5:42:87:a6:05:1c:9a:99:2d:dd:a7:82:17:a0:
d4:bb:4d:4e:f3:1d:57:2a:1f:82:0d:62:ff:7e:c2:d3:24:34:
b0:d4:73:81:97:fd:8d:fb:5a:7b:d2:ae:0d:4e:31:78:43:0b:
38:2c:e0:7e:81:e8:0f:24:33:0b:ff:69:49:92:28:d2:07:14:
7d:63:8b:51:f1:c1:61:95:db:a6:ba:a1:ba:d1:89:cc:d1:20:
00:e4:e9:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2iLkyuEyouR3bUvqpIgzHFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4MjFhMzlhZWQ5ZGE0ZWUzYWI2NjM5ZDI0NDUwOGZhMWU4
ZDIwZjYwHhcNMjYwNDE4MjAwMDM2WhcNMjYwNDE5MjAwMDM2WjAzMTEwLwYDVQQD
EygwNjgwNWI4NGRjNzUyZWUzNWM5MTUxODRiYzBhMjg2YWNkODg0NDA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8bhlWwWQ9UExGgSw4RhjjULJv/C
CKsa4YhK+TPxPJbt+40RU5Z/jXd3LOhMG+Y3duqNBibrL3bs0qKctReQoWs0gjgh
6SRAlDHrz8CM5Pb76pSmDOywuzqDB/0iU/ExlObNW2teLw5adYbC25jElxSCY6QR
RgRlap/Tklnf3v3EnVSCkVc0+r9lkMJ2TbUik+iZ7g+uQvxVgeCjmT4Vo5pvu30B
R40o2vTzvBg+bJRw0S3IB7JVJB1YixgLMYWN/LCdTFnT6HNhtrch9nk8lCVFOtgb
+ouOe5AMGKq+vZrj8v5D1YVsogKPucicOvOsQrybvZCO9JLXimEYwq0HeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAaAW4TcdS7jXJFRhLwKKGrNiEQHMB8GA1UdIwQY
MBaAFIgho5rtnaTuOrZjnSRFCPoejSD2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUNHam11MmRwTzQ2dG1PZEpFVUktaDZOSVBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC80OTY3NzMtNTAxOC00OGRjLWEyNDAt
ZjYwZDZmNzE4MmExLzEvaUNHam11MmRwTzQ2dG1PZEpFVUktaDZOSVBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC80OTY3NzMtNTAxOC00OGRjLWEyNDAtZjYwZDZmNzE4MmEx
LzEvaUNHam11MmRwTzQ2dG1PZEpFVUktaDZOSVBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATaXF7cys
ff8zgHqcBrUEkntNGeBCK4itcu3qMEj+Nq6c6Ptb+EQECqh7mgZKf14q2KRcSpm0
LMsnDR4Yvj8xAkFEpFWfWeuhPZM60agbeOeQIZ2K/0ATlRoo4UIFVBuK5LZz7wu5
ZPj30JGYvIRF9xrHHwzPLUOqUMj9/f5opAMjq87qpAOMecS0KNeHJtRL8Y3YsCsw
hEzUSJi+mS5/rAEXxAQrmuVCh6YFHJqZLd2ngheg1LtNTvMdVyofgg1i/37C0yQ0
sNRzgZf9jftae9KuDU4xeEMLOCzgfoHoDyQzC/9pSZIo0gcUfWOLUfHBYZXbprqh
utGJzNEgAOTpqA==
-----END CERTIFICATE-----
Generated at Sat Apr 18 23:53:17 2026 by rpki-client