Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft
File: IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft (raw, json)
Hash identifier: bJeB7WOu/4qIcjOi3T5qCotpRM2p+djXB4vNxJ/j5Kc=
Subject key identifier: AA:57:2E:C6:CE:D7:1D:21:0C:10:E2:E9:4A:2D:BB:EA:D0:6A:13:25
Authority key identifier: 22:92:D9:6D:FB:66:CB:18:06:9D:8B:D1:5C:9E:90:CD:91:24:F0:03
Certificate issuer: /CN=2292d96dfb66cb18069d8bd15c9e90cd9124f003
Certificate serial: 019DD9F9438185F893D9FE65A12538DE2981
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IpLZbftmyxgGnYvRXJ6QzZEk8AM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft
Manifest number: 0D7A
Signing time: Wed 29 Apr 2026 16:01:24 +0000
Manifest this update: Wed 29 Apr 2026 16:01:24 +0000
Manifest next update: Thu 30 Apr 2026 16:01:24 +0000
Files and hashes: 1: 3_EpI3KZKzbfeK2XXEoAgU5pxR8.roa (hash: nhz/XR/19vb+kuAg/iFUKPIFqPbUWtZOaM60Y8UGbXw=)
2: 4Hbh9kgEtk0ETbC9Jsg3Fsu3-DI.roa (hash: qkbQr2FGRu+j6lNNaiItQZd0nGSc0yYN6c1c29qls04=)
3: IpLZbftmyxgGnYvRXJ6QzZEk8AM.crl (hash: KjgRTay47oiRF+bI347TZPPTYiWrJ2D82nTT/ahEU8k=)
4: oerPqNmEjqxbGPl4Gs_7bUETdN0.roa (hash: EfuWXG0YIgrPAIfQYw0siImFKnCmmDF+zPQxYy5oo28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IpLZbftmyxgGnYvRXJ6QzZEk8AM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Apr 2026 13:39:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d9:f9:43:81:85:f8:93:d9:fe:65:a1:25:38:de:29:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2292d96dfb66cb18069d8bd15c9e90cd9124f003
Validity
Not Before: Apr 29 16:01:24 2026 GMT
Not After : Apr 30 16:01:24 2026 GMT
Subject: CN=aa572ec6ced71d210c10e2e94a2dbbead06a1325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:81:ae:35:db:ec:db:a6:f3:3f:a6:5b:80:c0:
ff:59:b8:1a:1f:b2:ae:b5:1a:19:ff:12:9d:2d:8e:
23:7e:c0:2e:b4:5e:5c:ef:51:9b:54:41:a9:4d:f8:
a8:1e:fb:b8:51:b1:84:16:a8:99:ec:64:ad:f9:30:
ea:54:38:37:d0:f8:94:78:f5:3f:f8:6c:8a:3d:bb:
72:2f:08:5f:09:fc:ba:0f:b2:df:ed:7a:c6:4d:14:
19:d9:f2:99:09:70:c8:5c:72:f0:d8:7e:f9:f8:a0:
3e:95:16:10:0b:51:d4:47:8e:c3:e8:67:f1:15:e4:
d7:8c:f2:8d:de:34:48:18:9c:eb:d4:50:87:c0:3c:
a4:cf:e5:4f:cb:9e:c2:32:7d:5d:de:2f:af:3d:a1:
9a:10:cd:a7:61:9d:bd:ad:33:57:17:00:66:93:7a:
ae:b5:58:87:3a:b0:03:06:9d:90:35:0e:ca:13:3b:
e4:5f:e3:cc:74:de:35:99:c0:38:d2:50:4e:8e:e0:
e3:53:22:fb:b3:05:6b:83:8a:0b:1c:ce:2c:86:68:
0b:ae:00:0a:ce:b4:68:d9:92:10:a6:38:da:da:30:
c3:b2:2f:81:a4:53:5a:a9:a5:77:1a:79:32:20:ac:
26:3a:88:76:2b:d2:1d:ca:d3:7e:b7:ee:6d:30:dc:
66:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:57:2E:C6:CE:D7:1D:21:0C:10:E2:E9:4A:2D:BB:EA:D0:6A:13:25
X509v3 Authority Key Identifier:
keyid:22:92:D9:6D:FB:66:CB:18:06:9D:8B:D1:5C:9E:90:CD:91:24:F0:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IpLZbftmyxgGnYvRXJ6QzZEk8AM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:25:76:74:6e:32:90:0d:97:9a:c8:84:f5:20:e3:a4:03:90:
fb:95:99:5c:6a:00:30:5d:e8:8c:09:e4:11:6b:07:0d:93:e0:
3b:91:f7:0a:94:28:ec:ca:41:7d:88:d7:7f:f1:ba:a4:02:7d:
f2:60:35:29:f1:8c:df:a0:6f:73:ef:13:4d:61:77:2e:7c:7c:
6b:65:bf:bc:f9:d0:1f:78:39:e1:9c:ad:5b:ca:5a:9d:d9:0e:
b2:b2:a1:94:0c:ed:85:09:63:4c:0e:93:7a:49:59:3f:c9:87:
d6:96:cc:1c:9d:3c:23:52:1a:fb:82:ce:56:6b:36:23:20:35:
b9:56:99:fa:b2:9f:02:79:1e:7d:4a:7f:b5:24:27:72:1f:86:
1e:14:a4:d3:0d:8b:58:41:34:f2:25:a8:e5:8a:10:7f:b4:e2:
9a:fa:29:3e:61:fa:43:b8:4d:0f:73:38:e1:49:8e:8b:e7:d0:
68:d8:71:94:a1:d9:4a:12:fc:7a:2e:6c:54:a6:d3:5e:a7:fc:
79:34:52:cc:db:e8:7b:8e:ec:f8:9a:01:2c:7e:36:fe:bb:0e:
4b:0f:83:d3:f9:52:f4:c1:52:07:4a:df:ce:4c:b8:26:7f:36:
06:e4:c0:d6:4d:4d:a9:a0:d9:58:37:a2:e7:a4:cb:a8:d3:dd:
7c:06:79:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 18:10:55 2026 by rpki-client