Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/IjayuK-mA20sjoMXc2-qpy2AxPI.mft
File: IjayuK-mA20sjoMXc2-qpy2AxPI.mft (raw, json)
Hash identifier: 7ewBh4Yjsy2BIw1Wh61NrIEnVnC5hi1uK32a1ljCm0w=
Subject key identifier: 2E:A5:58:78:6E:3F:3D:C7:40:DC:46:E9:EF:72:93:4A:FF:53:37:7B
Authority key identifier: 22:36:B2:B8:AF:A6:03:6D:2C:8E:83:17:73:6F:AA:A7:2D:80:C4:F2
Certificate issuer: /CN=2236b2b8afa6036d2c8e8317736faaa72d80c4f2
Certificate serial: 019D39AEC51926E32F33322EEE5537C8AA3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IjayuK-mA20sjoMXc2-qpy2AxPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/IjayuK-mA20sjoMXc2-qpy2AxPI.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 13:00:48 +0000
Manifest this update: Sun 29 Mar 2026 13:00:48 +0000
Manifest next update: Mon 30 Mar 2026 13:00:48 +0000
Files and hashes: 1: IjayuK-mA20sjoMXc2-qpy2AxPI.crl (hash: FrpyQD0ugRDN0VJ1EdeOcR0Wh5v77MMotGE7NebRBlY=)
2: KTUGLKw4lT-j5fxDHCDXoM2-FbI.roa (hash: 9VOAz2Y+xG383GmXb/Qw7x9sWxBBSQzGbBFfCAhlucM=)
3: mH0FJ23Xhvhl7yPzg_J0QLsXN6c.roa (hash: bc3Tff2F8YDhVYuMIKbuPGvXcTjpv3hF+6MXk1AVTa4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/IjayuK-mA20sjoMXc2-qpy2AxPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/IjayuK-mA20sjoMXc2-qpy2AxPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IjayuK-mA20sjoMXc2-qpy2AxPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:c5:19:26:e3:2f:33:32:2e:ee:55:37:c8:aa:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2236b2b8afa6036d2c8e8317736faaa72d80c4f2
Validity
Not Before: Mar 29 13:00:48 2026 GMT
Not After : Mar 30 13:00:48 2026 GMT
Subject: CN=2ea558786e3f3dc740dc46e9ef72934aff53377b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0b:21:3e:9e:c8:c8:2b:c9:b5:35:70:73:f3:
e5:56:de:86:f7:de:8d:a8:ae:82:23:d2:f0:58:44:
a7:11:f3:b3:0e:01:eb:06:be:ff:3d:44:bb:49:ba:
ea:f9:40:2f:eb:fb:d4:9c:6c:b3:50:f0:45:56:f5:
48:fa:38:d6:e1:0a:7a:2c:8d:e6:1d:84:56:4a:9a:
1d:1d:32:ca:5c:b9:78:2c:eb:ff:48:0c:c1:9a:1f:
73:e9:79:27:66:35:38:cc:91:50:b7:c7:8c:56:b6:
a2:26:da:b0:b6:c7:36:b8:9c:ae:2f:de:ad:9a:99:
dd:20:1b:52:52:28:47:b0:ae:57:d9:c6:f4:4a:1e:
8e:7c:b8:e7:47:fe:8c:55:e6:28:47:25:f5:d8:b0:
87:fb:be:3e:4f:f0:1b:dd:21:9e:df:17:a3:02:63:
ab:66:d6:aa:5a:a2:f0:e4:b5:37:07:0f:88:29:f2:
fc:f0:65:f1:11:39:e9:01:55:39:61:7a:64:40:cc:
5b:7a:67:f1:4e:ac:6a:b7:37:df:f2:78:92:bf:0b:
bb:55:03:36:bd:d4:0d:c2:01:95:da:52:ea:32:eb:
2d:af:cf:9a:ea:ab:09:44:ba:ba:b1:1e:ae:2d:fa:
e4:8a:41:d0:cb:d7:4c:69:4b:8c:1e:36:b1:b5:8a:
8a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:A5:58:78:6E:3F:3D:C7:40:DC:46:E9:EF:72:93:4A:FF:53:37:7B
X509v3 Authority Key Identifier:
keyid:22:36:B2:B8:AF:A6:03:6D:2C:8E:83:17:73:6F:AA:A7:2D:80:C4:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IjayuK-mA20sjoMXc2-qpy2AxPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/IjayuK-mA20sjoMXc2-qpy2AxPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/IjayuK-mA20sjoMXc2-qpy2AxPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:44:00:43:fc:a8:b6:0a:16:c8:53:ae:5b:6c:5e:f8:d3:57:
10:e5:dd:cf:e3:a2:08:01:f4:35:bd:f7:5f:d6:da:34:fe:26:
ae:89:c2:b3:a0:ed:82:f2:14:77:bf:cc:0c:0a:06:41:7c:88:
b7:56:9b:6c:9f:9a:60:d2:c6:4c:5e:7a:4e:e7:43:6e:33:5a:
70:f8:87:37:35:0a:56:80:39:51:9c:b6:39:09:0f:8b:20:37:
f6:92:6b:bc:b4:31:3a:1f:06:08:d1:33:5e:f4:09:b3:34:8b:
dd:c9:f8:56:1b:c3:c4:59:1b:23:c7:07:b2:66:06:36:0e:71:
70:ff:14:d5:8c:76:50:6f:69:25:2a:69:55:4c:b2:c5:44:0d:
19:7d:3e:7b:40:c9:3a:8b:f6:6c:e0:7d:bf:54:20:97:5b:57:
e6:84:a2:82:c5:c6:6a:f9:42:6e:45:d8:66:d7:2c:3d:9c:40:
d5:5c:9d:4a:ef:2d:e0:67:20:d0:8b:eb:d3:cf:14:96:be:cf:
62:9f:11:3b:06:a6:d5:77:22:af:8f:61:09:19:d6:ce:ac:31:
52:1e:57:01:0d:46:2b:f2:2f:38:fa:79:89:65:b5:9e:8e:1f:
89:15:01:8e:e8:83:75:df:13:e6:04:ff:37:f4:45:a2:f7:ce:
35:91:d3:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05rsUZJuMvMzIu7lU3yKo/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyMzZiMmI4YWZhNjAzNmQyYzhlODMxNzczNmZhYWE3MmQ4
MGM0ZjIwHhcNMjYwMzI5MTMwMDQ4WhcNMjYwMzMwMTMwMDQ4WjAzMTEwLwYDVQQD
EygyZWE1NTg3ODZlM2YzZGM3NDBkYzQ2ZTllZjcyOTM0YWZmNTMzNzdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQshPp7IyCvJtTVwc/PlVt6G996N
qK6CI9LwWESnEfOzDgHrBr7/PUS7Sbrq+UAv6/vUnGyzUPBFVvVI+jjW4Qp6LI3m
HYRWSpodHTLKXLl4LOv/SAzBmh9z6XknZjU4zJFQt8eMVraiJtqwtsc2uJyuL96t
mpndIBtSUihHsK5X2cb0Sh6OfLjnR/6MVeYoRyX12LCH+74+T/Ab3SGe3xejAmOr
ZtaqWqLw5LU3Bw+IKfL88GXxETnpAVU5YXpkQMxbemfxTqxqtzff8niSvwu7VQM2
vdQNwgGV2lLqMustr8+a6qsJRLq6sR6uLfrkikHQy9dMaUuMHjaxtYqKowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC6lWHhuPz3HQNxG6e9yk0r/Uzd7MB8GA1UdIwQY
MBaAFCI2srivpgNtLI6DF3NvqqctgMTyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWpheXVLLW1BMjBzam9NWGMyLXFweTJBeFBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82Zjg5NWItNzk3Ny00NDVkLWI3MmMt
OGI1ZWY0MWQ4YzI1LzEvSWpheXVLLW1BMjBzam9NWGMyLXFweTJBeFBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82Zjg5NWItNzk3Ny00NDVkLWI3MmMtOGI1ZWY0MWQ4YzI1
LzEvSWpheXVLLW1BMjBzam9NWGMyLXFweTJBeFBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfkQAQ/yo
tgoWyFOuW2xe+NNXEOXdz+OiCAH0Nb33X9baNP4mronCs6DtgvIUd7/MDAoGQXyI
t1abbJ+aYNLGTF56TudDbjNacPiHNzUKVoA5UZy2OQkPiyA39pJrvLQxOh8GCNEz
XvQJszSL3cn4VhvDxFkbI8cHsmYGNg5xcP8U1Yx2UG9pJSppVUyyxUQNGX0+e0DJ
Oov2bOB9v1Qgl1tX5oSigsXGavlCbkXYZtcsPZxA1VydSu8t4Gcg0Ivr088Ulr7P
Yp8ROwam1Xcir49hCRnWzqwxUh5XAQ1GK/IvOPp5iWW1no4fiRUBjuiDdd8T5gT/
N/RFovfONZHTTg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:48:59 2026 by rpki-client