Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.mft
File: IXtJHcy1YyIW2AtI-NYoax7_2Nc.mft (raw, json)
Hash identifier: vahUCWSW5YKM+Edw6uLp3TaGpiZtm4NstZgOvngbMR4=
Subject key identifier: 23:F9:FF:AD:A8:05:85:7A:4B:3C:A3:0D:87:6A:99:9A:F9:58:FB:EE
Authority key identifier: 21:7B:49:1D:CC:B5:63:22:16:D8:0B:48:F8:D6:28:6B:1E:FF:D8:D7
Certificate issuer: /CN=217b491dccb5632216d80b48f8d6286b1effd8d7
Certificate serial: 019DDCFA0003FED3889E40EDE86ABFA17140
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IXtJHcy1YyIW2AtI-NYoax7_2Nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.mft
Manifest number: 1439
Signing time: Thu 30 Apr 2026 06:01:04 +0000
Manifest this update: Thu 30 Apr 2026 06:01:04 +0000
Manifest next update: Fri 01 May 2026 06:01:04 +0000
Files and hashes: 1: IXtJHcy1YyIW2AtI-NYoax7_2Nc.crl (hash: GAL6dLyprrOE6jS7pDeKiMKfPr4Evj4tdnfCweQUdCU=)
2: Ry13RGPYJVvtpvhKEOm6pAfriNc.roa (hash: oTL00T36xjABiLlLnyyxwdABnaFfTiLLRpEKK+wxv9o=)
3: TYPr3RJ5yO-DDveN9UKe3IFvuiY.asa (hash: QAM+8Y7IXNl8McE2u38ceOVi6OQTLcaAjr7T4vt1spg=)
4: XmK83eJDzPMsOo6NG4b7hC8Q6ik.roa (hash: LiOPt6WyR9nnxeKYrKkKUN50OOD6CsvfUFylT6hefd4=)
5: lMyPvW5droFVn6Tk385-cqRx17c.roa (hash: gpoTflIdMdUsvV/coCFUIU3cd1nO0X3/iYdUbk7d574=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.mft
rsync://rpki.ripe.net/repository/DEFAULT/IXtJHcy1YyIW2AtI-NYoax7_2Nc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 06:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dc:fa:00:03:fe:d3:88:9e:40:ed:e8:6a:bf:a1:71:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=217b491dccb5632216d80b48f8d6286b1effd8d7
Validity
Not Before: Apr 30 06:01:04 2026 GMT
Not After : May 1 06:01:04 2026 GMT
Subject: CN=23f9ffada805857a4b3ca30d876a999af958fbee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:5e:76:3f:98:98:6d:98:b1:7d:3a:51:ae:4f:
64:48:83:68:8a:01:e4:a6:87:f9:5a:88:1c:21:5a:
24:bd:26:88:60:05:18:30:fa:f1:66:3e:ff:f7:7d:
b3:2e:76:6b:27:5d:36:95:b8:f4:42:f4:bb:1b:45:
6a:82:f4:dd:55:40:a8:b5:f5:5d:80:18:fa:15:98:
56:f2:ed:a2:39:33:d5:eb:97:65:00:df:49:56:84:
72:b1:e5:56:e0:d4:83:c0:82:ea:4b:a6:45:3a:f3:
c4:48:e1:7f:6d:35:e0:16:de:87:94:7c:bc:c0:2d:
f2:ce:88:58:01:dd:cf:b6:53:64:26:bb:e7:24:10:
bf:1e:d0:ff:b6:e7:7d:99:f6:a2:18:71:ce:20:73:
63:25:d1:4e:4f:58:2c:8e:c8:c3:30:92:54:cd:31:
c3:52:84:2f:ab:99:17:62:96:c3:ab:20:fe:6e:0f:
6e:ca:c2:ce:d4:eb:8b:aa:70:d0:d3:97:7e:67:e2:
b2:0f:29:99:c9:77:4c:37:6b:02:ca:fb:f3:40:c1:
b1:9c:a5:d1:ec:29:d7:ab:b7:67:65:0c:9d:46:b6:
25:86:c1:a0:9f:24:d0:1e:e3:64:1f:4b:c5:47:0c:
d4:98:d1:c0:f3:cd:08:80:ea:5d:c1:3d:69:2d:dd:
ac:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:F9:FF:AD:A8:05:85:7A:4B:3C:A3:0D:87:6A:99:9A:F9:58:FB:EE
X509v3 Authority Key Identifier:
keyid:21:7B:49:1D:CC:B5:63:22:16:D8:0B:48:F8:D6:28:6B:1E:FF:D8:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IXtJHcy1YyIW2AtI-NYoax7_2Nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:2c:86:fa:2c:ef:0b:4d:20:2f:be:ce:4a:e4:2d:c4:ab:b3:
a5:97:91:3e:db:db:05:73:09:25:c7:8c:85:ea:49:ce:a9:3c:
f5:74:b1:15:35:8b:b4:41:9b:50:74:c8:d7:c4:f7:0a:4b:8e:
8d:37:ca:1a:0c:0b:4b:54:47:39:8b:e2:ab:2c:5b:a3:b4:2a:
e7:9b:38:19:fe:54:4c:77:b6:12:8d:ae:ff:67:60:13:cb:d3:
9c:7a:5e:19:ce:92:4e:6b:4d:07:0c:36:dd:6b:fb:bf:e1:ca:
4f:a2:41:7e:9d:d2:68:0d:30:73:78:40:2d:70:14:ee:16:b7:
8f:9c:ef:de:d0:4f:c3:a3:78:55:94:ac:1a:32:b5:3d:22:22:
1c:f8:44:90:36:40:aa:12:b4:8d:8d:9b:9b:9b:0f:48:ad:77:
97:42:66:0d:f7:cc:ff:0b:30:5e:48:29:d5:d3:30:fa:7d:c2:
cd:c9:53:56:bd:40:5d:53:11:6c:22:02:af:f9:24:6b:92:79:
65:f2:dd:fb:49:03:23:aa:77:9b:ee:dd:8b:f7:52:43:0c:48:
47:e8:b1:99:b1:df:08:d5:fa:55:e9:86:70:d4:f6:16:03:02:
ff:85:a2:99:bf:83:10:b0:34:64:ba:2e:a3:c1:96:43:a2:0c:
31:ba:a8:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3c+gAD/tOInkDt6Gq/oXFAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxN2I0OTFkY2NiNTYzMjIxNmQ4MGI0OGY4ZDYyODZiMWVm
ZmQ4ZDcwHhcNMjYwNDMwMDYwMTA0WhcNMjYwNTAxMDYwMTA0WjAzMTEwLwYDVQQD
EygyM2Y5ZmZhZGE4MDU4NTdhNGIzY2EzMGQ4NzZhOTk5YWY5NThmYmVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5152P5iYbZixfTpRrk9kSINoigHk
pof5WogcIVokvSaIYAUYMPrxZj7/932zLnZrJ102lbj0QvS7G0VqgvTdVUCotfVd
gBj6FZhW8u2iOTPV65dlAN9JVoRyseVW4NSDwILqS6ZFOvPESOF/bTXgFt6HlHy8
wC3yzohYAd3PtlNkJrvnJBC/HtD/tud9mfaiGHHOIHNjJdFOT1gsjsjDMJJUzTHD
UoQvq5kXYpbDqyD+bg9uysLO1OuLqnDQ05d+Z+KyDymZyXdMN2sCyvvzQMGxnKXR
7CnXq7dnZQydRrYlhsGgnyTQHuNkH0vFRwzUmNHA880IgOpdwT1pLd2sZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCP5/62oBYV6SzyjDYdqmZr5WPvuMB8GA1UdIwQY
MBaAFCF7SR3MtWMiFtgLSPjWKGse/9jXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVh0SkhjeTFZeUlXMkF0SS1OWW9heDdfMk5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9lOWYyOWMtOTIzMS00NTBkLWFkYjAt
NmRlMDVhMzE2MjM5LzEvSVh0SkhjeTFZeUlXMkF0SS1OWW9heDdfMk5jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9lOWYyOWMtOTIzMS00NTBkLWFkYjAtNmRlMDVhMzE2MjM5
LzEvSVh0SkhjeTFZeUlXMkF0SS1OWW9heDdfMk5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjiyG+izv
C00gL77OSuQtxKuzpZeRPtvbBXMJJceMhepJzqk89XSxFTWLtEGbUHTI18T3CkuO
jTfKGgwLS1RHOYviqyxbo7Qq55s4Gf5UTHe2Eo2u/2dgE8vTnHpeGc6STmtNBww2
3Wv7v+HKT6JBfp3SaA0wc3hALXAU7ha3j5zv3tBPw6N4VZSsGjK1PSIiHPhEkDZA
qhK0jY2bm5sPSK13l0JmDffM/wswXkgp1dMw+n3CzclTVr1AXVMRbCICr/kka5J5
ZfLd+0kDI6p3m+7di/dSQwxIR+ixmbHfCNX6VemGcNT2FgMC/4Wimb+DELA0ZLou
o8GWQ6IMMbqoeQ==
-----END CERTIFICATE-----
Generated at Thu Apr 30 13:05:55 2026 by rpki-client