Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.mft
File: IBjvCLVd2yDIgWpiGkWc25J7MgE.mft (raw, json)
Hash identifier: d0RfoVjwmET16pE19/VvkHe8m9C5tQwRtMhPz3J+ClQ=
Subject key identifier: D6:1A:74:10:03:2D:0B:32:66:51:F6:5E:3C:4D:64:39:80:2E:37:6C
Authority key identifier: 20:18:EF:08:B5:5D:DB:20:C8:81:6A:62:1A:45:9C:DB:92:7B:32:01
Certificate issuer: /CN=2018ef08b55ddb20c8816a621a459cdb927b3201
Certificate serial: 019E51B57554F4DFC151DF72CF023A5B65F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IBjvCLVd2yDIgWpiGkWc25J7MgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.mft
Manifest number: 18B4
Signing time: Fri 22 May 2026 22:01:46 +0000
Manifest this update: Fri 22 May 2026 22:01:46 +0000
Manifest next update: Sat 23 May 2026 22:01:46 +0000
Files and hashes: 1: 46TfkgzFvsJA-mkb18CtoR7-ZNU.roa (hash: UwZqgkhkMSRcZLQ/mfRr2bDwJWvzPxqmUX74IwjVtQk=)
2: IBjvCLVd2yDIgWpiGkWc25J7MgE.crl (hash: UZ2clgCAKc9OiuzqRIhGUcycAB+oBwWpsbms8MQsmT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/IBjvCLVd2yDIgWpiGkWc25J7MgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 17:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:51:b5:75:54:f4:df:c1:51:df:72:cf:02:3a:5b:65:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2018ef08b55ddb20c8816a621a459cdb927b3201
Validity
Not Before: May 22 22:01:46 2026 GMT
Not After : May 23 22:01:46 2026 GMT
Subject: CN=d61a7410032d0b326651f65e3c4d6439802e376c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:68:bb:f9:4e:d3:93:18:86:b6:68:c3:f5:75:
d7:d1:60:d3:b7:ab:f9:b8:05:a3:97:de:0b:36:9f:
df:21:32:58:d1:a1:fd:05:b4:83:e7:5d:fb:17:ef:
c1:9c:61:8c:88:f9:3a:16:c3:5e:ae:7e:5e:e2:f4:
2c:c1:da:22:59:3e:58:2c:a5:a7:60:99:0b:8b:21:
df:5b:a3:eb:94:62:4d:c4:5e:bb:1f:e4:cd:0b:da:
7d:2f:fb:35:29:50:f9:98:bc:9a:d0:a4:37:6a:de:
ea:3b:b4:6e:dd:38:16:3a:bc:e7:a1:e5:84:9a:aa:
8b:78:a1:9a:d1:c7:1b:be:0a:4e:db:75:79:65:8a:
dc:46:64:78:80:d9:67:0c:3c:a5:3e:b3:99:fe:29:
81:ee:ca:0c:c2:ac:45:ec:8f:33:96:9f:24:77:87:
44:67:d9:e9:ca:59:fc:9a:fe:a5:50:01:4a:ed:ab:
da:da:67:6b:6a:01:05:c7:b9:40:7f:c2:55:ed:c9:
a6:63:ca:80:cc:d1:e6:4c:dd:02:29:8d:65:bc:07:
d8:dd:92:7a:b6:73:66:dc:4f:67:9d:f9:b3:6b:e2:
92:bc:8e:b7:38:48:b1:c4:26:6b:e8:89:82:b5:92:
6f:b2:4e:e3:ac:76:49:45:26:39:f3:b3:28:6c:a8:
95:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:1A:74:10:03:2D:0B:32:66:51:F6:5E:3C:4D:64:39:80:2E:37:6C
X509v3 Authority Key Identifier:
keyid:20:18:EF:08:B5:5D:DB:20:C8:81:6A:62:1A:45:9C:DB:92:7B:32:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IBjvCLVd2yDIgWpiGkWc25J7MgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:c5:72:88:37:2a:84:15:e1:cf:ba:77:88:35:59:86:1e:e9:
94:61:50:4f:06:dd:a5:89:2a:92:75:fa:f8:0e:01:74:d8:6e:
35:31:1d:40:4d:9c:88:2d:15:8e:d8:34:d8:eb:04:19:67:1b:
9e:68:81:68:6a:f2:9d:78:54:e7:59:df:88:3c:d6:df:c9:80:
22:06:08:e2:93:a9:5b:2f:4e:cb:16:bb:79:5b:8c:d5:53:11:
dc:3d:ab:ff:4a:68:c4:d7:81:65:54:54:3f:d8:8a:3c:e1:c3:
69:44:15:5f:aa:1e:5e:63:33:4b:6b:d4:b7:77:4d:26:c7:d6:
d5:a4:57:45:85:78:06:3c:43:9d:18:11:fc:07:04:68:58:22:
75:6c:a9:19:f6:22:21:f3:79:ee:a2:bd:cb:3a:0a:b0:c1:2f:
85:2b:47:6a:b2:17:99:5a:83:75:ff:98:f2:10:cc:1a:dc:be:
1d:37:69:af:87:cb:77:e6:ad:34:af:1a:1e:da:49:38:8e:cf:
4d:e9:5f:38:7e:17:bd:c4:b0:a9:af:4b:7d:4a:45:a5:c6:8f:
28:f8:24:b6:be:82:0d:82:f5:05:49:45:7c:97:25:b3:73:7b:
7b:a6:e6:56:b6:c7:55:41:54:92:32:3c:17:75:9f:3f:01:2a:
20:26:1d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 03:47:34 2026 by rpki-client