Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft
File: IjbtX1Yj7et5EKzTHV9u6B5csX4.mft (raw, json)
Hash identifier: zmvTmP/8ANUG1eaK9xt1Ak0vB2yfnK1wHGupDZXamDQ=
Subject key identifier: AB:88:70:9B:DF:EA:26:24:9E:E1:C8:66:19:10:CD:12:4A:08:7A:08
Authority key identifier: 22:36:ED:5F:56:23:ED:EB:79:10:AC:D3:1D:5F:6E:E8:1E:5C:B1:7E
Certificate issuer: /CN=2236ed5f5623edeb7910acd31d5f6ee81e5cb17e
Certificate serial: 019E2A703EBE9F2183C945FB00293E243E7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IjbtX1Yj7et5EKzTHV9u6B5csX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft
Manifest number: 10F3
Signing time: Fri 15 May 2026 07:00:59 +0000
Manifest this update: Fri 15 May 2026 07:00:59 +0000
Manifest next update: Sat 16 May 2026 07:00:59 +0000
Files and hashes: 1: CPndinjPYr6tuDu76KQaJ-aGMwI.roa (hash: nrsdPAkRRrAV3pIEBSnHKX1eqjnFVOeohTv704UK0JA=)
2: IjbtX1Yj7et5EKzTHV9u6B5csX4.crl (hash: GoOfMeruJV0c8X22N+msyY+mmnhAShdZoTAO7aErRWk=)
3: RoT_BRy5K5T_EFywyXjf2sUOgfA.roa (hash: 3g9pqCZcoGTGtwQJjCoF4vdhAm5IX+/HPg+Sn5/5ZvI=)
4: b9-WVQZEPxKTQu4HO3vpyGGIgyM.roa (hash: zJruMssE6fAWn+HUVB4+RJJ7aVS5WNO5nmK7xyX8S+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IjbtX1Yj7et5EKzTHV9u6B5csX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 07:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2a:70:3e:be:9f:21:83:c9:45:fb:00:29:3e:24:3e:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2236ed5f5623edeb7910acd31d5f6ee81e5cb17e
Validity
Not Before: May 15 07:00:59 2026 GMT
Not After : May 16 07:00:59 2026 GMT
Subject: CN=ab88709bdfea26249ee1c8661910cd124a087a08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a3:92:e4:f2:6e:14:90:e8:f2:66:60:6f:40:
b2:8a:e9:12:be:5a:a3:68:f5:ce:60:c7:41:e6:6e:
94:40:c6:df:46:1e:87:2c:1a:b6:46:9a:f2:ba:0f:
e0:0b:b3:6f:6c:21:85:e3:07:21:07:2d:c1:d0:af:
d7:15:3d:18:33:3e:0b:e8:b2:9a:ec:7e:80:a8:88:
45:94:35:68:dc:d7:9e:a6:3e:25:6f:ab:02:76:fa:
29:6c:67:48:7f:62:71:da:7b:da:e0:9b:bb:3e:fd:
93:d5:80:71:f0:61:81:65:a2:ba:69:47:4b:4d:00:
de:f2:fb:c2:8c:67:46:e9:b7:4c:f0:e0:29:37:af:
fa:39:26:30:e8:5f:14:2f:fe:eb:ea:3a:8d:25:94:
eb:f4:ce:71:4e:a2:4a:f2:81:a0:95:6b:09:b6:2d:
78:18:cf:ff:9f:36:18:9d:cc:65:73:aa:b8:88:35:
80:5b:e7:2f:9c:ac:5d:9d:02:eb:f7:10:11:ab:cb:
4d:9f:b5:0e:a3:00:9a:ad:a0:eb:c3:0d:29:f4:7a:
c4:57:a3:f0:ae:70:c0:46:4a:f0:e3:63:53:e8:87:
2e:39:37:5c:74:3a:aa:a5:0f:65:37:6a:c5:4f:28:
c6:c7:ba:6a:74:ec:96:eb:66:0a:ac:50:f6:de:b6:
5f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:88:70:9B:DF:EA:26:24:9E:E1:C8:66:19:10:CD:12:4A:08:7A:08
X509v3 Authority Key Identifier:
keyid:22:36:ED:5F:56:23:ED:EB:79:10:AC:D3:1D:5F:6E:E8:1E:5C:B1:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IjbtX1Yj7et5EKzTHV9u6B5csX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:6a:79:0d:b6:f8:4b:01:77:24:c6:42:fc:c0:cd:84:a2:86:
0a:83:e9:2f:cd:7b:59:45:da:1e:6a:f1:2d:54:f8:16:a4:98:
8d:39:90:36:d9:19:e0:04:a1:a6:89:5d:22:87:45:46:a4:82:
f4:40:ba:f3:3a:97:69:16:dd:68:b4:16:4f:c4:15:7a:ad:8c:
ea:3a:9d:ca:ff:72:4e:8a:a2:74:c5:04:c8:11:ba:bc:8f:6b:
ed:9c:db:96:8e:46:8c:35:59:9f:e9:97:38:07:e9:49:6c:03:
d6:eb:47:34:89:54:d4:8e:7b:29:ad:47:b1:50:4e:ec:28:b6:
95:4b:51:3f:44:b7:fd:bf:fa:0d:37:72:da:b9:e6:44:f2:7e:
8e:f1:73:79:c0:65:51:16:5b:35:58:68:ee:33:f6:6f:d6:e3:
83:d5:6e:e6:79:40:ba:92:af:9b:a9:b5:c3:11:0c:75:e6:b6:
2e:49:32:61:ef:da:3f:4e:fe:30:3d:0b:21:5d:e2:22:6e:00:
a4:8c:39:62:8a:96:ff:26:cc:c6:45:61:33:94:4d:63:d7:08:
3e:f2:6d:60:3c:ed:97:78:0a:d6:fd:f2:3d:69:cf:44:2d:87:
ec:5c:ed:aa:95:12:f9:24:43:34:70:46:8b:b1:d3:3d:a9:03:
8d:6c:1d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 13:29:04 2026 by rpki-client