Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ac0694-1e22-436d-82c9-17ce620e74f1/1/IE19hlKpn8F__y197MSeVWqg64A.mft
File: IE19hlKpn8F__y197MSeVWqg64A.mft (raw, json)
Hash identifier: egVJfJ5Y009XYTUZjEucSaIXASeb+7aKcMTg8rJbw44=
Subject key identifier: EE:91:32:E7:BF:3A:B8:47:88:9E:4A:D7:6E:62:DD:AE:7B:70:46:A1
Authority key identifier: 20:4D:7D:86:52:A9:9F:C1:7F:FF:2D:7D:EC:C4:9E:55:6A:A0:EB:80
Certificate issuer: /CN=204d7d8652a99fc17fff2d7decc49e556aa0eb80
Certificate serial: 019E4EEB70BE8D3A9255C440DD5D08EE073B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IE19hlKpn8F__y197MSeVWqg64A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ac0694-1e22-436d-82c9-17ce620e74f1/1/IE19hlKpn8F__y197MSeVWqg64A.mft
Manifest number: 0624
Signing time: Fri 22 May 2026 09:01:53 +0000
Manifest this update: Fri 22 May 2026 09:01:53 +0000
Manifest next update: Sat 23 May 2026 09:01:53 +0000
Files and hashes: 1: IE19hlKpn8F__y197MSeVWqg64A.crl (hash: 8scglAgeah84YUKVU6/+ieYlcpI/8zQDsBxx+DO+OCU=)
2: Ii6wwqE-ee-CRo8hd4o4rFr06SY.roa (hash: Ta+qzjiPCmFIkSNPxrZ151ZxOc0vieQ/q0h1vtHvBVQ=)
3: Xw9tVyuPLJRqNzDdc3wN3NyB9IA.roa (hash: nQERgQoU1LcOAXZoSGkitr1IswJcoffSa8r7ceEkAJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/ac0694-1e22-436d-82c9-17ce620e74f1/1/IE19hlKpn8F__y197MSeVWqg64A.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/ac0694-1e22-436d-82c9-17ce620e74f1/1/IE19hlKpn8F__y197MSeVWqg64A.mft
rsync://rpki.ripe.net/repository/DEFAULT/IE19hlKpn8F__y197MSeVWqg64A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4e:eb:70:be:8d:3a:92:55:c4:40:dd:5d:08:ee:07:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=204d7d8652a99fc17fff2d7decc49e556aa0eb80
Validity
Not Before: May 22 09:01:53 2026 GMT
Not After : May 23 09:01:53 2026 GMT
Subject: CN=ee9132e7bf3ab847889e4ad76e62ddae7b7046a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:34:e6:10:98:ed:42:61:9c:c9:fb:be:57:f8:
0b:00:ea:7e:af:03:a5:0d:72:ae:98:cf:6f:e7:c7:
4d:ad:0f:2f:18:59:79:a7:14:89:ec:29:a9:b6:30:
24:9b:19:34:ba:56:50:3d:a4:98:95:c4:af:1c:74:
2c:a3:0b:4d:0d:ba:97:64:f3:50:cc:00:8f:e1:65:
62:50:fb:53:94:f4:98:d7:1e:8c:71:7c:ae:75:1b:
33:f1:d5:55:8c:c3:bf:b3:bc:11:9f:93:dc:12:c5:
54:25:1a:75:f3:13:6c:71:c2:f2:d5:7a:9a:2d:c0:
db:1a:bc:b8:41:14:a9:c9:ab:41:74:18:93:4f:e4:
45:67:c3:f3:c7:52:ef:d4:04:29:a7:5f:1a:99:4e:
a5:1a:9a:8f:e3:34:91:e3:ad:dd:20:f5:6c:aa:63:
05:f3:95:f1:f6:5b:d3:c8:09:ba:00:b6:4e:eb:7e:
a2:83:43:60:02:12:d6:3b:99:c6:24:1b:f7:78:3f:
0f:38:c8:22:4a:0b:c3:4c:9c:b8:d2:c1:3a:25:b9:
54:5e:9c:6f:a8:b4:b2:fc:c8:13:09:56:52:33:9f:
f7:fa:5a:24:a5:f2:42:c0:2a:fe:24:d9:4f:2a:d1:
f8:83:e4:64:44:9f:fe:c3:70:4c:82:5d:86:70:51:
eb:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:91:32:E7:BF:3A:B8:47:88:9E:4A:D7:6E:62:DD:AE:7B:70:46:A1
X509v3 Authority Key Identifier:
keyid:20:4D:7D:86:52:A9:9F:C1:7F:FF:2D:7D:EC:C4:9E:55:6A:A0:EB:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IE19hlKpn8F__y197MSeVWqg64A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ac0694-1e22-436d-82c9-17ce620e74f1/1/IE19hlKpn8F__y197MSeVWqg64A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ac0694-1e22-436d-82c9-17ce620e74f1/1/IE19hlKpn8F__y197MSeVWqg64A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:e7:19:c8:98:59:ca:ae:7f:cd:6a:03:50:4c:9b:ca:2c:11:
97:78:de:b9:10:b7:fb:d7:66:38:d2:0d:c8:2d:80:3c:e4:18:
0a:05:c1:2c:f1:60:ab:9c:47:e5:40:90:59:6c:6f:81:85:ac:
58:be:75:9a:18:18:aa:8c:03:06:62:2f:61:b0:25:b1:b6:46:
27:fa:e0:c5:81:95:89:72:24:f7:6f:eb:87:1b:39:06:d0:40:
e0:d5:4f:db:76:34:a8:ea:d2:7e:ce:ae:e6:ce:00:c8:15:a9:
e6:c7:e6:35:da:9a:77:20:5c:87:a0:64:28:21:db:fd:6d:d5:
31:60:e2:45:ba:45:95:6d:4f:7c:a3:73:4e:25:31:57:66:e7:
a4:1f:f5:bb:d1:3c:94:b0:2b:dc:d8:a9:1e:74:18:53:b9:d4:
06:23:b5:51:2b:c7:b5:22:fe:f2:31:3e:4c:83:d8:ab:2c:ad:
9f:72:9d:01:fc:14:0a:f4:90:82:a0:42:3c:82:00:fb:73:30:
20:bc:09:3a:e0:82:fb:fb:77:bd:b2:8e:ee:3c:a4:3b:45:34:
76:d7:48:c9:dc:c2:0b:34:a1:ab:b1:2b:8b:9a:ff:f0:e9:34:
d2:7c:0d:38:84:3c:7d:d9:c9:a8:c0:77:cf:bc:b0:a5:d1:06:
a6:c4:4e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 15:12:17 2026 by rpki-client