Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/IAsV4Hg_4A8bile9FP29BpJLiDI.mft
File: IAsV4Hg_4A8bile9FP29BpJLiDI.mft (raw, json)
Hash identifier: YlOS5Dy7RD2k+/E5LXi0xm95VM01Q8zIRS9qW/K5u14=
Subject key identifier: 45:6B:8A:53:66:9B:20:E2:D9:29:03:58:96:EA:3B:D1:03:B8:CD:86
Authority key identifier: 20:0B:15:E0:78:3F:E0:0F:1B:8A:57:BD:14:FD:BD:06:92:4B:88:32
Certificate issuer: /CN=200b15e0783fe00f1b8a57bd14fdbd06924b8832
Certificate serial: 019DCDBDEC39108FD810944FB2E4D1146A37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IAsV4Hg_4A8bile9FP29BpJLiDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/IAsV4Hg_4A8bile9FP29BpJLiDI.mft
Manifest number: 18DE
Signing time: Mon 27 Apr 2026 07:01:09 +0000
Manifest this update: Mon 27 Apr 2026 07:01:09 +0000
Manifest next update: Tue 28 Apr 2026 07:01:09 +0000
Files and hashes: 1: IAsV4Hg_4A8bile9FP29BpJLiDI.crl (hash: 8qEmrWcinYcYkzRPipiAmZ6VGO6bV1s7O5tGWAMGvs8=)
2: pjJ3h-AtM7br3AuCdoLvUYqZ6Us.roa (hash: oMubblgpXo7TWZ3eL9+/USYMfrR1dHWkBzKitQqRPPI=)
3: tIEL4J6jSkAPZLSFtELamVkICgM.roa (hash: mcwIFqfoI6qXjVDhr4bgReH1f7CPQDUrI4HFRmfb3wI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/IAsV4Hg_4A8bile9FP29BpJLiDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/IAsV4Hg_4A8bile9FP29BpJLiDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IAsV4Hg_4A8bile9FP29BpJLiDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:bd:ec:39:10:8f:d8:10:94:4f:b2:e4:d1:14:6a:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=200b15e0783fe00f1b8a57bd14fdbd06924b8832
Validity
Not Before: Apr 27 07:01:09 2026 GMT
Not After : Apr 28 07:01:09 2026 GMT
Subject: CN=456b8a53669b20e2d929035896ea3bd103b8cd86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2c:90:83:be:6c:aa:2f:8b:99:dd:72:2f:7b:
79:0d:75:e9:d4:b5:42:35:7a:19:39:9b:ac:e9:5b:
dd:f3:a8:a1:14:e8:94:e9:e7:61:43:18:83:7f:4c:
55:9e:de:08:f1:7e:89:2a:1f:ec:55:ce:eb:48:7c:
36:d2:d1:3c:78:2a:f3:5e:b1:d9:64:e5:c1:16:90:
6a:8b:c1:eb:ad:0c:3b:9a:c8:d0:b9:78:a5:e3:9a:
36:5b:47:b1:c2:0d:f0:7b:d0:7b:64:5a:5e:cc:b9:
e5:04:4c:5b:88:f5:1a:ea:6b:a8:1e:61:4e:c0:54:
30:ab:08:06:a8:ba:a4:0b:6f:88:53:1b:6c:62:0a:
aa:9d:a1:69:88:c0:82:c7:24:fd:f8:a1:ff:c5:54:
fd:55:88:61:61:c5:37:61:6b:ed:ef:06:66:e0:ae:
0f:b9:bb:01:f5:a2:d4:2e:a2:17:25:1d:26:79:3d:
dc:c5:24:d4:c4:85:19:d8:8e:53:4a:6f:18:3c:10:
db:91:13:55:73:54:3e:74:d1:9c:78:50:37:4e:d8:
7e:55:ae:c8:a0:6e:93:41:d7:b6:9a:83:d5:96:a0:
a0:2d:cc:09:34:48:75:20:84:79:6f:13:4f:18:fe:
21:5c:63:06:04:43:a2:bd:aa:1c:70:e1:d8:cf:56:
c5:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:6B:8A:53:66:9B:20:E2:D9:29:03:58:96:EA:3B:D1:03:B8:CD:86
X509v3 Authority Key Identifier:
keyid:20:0B:15:E0:78:3F:E0:0F:1B:8A:57:BD:14:FD:BD:06:92:4B:88:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IAsV4Hg_4A8bile9FP29BpJLiDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/IAsV4Hg_4A8bile9FP29BpJLiDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/IAsV4Hg_4A8bile9FP29BpJLiDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:a5:bc:f2:0e:91:eb:d0:26:2d:eb:5b:8a:e5:45:c9:e0:1f:
c1:19:b4:44:f1:c3:0f:36:73:3d:3b:bd:38:1c:71:8c:8f:89:
27:f9:5d:93:28:5e:e1:66:5e:ac:8f:da:9d:63:7d:f3:2a:a1:
98:6f:05:91:54:5f:95:c5:34:dd:86:82:e8:b7:76:c0:9e:6e:
8a:1e:e0:eb:ae:57:d3:2c:9f:a4:6f:5c:b5:70:db:2a:a2:bc:
32:53:74:cb:e4:22:12:e0:e0:c2:2f:da:a9:4b:3c:c9:42:1c:
67:58:1d:80:08:73:20:a8:8c:5c:b2:ed:46:40:55:09:18:b9:
fd:8a:28:d0:77:ea:a7:b9:bf:37:3f:73:db:d0:d6:3a:d7:87:
5b:6d:e8:02:be:38:44:3d:91:b0:b6:48:dc:ae:33:dd:84:53:
ae:4b:f6:83:fe:6d:3f:3c:f4:9e:0c:f4:77:61:ac:29:ef:5b:
91:2d:2b:39:6c:4c:b7:6b:ba:29:24:39:07:52:9b:1c:e1:fe:
6c:74:44:bc:44:6c:a6:94:5b:0c:87:61:ec:3c:f0:ec:1f:4a:
7a:23:c6:5d:5a:9a:00:af:cf:99:52:3e:67:ec:7b:e6:b0:18:
a0:1f:dc:50:49:c8:5b:b6:66:32:b8:db:54:94:91:d6:95:42:
f3:42:d7:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:14:54 2026 by rpki-client