Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.mft
File: IJejEXyhwdYpKuUpEbTwyk-OkBk.mft (raw, json)
Hash identifier: CDUYBjrGw5AMHGL/Wh9hPvuvjpJhobx3X/FR4Ljc9g0=
Subject key identifier: 1C:48:7E:99:C9:8F:64:50:F5:5F:22:D6:B5:81:E6:78:D7:E3:E5:74
Authority key identifier: 20:97:A3:11:7C:A1:C1:D6:29:2A:E5:29:11:B4:F0:CA:4F:8E:90:19
Certificate issuer: /CN=2097a3117ca1c1d6292ae52911b4f0ca4f8e9019
Certificate serial: 019E314E8E24808BE6E557ECB6ABC5380BB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IJejEXyhwdYpKuUpEbTwyk-OkBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.mft
Manifest number: 1913
Signing time: Sat 16 May 2026 15:01:32 +0000
Manifest this update: Sat 16 May 2026 15:01:32 +0000
Manifest next update: Sun 17 May 2026 15:01:32 +0000
Files and hashes: 1: IJejEXyhwdYpKuUpEbTwyk-OkBk.crl (hash: uJFDUHtJVhpoR09AxbhtU0vKZSA5GF5luPvM/PV+b94=)
2: KA5g_HNHUEKe_cvpril1qZT7WME.roa (hash: h+IZFf9Go1iBnD4l0ji1OQ+Otog1vzczX/D4h1/qh78=)
3: d7CeX97gO-ipX3QBzFbXz8P0wTI.roa (hash: Qut1PV0++44yG4RR3eDPMqfYLiMgZvD3UqCPDmMsQWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IJejEXyhwdYpKuUpEbTwyk-OkBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:4e:8e:24:80:8b:e6:e5:57:ec:b6:ab:c5:38:0b:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2097a3117ca1c1d6292ae52911b4f0ca4f8e9019
Validity
Not Before: May 16 15:01:32 2026 GMT
Not After : May 17 15:01:32 2026 GMT
Subject: CN=1c487e99c98f6450f55f22d6b581e678d7e3e574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bb:ef:3a:3d:b3:9a:23:49:65:b1:70:02:94:
ca:31:b2:6c:3f:33:7c:06:6f:86:4e:25:ba:74:ef:
99:de:b1:34:6b:85:f9:e1:38:4d:f4:5b:90:00:1e:
f1:42:ff:b4:b5:e2:3f:cd:c5:c4:15:0a:62:24:67:
86:8b:5f:13:8b:4d:14:f5:a1:d9:5c:a9:da:36:15:
cb:b4:0a:62:c3:21:6b:a8:b8:ca:ce:ea:a7:86:c5:
d7:f0:21:0b:fb:79:14:89:92:c5:f4:05:3c:4e:1f:
d2:45:39:fc:39:61:7f:46:bb:76:27:8f:46:64:56:
49:36:d1:57:a9:26:2e:d4:da:f8:c6:40:62:34:7e:
8c:cb:f5:a3:48:d0:f9:90:2d:81:fa:57:01:24:9e:
49:f6:c3:6f:b0:a6:81:7f:b9:d6:42:41:6a:fa:4c:
f7:ab:0d:da:18:52:c1:32:59:e3:97:ae:53:c6:28:
06:13:e0:e4:0a:4e:cc:d2:89:8d:d2:77:66:77:70:
64:12:77:01:43:b7:20:d6:4b:b1:ab:a2:95:df:ea:
19:87:98:4d:2b:37:b0:81:ae:d1:1e:30:d4:f4:1b:
b0:e8:4a:12:46:fe:50:bd:6d:48:93:79:83:65:35:
29:f1:e8:9f:c4:5e:7f:0a:d5:de:a9:f3:40:95:76:
1a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:48:7E:99:C9:8F:64:50:F5:5F:22:D6:B5:81:E6:78:D7:E3:E5:74
X509v3 Authority Key Identifier:
keyid:20:97:A3:11:7C:A1:C1:D6:29:2A:E5:29:11:B4:F0:CA:4F:8E:90:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IJejEXyhwdYpKuUpEbTwyk-OkBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:01:88:47:cf:7f:7b:ce:14:ac:a1:2f:a1:3f:7f:77:0c:12:
8c:60:70:41:cd:89:fc:8c:e6:27:99:39:c0:2b:03:55:10:c9:
5d:d7:3a:d5:b0:21:5d:1a:84:2f:36:79:f8:f7:59:1f:f0:b4:
14:8f:31:f0:4a:1c:32:8f:32:94:34:4e:77:b6:c7:1a:c0:16:
e0:1c:a8:67:bb:7d:9a:87:ef:ad:0e:10:cb:64:c4:f7:9f:66:
61:55:37:9c:34:dd:98:4d:4d:c6:d6:6e:cb:01:00:cf:c7:68:
4a:63:9d:dc:f8:09:e4:38:21:85:1a:1b:2e:b8:3d:6f:b2:f4:
1e:7e:48:b5:fc:79:91:b0:4e:62:47:6d:f0:3e:c5:8b:b4:ca:
0b:10:b1:2f:06:4a:6b:1d:b4:2c:05:e7:de:f1:88:06:e3:72:
4f:88:d0:50:c9:2c:d7:e4:3c:1d:39:9d:2d:a3:d3:fa:73:26:
dc:23:22:41:90:39:10:ab:d6:d5:f9:a7:2b:52:ae:7f:46:cc:
7f:50:65:99:43:fc:f8:97:f0:71:e8:3c:83:49:06:26:12:19:
8d:27:d1:f2:95:59:4f:1d:ff:d1:6e:1d:23:61:da:85:65:22:
b7:50:29:b7:36:32:18:7f:1d:bd:db:e1:69:d6:c7:b4:07:43:
5e:fd:2d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 21:13:29 2026 by rpki-client