
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.mft
File: igjCi-FVFikLnaUTXlj1X7uA_7Q.mft (raw, json)
Hash identifier: uB6N9JgGJ+xKlybbg1kz9RPPyUYPyHSj0xIvUv/xWhY=
Subject key identifier: 3B:3E:58:87:49:04:24:4B:50:1E:A6:BB:C1:79:DE:A2:5D:04:20:CD
Authority key identifier: 8A:08:C2:8B:E1:55:16:29:0B:9D:A5:13:5E:58:F5:5F:BB:80:FF:B4
Certificate issuer: /CN=8a08c28be15516290b9da5135e58f55fbb80ffb4
Certificate serial: 019DA3E673A8B7B3C76DF8C82CD0A526768C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igjCi-FVFikLnaUTXlj1X7uA_7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.mft
Manifest number: 185A
Signing time: Sun 19 Apr 2026 04:01:22 +0000
Manifest this update: Sun 19 Apr 2026 04:01:22 +0000
Manifest next update: Mon 20 Apr 2026 04:01:22 +0000
Files and hashes: 1: LeacyVsv1RcXFogC-zGtNs0rOAM.roa (hash: j3qojoQtMWggtkDzJQQqZamlkQYEGNHbKlwdO2tUD/I=)
2: c3WNo_4_81YtKAlp0VRoL7cFPtg.roa (hash: TP+B2IitpNpDU5H0sLBuUI5Oz9mFfqDfIHOQCcHsUyc=)
3: igjCi-FVFikLnaUTXlj1X7uA_7Q.crl (hash: sxKJju+e/njYnAS4w7giqJFhEYVzTSDkk6Y6Oc9NA1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/igjCi-FVFikLnaUTXlj1X7uA_7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:73:a8:b7:b3:c7:6d:f8:c8:2c:d0:a5:26:76:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a08c28be15516290b9da5135e58f55fbb80ffb4
Validity
Not Before: Apr 19 04:01:22 2026 GMT
Not After : Apr 20 04:01:22 2026 GMT
Subject: CN=3b3e58874904244b501ea6bbc179dea25d0420cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e1:78:e9:21:5d:3d:c9:84:d6:25:08:a3:c7:
96:5f:7d:51:e3:e8:7e:37:79:21:a0:b9:99:f2:0a:
f3:dd:92:29:0a:fd:90:f1:a3:f9:09:7e:69:1d:a9:
8a:8a:58:97:b1:25:e0:cc:99:8d:c7:63:be:23:bd:
50:60:13:cf:22:b0:dc:7c:54:4b:5f:c2:97:d1:55:
4f:f6:b9:e2:5e:9a:b5:bb:0a:85:56:0c:25:c5:bf:
37:68:b2:82:0f:7b:d7:9b:1c:28:65:77:f0:23:df:
07:86:b9:a0:cf:38:41:ca:83:bd:a1:11:cc:79:51:
c4:7e:31:85:44:2f:d9:1c:72:35:16:71:3d:46:7d:
44:f4:71:6e:f2:3a:70:a5:95:e6:ef:7a:3a:0e:7c:
e9:e8:81:78:99:5d:ae:c2:a1:24:86:8d:49:63:9a:
bb:aa:cf:21:bb:1e:37:e7:c8:35:9b:f4:4a:94:48:
42:b7:43:0c:7d:9f:7c:67:88:f3:6e:18:47:ee:f1:
89:cc:d2:6f:43:66:ef:1b:4f:f6:20:8a:6a:65:eb:
3d:e3:47:6d:13:e0:75:58:7f:e9:6a:77:cf:94:f4:
02:23:ab:db:84:9d:b5:5b:87:5e:9f:1c:50:71:6e:
49:b2:78:15:aa:72:2c:86:9c:26:77:99:e1:d9:37:
a5:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:3E:58:87:49:04:24:4B:50:1E:A6:BB:C1:79:DE:A2:5D:04:20:CD
X509v3 Authority Key Identifier:
keyid:8A:08:C2:8B:E1:55:16:29:0B:9D:A5:13:5E:58:F5:5F:BB:80:FF:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igjCi-FVFikLnaUTXlj1X7uA_7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:16:8b:94:87:e4:e6:ce:54:86:16:b3:e3:74:76:72:0c:82:
76:6e:fe:92:01:ce:23:7a:c6:8a:c9:de:fa:91:59:fa:65:20:
72:79:26:c4:c9:33:36:37:26:8e:68:83:a2:47:9f:0c:78:88:
3b:a5:1e:2b:32:29:77:e2:9d:01:c4:10:c3:f8:65:68:06:1d:
69:31:f4:ff:f4:a6:77:e4:7c:3a:c5:80:27:d7:46:a0:82:b4:
3c:e6:0b:8c:98:10:18:59:2d:05:12:6e:94:f9:77:42:df:e7:
61:fa:77:9a:47:42:60:8b:f1:31:3b:05:55:fe:c2:58:76:77:
71:44:90:e8:76:c4:55:f7:21:25:e8:c9:cf:97:8e:57:bb:82:
b0:cf:e9:a4:24:b0:8f:0f:74:b5:95:9b:51:9f:e4:e0:ce:61:
b9:d4:cb:f5:96:ba:f8:36:e5:05:f1:34:b9:07:30:8e:e4:48:
12:01:64:f4:fc:a0:9f:d5:a0:9f:b7:54:de:36:e0:89:1a:d2:
d5:b0:eb:5c:3f:ab:00:3d:08:be:c2:c0:e9:72:9f:3c:44:52:
af:c6:63:aa:a7:a8:ed:85:cd:46:33:9e:5f:65:fe:88:77:1a:
72:f6:ee:b3:9e:6b:54:27:7a:c4:c0:3a:a0:bf:c2:ed:82:93:
df:8d:14:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 07:00:04 2026 by rpki-client