Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/IjayuK-mA20sjoMXc2-qpy2AxPI.mft
File: IjayuK-mA20sjoMXc2-qpy2AxPI.mft (raw, json)
Hash identifier: OihdmSZb3O5tpE/eXHz7l7SL1dufUUNpH+HNnReAufM=
Subject key identifier: D2:48:C6:F5:4D:90:D8:46:19:76:69:31:3C:98:44:CB:A4:78:80:A0
Authority key identifier: 22:36:B2:B8:AF:A6:03:6D:2C:8E:83:17:73:6F:AA:A7:2D:80:C4:F2
Certificate issuer: /CN=2236b2b8afa6036d2c8e8317736faaa72d80c4f2
Certificate serial: 019D265F3B003005D2CAAF9AFDDE4010C20E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IjayuK-mA20sjoMXc2-qpy2AxPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/IjayuK-mA20sjoMXc2-qpy2AxPI.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 19:01:08 +0000
Manifest this update: Wed 25 Mar 2026 19:01:08 +0000
Manifest next update: Thu 26 Mar 2026 19:01:08 +0000
Files and hashes: 1: IjayuK-mA20sjoMXc2-qpy2AxPI.crl (hash: 1L4wpDqB+cT8Dop8RmG5+xAVbjCiR6jxQDBOs51cU04=)
2: KTUGLKw4lT-j5fxDHCDXoM2-FbI.roa (hash: 9VOAz2Y+xG383GmXb/Qw7x9sWxBBSQzGbBFfCAhlucM=)
3: mH0FJ23Xhvhl7yPzg_J0QLsXN6c.roa (hash: bc3Tff2F8YDhVYuMIKbuPGvXcTjpv3hF+6MXk1AVTa4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/IjayuK-mA20sjoMXc2-qpy2AxPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/IjayuK-mA20sjoMXc2-qpy2AxPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IjayuK-mA20sjoMXc2-qpy2AxPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:3b:00:30:05:d2:ca:af:9a:fd:de:40:10:c2:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2236b2b8afa6036d2c8e8317736faaa72d80c4f2
Validity
Not Before: Mar 25 19:01:08 2026 GMT
Not After : Mar 26 19:01:08 2026 GMT
Subject: CN=d248c6f54d90d846197669313c9844cba47880a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c8:3c:40:a3:7c:32:ae:c8:bf:c7:9a:30:32:
47:2c:bb:9f:b6:68:de:d0:60:25:2b:ed:fd:f1:d7:
74:5d:e6:e0:75:d5:dd:9e:28:c1:43:4c:db:1a:ec:
01:28:b3:72:1a:1d:bb:98:9b:25:4c:67:58:ce:22:
16:d1:23:8b:d0:97:6c:08:6b:60:00:e3:cb:1a:4f:
5f:30:ca:a4:21:5d:de:53:31:26:0f:55:56:07:0f:
b4:f0:1c:6f:a4:46:85:49:42:21:e3:7c:47:a6:68:
15:15:6b:97:6c:95:69:80:8f:d3:74:af:e5:18:f0:
ed:64:90:00:aa:4d:d2:13:8c:a1:da:82:b2:e5:b8:
cb:72:de:5c:7c:5f:38:54:fa:0d:cc:6f:43:3a:b0:
59:87:77:56:c5:22:7e:45:e2:1f:00:c7:b8:7e:5d:
d3:10:c7:2e:f0:1b:50:14:c9:31:a1:10:f0:e7:40:
16:71:ec:a8:91:e4:94:1e:7c:c7:f3:ba:da:11:12:
25:dd:4e:7a:a8:1b:22:75:fe:d9:11:c2:16:f3:c1:
21:a8:32:1d:e4:76:3e:62:f2:5b:36:ff:ca:8f:f0:
a3:89:2c:18:cb:bc:a8:1d:b5:83:1c:7b:66:67:ba:
bc:05:34:c3:43:4d:4a:1e:8e:43:55:b5:69:d4:1e:
4b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:48:C6:F5:4D:90:D8:46:19:76:69:31:3C:98:44:CB:A4:78:80:A0
X509v3 Authority Key Identifier:
keyid:22:36:B2:B8:AF:A6:03:6D:2C:8E:83:17:73:6F:AA:A7:2D:80:C4:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IjayuK-mA20sjoMXc2-qpy2AxPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/IjayuK-mA20sjoMXc2-qpy2AxPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/IjayuK-mA20sjoMXc2-qpy2AxPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:42:72:55:84:a1:5d:52:71:8b:5d:12:bb:4d:d5:e1:7a:02:
59:e5:dd:71:19:2e:ce:ee:42:04:31:42:37:b6:7a:bb:f1:eb:
f7:97:d5:8c:bd:7e:91:b5:33:77:1e:c5:66:54:d1:f5:f4:9f:
6b:21:84:fe:db:df:5f:38:6e:22:b4:bd:85:63:43:9a:10:04:
7d:19:68:93:39:8a:04:d1:ba:8a:aa:ec:0d:76:7c:36:17:aa:
00:d6:58:fb:4d:95:16:ea:4a:50:3b:23:3d:45:61:b9:60:d3:
f9:1a:04:9b:56:1f:18:b0:a9:8e:18:0d:95:26:a6:9b:2c:d8:
4f:a7:4e:9f:3b:26:05:2f:71:21:f7:8d:9d:98:a6:d8:16:f7:
44:58:34:10:03:7e:87:c8:07:0a:ce:46:48:ff:39:f4:31:ea:
84:97:e7:36:34:8c:f1:dd:1f:bc:15:15:78:ec:8a:de:c2:9c:
74:1c:a1:39:6b:12:eb:c5:f0:34:12:4d:71:c2:a0:c1:42:68:
31:cf:62:77:73:35:3f:01:00:7f:05:a0:30:73:64:05:b6:5c:
0a:de:fb:d0:de:b0:d6:a2:cd:57:8e:33:81:49:72:3d:93:90:
25:30:db:56:d2:7e:a7:76:a6:bb:8c:0c:b1:dd:9e:2b:4a:f4:
47:d0:6a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:43:02 2026 by rpki-client