Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft
File: IjbtX1Yj7et5EKzTHV9u6B5csX4.mft (raw, json)
Hash identifier: U9ftoUqilAZSSwo3BgC7CC3Og0j1oRgDCitGWHHN06g=
Subject key identifier: 62:5F:8F:33:B1:5F:C9:86:94:60:98:F9:CD:D3:ED:52:3B:DA:43:0A
Authority key identifier: 22:36:ED:5F:56:23:ED:EB:79:10:AC:D3:1D:5F:6E:E8:1E:5C:B1:7E
Certificate issuer: /CN=2236ed5f5623edeb7910acd31d5f6ee81e5cb17e
Certificate serial: 019E1EDA42BAF73C5DA8CD9E7726C61FB277
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IjbtX1Yj7et5EKzTHV9u6B5csX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft
Manifest number: 10ED
Signing time: Wed 13 May 2026 01:01:20 +0000
Manifest this update: Wed 13 May 2026 01:01:20 +0000
Manifest next update: Thu 14 May 2026 01:01:20 +0000
Files and hashes: 1: CPndinjPYr6tuDu76KQaJ-aGMwI.roa (hash: nrsdPAkRRrAV3pIEBSnHKX1eqjnFVOeohTv704UK0JA=)
2: IjbtX1Yj7et5EKzTHV9u6B5csX4.crl (hash: JUeuRUo4n2E2qNU7LRz+rViWyTUHMETmQsCLFzBrM+g=)
3: RoT_BRy5K5T_EFywyXjf2sUOgfA.roa (hash: 3g9pqCZcoGTGtwQJjCoF4vdhAm5IX+/HPg+Sn5/5ZvI=)
4: b9-WVQZEPxKTQu4HO3vpyGGIgyM.roa (hash: zJruMssE6fAWn+HUVB4+RJJ7aVS5WNO5nmK7xyX8S+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IjbtX1Yj7et5EKzTHV9u6B5csX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:da:42:ba:f7:3c:5d:a8:cd:9e:77:26:c6:1f:b2:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2236ed5f5623edeb7910acd31d5f6ee81e5cb17e
Validity
Not Before: May 13 01:01:20 2026 GMT
Not After : May 14 01:01:20 2026 GMT
Subject: CN=625f8f33b15fc986946098f9cdd3ed523bda430a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:af:6c:18:16:5f:3a:79:fb:9c:d7:34:b5:33:
9b:a4:41:88:b9:6c:70:9c:a8:c9:83:3d:f3:1f:32:
f5:52:e9:c3:47:f7:97:60:1e:2a:ff:4a:6f:6a:9d:
00:46:47:d2:cf:e3:02:24:d1:4f:21:a5:f8:10:5d:
d8:4b:5e:65:8a:18:42:75:99:49:0f:df:72:6d:9e:
a3:9b:86:9f:8d:72:ea:63:eb:a3:66:f4:08:42:41:
2b:b4:6d:8f:1f:7d:c7:37:cc:5a:8e:e0:4e:f2:f3:
ce:5d:75:4a:57:b3:f0:4a:09:b8:ec:3c:48:4f:dc:
6c:a5:12:36:7c:a3:aa:29:73:f8:3e:19:0c:94:e0:
80:d6:03:44:a3:f9:ce:fa:5a:4e:cc:67:cf:e8:c1:
d8:4c:8a:27:d8:7c:42:cb:42:37:aa:1f:f0:3d:76:
d5:bf:d2:a1:cf:af:7f:b9:94:c7:80:2f:a1:b9:e8:
18:d4:22:15:ca:2a:47:65:7b:d7:00:18:cf:c0:35:
cd:b9:a4:f5:0f:92:69:6e:55:3c:75:eb:9c:7a:c4:
2e:88:23:13:d5:40:3c:c9:59:2b:db:27:56:2b:34:
5a:9f:b8:bc:bf:36:19:95:37:e6:a3:2e:cb:65:79:
9e:fc:ce:58:32:45:d0:1e:39:ee:0a:98:f6:06:d6:
5a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:5F:8F:33:B1:5F:C9:86:94:60:98:F9:CD:D3:ED:52:3B:DA:43:0A
X509v3 Authority Key Identifier:
keyid:22:36:ED:5F:56:23:ED:EB:79:10:AC:D3:1D:5F:6E:E8:1E:5C:B1:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IjbtX1Yj7et5EKzTHV9u6B5csX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:3c:52:43:fb:78:b9:0d:10:a8:2a:99:ac:d2:7d:da:13:d4:
1a:73:9d:1e:f7:8e:ca:12:8a:f5:bc:a5:f0:b2:c8:f5:30:4f:
ed:9e:83:4b:01:85:1f:f2:81:4c:cd:0e:27:90:56:1c:86:ba:
50:ae:61:1b:61:40:8e:f6:59:7f:87:5a:ce:78:bc:dd:21:3c:
a7:0b:99:8b:86:5a:31:c1:07:37:61:1c:29:68:32:19:c9:83:
d9:57:2c:0b:2f:ff:75:e5:15:97:4a:f9:e6:ca:35:a8:c9:60:
cb:a5:c3:d5:b4:df:72:f2:2e:bd:06:e2:c3:d2:97:db:2a:54:
54:02:9d:06:3f:82:64:54:2a:01:83:2c:83:e5:42:f4:35:70:
7b:63:73:87:78:8a:39:d6:3a:6c:42:49:ef:2f:63:e1:2f:74:
3a:69:fd:9a:19:b7:d7:96:c3:ee:62:8a:ef:9b:5c:83:f5:96:
39:ed:0c:55:dc:7e:68:4d:27:f4:f0:69:a3:e1:63:a8:b4:87:
16:59:39:43:8e:0a:26:ca:c3:b6:f1:e8:03:ba:f9:71:e0:dc:
68:4d:26:c3:83:1f:4d:ee:6d:17:cf:f7:98:fa:05:f0:87:0d:
d6:b6:cc:14:13:4c:7b:af:f2:e9:78:b8:c9:06:77:c1:d5:a1:
58:f7:ad:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:19:55 2026 by rpki-client