Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ac0694-1e22-436d-82c9-17ce620e74f1/1/IE19hlKpn8F__y197MSeVWqg64A.mft
File: IE19hlKpn8F__y197MSeVWqg64A.mft (raw, json)
Hash identifier: 2Sj3WeGOxigabMZCDeUyG2mfAOqNrOSgpRrc/3IMoR8=
Subject key identifier: 52:3E:B5:67:23:FB:B2:70:A9:53:30:48:84:B0:A2:5B:0F:2B:FA:E0
Authority key identifier: 20:4D:7D:86:52:A9:9F:C1:7F:FF:2D:7D:EC:C4:9E:55:6A:A0:EB:80
Certificate issuer: /CN=204d7d8652a99fc17fff2d7decc49e556aa0eb80
Certificate serial: 019E2091265CE46B53C10558F45D22DEC49E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IE19hlKpn8F__y197MSeVWqg64A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ac0694-1e22-436d-82c9-17ce620e74f1/1/IE19hlKpn8F__y197MSeVWqg64A.mft
Manifest number: 060C
Signing time: Wed 13 May 2026 09:00:43 +0000
Manifest this update: Wed 13 May 2026 09:00:43 +0000
Manifest next update: Thu 14 May 2026 09:00:43 +0000
Files and hashes: 1: IE19hlKpn8F__y197MSeVWqg64A.crl (hash: 7FWgCi5aKY7M8rdu8IAT9yA1PBHiTKgJCCcBbLxjpkE=)
2: Ii6wwqE-ee-CRo8hd4o4rFr06SY.roa (hash: Ta+qzjiPCmFIkSNPxrZ151ZxOc0vieQ/q0h1vtHvBVQ=)
3: Xw9tVyuPLJRqNzDdc3wN3NyB9IA.roa (hash: nQERgQoU1LcOAXZoSGkitr1IswJcoffSa8r7ceEkAJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/ac0694-1e22-436d-82c9-17ce620e74f1/1/IE19hlKpn8F__y197MSeVWqg64A.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/ac0694-1e22-436d-82c9-17ce620e74f1/1/IE19hlKpn8F__y197MSeVWqg64A.mft
rsync://rpki.ripe.net/repository/DEFAULT/IE19hlKpn8F__y197MSeVWqg64A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:91:26:5c:e4:6b:53:c1:05:58:f4:5d:22:de:c4:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=204d7d8652a99fc17fff2d7decc49e556aa0eb80
Validity
Not Before: May 13 09:00:43 2026 GMT
Not After : May 14 09:00:43 2026 GMT
Subject: CN=523eb56723fbb270a953304884b0a25b0f2bfae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3b:e6:8b:14:68:49:b3:95:ad:23:a8:da:e4:
26:b8:10:6c:e7:40:b9:fa:f6:23:84:8e:2b:c5:37:
2b:71:db:db:5a:6d:68:82:3c:6e:fd:64:ab:22:26:
25:6d:6d:0a:04:0e:f4:4b:ab:90:f4:04:17:60:ed:
b4:66:a6:53:92:19:98:19:89:cd:5b:06:92:85:3c:
f0:e0:92:6c:d8:ae:4e:7d:9b:d2:20:0e:98:d6:29:
af:e9:13:92:ed:26:e6:46:1a:14:c3:db:d0:7a:c5:
bc:c2:e5:18:b6:5a:61:b7:8b:b1:eb:ff:94:f3:5c:
e9:61:0d:f1:49:e2:cc:35:59:fe:d5:59:29:6f:4b:
a5:38:b0:65:63:69:01:04:b0:36:57:16:5d:98:ed:
89:95:8a:b8:fd:eb:8d:8f:06:a6:04:bc:47:c6:bb:
44:b9:49:ab:72:84:e0:ca:42:d5:9f:4e:18:20:4e:
6f:9e:12:60:e1:14:5e:e9:2d:d6:12:80:59:05:e9:
40:3d:34:36:bd:bd:7b:05:30:99:23:da:54:1d:1f:
d5:f5:40:ad:25:71:a2:5e:23:a5:e2:f6:22:02:ff:
66:af:60:6c:55:1f:4f:3a:5a:df:b4:82:92:80:b1:
f9:74:a3:99:43:13:19:6e:35:f5:df:6f:91:e3:20:
69:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:3E:B5:67:23:FB:B2:70:A9:53:30:48:84:B0:A2:5B:0F:2B:FA:E0
X509v3 Authority Key Identifier:
keyid:20:4D:7D:86:52:A9:9F:C1:7F:FF:2D:7D:EC:C4:9E:55:6A:A0:EB:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IE19hlKpn8F__y197MSeVWqg64A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ac0694-1e22-436d-82c9-17ce620e74f1/1/IE19hlKpn8F__y197MSeVWqg64A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ac0694-1e22-436d-82c9-17ce620e74f1/1/IE19hlKpn8F__y197MSeVWqg64A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:e4:3e:29:0b:ce:64:c0:d9:91:6c:f8:0b:df:b1:9d:c0:e0:
7f:46:0f:64:88:c5:db:fc:ce:e1:70:a9:19:c8:74:4e:e7:2e:
38:20:be:36:3a:c5:f1:76:bb:f9:cf:69:ab:9c:a7:31:e7:04:
48:92:d3:a6:36:d3:62:ca:93:ff:08:22:0f:10:52:2a:22:f3:
2c:e7:22:4e:1e:62:87:02:65:a4:a6:9a:e1:62:00:a3:ff:70:
f0:73:39:e9:57:64:5a:b4:19:be:12:39:8f:a4:77:51:43:2d:
82:c0:98:8b:99:70:b4:ef:1d:fe:4d:ae:d2:fe:38:7e:88:73:
fd:83:50:ba:e8:42:77:b8:85:8e:be:f1:65:bd:1a:a6:36:f2:
e7:d1:16:71:0c:36:f8:c8:6d:be:0c:68:9e:e9:84:25:e8:07:
43:67:a5:09:56:36:b1:6d:1d:43:02:f6:5b:61:f8:1d:40:e6:
01:0c:43:cc:99:3b:85:69:0c:bc:3b:15:9d:5d:9b:fe:c2:df:
5d:d6:58:c9:f4:76:ff:40:13:13:6e:e5:0d:1b:fb:35:d9:45:
4b:04:90:28:44:ad:3d:11:d3:61:30:e2:9a:79:9a:45:93:0c:
8b:36:8c:21:4f:61:55:60:11:01:52:0d:e2:18:48:06:e9:5c:
c4:26:2e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:57:00 2026 by rpki-client