Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/IAsV4Hg_4A8bile9FP29BpJLiDI.mft
File: IAsV4Hg_4A8bile9FP29BpJLiDI.mft (raw, json)
Hash identifier: 8bQSDOHgGcX2m0RELpbjza0aE85easT8F+wQNaf327Q=
Subject key identifier: 7F:33:A1:DA:01:68:B2:69:B1:FE:72:A9:F2:F2:85:B1:87:9F:8F:E5
Authority key identifier: 20:0B:15:E0:78:3F:E0:0F:1B:8A:57:BD:14:FD:BD:06:92:4B:88:32
Certificate issuer: /CN=200b15e0783fe00f1b8a57bd14fdbd06924b8832
Certificate serial: 019E1EDA1781DE7B1ADF47166445814026EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IAsV4Hg_4A8bile9FP29BpJLiDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/IAsV4Hg_4A8bile9FP29BpJLiDI.mft
Manifest number: 1908
Signing time: Wed 13 May 2026 01:01:09 +0000
Manifest this update: Wed 13 May 2026 01:01:09 +0000
Manifest next update: Thu 14 May 2026 01:01:09 +0000
Files and hashes: 1: IAsV4Hg_4A8bile9FP29BpJLiDI.crl (hash: U34Rc9GbDnxIWxpvNQ8RR1ms30EQ1QUWIg0JuH47q68=)
2: pjJ3h-AtM7br3AuCdoLvUYqZ6Us.roa (hash: oMubblgpXo7TWZ3eL9+/USYMfrR1dHWkBzKitQqRPPI=)
3: tIEL4J6jSkAPZLSFtELamVkICgM.roa (hash: mcwIFqfoI6qXjVDhr4bgReH1f7CPQDUrI4HFRmfb3wI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/IAsV4Hg_4A8bile9FP29BpJLiDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/IAsV4Hg_4A8bile9FP29BpJLiDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IAsV4Hg_4A8bile9FP29BpJLiDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:da:17:81:de:7b:1a:df:47:16:64:45:81:40:26:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=200b15e0783fe00f1b8a57bd14fdbd06924b8832
Validity
Not Before: May 13 01:01:09 2026 GMT
Not After : May 14 01:01:09 2026 GMT
Subject: CN=7f33a1da0168b269b1fe72a9f2f285b1879f8fe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:49:9b:7f:c2:f4:ea:b9:e4:57:fd:e9:23:22:
a2:02:8c:cc:40:66:21:0d:14:77:74:2d:f8:ce:ba:
11:43:65:2c:04:de:d2:17:9a:29:9a:3b:5b:e4:a7:
4b:49:e3:a3:10:01:aa:8e:21:a0:e1:f4:7d:48:86:
b4:ee:86:03:97:dd:63:35:37:bf:20:fa:cd:e0:6d:
12:b2:48:2e:37:b0:61:26:a4:56:9f:5b:8d:9d:5f:
d0:78:a0:21:8c:c1:fa:7e:50:b3:d3:b2:61:9b:0a:
6d:c1:46:60:1e:68:cf:c5:6b:56:7f:a4:60:bb:71:
fb:2e:68:35:d6:9c:44:bc:b0:7d:18:cb:5e:5a:5c:
65:50:b4:d7:89:e3:82:5b:f9:44:81:c5:0e:4e:2c:
75:f7:20:d1:15:fe:ff:de:d8:24:1b:b1:d2:a5:97:
be:2d:b0:f3:55:67:9f:48:b0:6a:8e:9c:ab:56:d9:
99:2d:2a:7e:21:cc:9a:41:31:f9:be:61:b1:c8:49:
9b:fa:9f:5b:05:6d:ab:18:c2:2b:6d:a9:08:b8:44:
6e:46:f9:66:10:e2:fe:bd:14:9e:28:fc:4d:ea:ef:
ca:ba:8d:8c:c0:43:b8:c1:df:4f:a0:bd:c3:09:45:
67:1f:9f:40:05:45:74:0c:14:3f:12:12:26:8a:9f:
15:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:33:A1:DA:01:68:B2:69:B1:FE:72:A9:F2:F2:85:B1:87:9F:8F:E5
X509v3 Authority Key Identifier:
keyid:20:0B:15:E0:78:3F:E0:0F:1B:8A:57:BD:14:FD:BD:06:92:4B:88:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IAsV4Hg_4A8bile9FP29BpJLiDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/IAsV4Hg_4A8bile9FP29BpJLiDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/IAsV4Hg_4A8bile9FP29BpJLiDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:6e:b8:66:17:83:0c:63:6f:af:73:b7:74:5b:2b:9a:20:2e:
69:96:6a:91:3c:b1:27:87:d7:78:b9:fe:67:4d:9c:4a:25:f4:
a9:96:32:c1:04:33:58:73:d2:7b:c0:95:95:88:c3:a8:5a:13:
35:d6:b6:d9:2c:5c:7d:2c:89:66:69:07:0f:d4:e2:ea:6c:b9:
3a:b9:92:29:1d:bb:77:b7:70:c5:48:70:1c:63:2b:4b:e6:38:
be:56:92:06:1d:1d:a3:5c:f3:1b:3c:ab:34:5f:74:6a:c4:53:
80:c0:b1:18:db:29:ec:20:53:a1:46:3c:46:5d:56:ff:fe:21:
a6:04:7f:6e:15:35:68:12:f7:9e:7f:c2:32:85:f8:d9:3f:a8:
7c:e6:08:5d:5e:8c:26:e8:e0:a6:6b:c2:33:32:e0:09:54:fd:
f3:44:49:df:9e:f7:b2:c9:ae:eb:d9:a6:0c:c7:d3:19:50:fd:
62:be:4f:37:9f:0a:13:e9:7c:0a:bd:cc:bc:07:d9:9f:0d:8f:
e5:a0:db:1b:ea:b3:1f:0c:9d:bd:78:73:cb:bf:5e:57:c8:1b:
6c:b2:d0:2c:e7:36:58:80:55:93:f2:a3:4a:d6:f9:33:87:a2:
8e:35:2e:d7:74:1b:cf:6f:d8:39:8e:9e:b2:50:cc:62:b8:49:
cf:1e:0c:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:57:59 2026 by rpki-client