Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/IKpgywAkMyottomT8zVxWK9gyN4.mft
File: IKpgywAkMyottomT8zVxWK9gyN4.mft (raw, json)
Hash identifier: ApJZBYoQ/qRhFtokjUairwxXO35Mj2Ox/pkm8idjzlI=
Subject key identifier: B4:ED:C5:95:B9:D3:BD:11:60:94:70:4D:71:1F:1F:4F:D9:61:E4:3C
Authority key identifier: 20:AA:60:CB:00:24:33:2A:2D:B6:89:93:F3:35:71:58:AF:60:C8:DE
Certificate issuer: /CN=20aa60cb0024332a2db68993f3357158af60c8de
Certificate serial: 019E1EDA2E0A030C4D9471BC3802A81737E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IKpgywAkMyottomT8zVxWK9gyN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/IKpgywAkMyottomT8zVxWK9gyN4.mft
Manifest number: 193B
Signing time: Wed 13 May 2026 01:01:15 +0000
Manifest this update: Wed 13 May 2026 01:01:15 +0000
Manifest next update: Thu 14 May 2026 01:01:15 +0000
Files and hashes: 1: IKpgywAkMyottomT8zVxWK9gyN4.crl (hash: jsQhNqIz6vnlvCZC5yvhbyueW9McEz4ZJ7ZCtWGY7es=)
2: QiXcXG4EDIRSf-VSNpu4RHBWAV4.roa (hash: 0qXAcwhMmlvzkuMEiWShTeGZUNL6+ryDi7ehHbJ1xl8=)
3: Tar1g33LvZCdpcq_JVPYhAJSdEk.roa (hash: QMkYB+0q1+Lk5nvo2OLotb9QUYic5rNjwNkq1hEO+78=)
4: ixwpJztfYUlUnPQNZhnkMR7K_yU.roa (hash: McdR8UEnDJLQe/Y5De9k6/QzPqtdNiKRIqwLfpPLq6I=)
5: rPnkzMR46g2upeGLwnbyd0fXnb4.roa (hash: flmLV+/lWpi4M1ZIkwy5iom73MDu5dXcw9z52gR1sjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/IKpgywAkMyottomT8zVxWK9gyN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/IKpgywAkMyottomT8zVxWK9gyN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IKpgywAkMyottomT8zVxWK9gyN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:da:2e:0a:03:0c:4d:94:71:bc:38:02:a8:17:37:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20aa60cb0024332a2db68993f3357158af60c8de
Validity
Not Before: May 13 01:01:15 2026 GMT
Not After : May 14 01:01:15 2026 GMT
Subject: CN=b4edc595b9d3bd116094704d711f1f4fd961e43c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:83:9e:29:c4:d5:ee:b7:44:9b:8b:b0:ce:ca:
bb:d4:dc:8a:cb:ec:18:12:67:ca:b1:fd:f4:f2:78:
98:95:4c:41:88:30:23:55:10:3e:6e:12:d3:1c:39:
40:54:85:ed:2e:8f:92:c2:56:07:fa:90:c3:01:2f:
0b:2b:7f:86:5a:25:da:d1:b9:44:4f:98:a8:ec:52:
4f:9f:e5:02:0e:17:ac:f7:e3:06:83:2d:86:b5:d6:
83:96:5b:87:49:d9:eb:f1:eb:e9:70:3a:63:cb:f8:
e8:9a:0f:07:3f:36:70:5b:4b:98:a5:05:33:c6:54:
60:24:fd:9e:d1:9a:f5:54:f1:f9:ea:3f:fc:06:6e:
78:9b:6e:3f:99:25:23:2f:f6:b5:a7:f0:d8:4b:fc:
e7:54:71:04:43:18:b3:f9:38:66:51:6a:02:7d:e5:
c6:d9:fd:9d:48:aa:16:3c:5c:d6:a5:a7:7e:65:87:
0c:90:aa:fe:f9:65:13:31:64:aa:23:0d:77:a4:1f:
0d:c5:90:1a:e7:b5:36:af:75:b1:03:07:01:bb:55:
94:bd:46:70:e4:6f:43:9e:ee:b8:0b:78:e9:8a:ad:
3d:7b:57:47:51:2a:8b:6e:a2:a5:ed:5b:3d:ff:d9:
6b:ad:3a:05:50:58:35:45:54:ee:2d:58:be:fb:bb:
e5:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:ED:C5:95:B9:D3:BD:11:60:94:70:4D:71:1F:1F:4F:D9:61:E4:3C
X509v3 Authority Key Identifier:
keyid:20:AA:60:CB:00:24:33:2A:2D:B6:89:93:F3:35:71:58:AF:60:C8:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IKpgywAkMyottomT8zVxWK9gyN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/IKpgywAkMyottomT8zVxWK9gyN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/IKpgywAkMyottomT8zVxWK9gyN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:09:2c:3d:ea:10:dc:bf:58:be:51:bb:2b:35:cb:64:10:f7:
59:2c:dd:87:f6:18:5a:dc:80:ef:bb:3b:65:eb:49:83:86:1b:
aa:ae:2b:e5:a5:46:4d:8d:5b:09:64:ae:b8:1f:d5:2f:fa:a6:
be:22:c9:81:d3:46:f7:be:5e:05:c6:32:9c:4d:7c:88:18:d7:
bd:5f:ac:a0:19:77:90:54:3a:01:a7:3b:d8:7e:6d:75:b3:b0:
d7:68:04:7b:90:5b:49:74:ae:1d:82:ae:21:36:e5:8b:bf:14:
52:ca:69:85:6b:8d:40:29:00:55:50:65:6c:a9:7e:8d:b0:40:
81:1c:44:66:e6:8e:c1:ec:f3:38:1f:81:d0:d6:d2:0c:62:0e:
bc:9b:f8:7d:11:16:56:3c:30:8b:5d:31:49:ae:e6:7c:36:0a:
ec:85:b4:bc:7f:1c:51:40:10:4c:8c:d3:e7:4f:3d:17:bd:e0:
92:01:80:43:72:be:85:d0:9a:e4:7e:d0:f8:e3:b9:e0:af:9b:
5f:22:ff:92:0f:04:cc:b1:13:6f:c6:5e:a1:98:dd:b1:bc:a6:
bc:f5:c8:e1:9c:fa:b0:b4:bc:4b:5c:5a:e8:b9:76:80:07:d8:
10:24:51:80:b4:b5:ed:32:a2:94:c7:69:54:64:4f:00:00:ac:
49:cf:65:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:27:57 2026 by rpki-client