Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.mft
File: IgX-Y4AklCVVaD12Xt9_qT8uhDA.mft (raw, json)
Hash identifier: t5jG9Yu3EPNaV0MgcxyJUnqRNRb77AHbj8zKnyT/vag=
Subject key identifier: 94:8C:F5:0B:A6:16:24:AB:A8:09:BC:54:02:70:90:39:A1:C8:8B:19
Authority key identifier: 22:05:FE:63:80:24:94:25:55:68:3D:76:5E:DF:7F:A9:3F:2E:84:30
Certificate issuer: /CN=2205fe638024942555683d765edf7fa93f2e8430
Certificate serial: 019D25F1B0B67645246E27B4DC2088FFD954
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IgX-Y4AklCVVaD12Xt9_qT8uhDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.mft
Manifest number: 1392
Signing time: Wed 25 Mar 2026 17:01:29 +0000
Manifest this update: Wed 25 Mar 2026 17:01:29 +0000
Manifest next update: Thu 26 Mar 2026 17:01:29 +0000
Files and hashes: 1: DtLePmxN_wJv4PSLH6EKntHcVY0.roa (hash: U7UziCjdX8EIkcuGoidh45rKj+4qBu43u+i8Cgl9CBQ=)
2: IgX-Y4AklCVVaD12Xt9_qT8uhDA.crl (hash: qezL+FFKxb+guaNMgW9jCR86wSz2a9w9qiqHlEk0+LQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IgX-Y4AklCVVaD12Xt9_qT8uhDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:b0:b6:76:45:24:6e:27:b4:dc:20:88:ff:d9:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2205fe638024942555683d765edf7fa93f2e8430
Validity
Not Before: Mar 25 17:01:29 2026 GMT
Not After : Mar 26 17:01:29 2026 GMT
Subject: CN=948cf50ba61624aba809bc5402709039a1c88b19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:55:1c:b3:23:70:0e:dc:a2:9e:50:1b:c6:79:
ad:d9:7e:fe:33:db:6a:51:b3:75:5b:d1:73:83:d3:
ca:13:92:3b:69:e0:f0:fa:87:a8:7b:8f:28:a9:29:
a0:b2:1d:7d:ae:06:8a:6d:8b:d2:f0:29:7e:34:87:
e4:93:47:f8:78:1d:f6:29:85:78:dd:f9:87:52:29:
2f:4a:0f:6b:14:38:3f:79:2a:b7:49:68:ed:30:43:
f9:30:ba:94:1a:c1:b0:53:71:8c:ec:1f:75:ac:bb:
9c:44:9d:d8:d6:e1:ce:0c:8b:12:c2:cd:e7:9d:7a:
40:a2:61:3b:3c:97:22:0f:0d:35:60:e7:61:b3:ef:
f9:08:51:21:f3:f9:db:22:27:63:e1:c3:58:93:93:
63:42:eb:a8:99:4a:48:fd:23:e6:77:24:35:23:00:
40:02:03:9f:b4:84:e3:f7:b1:d9:c0:16:f3:99:f8:
fa:52:94:a6:67:de:4d:8e:51:89:3e:4b:d9:64:24:
f6:9c:80:90:6f:69:67:c8:46:a2:eb:16:1a:d8:f2:
4c:e0:1b:9c:75:36:8b:da:9d:d2:da:26:94:95:b6:
03:db:03:d3:d7:9f:e1:8b:a0:0f:73:b1:fa:18:b7:
b0:c3:6c:79:30:e1:40:24:11:b0:e2:aa:78:83:4f:
85:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:8C:F5:0B:A6:16:24:AB:A8:09:BC:54:02:70:90:39:A1:C8:8B:19
X509v3 Authority Key Identifier:
keyid:22:05:FE:63:80:24:94:25:55:68:3D:76:5E:DF:7F:A9:3F:2E:84:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IgX-Y4AklCVVaD12Xt9_qT8uhDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:3e:e2:4c:dc:fe:44:62:06:4f:db:0d:4b:e3:fd:fd:fe:48:
22:ff:8e:65:20:0f:d3:5e:9f:ca:22:84:fc:a3:47:d8:95:2c:
d1:33:0f:06:9d:a3:be:7b:70:05:7d:e8:4f:04:85:26:dc:c5:
1a:73:02:d0:bd:a7:bc:21:1f:c7:cb:26:81:1e:2d:3c:60:85:
3b:b9:bd:5e:ea:79:f7:90:da:73:e6:6d:b5:74:e2:c9:79:98:
a0:77:76:41:92:99:10:3c:a7:ac:dd:34:36:71:c7:a9:14:b5:
a5:1a:af:fe:36:85:7a:f3:de:3f:08:a2:ee:65:3d:d9:4f:e5:
a7:e8:86:8c:5a:cd:c8:31:f0:9f:a4:7b:05:b3:33:0e:f7:f1:
05:49:ee:4c:8d:44:45:ba:68:a5:8a:8d:91:3a:19:d0:9b:4e:
1a:92:3a:c1:4a:70:7b:c5:1e:99:b9:50:f0:ae:91:5d:e7:bd:
1d:7f:aa:86:4f:56:95:7c:09:ee:6b:7c:95:c6:94:35:3c:9a:
74:48:75:0b:51:c2:cd:2d:fd:7d:0c:e8:33:a9:76:24:1a:e5:
fb:63:fa:59:3c:bc:d3:b5:84:f3:0d:18:92:93:35:50:85:8c:
c3:ab:19:92:c3:bc:6d:ce:0e:98:8f:28:41:cf:6c:73:c9:37:
28:f5:a9:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:10:12 2026 by rpki-client