Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.mft
File: IuSOFh5JBZI_bUqirgohUw8t4gs.mft (raw, json)
Hash identifier: uxgZ+yvznR74CqT9qq9oiWZVCWLrTvcuJ6GnF/pRwHI=
Subject key identifier: 18:2B:BB:7A:82:6A:59:FC:8A:9E:77:C5:A8:7A:24:D6:89:0E:0B:78
Authority key identifier: 22:E4:8E:16:1E:49:05:92:3F:6D:4A:A2:AE:0A:21:53:0F:2D:E2:0B
Certificate issuer: /CN=22e48e161e4905923f6d4aa2ae0a21530f2de20b
Certificate serial: 019E1D90AFACABB4BD6D20C42D3CF6C677DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IuSOFh5JBZI_bUqirgohUw8t4gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.mft
Manifest number: 1904
Signing time: Tue 12 May 2026 19:01:21 +0000
Manifest this update: Tue 12 May 2026 19:01:21 +0000
Manifest next update: Wed 13 May 2026 19:01:21 +0000
Files and hashes: 1: IuSOFh5JBZI_bUqirgohUw8t4gs.crl (hash: AQ0TQA9pfrnUPtu6oCgx+/4siWahlH332WXU4ZB6sh4=)
2: WjnU7eVkPkVNVM9MOmgLUUUpMzM.roa (hash: +R4Zj+vw0Ft1e0nUhwZse4EmeZXGoZD55vZpzhImACo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.mft
rsync://rpki.ripe.net/repository/DEFAULT/IuSOFh5JBZI_bUqirgohUw8t4gs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:af:ac:ab:b4:bd:6d:20:c4:2d:3c:f6:c6:77:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22e48e161e4905923f6d4aa2ae0a21530f2de20b
Validity
Not Before: May 12 19:01:21 2026 GMT
Not After : May 13 19:01:21 2026 GMT
Subject: CN=182bbb7a826a59fc8a9e77c5a87a24d6890e0b78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:74:fb:8c:fb:33:b4:4d:fa:d5:a6:b2:43:d9:
40:05:2f:d4:3a:a5:40:b0:9f:ee:4e:71:57:76:35:
35:ef:b0:6d:30:07:b4:1f:11:4e:5f:4e:2c:93:d9:
47:81:f9:58:17:81:2e:83:45:ef:de:4a:19:b4:51:
e6:7d:d0:7e:e2:02:c4:dd:5c:be:88:a0:cb:ee:d2:
4e:3e:ae:82:52:9b:ef:65:35:69:0f:6f:a5:7f:28:
d5:28:56:a3:cc:7d:49:9b:89:5d:ee:66:9b:04:50:
dd:d3:c1:62:21:ca:4e:23:98:5b:2b:44:02:aa:73:
7f:99:a6:8b:a8:d3:f3:b1:40:a2:4c:ae:d8:ca:87:
56:60:f8:64:28:df:ca:1c:74:f0:7e:d8:98:14:c3:
c9:33:36:50:0f:f1:67:1d:4f:ba:28:9e:05:7c:a1:
f9:49:74:09:ff:aa:87:70:df:02:66:93:2a:4f:3d:
b0:d2:e6:4e:3a:ee:17:8b:93:c9:bb:2e:f2:eb:6f:
e3:1e:1d:00:70:09:c7:ac:fa:23:e8:b9:fc:52:4f:
5a:0b:d1:54:86:83:56:07:03:82:d0:3b:ac:13:2b:
28:18:6e:60:a5:59:82:9b:94:c2:a0:35:84:b5:3e:
5d:c1:a6:16:45:f3:a4:ec:93:2f:da:6a:f9:1b:ac:
ca:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:2B:BB:7A:82:6A:59:FC:8A:9E:77:C5:A8:7A:24:D6:89:0E:0B:78
X509v3 Authority Key Identifier:
keyid:22:E4:8E:16:1E:49:05:92:3F:6D:4A:A2:AE:0A:21:53:0F:2D:E2:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IuSOFh5JBZI_bUqirgohUw8t4gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:29:0d:99:6f:84:a5:67:49:56:1c:cc:7c:30:88:6f:8f:f5:
37:ef:3e:76:fc:fc:9f:58:c0:85:01:a0:af:99:39:25:65:7a:
1d:bd:8e:3f:72:7a:90:91:28:b7:13:5d:be:b1:ec:32:ff:90:
c9:a0:7b:51:2e:3c:0f:71:6c:99:37:64:51:5d:d3:a0:2b:42:
37:c8:8e:bb:9c:53:ce:a5:e9:1e:c8:41:92:e1:aa:5d:e8:56:
02:6b:0c:d2:2e:31:d4:cc:fa:04:13:11:29:80:2e:ea:5f:18:
d7:dc:9e:d7:0d:29:76:d7:2e:24:fb:8a:0f:2a:d3:b2:1e:9d:
7a:76:45:6f:32:4b:7e:d0:4b:27:63:1d:a7:20:b4:68:d8:91:
3e:41:b9:d5:da:af:c1:3d:4f:c4:83:b4:4a:7c:42:8b:84:06:
3c:f7:0f:62:e4:cb:2c:bf:37:0c:e9:e1:8f:16:2d:e1:8a:13:
e1:6b:8e:21:6c:14:57:92:d8:2d:c7:d8:b7:50:90:dc:67:59:
60:a4:61:c5:0f:af:95:c5:62:ce:36:70:f7:e9:6c:b0:77:ec:
17:fb:01:82:33:13:80:a9:87:a5:79:3b:c4:c8:2d:dd:72:fc:
5a:c7:0c:22:26:e9:31:7a:04:b4:ed:82:54:b8:8f:57:0b:69:
3e:5a:41:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:09:57 2026 by rpki-client