Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft
File: IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft (raw, json)
Hash identifier: piPEx+owNPGeU4CDivQYRQEs4rsmC8899sjjk9ns2QU=
Subject key identifier: D5:2B:04:4C:D5:94:97:05:E1:D2:61:B5:34:94:95:C9:96:DA:7B:A9
Authority key identifier: 22:92:D9:6D:FB:66:CB:18:06:9D:8B:D1:5C:9E:90:CD:91:24:F0:03
Certificate issuer: /CN=2292d96dfb66cb18069d8bd15c9e90cd9124f003
Certificate serial: 01A04BADDBCC543140D84CF2988D1DB13DD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IpLZbftmyxgGnYvRXJ6QzZEk8AM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft
Manifest number: 0EBE
Signing time: Sat 29 Aug 2026 04:01:20 +0000
Manifest this update: Sat 29 Aug 2026 04:01:20 +0000
Manifest next update: Sun 30 Aug 2026 04:01:20 +0000
Files and hashes: 1: 3_EpI3KZKzbfeK2XXEoAgU5pxR8.roa (hash: nhz/XR/19vb+kuAg/iFUKPIFqPbUWtZOaM60Y8UGbXw=)
2: 4Hbh9kgEtk0ETbC9Jsg3Fsu3-DI.roa (hash: qkbQr2FGRu+j6lNNaiItQZd0nGSc0yYN6c1c29qls04=)
3: IpLZbftmyxgGnYvRXJ6QzZEk8AM.crl (hash: zSv6msR1RDj6kZpVCwioFql7iAgZCdZoSu/5iXMNSAI=)
4: oerPqNmEjqxbGPl4Gs_7bUETdN0.roa (hash: EfuWXG0YIgrPAIfQYw0siImFKnCmmDF+zPQxYy5oo28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IpLZbftmyxgGnYvRXJ6QzZEk8AM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 30 Aug 2026 04:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:4b:ad:db:cc:54:31:40:d8:4c:f2:98:8d:1d:b1:3d:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2292d96dfb66cb18069d8bd15c9e90cd9124f003
Validity
Not Before: Aug 29 04:01:20 2026 GMT
Not After : Aug 30 04:01:20 2026 GMT
Subject: CN=d52b044cd5949705e1d261b5349495c996da7ba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:78:7e:3f:fb:bc:25:bf:10:0b:8f:a6:78:1b:
5e:d6:18:be:b7:8a:ac:b2:3f:02:41:62:62:03:08:
b8:42:93:d1:1b:9e:13:29:45:11:27:4b:b1:e5:49:
ec:2e:f4:8b:b1:8d:34:ec:e8:7f:42:d7:7a:07:11:
b4:0d:be:43:79:af:8b:d8:b5:ae:7d:71:bb:dd:74:
9b:39:94:dd:0f:08:4e:8a:cb:67:bd:5b:b7:63:d2:
73:37:ee:4d:49:3a:2b:91:dd:fb:8a:40:19:f3:64:
3e:30:c3:28:36:aa:cb:68:62:3c:2d:fd:69:6a:7a:
b5:96:ee:63:08:50:c5:d5:a7:c5:8d:2d:f5:da:a3:
6d:ae:44:b1:36:fc:d4:ca:72:bd:e7:c8:12:0e:0f:
bf:fc:d6:c4:31:e4:17:1c:d0:9e:e0:1a:e9:44:bd:
55:da:c9:57:c4:2f:c4:61:d1:ea:73:51:31:6c:75:
37:6f:86:5d:06:b1:b6:76:a8:08:9c:20:a4:42:ac:
bf:39:79:2c:75:b1:3e:35:56:2f:0e:e2:52:66:ed:
e6:d0:91:eb:fc:a9:9a:d1:03:5e:4d:1d:b8:3b:50:
47:af:23:b3:0c:98:3d:5d:5a:e9:aa:a4:19:47:e7:
68:d4:dc:8d:a6:d9:40:cd:dc:60:83:68:cc:cf:dd:
5f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:2B:04:4C:D5:94:97:05:E1:D2:61:B5:34:94:95:C9:96:DA:7B:A9
X509v3 Authority Key Identifier:
keyid:22:92:D9:6D:FB:66:CB:18:06:9D:8B:D1:5C:9E:90:CD:91:24:F0:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IpLZbftmyxgGnYvRXJ6QzZEk8AM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:4f:50:56:06:ea:55:11:92:c0:38:25:23:7f:f0:00:63:fb:
cc:c4:27:39:4a:51:95:cb:1f:4f:ce:e5:a3:ef:70:29:b2:38:
6b:21:3c:2f:20:12:7b:59:07:16:8f:6e:00:ef:1f:ea:be:d8:
3c:58:97:a0:34:83:3a:f6:d9:40:6f:81:e2:a5:b3:0c:61:dd:
ae:8b:16:11:58:72:48:e0:1d:cf:1e:2c:51:3e:eb:e0:ab:38:
5f:00:f7:e1:f3:21:7b:2c:05:da:f7:37:24:ad:f1:8f:98:8c:
fc:ef:df:60:45:e0:a7:e8:3b:fe:ff:25:34:8a:b1:8c:0d:04:
60:6f:4f:75:69:f3:56:09:c4:09:f2:ce:af:f2:0f:e6:f9:e9:
68:2a:9a:13:3e:99:6d:8f:b4:56:55:21:fc:b4:61:ee:90:a5:
8c:75:c0:3c:04:6a:b2:92:0f:40:29:37:e9:dd:5e:fe:a1:93:
6d:02:2e:fc:ed:78:12:c0:7d:9b:a6:c5:76:da:e0:64:42:6a:
2b:af:57:6f:32:52:71:42:52:96:92:ee:7b:e5:70:7b:b0:e5:
e7:51:a8:76:c5:63:a2:31:b6:67:9b:7f:ca:0d:51:7b:de:5c:
0d:67:c5:1c:ec:e9:f2:c8:4d:69:df:12:25:3a:27:a2:19:2a:
72:64:4e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 14:06:08 2026 by rpki-client