Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft
File: IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft (raw, json)
Hash identifier: 7YaqksbFRkBkpEp4ojTQLF9AdU1fufNAK2NKvpDeGSk=
Subject key identifier: 6D:D0:33:E3:05:A2:D9:92:C7:DD:97:D7:8D:BA:55:26:7F:4E:B1:4E
Authority key identifier: 23:05:12:15:F6:F1:BD:22:7D:B7:F4:0D:F7:48:D6:4C:10:6F:84:A3
Certificate issuer: /CN=23051215f6f1bd227db7f40df748d64c106f84a3
Certificate serial: 019FA228E585835F48410D72B6B8A3DD3A3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IwUSFfbxvSJ9t_QN90jWTBBvhKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft
Manifest number: 070C
Signing time: Mon 27 Jul 2026 06:00:16 +0000
Manifest this update: Mon 27 Jul 2026 06:00:16 +0000
Manifest next update: Tue 28 Jul 2026 06:00:16 +0000
Files and hashes: 1: IwUSFfbxvSJ9t_QN90jWTBBvhKM.crl (hash: KYB5VAZRY9YsfbhQAWRYIJITXjU07hYkG4tY0PM+ICA=)
2: eJRSSJ2okd5UCzM_2-qvK3U4-Vw.roa (hash: kPVh31w2HnqTCOv3mV2mx2QeB0MVVo+s0ob9l5XktM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IwUSFfbxvSJ9t_QN90jWTBBvhKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 06:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:28:e5:85:83:5f:48:41:0d:72:b6:b8:a3:dd:3a:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23051215f6f1bd227db7f40df748d64c106f84a3
Validity
Not Before: Jul 27 06:00:16 2026 GMT
Not After : Jul 28 06:00:16 2026 GMT
Subject: CN=6dd033e305a2d992c7dd97d78dba55267f4eb14e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:4f:6a:37:5f:ac:1e:84:c5:3a:de:cf:c4:56:
65:44:e0:60:24:81:ee:d1:9a:c8:75:91:9e:66:ea:
04:96:76:c8:11:b6:1f:8c:87:e5:1f:c3:fe:05:76:
a9:58:49:7c:12:62:b1:62:43:a0:7c:bf:b7:9b:f7:
6d:ca:aa:9c:5e:78:91:f1:ac:b1:5b:70:5e:85:2a:
a8:f6:f8:1d:5f:02:dc:a9:52:01:de:7f:8f:fc:84:
51:b8:3d:2a:f1:30:c7:a1:8e:51:14:9b:ea:52:9d:
93:67:b2:af:5e:ee:37:34:23:84:ec:c2:d2:41:fe:
32:41:1c:8e:31:d0:88:ef:27:4d:45:b8:3e:7d:eb:
fa:f0:63:65:57:ce:55:27:91:c2:2f:ef:b5:5d:d7:
12:f6:84:b6:5b:6d:be:ff:ab:9d:17:11:ed:6a:3e:
4a:ec:f1:63:bd:7c:bd:30:e7:5a:91:ae:a9:31:0a:
18:8a:69:2a:be:77:f6:65:24:9e:cc:05:b8:7e:ff:
00:6b:81:88:38:37:d5:81:6e:40:20:e6:06:f1:2e:
08:6d:34:a3:e9:12:79:3f:31:81:bf:45:c9:43:5c:
28:44:42:8a:56:a7:31:91:4d:44:d6:3c:52:05:3d:
22:c0:87:a9:ef:a0:70:f5:88:4d:91:97:f4:60:fc:
6c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:D0:33:E3:05:A2:D9:92:C7:DD:97:D7:8D:BA:55:26:7F:4E:B1:4E
X509v3 Authority Key Identifier:
keyid:23:05:12:15:F6:F1:BD:22:7D:B7:F4:0D:F7:48:D6:4C:10:6F:84:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwUSFfbxvSJ9t_QN90jWTBBvhKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:e1:8c:fe:50:30:2c:9b:81:c6:a1:1a:d0:ca:d2:dd:c3:c9:
49:4a:91:bd:9e:87:15:33:05:cb:94:87:aa:a4:69:01:89:6e:
bd:5f:7d:9f:dc:1a:64:74:45:9d:ab:37:a7:8f:07:cf:0d:7f:
89:ea:23:b5:6a:68:9c:54:3f:b7:74:63:be:01:04:60:f6:99:
2c:df:d7:3f:d0:8b:3c:3a:de:8c:0e:26:5b:14:57:7f:ed:b1:
2c:5e:d7:47:bc:bc:17:22:4e:70:f2:74:df:10:68:57:89:28:
9b:ca:38:f6:2e:3f:d6:82:f7:69:92:8e:77:22:66:dd:2c:db:
f5:5f:78:02:d0:ff:aa:10:e1:b0:75:f5:8d:8f:d6:98:85:11:
c2:5b:2a:cb:5b:bf:b5:3a:c6:5e:4e:d4:88:5e:69:ef:cd:81:
cd:79:f5:d8:07:84:74:e1:22:55:a7:2d:fb:21:cc:bf:ee:18:
e2:1e:54:54:38:55:6c:45:bf:53:b1:dd:d4:74:01:7b:7c:34:
c6:58:19:c2:7a:83:01:49:d7:aa:c0:46:2d:2b:c9:c6:05:bf:
c5:79:79:07:51:2a:db:25:6d:b6:f6:5a:48:62:05:61:a1:8c:
ff:47:05:03:be:33:56:96:da:f8:d9:f2:90:33:29:c2:e8:85:
1f:76:26:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:52:48 2026 by rpki-client