Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.mft
File: Iv9bz3ObBzL7G823F-xxf28csOI.mft (raw, json)
Hash identifier: C8HIaNxRgJMnGGKfg/jxSKv+BbS8KDfNlmLQiym9mJ4=
Subject key identifier: 96:9D:48:BD:42:3C:DD:5F:9C:8E:B5:A1:6F:0C:84:DB:FC:F4:65:AB
Authority key identifier: 22:FF:5B:CF:73:9B:07:32:FB:1B:CD:B7:17:EC:71:7F:6F:1C:B0:E2
Certificate issuer: /CN=22ff5bcf739b0732fb1bcdb717ec717f6f1cb0e2
Certificate serial: 019E916F52D48565CA0303A21A9DCBC67D65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iv9bz3ObBzL7G823F-xxf28csOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.mft
Manifest number: 1743
Signing time: Thu 04 Jun 2026 07:00:52 +0000
Manifest this update: Thu 04 Jun 2026 07:00:52 +0000
Manifest next update: Fri 05 Jun 2026 07:00:52 +0000
Files and hashes: 1: Iv9bz3ObBzL7G823F-xxf28csOI.crl (hash: B8pgTwFH7x6oXpUoHI4+IFgqxJyO8voXZFqGao/+IkI=)
2: KGVSyU1wIj7N4iY-yGjJQ4nk1wo.roa (hash: JwvzeqlxWkg3az+woqZ5+VwCzs4K2YIxQ2yc7nZEKzM=)
3: _1spXT-fNgBWQ52DMUTuvrFr3B8.roa (hash: 0BaKLx6BfvTvlAXkJodDBjYBD7kri1g1ufdyiNOpYl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iv9bz3ObBzL7G823F-xxf28csOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 07:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:91:6f:52:d4:85:65:ca:03:03:a2:1a:9d:cb:c6:7d:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22ff5bcf739b0732fb1bcdb717ec717f6f1cb0e2
Validity
Not Before: Jun 4 07:00:52 2026 GMT
Not After : Jun 5 07:00:52 2026 GMT
Subject: CN=969d48bd423cdd5f9c8eb5a16f0c84dbfcf465ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:71:67:4c:f1:c4:b6:b4:fb:e3:25:ed:13:3a:
bf:8c:3f:5a:7b:39:f9:bb:7b:4d:9e:53:8e:fe:7f:
0b:9b:0b:81:78:06:08:13:8b:01:23:45:15:ea:d4:
d4:7f:12:8a:16:c3:d5:06:b5:00:f6:67:e6:4c:34:
b2:c8:a3:44:83:77:de:36:54:98:98:4b:f9:33:c8:
ca:61:a0:bd:05:74:0e:88:78:8b:57:0f:5b:af:9c:
6c:f2:b1:c6:4d:6d:21:aa:97:32:fb:d3:59:7a:b3:
5f:13:80:10:8a:75:bf:cf:1d:4c:7e:9b:7d:9a:e1:
d5:d6:71:9b:b2:a7:9b:22:64:0b:d1:1f:60:5a:4d:
22:3b:64:cc:6a:3a:9f:23:30:9b:de:5d:30:b9:19:
84:eb:3a:34:65:c7:79:53:7d:ba:08:d4:90:ff:34:
05:1f:f0:dd:43:64:b8:3e:96:fb:ea:21:0d:60:ea:
03:69:c5:88:ad:5f:32:36:b3:93:a1:61:70:64:e2:
3c:f2:15:ed:3b:4c:25:9b:ee:6c:ce:72:bc:5b:4d:
51:c5:77:07:7c:b8:18:90:99:c5:11:50:30:ed:5b:
19:c7:a5:70:ab:82:73:75:04:65:9c:13:98:2f:13:
08:e0:7f:9d:9a:d5:3d:b2:d4:54:a0:84:8b:51:70:
1b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:9D:48:BD:42:3C:DD:5F:9C:8E:B5:A1:6F:0C:84:DB:FC:F4:65:AB
X509v3 Authority Key Identifier:
keyid:22:FF:5B:CF:73:9B:07:32:FB:1B:CD:B7:17:EC:71:7F:6F:1C:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iv9bz3ObBzL7G823F-xxf28csOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:ed:1c:5c:7f:21:db:cd:58:43:f4:58:05:4e:d1:2e:4d:7e:
3b:98:6e:8b:c2:93:70:77:e8:84:7c:f6:3d:5e:55:63:34:52:
02:9e:66:e4:6e:1c:36:82:0a:7b:73:62:a5:28:4c:34:9f:b7:
42:e2:f4:89:da:ad:98:31:97:b5:0b:80:7e:a1:cd:ac:13:68:
25:78:03:89:a6:53:63:a5:69:c5:c3:7e:72:f1:69:90:45:ea:
0f:b2:a4:4d:3c:6e:d7:89:e0:55:bc:83:67:a2:3c:df:09:c5:
ac:58:e0:ec:1b:b6:e9:10:9b:30:d4:7f:1a:84:9b:74:fb:31:
5e:b1:b0:33:08:62:3f:e9:da:ee:0a:95:11:4f:fd:97:df:24:
c7:98:39:cd:54:6e:24:e8:65:e3:07:fb:85:52:50:16:0e:5c:
52:e9:82:49:4a:a5:aa:6f:9d:f8:5a:ee:8f:38:61:45:a8:5c:
78:af:7d:8a:e4:43:c6:24:be:9d:37:59:0e:e0:23:6e:ae:8b:
5e:c6:e8:92:12:f5:1f:50:4d:f0:0a:b0:da:e2:33:4e:84:ce:
ac:1b:ee:f6:03:d3:3a:2b:a2:c2:b4:7f:31:fb:26:d8:75:b5:
94:a1:a1:18:c4:b8:dc:ca:20:ae:8c:79:d8:2b:f9:cb:e9:44:
d0:c4:6e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 12:29:26 2026 by rpki-client