Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft
File: iPNC3REnxnrxEWqx-ZfifLTIhOg.mft (raw, json)
Hash identifier: F2Jwqzp2r3vPEyX6oOQTbCpMP+NItY0ImbuDPjc1VX4=
Subject key identifier: C2:B3:F6:A5:F5:23:91:03:A7:D6:21:C4:83:6A:C8:93:B2:CE:45:59
Authority key identifier: 88:F3:42:DD:11:27:C6:7A:F1:11:6A:B1:F9:97:E2:7C:B4:C8:84:E8
Certificate issuer: /CN=88f342dd1127c67af1116ab1f997e27cb4c884e8
Certificate serial: 019FA1BBC29AEA350D05ADD8493FABBE929E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPNC3REnxnrxEWqx-ZfifLTIhOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft
Manifest number: 19D0
Signing time: Mon 27 Jul 2026 04:01:04 +0000
Manifest this update: Mon 27 Jul 2026 04:01:04 +0000
Manifest next update: Tue 28 Jul 2026 04:01:04 +0000
Files and hashes: 1: iPNC3REnxnrxEWqx-ZfifLTIhOg.crl (hash: NwMcJErKrH+kkeLiu4KAUPk7yoobNPusH4496Bc5ahQ=)
2: tsdEYosuda0mGshkl10-Ftg6W4Y.roa (hash: a/sn0U4F/EkCXhkwAu+cTtnXnfLtOqn3iL2j2IEJCMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iPNC3REnxnrxEWqx-ZfifLTIhOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 04:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:bb:c2:9a:ea:35:0d:05:ad:d8:49:3f:ab:be:92:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88f342dd1127c67af1116ab1f997e27cb4c884e8
Validity
Not Before: Jul 27 04:01:04 2026 GMT
Not After : Jul 28 04:01:04 2026 GMT
Subject: CN=c2b3f6a5f5239103a7d621c4836ac893b2ce4559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:15:1c:a2:ff:ea:65:90:ac:c6:c8:68:24:56:
a5:e1:87:ab:af:5d:85:e0:b1:1f:fc:5b:28:c4:1e:
03:41:1c:a2:f5:fa:8d:5d:6a:32:8f:00:24:1a:77:
01:24:6a:4d:94:ee:a3:78:06:d4:56:93:6d:17:64:
b9:4b:39:4b:6a:57:18:c3:ed:27:56:8c:e0:20:ea:
8d:df:e6:58:ff:91:81:e8:9e:ed:3b:5d:1a:2d:7b:
da:16:cf:79:55:2b:36:04:f7:f6:e9:6f:6e:7e:d7:
af:e6:19:c8:9f:70:e4:ce:7f:28:02:27:9e:1a:66:
92:6f:83:86:d3:a5:65:c7:a4:db:72:b4:cf:6f:6b:
36:f0:5c:af:0d:7a:95:ec:2e:d2:3b:4c:94:d8:b2:
23:37:46:27:43:79:3b:c3:70:83:c9:fe:a3:c9:cc:
2d:31:09:07:cc:8e:7d:7e:5d:d7:62:20:f3:4d:72:
91:8a:d3:b4:4d:08:ae:4a:71:92:99:60:d0:04:e0:
35:60:5e:77:44:24:34:fe:23:ba:17:a2:93:e1:9b:
8c:57:d6:ca:40:9f:56:f9:40:6b:10:dc:01:6b:ad:
a7:c9:23:9a:6f:83:96:4f:96:06:63:d4:53:29:4b:
cf:f3:8e:cc:97:de:dd:ca:5c:bb:f7:29:34:d0:ac:
63:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:B3:F6:A5:F5:23:91:03:A7:D6:21:C4:83:6A:C8:93:B2:CE:45:59
X509v3 Authority Key Identifier:
keyid:88:F3:42:DD:11:27:C6:7A:F1:11:6A:B1:F9:97:E2:7C:B4:C8:84:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPNC3REnxnrxEWqx-ZfifLTIhOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:65:c2:03:c5:11:12:1e:58:e7:15:d1:55:d9:02:80:b7:4b:
a3:79:d0:57:74:bd:12:da:d5:fe:d6:ff:d1:80:92:95:37:09:
40:f7:5e:24:d4:19:64:bc:ab:22:55:f0:4d:a1:9a:6b:94:6c:
6d:7b:84:9d:14:31:ce:6e:ba:d3:32:de:a8:95:df:c7:6f:5f:
d7:08:99:96:65:17:20:80:e7:64:95:06:1b:1c:b8:8e:47:c0:
92:0d:5e:e3:34:8c:e1:c2:ed:d3:2a:3c:eb:c4:6a:07:95:c5:
b8:be:8f:0b:e4:dc:67:e3:b1:fd:c6:c4:c4:3c:85:66:63:27:
64:5e:1c:e4:54:f4:9b:4c:25:80:d1:1d:d2:a5:09:77:4e:34:
38:56:31:8b:a7:07:de:37:2d:e6:17:90:4e:f7:5f:93:e0:e5:
6e:a9:28:37:b4:80:43:85:73:54:8c:e4:a2:a3:5d:c2:86:70:
10:b4:94:ff:c6:ac:06:4b:40:57:9b:7b:6a:da:82:9f:ab:16:
e6:da:c6:86:f8:db:e9:32:38:12:65:3a:d3:50:42:9f:53:7d:
32:38:a4:2e:58:07:dd:1f:b4:50:5d:0f:80:fb:e3:35:43:9b:
4d:f4:76:43:5d:61:71:c3:43:5e:48:49:45:77:4e:b6:9b:56:
3d:b6:35:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+hu8Ka6jUNBa3YST+rvpKeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4ZjM0MmRkMTEyN2M2N2FmMTExNmFiMWY5OTdlMjdjYjRj
ODg0ZTgwHhcNMjYwNzI3MDQwMTA0WhcNMjYwNzI4MDQwMTA0WjAzMTEwLwYDVQQD
EyhjMmIzZjZhNWY1MjM5MTAzYTdkNjIxYzQ4MzZhYzg5M2IyY2U0NTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxUcov/qZZCsxshoJFal4Yerr12F
4LEf/FsoxB4DQRyi9fqNXWoyjwAkGncBJGpNlO6jeAbUVpNtF2S5SzlLalcYw+0n
VozgIOqN3+ZY/5GB6J7tO10aLXvaFs95VSs2BPf26W9uftev5hnIn3Dkzn8oAiee
GmaSb4OG06Vlx6TbcrTPb2s28FyvDXqV7C7SO0yU2LIjN0YnQ3k7w3CDyf6jycwt
MQkHzI59fl3XYiDzTXKRitO0TQiuSnGSmWDQBOA1YF53RCQ0/iO6F6KT4ZuMV9bK
QJ9W+UBrENwBa62nySOab4OWT5YGY9RTKUvP847Ml97dyly79yk00Kxj2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMKz9qX1I5EDp9YhxINqyJOyzkVZMB8GA1UdIwQY
MBaAFIjzQt0RJ8Z68RFqsfmX4ny0yIToMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVBOQzNSRW54bnJ4RVdxeC1aZmlmTFRJaE9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8yNGZkMTUtMjJhOS00YmQ2LWEyMzIt
OGIzNmU5ZDA2M2ExLzEvaVBOQzNSRW54bnJ4RVdxeC1aZmlmTFRJaE9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC8yNGZkMTUtMjJhOS00YmQ2LWEyMzItOGIzNmU5ZDA2M2Ex
LzEvaVBOQzNSRW54bnJ4RVdxeC1aZmlmTFRJaE9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi2XCA8UR
Eh5Y5xXRVdkCgLdLo3nQV3S9EtrV/tb/0YCSlTcJQPdeJNQZZLyrIlXwTaGaa5Rs
bXuEnRQxzm660zLeqJXfx29f1wiZlmUXIIDnZJUGGxy4jkfAkg1e4zSM4cLt0yo8
68RqB5XFuL6PC+TcZ+Ox/cbExDyFZmMnZF4c5FT0m0wlgNEd0qUJd040OFYxi6cH
3jct5heQTvdfk+DlbqkoN7SAQ4VzVIzkoqNdwoZwELSU/8asBktAV5t7atqCn6sW
5trGhvjb6TI4EmU601BCn1N9MjikLlgH3R+0UF0PgPvjNUObTfR2Q11hccNDXkhJ
RXdOtptWPbY1Ag==
-----END CERTIFICATE-----
Generated at Mon Jul 27 13:49:05 2026 by rpki-client