Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft
File: iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft (raw, json)
Hash identifier: izPgwVaG0MI+SgGsGe1Exnj7r6MTRhG0mxWozF7WzmM=
Subject key identifier: 58:EC:63:A9:FE:EC:FF:69:6B:BB:83:2E:70:68:55:B1:9B:9B:BF:6E
Authority key identifier: 88:44:FC:4A:E1:06:49:9E:05:75:FF:3C:A1:55:6D:BC:0D:9B:46:51
Certificate issuer: /CN=8844fc4ae106499e0575ff3ca1556dbc0d9b4651
Certificate serial: 019EB958B1DA97348ECBFF894553ACB9469F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iET8SuEGSZ4Fdf88oVVtvA2bRlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft
Manifest number: 18AF
Signing time: Fri 12 Jun 2026 01:00:57 +0000
Manifest this update: Fri 12 Jun 2026 01:00:57 +0000
Manifest next update: Sat 13 Jun 2026 01:00:57 +0000
Files and hashes: 1: aeU9_Yx1c9nw1y-4xtz44SqG1m0.roa (hash: 0t0fFg5NYuzbKW5UvLMqmaiFIgFM8FNQ8jsxvVeiMB0=)
2: iET8SuEGSZ4Fdf88oVVtvA2bRlE.crl (hash: A/HY6c7KoXWF1GmXxWqdtcUUcZ0CDhS8yGtoQ9gQmPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/iET8SuEGSZ4Fdf88oVVtvA2bRlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 01:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:58:b1:da:97:34:8e:cb:ff:89:45:53:ac:b9:46:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8844fc4ae106499e0575ff3ca1556dbc0d9b4651
Validity
Not Before: Jun 12 01:00:57 2026 GMT
Not After : Jun 13 01:00:57 2026 GMT
Subject: CN=58ec63a9feecff696bbb832e706855b19b9bbf6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:33:ac:f0:5d:1c:39:55:53:1f:4c:2e:c4:db:
3b:8e:6d:99:44:e6:36:54:15:ea:27:9e:4e:85:83:
6f:ba:ab:ad:8d:cd:f5:2e:31:6b:94:e6:77:78:69:
42:f9:3c:b3:d9:ad:2d:51:1b:20:19:e3:bb:2f:a1:
42:b4:85:46:d6:24:fd:f7:d2:08:6f:4d:7b:0f:2e:
b8:ae:cb:31:2f:df:74:8c:9c:1b:d2:17:f7:d6:4b:
60:be:d5:a8:ab:e3:7c:c8:11:3c:c6:69:bf:f2:b7:
ba:76:e1:97:a5:e4:fb:25:9c:b5:d2:50:1d:47:ac:
53:cc:4d:43:6a:cd:e0:be:17:1d:cf:43:94:58:26:
49:8a:3d:0c:8d:37:2d:7b:9f:03:81:c0:04:d2:46:
5e:6f:52:dd:81:8d:3d:0c:95:aa:00:93:7a:79:b8:
d0:ec:46:45:85:ff:67:de:04:9a:6b:cc:51:44:80:
73:6d:fe:be:f6:91:0b:d4:c6:5f:92:0a:55:e4:01:
94:57:c7:7c:b6:77:8d:ff:9c:57:09:2e:83:79:70:
ab:5e:5a:2c:04:75:c7:24:2e:0e:26:30:69:16:55:
51:81:2b:f5:ed:92:02:d1:a5:78:7a:f7:dc:15:e4:
f9:de:90:63:0b:db:85:bd:20:1b:f2:54:2b:27:5f:
d4:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:EC:63:A9:FE:EC:FF:69:6B:BB:83:2E:70:68:55:B1:9B:9B:BF:6E
X509v3 Authority Key Identifier:
keyid:88:44:FC:4A:E1:06:49:9E:05:75:FF:3C:A1:55:6D:BC:0D:9B:46:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iET8SuEGSZ4Fdf88oVVtvA2bRlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:4d:e8:54:99:85:23:1c:ef:02:d5:61:e0:bf:a3:8d:07:2d:
1c:33:73:a2:14:9f:6d:27:c1:b7:6b:0c:75:f3:a1:27:e2:1c:
e8:59:a1:47:c4:ed:b3:c3:52:7d:cc:44:2b:39:2b:44:d0:fc:
37:83:dc:02:92:1d:e2:7c:6e:09:17:8e:fe:2f:73:df:27:4e:
71:20:39:db:10:97:90:d0:51:74:9e:16:5f:cc:a2:df:24:fc:
0e:0f:d1:78:79:b8:59:c9:cc:00:4d:ea:29:8d:48:c7:b6:27:
08:aa:b0:6a:c8:8a:5e:f5:3a:77:70:04:a9:c9:ad:b5:fd:5b:
9a:0a:49:62:f6:ec:fb:92:13:8e:ce:31:38:e7:b0:0d:96:5e:
1d:3f:1a:91:07:db:3d:bd:e0:0a:4f:82:10:d4:10:46:53:de:
1d:e2:af:12:21:28:66:5d:89:24:c4:c1:65:71:4e:3e:b2:22:
1c:ef:a7:4f:f3:ee:63:ce:db:a9:de:a5:e8:a7:06:d9:ef:6a:
36:81:4c:92:03:25:ca:43:86:98:0a:43:2c:a9:62:fe:2d:13:
d9:b5:84:71:93:bd:c5:aa:b4:14:69:bc:56:c3:36:fc:2e:c0:
fa:da:35:74:c2:92:c5:5f:62:7c:87:ad:05:84:1d:6a:ca:7e:
4b:17:b2:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ65WLHalzSOy/+JRVOsuUafMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4NDRmYzRhZTEwNjQ5OWUwNTc1ZmYzY2ExNTU2ZGJjMGQ5
YjQ2NTEwHhcNMjYwNjEyMDEwMDU3WhcNMjYwNjEzMDEwMDU3WjAzMTEwLwYDVQQD
Eyg1OGVjNjNhOWZlZWNmZjY5NmJiYjgzMmU3MDY4NTViMTliOWJiZjZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujOs8F0cOVVTH0wuxNs7jm2ZROY2
VBXqJ55OhYNvuqutjc31LjFrlOZ3eGlC+Tyz2a0tURsgGeO7L6FCtIVG1iT999II
b017Dy64rssxL990jJwb0hf31ktgvtWoq+N8yBE8xmm/8re6duGXpeT7JZy10lAd
R6xTzE1Das3gvhcdz0OUWCZJij0MjTcte58DgcAE0kZeb1LdgY09DJWqAJN6ebjQ
7EZFhf9n3gSaa8xRRIBzbf6+9pEL1MZfkgpV5AGUV8d8tneN/5xXCS6DeXCrXlos
BHXHJC4OJjBpFlVRgSv17ZIC0aV4evfcFeT53pBjC9uFvSAb8lQrJ1/U0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFjsY6n+7P9pa7uDLnBoVbGbm79uMB8GA1UdIwQY
MBaAFIhE/ErhBkmeBXX/PKFVbbwNm0ZRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUVUOFN1RUdTWjRGZGY4OG9WVnR2QTJiUmxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9kZDQyZDktZmY4OC00Y2EwLTg4M2Mt
MzE3NjQ1Y2Q3ODg1LzEvaUVUOFN1RUdTWjRGZGY4OG9WVnR2QTJiUmxFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9kZDQyZDktZmY4OC00Y2EwLTg4M2MtMzE3NjQ1Y2Q3ODg1
LzEvaUVUOFN1RUdTWjRGZGY4OG9WVnR2QTJiUmxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk03oVJmF
IxzvAtVh4L+jjQctHDNzohSfbSfBt2sMdfOhJ+Ic6FmhR8Tts8NSfcxEKzkrRND8
N4PcApId4nxuCReO/i9z3ydOcSA52xCXkNBRdJ4WX8yi3yT8Dg/ReHm4WcnMAE3q
KY1Ix7YnCKqwasiKXvU6d3AEqcmttf1bmgpJYvbs+5ITjs4xOOewDZZeHT8akQfb
Pb3gCk+CENQQRlPeHeKvEiEoZl2JJMTBZXFOPrIiHO+nT/PuY87bqd6l6KcG2e9q
NoFMkgMlykOGmApDLKli/i0T2bWEcZO9xaq0FGm8VsM2/C7A+to1dMKSxV9ifIet
BYQdasp+SxeyYg==
-----END CERTIFICATE-----
Generated at Fri Jun 12 09:11:19 2026 by rpki-client