Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.mft
File: iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.mft (raw, json)
Hash identifier: /r7md2/Dj0ta1AviHggfxtKOuKhKnXMhPg6lEBBk+cQ=
Subject key identifier: CB:39:54:F8:E3:5A:92:0B:6F:69:49:D9:07:D8:A9:B9:9A:00:EE:3D
Authority key identifier: 89:93:9F:F1:29:3B:7E:22:77:9F:C5:5B:4C:83:F1:3E:52:E9:44:28
Certificate issuer: /CN=89939ff1293b7e22779fc55b4c83f13e52e94428
Certificate serial: 019EB87C42D8769F299DD3099B75152C51F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.mft
Manifest number: 192D
Signing time: Thu 11 Jun 2026 21:00:11 +0000
Manifest this update: Thu 11 Jun 2026 21:00:11 +0000
Manifest next update: Fri 12 Jun 2026 21:00:11 +0000
Files and hashes: 1: bze-DpbDaFlTujNEYrBpzXK9-lM.roa (hash: ooe09J/1o8+6+gKFLqTffzTatPXG8lw2mIe4kZHRs+0=)
2: iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.crl (hash: LZVIxfT5m+QLbUe0iE2F1BqZDBfF+e50Nc9ALJ+u+FA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:7c:42:d8:76:9f:29:9d:d3:09:9b:75:15:2c:51:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89939ff1293b7e22779fc55b4c83f13e52e94428
Validity
Not Before: Jun 11 21:00:11 2026 GMT
Not After : Jun 12 21:00:11 2026 GMT
Subject: CN=cb3954f8e35a920b6f6949d907d8a9b99a00ee3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:83:9c:fd:24:53:99:55:14:1f:d5:74:e5:52:
85:e1:21:87:63:ea:d3:78:94:a3:6c:cc:dc:97:4f:
46:d1:79:d2:90:59:e7:82:e5:84:73:cf:ed:9c:ab:
e4:c9:eb:34:d9:e3:cf:a5:f0:a0:2e:4b:85:9b:de:
67:80:c0:84:d3:9a:28:8e:0d:d8:42:6f:cf:a1:00:
d8:62:b7:f8:e9:24:64:73:f0:35:4d:7d:6d:11:8c:
77:a4:75:05:75:dc:47:e7:c2:8d:cf:c3:92:44:e2:
a1:18:92:ce:dc:6b:2d:0b:c2:39:a1:b5:cb:90:13:
98:e1:2c:4d:15:44:0c:6b:d6:10:62:9e:74:bf:a1:
5e:fb:74:aa:e1:2f:92:89:f8:04:e5:de:f2:82:62:
b0:99:45:dc:56:45:26:69:e8:9d:9e:88:c2:fa:6f:
ce:02:ea:26:20:8e:c2:eb:39:7d:03:07:22:ce:ab:
fe:57:1e:9e:01:b1:ba:47:de:5f:af:93:fd:e8:32:
05:a1:c9:13:56:45:47:26:30:0b:db:7e:a3:96:8e:
b5:14:01:9a:fe:e1:01:df:a9:b9:81:de:2c:dc:cb:
42:c4:94:6a:49:b3:7d:19:27:87:c0:41:1e:d8:40:
0b:f2:bf:e9:c8:ca:52:b1:09:ae:c3:74:20:08:5e:
55:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:39:54:F8:E3:5A:92:0B:6F:69:49:D9:07:D8:A9:B9:9A:00:EE:3D
X509v3 Authority Key Identifier:
keyid:89:93:9F:F1:29:3B:7E:22:77:9F:C5:5B:4C:83:F1:3E:52:E9:44:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:34:e1:fc:4d:bd:09:a4:fb:67:46:96:d4:a0:57:b1:5f:4a:
12:ce:d4:fc:37:62:ac:a9:39:93:40:a1:ef:06:e7:9d:6b:1a:
c4:31:54:9b:c1:0c:3a:14:d4:0a:73:5a:9b:9d:88:55:6e:a0:
9f:90:2c:88:09:97:60:fd:9c:db:4b:14:67:46:40:33:d2:69:
eb:12:72:75:bd:cd:e2:84:a1:13:7d:4f:b2:25:5d:5e:e7:7b:
92:74:e5:80:55:8b:42:fb:e9:2b:99:e3:d9:4d:47:d2:21:1b:
ee:8e:29:8b:7a:67:d2:6d:8a:e3:a1:d2:2e:6d:2f:dd:b5:8d:
a8:a1:1e:d1:23:6e:a4:a7:0a:e7:33:df:59:78:43:4e:cd:61:
b2:ee:79:e6:f2:79:75:00:a3:76:13:3c:10:d8:e3:b3:fc:db:
e0:3d:70:1c:4b:bc:45:5c:d7:4e:ff:45:5b:0d:ba:ef:ed:9a:
68:83:c7:5f:7d:f2:e6:bc:13:a7:b4:af:f3:55:04:a0:1b:14:
5c:8a:24:be:45:94:5d:a0:52:08:c3:3f:f3:3c:0c:42:8e:d0:
01:ff:07:95:06:fa:50:16:e3:dc:19:ef:ab:a8:12:bd:66:ae:
1b:e8:0d:b5:af:6e:88:69:c8:76:6d:7c:6b:ac:dc:c4:a1:1e:
ba:b2:a0:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ64fELYdp8pndMJm3UVLFH1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5OTM5ZmYxMjkzYjdlMjI3NzlmYzU1YjRjODNmMTNlNTJl
OTQ0MjgwHhcNMjYwNjExMjEwMDExWhcNMjYwNjEyMjEwMDExWjAzMTEwLwYDVQQD
EyhjYjM5NTRmOGUzNWE5MjBiNmY2OTQ5ZDkwN2Q4YTliOTlhMDBlZTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIOc/SRTmVUUH9V05VKF4SGHY+rT
eJSjbMzcl09G0XnSkFnnguWEc8/tnKvkyes02ePPpfCgLkuFm95ngMCE05oojg3Y
Qm/PoQDYYrf46SRkc/A1TX1tEYx3pHUFddxH58KNz8OSROKhGJLO3GstC8I5obXL
kBOY4SxNFUQMa9YQYp50v6Fe+3Sq4S+SifgE5d7ygmKwmUXcVkUmaeidnojC+m/O
AuomII7C6zl9Awcizqv+Vx6eAbG6R95fr5P96DIFockTVkVHJjAL236jlo61FAGa
/uEB36m5gd4s3MtCxJRqSbN9GSeHwEEe2EAL8r/pyMpSsQmuw3QgCF5VFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMs5VPjjWpILb2lJ2QfYqbmaAO49MB8GA1UdIwQY
MBaAFImTn/EpO34id5/FW0yD8T5S6UQoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVpPZjhTazdmaUozbjhWYlRJUHhQbExwUkNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9hMTBkZGYtYmI2ZS00YmIwLWJlZmYt
MGU2ODAwMGIzNTM3LzEvaVpPZjhTazdmaUozbjhWYlRJUHhQbExwUkNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9hMTBkZGYtYmI2ZS00YmIwLWJlZmYtMGU2ODAwMGIzNTM3
LzEvaVpPZjhTazdmaUozbjhWYlRJUHhQbExwUkNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcDTh/E29
CaT7Z0aW1KBXsV9KEs7U/DdirKk5k0Ch7wbnnWsaxDFUm8EMOhTUCnNam52IVW6g
n5AsiAmXYP2c20sUZ0ZAM9Jp6xJydb3N4oShE31PsiVdXud7knTlgFWLQvvpK5nj
2U1H0iEb7o4pi3pn0m2K46HSLm0v3bWNqKEe0SNupKcK5zPfWXhDTs1hsu555vJ5
dQCjdhM8ENjjs/zb4D1wHEu8RVzXTv9FWw267+2aaIPHX33y5rwTp7Sv81UEoBsU
XIokvkWUXaBSCMM/8zwMQo7QAf8HlQb6UBbj3Bnvq6gSvWauG+gNta9uiGnIdm18
a6zcxKEeurKgfQ==
-----END CERTIFICATE-----
Generated at Fri Jun 12 04:38:27 2026 by rpki-client