Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/1IVR4mFps7PhJPaWTicC6VdoJT4.mft
File: 1IVR4mFps7PhJPaWTicC6VdoJT4.mft (raw, json)
Hash identifier: t7SCvE1EMa2L7W8ONouPpi2J75uQTdmcNvDLzOmRPpI=
Subject key identifier: F6:32:11:DB:E8:2D:AD:9F:CB:26:16:95:5B:06:0A:93:28:B5:1D:19
Authority key identifier: D4:85:51:E2:61:69:B3:B3:E1:24:F6:96:4E:27:02:E9:57:68:25:3E
Certificate issuer: /CN=d48551e26169b3b3e124f6964e2702e95768253e
Certificate serial: 019F18306931D92A6804E796EA6DAE2CD7B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1IVR4mFps7PhJPaWTicC6VdoJT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/1IVR4mFps7PhJPaWTicC6VdoJT4.mft
Manifest number: 09A4
Signing time: Tue 30 Jun 2026 11:00:53 +0000
Manifest this update: Tue 30 Jun 2026 11:00:53 +0000
Manifest next update: Wed 01 Jul 2026 11:00:53 +0000
Files and hashes: 1: 1IVR4mFps7PhJPaWTicC6VdoJT4.crl (hash: CAXfhNGRiUoYDWF4SxwWOTNI38G8AY18fhhzy+dcVY0=)
2: dUE7B1BI2eY5vxH0sjXn_eEtdiE.roa (hash: Td10cn+TUBgy7bh+w4UsjfRQk/m+lGjAwnzc4Ms7SgE=)
3: koyfl1fbRQ7wL_4CDR4bR8SUJ6w.roa (hash: +ihoHt66MtdHz9TjemIYSdtViPsR/B1PabBEU1L+tYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/1IVR4mFps7PhJPaWTicC6VdoJT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/1IVR4mFps7PhJPaWTicC6VdoJT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1IVR4mFps7PhJPaWTicC6VdoJT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 11:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:30:69:31:d9:2a:68:04:e7:96:ea:6d:ae:2c:d7:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48551e26169b3b3e124f6964e2702e95768253e
Validity
Not Before: Jun 30 11:00:53 2026 GMT
Not After : Jul 1 11:00:53 2026 GMT
Subject: CN=f63211dbe82dad9fcb2616955b060a9328b51d19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:2b:1b:46:7e:05:9e:79:be:c0:97:23:b5:ca:
42:54:6e:ac:b1:52:35:6d:ed:5f:39:4c:55:3e:16:
27:01:a0:a9:00:58:d0:50:4f:c1:c1:c6:8f:5b:f8:
8a:e0:86:86:25:71:90:ae:fa:82:2f:d5:d6:71:42:
56:17:2c:41:b5:25:2a:55:c1:17:d7:e0:39:08:cc:
45:16:c1:6d:7d:18:7b:18:e1:f2:ac:79:9e:9f:e9:
fc:a5:83:35:c2:67:76:36:c0:60:b3:ae:9b:74:36:
41:06:85:0e:e2:24:3f:c1:2b:8f:41:97:fe:61:56:
d0:95:63:39:be:6f:17:b3:9b:56:da:8a:92:51:1a:
a8:66:c5:3f:0e:de:e9:ba:b0:f3:1e:22:6c:0a:1c:
fa:b6:73:92:c8:27:b7:6f:31:73:39:38:b3:0f:cb:
44:38:a5:fe:93:09:5b:40:47:d6:aa:02:4e:aa:0f:
c4:d4:e0:0e:7f:b5:74:24:b2:dd:12:07:84:2e:7e:
71:a9:84:f6:99:70:2f:63:cd:b5:bc:1e:c9:c2:d4:
2e:e6:2b:78:89:70:3f:7c:b6:f7:cd:40:a7:50:83:
d4:6b:73:7c:98:62:3a:0e:a2:d9:5e:b9:92:97:ab:
76:19:1d:6c:b2:b0:5c:e9:09:7a:19:e2:55:be:8e:
65:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:32:11:DB:E8:2D:AD:9F:CB:26:16:95:5B:06:0A:93:28:B5:1D:19
X509v3 Authority Key Identifier:
keyid:D4:85:51:E2:61:69:B3:B3:E1:24:F6:96:4E:27:02:E9:57:68:25:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IVR4mFps7PhJPaWTicC6VdoJT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/1IVR4mFps7PhJPaWTicC6VdoJT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/1IVR4mFps7PhJPaWTicC6VdoJT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:28:e5:a5:8b:a2:6c:e0:f1:b9:ac:1f:d1:41:ef:23:d6:db:
04:3b:d6:8c:23:2b:f7:80:17:b8:6d:a2:d4:e9:d1:cc:94:26:
59:3a:74:f0:a4:77:5a:09:27:ab:2a:e6:cd:73:1c:7c:1a:ce:
2b:32:0e:71:a2:fd:a9:51:c4:4d:4a:25:10:d7:59:9f:39:40:
22:6f:3d:d0:d0:d2:42:5d:8a:8a:db:8e:0d:e2:ae:1e:b7:a8:
af:8a:12:ed:ff:a7:38:a0:b5:8f:24:8b:c8:4c:69:e2:3a:11:
c9:eb:6b:7f:6d:f6:50:df:5f:4c:87:e1:17:cd:8d:d7:dd:11:
56:b1:5f:c7:6c:cd:3d:7e:ee:60:e0:f5:63:03:bb:82:f5:0d:
41:61:6d:e3:6e:53:5d:7b:9b:e8:93:3d:2d:ce:69:54:1c:66:
81:d8:80:80:67:8b:3d:80:b4:cd:84:5f:90:99:be:7f:1a:2f:
33:88:cd:c7:5e:5a:7b:61:7d:d8:63:70:5b:1f:c0:c3:bc:b6:
67:2d:bb:4a:94:97:71:ee:cd:70:90:83:1e:32:e2:8c:19:15:
e2:66:c1:f7:50:cc:01:cc:2e:bd:2f:d3:9a:6c:78:73:9f:f7:
2e:09:43:fa:13:c0:ff:95:9e:45:8b:b9:91:b0:66:00:47:dd:
89:d5:81:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:18:52 2026 by rpki-client