Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft
File: IacXNhMJ0pOTUcnYuiFz24MZqI8.mft (raw, json)
Hash identifier: zpSWNmrR3EJbtXsjn17HY3Vv8kYYkD1BJQzHaCtriHQ=
Subject key identifier: 74:F6:0F:F1:CA:50:3B:54:52:07:7E:CC:03:9C:EB:C8:10:AE:FC:BD
Authority key identifier: 21:A7:17:36:13:09:D2:93:93:51:C9:D8:BA:21:73:DB:83:19:A8:8F
Certificate issuer: /CN=21a717361309d2939351c9d8ba2173db8319a88f
Certificate serial: 019E566D8AB98DA671CEAF7DE329F4A950FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IacXNhMJ0pOTUcnYuiFz24MZqI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft
Manifest number: 1140
Signing time: Sat 23 May 2026 20:01:19 +0000
Manifest this update: Sat 23 May 2026 20:01:19 +0000
Manifest next update: Sun 24 May 2026 20:01:19 +0000
Files and hashes: 1: 1-lmEP6bvSg72yf_GUeD4MSKNWhk.roa (hash: UZw/L6lxwycncfuJtQDWqM2GbKpxVlPtsRDnOtxZfq4=)
2: IacXNhMJ0pOTUcnYuiFz24MZqI8.crl (hash: ZrxgkByXx8IExOkJrrTuYezZWPbzeNx241zaicJ18yI=)
3: uy5YZrZ342ZeZ2NGVVpULZDoPcE.roa (hash: ePYFBpMymgZ8ANPnNiychRqaQ6Srx/8bC1+U5miv+Ng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft
rsync://rpki.ripe.net/repository/DEFAULT/IacXNhMJ0pOTUcnYuiFz24MZqI8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 May 2026 20:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:56:6d:8a:b9:8d:a6:71:ce:af:7d:e3:29:f4:a9:50:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21a717361309d2939351c9d8ba2173db8319a88f
Validity
Not Before: May 23 20:01:19 2026 GMT
Not After : May 24 20:01:19 2026 GMT
Subject: CN=74f60ff1ca503b5452077ecc039cebc810aefcbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:b8:f9:da:d6:b8:8b:07:8d:ac:ea:22:01:97:
fe:f4:a9:68:76:32:1e:e8:64:b2:4c:83:03:b3:76:
a3:2c:25:c6:0f:12:51:45:19:af:e0:64:87:73:b5:
fd:1f:17:be:7a:82:f3:2d:e1:8f:2b:f9:18:2a:1f:
01:70:d3:81:5e:99:f9:bb:7a:cb:ae:5a:d7:59:e1:
eb:b5:e4:5d:58:63:9d:fb:7a:e8:22:a1:c1:25:48:
ea:09:61:16:0a:95:ea:13:1b:24:c0:e9:92:3e:10:
92:39:d7:8c:36:b5:20:a7:f7:21:68:a6:5d:fd:52:
ed:d7:c3:ba:2e:cb:3a:59:94:9d:fc:b3:9d:c2:ba:
a4:d5:c3:10:a9:13:35:c7:7c:76:40:b1:5b:33:60:
79:f4:25:66:52:49:96:ef:72:b9:3f:95:10:26:15:
76:c1:05:32:76:b2:28:17:40:13:69:d8:90:ec:7d:
40:cc:bb:12:5e:d5:32:d6:1f:dc:d5:2a:17:4d:b2:
0e:e9:a2:c7:01:71:0c:f5:3e:7e:73:4c:a7:d5:c9:
51:5c:bf:f5:56:e1:77:59:27:73:d3:5e:46:f9:9f:
59:eb:04:e6:d5:8c:2d:75:1b:59:5c:b1:39:d8:bb:
9b:3f:c7:9a:4f:08:28:fb:07:b1:15:9d:f0:99:91:
dc:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:F6:0F:F1:CA:50:3B:54:52:07:7E:CC:03:9C:EB:C8:10:AE:FC:BD
X509v3 Authority Key Identifier:
keyid:21:A7:17:36:13:09:D2:93:93:51:C9:D8:BA:21:73:DB:83:19:A8:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IacXNhMJ0pOTUcnYuiFz24MZqI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:62:3e:af:a8:69:7a:52:3b:1c:a4:7d:ed:8e:d8:07:35:86:
55:c3:91:fb:03:5e:24:b7:ad:74:b7:cd:77:fc:e8:a3:70:0c:
61:6c:64:b3:d7:b2:7e:18:20:60:0b:32:6a:26:8f:75:78:4c:
c7:2f:59:05:8f:ff:54:fe:f3:88:c9:16:e4:02:bc:2f:d3:58:
79:4e:53:c0:f0:e7:60:c5:51:85:b9:a9:92:40:c9:80:2d:cd:
61:a1:fa:fd:76:73:5a:22:5f:1c:c9:95:49:87:22:d2:10:5d:
5f:9b:e1:bd:4e:91:27:e5:aa:9a:08:da:64:82:7c:6f:1f:eb:
3c:26:7b:40:48:e1:da:55:c3:53:e8:5d:14:9d:1f:5a:9e:3f:
6b:4d:a1:93:f6:85:c9:50:ec:4a:37:82:03:4b:ae:e8:f2:3b:
b0:96:0d:c6:aa:6c:55:c8:7b:9c:bf:82:7b:8c:6e:f0:89:44:
7b:7b:e1:1d:43:66:83:6d:b4:26:db:db:05:fc:c2:27:af:e4:
e5:47:b9:a3:36:22:ff:82:91:1e:99:58:ae:4a:58:4d:de:a8:
f5:be:76:e4:0b:33:71:78:3e:6f:7a:60:d1:c5:dc:9f:c6:30:
9d:7f:85:10:76:d7:d0:da:97:c4:dd:dd:1f:bc:43:3c:f9:45:
a5:61:c8:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 04:38:32 2026 by rpki-client