Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft
File: IacXNhMJ0pOTUcnYuiFz24MZqI8.mft (raw, json)
Hash identifier: gK2Jq+IOY+GCGRwhxwongM7NFaHootYMmu6SePzXXWk=
Subject key identifier: 0E:D0:C6:F1:BD:21:99:AA:EB:E1:6A:81:49:20:A1:D8:15:AE:2A:2C
Authority key identifier: 21:A7:17:36:13:09:D2:93:93:51:C9:D8:BA:21:73:DB:83:19:A8:8F
Certificate issuer: /CN=21a717361309d2939351c9d8ba2173db8319a88f
Certificate serial: 019F4208A1539532349BD1DBE8856FD72021
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IacXNhMJ0pOTUcnYuiFz24MZqI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft
Manifest number: 11BA
Signing time: Wed 08 Jul 2026 14:01:29 +0000
Manifest this update: Wed 08 Jul 2026 14:01:29 +0000
Manifest next update: Thu 09 Jul 2026 14:01:29 +0000
Files and hashes: 1: 1-lmEP6bvSg72yf_GUeD4MSKNWhk.roa (hash: UZw/L6lxwycncfuJtQDWqM2GbKpxVlPtsRDnOtxZfq4=)
2: IacXNhMJ0pOTUcnYuiFz24MZqI8.crl (hash: yV/Vwocc0TY+9kkaFUWog8Yd0I1PCPtJN2b1YIOGxpY=)
3: uy5YZrZ342ZeZ2NGVVpULZDoPcE.roa (hash: ePYFBpMymgZ8ANPnNiychRqaQ6Srx/8bC1+U5miv+Ng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft
rsync://rpki.ripe.net/repository/DEFAULT/IacXNhMJ0pOTUcnYuiFz24MZqI8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 13:45:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:42:08:a1:53:95:32:34:9b:d1:db:e8:85:6f:d7:20:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21a717361309d2939351c9d8ba2173db8319a88f
Validity
Not Before: Jul 8 14:01:29 2026 GMT
Not After : Jul 9 14:01:29 2026 GMT
Subject: CN=0ed0c6f1bd2199aaebe16a814920a1d815ae2a2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:89:75:1c:ac:1c:6d:ee:ba:61:4a:4a:7d:a1:
42:e0:fa:2e:17:a5:1e:f3:10:28:d9:a4:cf:be:9d:
c9:4c:ae:ae:70:ee:ad:7a:54:96:26:03:f3:72:d3:
e1:a0:2c:20:c0:18:2c:2f:04:48:76:b7:f7:c8:0d:
ad:d1:ec:ca:a6:b2:19:dc:36:3d:5d:26:ab:3b:61:
94:86:62:4a:a6:86:ec:e2:b1:8b:89:21:d6:f8:e5:
4f:be:d2:99:5d:bd:fb:99:6c:e0:a4:50:51:1e:7c:
4c:56:e6:e0:50:6e:99:c6:b9:2f:cf:fb:ed:88:b3:
6b:76:27:54:50:f3:05:20:0a:3d:cb:6b:35:d1:96:
92:a5:34:40:ad:35:ab:8a:eb:ff:15:2c:df:ff:af:
d4:38:30:04:16:88:94:f4:5a:dc:d9:56:04:63:cc:
f9:55:d1:5d:8f:c6:0f:bd:68:3a:c0:63:92:4a:72:
a3:1e:0c:a0:d5:e4:a8:c3:9c:3c:58:7a:ca:fa:a7:
10:90:18:fb:54:0c:9e:fe:86:a8:35:fb:2a:94:8d:
5d:a9:b8:03:38:e1:37:1c:22:c0:ae:96:f6:e6:7f:
71:a7:be:ee:e7:bd:df:28:e7:29:07:dc:12:97:39:
87:92:d2:0c:4e:b1:12:7d:f0:7e:5f:6d:d1:1d:d1:
21:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:D0:C6:F1:BD:21:99:AA:EB:E1:6A:81:49:20:A1:D8:15:AE:2A:2C
X509v3 Authority Key Identifier:
keyid:21:A7:17:36:13:09:D2:93:93:51:C9:D8:BA:21:73:DB:83:19:A8:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IacXNhMJ0pOTUcnYuiFz24MZqI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:2d:7f:e8:c3:75:5e:dd:43:7e:77:36:cc:ae:f2:e3:64:5e:
94:c6:29:cb:0c:1e:4e:e0:27:fd:28:77:d8:93:e4:42:40:ff:
46:e7:ab:49:d1:67:27:fb:31:5f:2d:e1:e5:3b:6c:81:d3:1b:
99:23:d0:a9:58:7b:4c:b7:c3:97:60:76:16:24:0b:b1:9c:cc:
8e:0e:33:3e:b3:15:e8:d3:71:2b:28:92:a6:09:f2:ad:83:11:
4c:99:f8:8d:55:12:31:3a:62:e2:57:25:10:54:0b:c8:9d:1f:
f4:a4:bc:3c:5a:4b:7e:45:28:27:11:f5:e6:01:ca:16:9a:5d:
8b:1b:cb:92:c3:ee:be:8e:22:b0:b3:f6:65:89:0a:71:3b:0c:
0a:6d:4c:e4:d1:8e:eb:56:46:c0:84:5f:e9:9c:ee:af:43:83:
65:22:6e:d2:61:d5:8c:76:70:51:61:41:e9:0b:eb:63:f7:d9:
86:03:19:e4:65:12:20:e1:0e:40:65:1c:34:94:27:03:f6:dc:
ea:2a:a7:ef:3c:95:17:65:c8:2b:b1:ae:ba:67:75:07:e5:c2:
66:20:87:97:53:99:1a:6d:20:1f:ef:1b:ce:68:6f:62:64:1f:
be:19:db:17:de:e1:09:c2:82:aa:9c:24:e3:08:b0:14:0f:b7:
a0:08:7a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:38:13 2026 by rpki-client