Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft
File: IixFhb2I-yfK3ynuW7ldZXX874M.mft (raw, json)
Hash identifier: T9WWZraAyokHq1F0WLUmjzmd/dOKoN4dEBOLYWsEFBk=
Subject key identifier: 7B:A4:50:D5:FF:8A:FC:8B:95:35:D0:EA:10:A1:A6:46:E6:E6:E2:F2
Authority key identifier: 22:2C:45:85:BD:88:FB:27:CA:DF:29:EE:5B:B9:5D:65:75:FC:EF:83
Certificate issuer: /CN=222c4585bd88fb27cadf29ee5bb95d6575fcef83
Certificate serial: 019EB8EA84CDEBB8D633226D10BE1539DBC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft
Manifest number: 10A8
Signing time: Thu 11 Jun 2026 23:00:37 +0000
Manifest this update: Thu 11 Jun 2026 23:00:37 +0000
Manifest next update: Fri 12 Jun 2026 23:00:37 +0000
Files and hashes: 1: 1lY-CsGva2obFTlBMU3iZDfCreA.roa (hash: Snn45LbsQALIONEF3gxNerrBtObVtDy584EK4tr9H6g=)
2: 2bVvxRffnJ6GQKgs2LoPDWvUcK4.roa (hash: er7wIVOxtiLCvuKAAvSBfYTSBvkd5n1t/IW0taeZM7Y=)
3: EKwGj8cGWTKa1emZfvaG-_KFnug.roa (hash: 0WqMi3eKQHHkupGYUjixsLx2D37mbsIXi9Fsl7hZLiw=)
4: IixFhb2I-yfK3ynuW7ldZXX874M.crl (hash: rkgDMTTN7zjD5h6mXLoNJ7we6VXyQKs6KO0GAy8soGU=)
5: QdRrKIrH4mGJmO4pGdzpank3gew.roa (hash: uL5ZvBd0SOggdi3Ll3eXsAHR4s6R5DvUqu2sa+EiNtI=)
6: TruqXXhyrBV8Cwe5yzCBt7QLsCE.roa (hash: Ab+jWWB0kPKqVoiUmBfNBgr0bDHAA/s+gzbI3fKh/Jo=)
7: YIiAdksRfvM2tL27jCCRXB5ju3Q.roa (hash: QClgQMgXCLixY3zPZ3xGliorGs5EkE6bJGcMO+wqsBg=)
8: hD3IqorNDrlwkzGUmybhJLv5L2k.roa (hash: ZaWNL4A6CBZBDeNroOwIUO67tG+ZeiSsCvPL+QQ5od4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft
rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:ea:84:cd:eb:b8:d6:33:22:6d:10:be:15:39:db:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=222c4585bd88fb27cadf29ee5bb95d6575fcef83
Validity
Not Before: Jun 11 23:00:37 2026 GMT
Not After : Jun 12 23:00:37 2026 GMT
Subject: CN=7ba450d5ff8afc8b9535d0ea10a1a646e6e6e2f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6b:e5:99:9f:06:cd:dc:4b:11:fb:9c:0f:7d:
f6:d2:a5:c2:a0:4a:d9:80:5b:fd:28:eb:98:28:a3:
c5:e2:82:83:cc:9c:53:89:97:ef:36:18:22:06:59:
91:9a:69:2e:1c:de:d2:89:e9:d0:df:cc:08:74:9d:
19:bb:40:9a:a6:dd:7e:72:e0:d6:e6:f6:03:34:83:
19:88:d6:dd:46:a1:fc:76:cd:dc:8c:c5:91:86:65:
86:bc:19:86:8e:3d:e7:4b:65:7b:a9:38:ca:70:29:
88:d7:16:c4:2b:70:da:1f:93:28:63:38:d7:b2:13:
dc:25:4a:5f:e9:f2:ed:29:6d:7c:00:0a:86:5b:18:
28:00:10:82:06:bd:2d:b3:ee:b9:fb:1c:c0:42:ed:
2c:63:94:b2:63:a3:87:94:87:57:ad:48:33:1a:35:
9c:1e:31:9c:a1:e1:e7:8f:d5:8d:6e:3d:8f:17:db:
75:40:55:29:d8:00:9e:3f:2e:74:55:24:0d:6f:d4:
6c:67:77:c5:5c:b3:fd:65:a1:cc:67:88:80:79:32:
90:07:68:31:c8:b8:bb:a3:24:1a:de:6d:51:97:35:
58:1e:51:78:17:1f:12:a9:a3:15:7d:0b:b5:12:92:
73:16:0f:fa:97:35:67:a6:b8:cd:49:43:b7:ca:71:
76:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:A4:50:D5:FF:8A:FC:8B:95:35:D0:EA:10:A1:A6:46:E6:E6:E2:F2
X509v3 Authority Key Identifier:
keyid:22:2C:45:85:BD:88:FB:27:CA:DF:29:EE:5B:B9:5D:65:75:FC:EF:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:fe:69:fc:af:7f:5b:1f:50:3a:7d:86:13:76:a0:86:c9:1d:
ab:0a:72:d8:d2:02:e7:5f:1b:25:1b:e3:14:98:c1:1b:54:1d:
38:7f:84:10:47:82:29:59:94:09:0a:a5:81:03:9c:66:7a:f1:
f6:c1:7a:0c:8f:c0:fa:49:2f:ca:22:19:e5:21:2f:67:c7:a7:
97:dd:4c:51:27:ed:69:59:26:d8:4a:5b:66:5e:70:51:9b:0f:
4d:18:2a:db:97:e0:a6:43:f3:d1:27:cd:8d:5b:34:3b:6e:e7:
37:09:12:4d:27:3c:e1:3b:7f:9d:57:3b:57:53:5d:da:5a:e4:
a5:19:bc:59:1a:e9:07:f1:b8:f3:59:10:63:17:b7:7e:b3:da:
de:ee:79:5e:2f:8d:25:b4:aa:ad:84:ee:90:73:08:5d:12:ad:
c8:1d:1f:be:8f:8a:c8:a3:3c:8f:fc:ed:7e:82:bf:8a:4b:c8:
ef:37:1d:20:0c:b6:66:cc:61:e5:63:5d:f2:5b:8e:07:7c:cd:
2b:51:b6:5a:ea:b9:06:7f:5c:c6:e5:ab:f7:da:c3:24:23:f7:
d7:21:45:91:73:c4:4a:a2:33:60:92:d9:e1:d3:44:d0:47:fa:
d3:50:ff:33:39:88:bd:b2:17:d7:77:08:6e:86:7f:ea:52:24:
0f:e7:82:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:33:22 2026 by rpki-client