Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.mft
File: iX2mABsSODBo_nGjD4zyhcZoMP4.mft (raw, json)
Hash identifier: xZr/62EXxNvuhGAlY/OXmtkR33uhzm13QACzk/jDhEI=
Subject key identifier: FD:F7:77:25:CD:9E:9D:2C:25:12:19:87:33:06:9C:94:56:90:46:8E
Authority key identifier: 89:7D:A6:00:1B:12:38:30:68:FE:71:A3:0F:8C:F2:85:C6:68:30:FE
Certificate issuer: /CN=897da6001b12383068fe71a30f8cf285c66830fe
Certificate serial: 019E8EA4A5ADE5FFD74994185998E911293E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iX2mABsSODBo_nGjD4zyhcZoMP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.mft
Manifest number: 1942
Signing time: Wed 03 Jun 2026 18:00:15 +0000
Manifest this update: Wed 03 Jun 2026 18:00:15 +0000
Manifest next update: Thu 04 Jun 2026 18:00:15 +0000
Files and hashes: 1: b7S_nq9L3fLkMmyZfKpBQL5uCIY.roa (hash: hHkV6ifNNgCnzjffMB2ARiro7sl9sU2WuipxUNM/huo=)
2: iX2mABsSODBo_nGjD4zyhcZoMP4.crl (hash: AOTmdjjGDe0iX1AljCG67TcWTbFZT8wzVT/T1buICe8=)
3: jAnHcvp-J3jJ73LmJIPdJciy_zM.roa (hash: APG1rihSnkESicy3QFJODSTSwbqRn6HF/XNwWPvWKwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iX2mABsSODBo_nGjD4zyhcZoMP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 13:19:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8e:a4:a5:ad:e5:ff:d7:49:94:18:59:98:e9:11:29:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=897da6001b12383068fe71a30f8cf285c66830fe
Validity
Not Before: Jun 3 18:00:15 2026 GMT
Not After : Jun 4 18:00:15 2026 GMT
Subject: CN=fdf77725cd9e9d2c2512198733069c945690468e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8a:54:d0:aa:ef:f3:8a:7c:ea:31:be:39:ff:
74:eb:a3:ec:9f:1b:a3:6d:56:9f:74:5d:e8:e5:8e:
0a:45:85:54:87:d4:60:2d:06:62:9c:72:6a:c8:41:
d8:6f:22:c5:6d:a3:05:15:77:b5:6d:0c:fc:4e:a6:
91:80:aa:d1:ef:13:92:bb:92:24:4d:bc:c4:85:7a:
d6:7f:ca:ce:be:14:c4:fc:a5:82:07:15:de:8d:23:
55:c7:b4:ff:9d:7d:90:7b:88:8a:f8:79:cf:33:59:
01:ab:74:c8:5a:3c:69:6a:7d:3c:8a:10:c4:a9:04:
24:11:78:eb:dd:62:86:5a:dd:f2:b2:83:49:e2:18:
2a:3d:31:1b:f9:58:42:22:b8:f4:cc:23:2c:bf:65:
5c:50:42:9e:4d:04:1c:4e:3d:99:8b:cd:52:de:43:
19:f4:9d:fb:95:e7:46:e0:50:5b:65:38:1b:9a:59:
f5:4b:48:86:cf:5a:96:5b:4a:d9:24:85:64:3b:93:
ce:f2:4e:62:6e:d1:8b:c7:51:78:9a:37:02:1a:d5:
0d:c2:71:38:7a:3a:3f:13:f2:4e:81:fb:ea:92:02:
9f:61:de:68:68:81:25:2d:d1:01:16:74:f3:53:28:
37:7e:ca:a5:08:d6:72:69:46:de:d1:b8:12:84:c9:
13:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:F7:77:25:CD:9E:9D:2C:25:12:19:87:33:06:9C:94:56:90:46:8E
X509v3 Authority Key Identifier:
keyid:89:7D:A6:00:1B:12:38:30:68:FE:71:A3:0F:8C:F2:85:C6:68:30:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iX2mABsSODBo_nGjD4zyhcZoMP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:60:d3:5f:3f:7d:eb:6f:a3:01:f7:ab:b2:ee:71:06:ea:bb:
b8:ad:d7:ab:17:7f:d4:0d:82:31:67:9a:f1:72:43:e7:7b:62:
66:3d:d0:ed:94:c6:3a:81:89:aa:43:4c:af:e8:d1:2a:b8:71:
c6:0f:60:02:49:35:39:ff:91:53:60:b2:c8:ae:37:8e:6d:6d:
c1:25:30:46:b3:eb:8c:ad:29:90:dd:2c:19:82:ae:4c:74:52:
8f:3e:0e:f7:83:a8:f4:a6:e7:17:b4:5e:60:35:36:3f:42:f7:
0e:90:27:23:ec:14:a5:f8:e6:02:c5:24:c9:53:1c:f4:06:13:
f8:8c:05:76:9b:1d:7d:37:61:55:67:7e:01:81:6f:ce:af:35:
e0:2a:7b:e6:e1:f3:97:43:f0:77:a2:14:3a:ea:01:95:54:69:
fa:90:64:3b:46:a9:64:61:b4:2d:6e:8c:c4:76:f1:94:80:46:
64:7b:d0:b8:72:d0:30:58:c6:b9:77:32:3b:d7:c3:20:b7:6f:
69:e3:03:b3:3c:78:fa:aa:19:0c:ed:e2:0c:93:bb:6e:d8:8e:
55:92:2c:28:cc:48:d6:11:dc:55:89:43:b8:f4:56:52:86:db:
69:6f:5e:b2:fc:01:08:91:d5:59:cc:1e:ac:57:fe:19:ed:d9:
b2:d9:39:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6OpKWt5f/XSZQYWZjpESk+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5N2RhNjAwMWIxMjM4MzA2OGZlNzFhMzBmOGNmMjg1YzY2
ODMwZmUwHhcNMjYwNjAzMTgwMDE1WhcNMjYwNjA0MTgwMDE1WjAzMTEwLwYDVQQD
EyhmZGY3NzcyNWNkOWU5ZDJjMjUxMjE5ODczMzA2OWM5NDU2OTA0NjhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnopU0Krv84p86jG+Of9066Psnxuj
bVafdF3o5Y4KRYVUh9RgLQZinHJqyEHYbyLFbaMFFXe1bQz8TqaRgKrR7xOSu5Ik
TbzEhXrWf8rOvhTE/KWCBxXejSNVx7T/nX2Qe4iK+HnPM1kBq3TIWjxpan08ihDE
qQQkEXjr3WKGWt3ysoNJ4hgqPTEb+VhCIrj0zCMsv2VcUEKeTQQcTj2Zi81S3kMZ
9J37ledG4FBbZTgbmln1S0iGz1qWW0rZJIVkO5PO8k5ibtGLx1F4mjcCGtUNwnE4
ejo/E/JOgfvqkgKfYd5oaIElLdEBFnTzUyg3fsqlCNZyaUbe0bgShMkTrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP33dyXNnp0sJRIZhzMGnJRWkEaOMB8GA1UdIwQY
MBaAFIl9pgAbEjgwaP5xow+M8oXGaDD+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVgybUFCc1NPREJvX25HakQ0enloY1pvTVA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni85NmRlYzgtNzcyMC00ZWZjLWJkMzkt
ODRmYWFmMTA1YTk3LzEvaVgybUFCc1NPREJvX25HakQ0enloY1pvTVA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni85NmRlYzgtNzcyMC00ZWZjLWJkMzktODRmYWFmMTA1YTk3
LzEvaVgybUFCc1NPREJvX25HakQ0enloY1pvTVA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGGDTXz99
62+jAfersu5xBuq7uK3Xqxd/1A2CMWea8XJD53tiZj3Q7ZTGOoGJqkNMr+jRKrhx
xg9gAkk1Of+RU2CyyK43jm1twSUwRrPrjK0pkN0sGYKuTHRSjz4O94Oo9KbnF7Re
YDU2P0L3DpAnI+wUpfjmAsUkyVMc9AYT+IwFdpsdfTdhVWd+AYFvzq814Cp75uHz
l0Pwd6IUOuoBlVRp+pBkO0apZGG0LW6MxHbxlIBGZHvQuHLQMFjGuXcyO9fDILdv
aeMDszx4+qoZDO3iDJO7btiOVZIsKMxI1hHcVYlDuPRWUobbaW9esvwBCJHVWcwe
rFf+Ge3Zstk5+w==
-----END CERTIFICATE-----
Generated at Wed Jun 3 20:11:05 2026 by rpki-client