
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/411c4b-156a-4cc0-a34e-ec19cd38f245/1/iQxJg-4YvF4CX6r94xxkE0pGIKw.mft
File: iQxJg-4YvF4CX6r94xxkE0pGIKw.mft (raw, json)
Hash identifier: +JrUV81RD47yQvPGO7MONGHRg2nXFhQYztRzifvs5Kc=
Subject key identifier: 83:3F:14:BD:AC:AF:F9:29:90:6A:41:FF:14:28:DE:EC:82:6F:67:51
Authority key identifier: 89:0C:49:83:EE:18:BC:5E:02:5F:AA:FD:E3:1C:64:13:4A:46:20:AC
Certificate issuer: /CN=890c4983ee18bc5e025faafde31c64134a4620ac
Certificate serial: 019EB921DF225163AE568617237F1795C033
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQxJg-4YvF4CX6r94xxkE0pGIKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/411c4b-156a-4cc0-a34e-ec19cd38f245/1/iQxJg-4YvF4CX6r94xxkE0pGIKw.mft
Manifest number: 1956
Signing time: Fri 12 Jun 2026 00:01:05 +0000
Manifest this update: Fri 12 Jun 2026 00:01:05 +0000
Manifest next update: Sat 13 Jun 2026 00:01:05 +0000
Files and hashes: 1: iQxJg-4YvF4CX6r94xxkE0pGIKw.crl (hash: d1EaYFa0Uk3Ebc5G/aej2buHh5YbwRNZkSGN/Z9H7SI=)
2: n90xmr_CM6O4WDRtYmfgJfxxrvA.roa (hash: lPtn9C/LBef80I4Gcyice5R+gf5Md1ot7qq45wVZu/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/411c4b-156a-4cc0-a34e-ec19cd38f245/1/iQxJg-4YvF4CX6r94xxkE0pGIKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/411c4b-156a-4cc0-a34e-ec19cd38f245/1/iQxJg-4YvF4CX6r94xxkE0pGIKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iQxJg-4YvF4CX6r94xxkE0pGIKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 00:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:21:df:22:51:63:ae:56:86:17:23:7f:17:95:c0:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=890c4983ee18bc5e025faafde31c64134a4620ac
Validity
Not Before: Jun 12 00:01:05 2026 GMT
Not After : Jun 13 00:01:05 2026 GMT
Subject: CN=833f14bdacaff929906a41ff1428deec826f6751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:02:cf:b4:45:bf:39:af:fd:20:84:41:c3:7b:
7b:dd:75:54:93:d3:06:85:75:17:f2:fd:88:69:33:
dd:6d:9d:36:76:af:6c:bc:44:01:67:ee:cb:ef:7d:
0a:5f:6c:32:3f:c2:fb:c7:06:e5:70:d4:b6:8c:2f:
b6:e5:7c:05:ef:e7:e2:0c:f8:c5:e4:7c:fc:b0:13:
73:ce:db:31:1c:98:71:5e:1b:c2:bf:3f:6b:50:24:
ac:81:46:91:95:e2:72:10:5d:1a:ec:16:8b:26:ea:
ac:8c:eb:74:3a:44:fe:aa:de:ed:75:d6:e9:92:b2:
b0:56:35:4b:29:f8:f1:2c:5e:ce:5f:5d:2f:a9:c4:
fb:d9:7d:5e:84:66:d3:d7:02:74:95:7c:af:3b:b0:
ef:02:a7:d8:a1:ea:eb:83:76:9a:40:1d:c0:59:d3:
41:60:9f:8d:c0:18:52:ed:34:64:98:d2:7e:79:f3:
f9:70:2d:3c:9a:e7:fe:39:17:cc:8c:32:2a:65:68:
18:18:e7:b2:b4:96:92:5f:7a:68:14:fd:3f:42:22:
12:dc:ae:cb:46:26:41:46:97:87:6d:c2:4d:b9:2c:
be:f7:b8:3e:2d:a5:6a:c0:c3:e5:8f:5c:d3:10:aa:
2c:13:22:08:41:00:7a:13:9a:3e:4e:0b:fd:73:45:
89:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:3F:14:BD:AC:AF:F9:29:90:6A:41:FF:14:28:DE:EC:82:6F:67:51
X509v3 Authority Key Identifier:
keyid:89:0C:49:83:EE:18:BC:5E:02:5F:AA:FD:E3:1C:64:13:4A:46:20:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQxJg-4YvF4CX6r94xxkE0pGIKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/411c4b-156a-4cc0-a34e-ec19cd38f245/1/iQxJg-4YvF4CX6r94xxkE0pGIKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/411c4b-156a-4cc0-a34e-ec19cd38f245/1/iQxJg-4YvF4CX6r94xxkE0pGIKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:5b:1a:3b:38:e5:8c:cd:1b:28:b4:b1:d4:f0:62:fc:25:13:
5f:f8:3f:48:fc:91:1b:50:85:f6:7c:4e:36:05:3e:a1:8e:a2:
29:db:ce:e7:aa:1f:97:07:8f:ab:4f:7c:86:1d:d4:fe:45:bd:
df:06:aa:00:36:71:53:90:29:94:06:ae:5f:6e:a1:2e:06:78:
7e:a6:0e:4d:7b:39:ee:2d:0b:3e:b1:3d:8f:3c:f8:ca:76:4c:
7d:b1:ea:28:c0:3d:b7:82:b6:20:72:29:b0:c6:a1:5b:71:37:
15:72:fb:10:93:9f:7e:6a:31:9c:47:35:07:87:c8:2a:63:ef:
d0:48:33:28:60:5f:f0:b5:22:5d:b8:70:b1:de:eb:84:ce:6d:
63:8e:24:7e:c5:f1:c0:82:9e:ca:e9:09:92:a9:62:0c:34:67:
b4:f3:57:b9:4f:7f:d9:88:63:54:05:18:af:69:cf:11:79:0f:
fd:41:e9:a2:24:be:99:2c:d9:84:5f:b4:a7:cb:59:4f:05:95:
09:90:3e:49:23:c0:84:58:34:fd:57:38:57:65:19:31:0b:85:
92:60:bc:23:98:bf:c7:d2:8d:f0:49:7e:51:d1:0d:0f:28:fe:
fd:85:16:7f:71:19:b9:66:41:eb:9e:03:76:09:5c:f3:53:b9:
d9:bd:c6:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 10:12:50 2026 by rpki-client