
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.mft
File: Iv_HI9FXk0BDE0zu0DQkqUKFnYM.mft (raw, json)
Hash identifier: 6Guu4IUvlPsAFJyQogj0RSXf6UOPM8c2PACNa7TrL8Q=
Subject key identifier: 5A:8A:C5:F8:16:06:CE:91:A6:5B:34:8D:FE:DC:B1:8B:71:DC:42:D7
Authority key identifier: 22:FF:C7:23:D1:57:93:40:43:13:4C:EE:D0:34:24:A9:42:85:9D:83
Certificate issuer: /CN=22ffc723d157934043134ceed03424a942859d83
Certificate serial: 01A0016F686FDAF9043668FE8DC600CC7210
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.mft
Manifest number: 7A
Signing time: Fri 14 Aug 2026 18:01:13 +0000
Manifest this update: Fri 14 Aug 2026 18:01:13 +0000
Manifest next update: Sat 15 Aug 2026 18:01:13 +0000
Files and hashes: 1: 1-ztMd_gBTxeC8uA2Q0YdYpsYMeo.roa (hash: WXcCQ4Yl4FGns7m2jmJSD78rirZ3yMRIuiQENmN/+zw=)
2: 2LF9uim0YdDpGegCa61UauWuWfA.roa (hash: EJUG4c12axqY7VnRB7LGjwYbiGZwDBmNfyhI3v0wbAg=)
3: Iv_HI9FXk0BDE0zu0DQkqUKFnYM.crl (hash: 94Q47Ll/Z9AsUvZnJ9HbWhA11vdKcmH1PmfqPgTG15I=)
4: OWW7Tr0ddkzX8cpnriB4IyyEFmI.roa (hash: 65mD2shWItoOmc6tgeQNjaLe4tC+absIZWq2fClFhYk=)
5: _axzcFhLDGGR4sv8QLqgaVPeZLg.roa (hash: 0ELmAmWAy/TUmV7JbvaRF67zOVFNgHGzya+qArU3iX4=)
6: d9UMor1VyAKI95wbo0VML8JqXA0.roa (hash: Ue762QdnWxcT+gtVI8j0lIqvVnpOu+dK95cax6FcHFw=)
7: e5ECE1RgIH1_tNwoNA7WBLrErgk.roa (hash: YkBX43vtYMPV17x/YHA+YGWAAvLIc2O3OMYxK/YMeuw=)
8: jcSGVISkjZOB8Wm3cMTPdYzI6qg.roa (hash: cGm7WweVD+uApG+/ivyi4OOmekGxuRqlS+jllKuOX7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6f:68:6f:da:f9:04:36:68:fe:8d:c6:00:cc:72:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22ffc723d157934043134ceed03424a942859d83
Validity
Not Before: Aug 14 18:01:13 2026 GMT
Not After : Aug 15 18:01:13 2026 GMT
Subject: CN=5a8ac5f81606ce91a65b348dfedcb18b71dc42d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ba:18:2f:dd:54:81:da:07:33:59:de:87:db:
62:6d:8e:f0:c6:49:12:af:06:21:29:51:2d:6c:cf:
04:46:ee:1d:d6:2c:4b:11:fb:c4:cf:28:57:69:f6:
89:9d:92:d1:94:57:5c:80:7b:e0:4f:48:91:14:8a:
b4:5f:48:a2:3b:9b:9a:f3:87:23:5a:98:19:5f:44:
5b:44:d0:59:cf:82:79:e1:c3:9e:c9:19:5b:c2:7a:
6c:6b:e7:a2:d9:c3:b3:9e:b3:70:61:d1:20:45:29:
3c:be:03:cb:75:03:6a:14:de:2f:cd:93:d9:7b:7e:
fc:12:ce:bc:23:06:df:db:d0:47:55:f2:91:d8:53:
ef:97:6c:31:dd:4c:4f:9f:f1:10:c9:0b:00:7c:dc:
1d:c1:b0:66:48:04:15:ab:0e:8c:df:00:a3:c8:28:
51:91:48:f6:47:44:be:c0:f8:5d:1d:f1:18:a8:23:
e5:ae:b1:44:af:99:58:94:93:e6:78:15:7e:d3:e2:
48:0c:ee:76:af:01:59:01:47:3a:c6:9c:84:c5:1d:
c0:dc:0c:17:0f:27:70:7f:5f:d6:75:b6:d6:e8:27:
a6:4c:7d:e8:dd:68:19:8e:59:5d:b0:89:81:0e:f7:
c7:73:07:42:1d:6c:17:a3:6d:9f:35:7f:ce:4c:d5:
2e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:8A:C5:F8:16:06:CE:91:A6:5B:34:8D:FE:DC:B1:8B:71:DC:42:D7
X509v3 Authority Key Identifier:
keyid:22:FF:C7:23:D1:57:93:40:43:13:4C:EE:D0:34:24:A9:42:85:9D:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:37:05:4b:e8:d2:0a:11:2f:d3:49:c3:15:93:f3:95:e7:bb:
57:de:b4:cc:6e:2d:19:85:e5:9b:ad:e3:6a:16:95:7e:38:7d:
ef:d5:2f:93:72:9f:2c:06:1d:1d:db:b3:95:d0:61:31:ce:0f:
54:84:68:c1:f0:2f:e9:d5:fb:a9:ea:e8:07:1b:14:01:58:34:
3d:ea:b2:f8:4f:33:85:c4:3d:a8:ef:5e:27:3a:a5:b4:8e:4e:
b9:97:54:12:a3:c7:65:3d:86:bb:9f:93:30:83:e6:37:52:a9:
ef:f8:31:97:32:aa:80:d2:39:90:cd:25:12:37:7d:88:08:66:
09:a0:a6:66:c9:e0:00:81:70:6e:a0:80:5b:b6:15:2e:54:db:
64:21:60:a1:2b:ff:6e:41:68:14:7b:7a:2c:cb:17:c6:d9:5c:
01:31:ce:99:82:00:85:f7:e9:f0:b1:3a:bd:1f:ed:a4:27:a0:
7c:b6:68:f4:2a:06:eb:f6:9b:90:d1:64:49:4c:b5:9c:9e:cb:
57:50:b3:67:e1:7a:ba:8d:4e:44:15:77:09:c4:65:76:78:19:
20:aa:ab:92:d4:cb:97:3e:e7:4c:28:62:99:3e:04:c3:c5:cd:
2b:0d:68:42:87:8e:64:25:de:1e:e7:c0:e0:cf:e5:14:d0:76:
81:ff:a3:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:26:19 2026 by rpki-client