Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/ido1Hh4yCS63YfLI6ix1oZcALUs.mft
File: ido1Hh4yCS63YfLI6ix1oZcALUs.mft (raw, json)
Hash identifier: XArVn7a0Rtr5ZwSGOvKI8RlQKTE+1n1xdSlP6tYsQAU=
Subject key identifier: 06:CB:55:B6:A6:2B:91:3C:E9:5C:33:98:6A:AA:49:AA:81:1E:56:64
Authority key identifier: 89:DA:35:1E:1E:32:09:2E:B7:61:F2:C8:EA:2C:75:A1:97:00:2D:4B
Certificate issuer: /CN=89da351e1e32092eb761f2c8ea2c75a197002d4b
Certificate serial: 019F85D6A4EC911B209C4F8BE9F3A4F81DC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ido1Hh4yCS63YfLI6ix1oZcALUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/ido1Hh4yCS63YfLI6ix1oZcALUs.mft
Manifest number: 3A
Signing time: Tue 21 Jul 2026 18:01:04 +0000
Manifest this update: Tue 21 Jul 2026 18:01:04 +0000
Manifest next update: Wed 22 Jul 2026 18:01:04 +0000
Files and hashes: 1: TTj59N_k0baRYBbpMvwMER52UMA.roa (hash: Qb/eGpeDdebAZbVO1qCzlupreg9p5z6Eu1FINEUZOCw=)
2: ido1Hh4yCS63YfLI6ix1oZcALUs.crl (hash: RJivMUfoYZY5n2sXFJYySJZSpRZXdgJGZWOM9yfRc54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/ido1Hh4yCS63YfLI6ix1oZcALUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/ido1Hh4yCS63YfLI6ix1oZcALUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ido1Hh4yCS63YfLI6ix1oZcALUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 18:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:d6:a4:ec:91:1b:20:9c:4f:8b:e9:f3:a4:f8:1d:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89da351e1e32092eb761f2c8ea2c75a197002d4b
Validity
Not Before: Jul 21 18:01:04 2026 GMT
Not After : Jul 22 18:01:04 2026 GMT
Subject: CN=06cb55b6a62b913ce95c33986aaa49aa811e5664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:85:c1:0c:ee:9c:e8:1a:7e:39:1d:e5:ed:2d:
e6:a6:1e:86:ce:db:52:22:8e:e2:a4:fc:47:01:21:
16:62:88:ab:48:d6:83:b3:40:21:4b:b3:5c:73:b6:
a0:14:ff:41:28:fd:cf:c8:d3:e2:30:a0:a4:4c:aa:
c6:51:2f:47:6c:1f:81:8d:c5:f0:ac:cb:96:d0:92:
d2:a9:5b:c5:b1:b5:69:4b:88:a6:40:4c:0e:fe:03:
e6:76:47:05:d5:54:c4:5f:2b:2c:7a:e9:80:04:49:
0b:14:d3:b5:3a:d3:e6:80:85:b3:10:00:39:a9:af:
fa:fc:c9:80:8a:9b:d9:e6:e7:44:44:49:e2:50:5a:
6c:17:33:a0:06:b3:0f:a2:3b:2f:95:d9:75:aa:8e:
a6:c4:d1:1a:b2:db:11:12:ae:4d:f7:95:ea:82:e1:
08:a5:bf:94:33:c3:55:eb:20:37:7a:53:8d:1d:4b:
37:52:a1:99:0a:f5:21:d3:2d:51:59:d7:b2:d3:68:
84:62:ab:74:be:74:70:6f:d1:22:b0:9c:3a:b5:2a:
6a:b9:ab:d4:c0:23:e5:4c:46:44:61:ab:31:87:ab:
cf:23:b2:52:33:0e:1a:90:94:e6:f9:bc:a2:04:84:
a7:f0:45:62:20:23:14:7e:57:2b:ab:32:6b:4f:d8:
0c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:CB:55:B6:A6:2B:91:3C:E9:5C:33:98:6A:AA:49:AA:81:1E:56:64
X509v3 Authority Key Identifier:
keyid:89:DA:35:1E:1E:32:09:2E:B7:61:F2:C8:EA:2C:75:A1:97:00:2D:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ido1Hh4yCS63YfLI6ix1oZcALUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/ido1Hh4yCS63YfLI6ix1oZcALUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/ido1Hh4yCS63YfLI6ix1oZcALUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:a6:d4:b9:c3:55:02:ac:d9:a9:3d:56:f7:ab:51:79:2b:a5:
c0:e5:13:10:cd:7e:7e:e4:7e:7d:bc:c9:25:f5:7b:73:50:0d:
6d:df:4a:b7:61:df:09:f8:ff:09:d7:cb:12:11:ee:8c:35:7c:
a1:b4:0d:ab:cb:3b:5f:b4:13:b7:3b:4e:76:8d:be:83:ca:a6:
85:2b:f4:3c:47:77:a5:93:31:73:dd:3f:76:38:dd:00:28:5d:
81:b3:27:68:be:35:31:53:ac:de:02:be:55:97:c8:aa:59:a4:
e1:e2:19:77:0b:b4:a9:0d:5e:37:80:be:ee:c6:0e:3b:ba:db:
ca:1f:68:bc:d9:b7:65:6c:9c:f4:52:5c:ba:67:bb:93:a1:f1:
a7:f4:75:47:64:1d:6d:a8:b2:dc:60:8d:bf:ec:cc:ee:81:ea:
8f:7f:73:a0:b6:91:0f:3f:c7:c8:5c:d3:06:dc:f3:81:fc:b9:
c2:38:c4:be:18:07:2a:80:15:30:2c:de:82:d7:31:de:32:8f:
25:7d:fe:00:d7:d3:52:ab:3e:41:43:17:bf:25:24:5a:44:21:
d4:40:a9:af:8e:49:49:40:11:aa:db:8d:cc:db:67:5a:ca:d7:
15:9c:ae:98:2f:3e:45:c3:ca:37:a9:69:8e:ae:d2:e3:af:44:
57:ea:3f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 01:30:41 2026 by rpki-client