Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.mft
File: IUblYKP1ysfGT-DxO-Zj2UyHFFM.mft (raw, json)
Hash identifier: v9Ni6BDMr6MmV0Rn/PvZHtciGtHQGy3mnoFTQ3tR2kA=
Subject key identifier: B7:4D:30:31:9D:E9:BB:43:CD:AC:51:4C:C6:F4:3A:AC:79:1F:40:1D
Authority key identifier: 21:46:E5:60:A3:F5:CA:C7:C6:4F:E0:F1:3B:E6:63:D9:4C:87:14:53
Certificate issuer: /CN=2146e560a3f5cac7c64fe0f13be663d94c871453
Certificate serial: 019EB80E6D47EA25C8EBA4E1DB7275B2FDF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IUblYKP1ysfGT-DxO-Zj2UyHFFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.mft
Manifest number: 07DB
Signing time: Thu 11 Jun 2026 19:00:13 +0000
Manifest this update: Thu 11 Jun 2026 19:00:13 +0000
Manifest next update: Fri 12 Jun 2026 19:00:13 +0000
Files and hashes: 1: IUblYKP1ysfGT-DxO-Zj2UyHFFM.crl (hash: zmMqrF1/gxL71BFXutJhK7AO/pFax1ksOI4bku3gsE8=)
2: LjoyTAIqIdVonXqWj6vk4FoukK0.roa (hash: bQBFj6QQOo1AQBEY/tE2iTw4IsOMKBpMDv9YhAGGsps=)
3: PAUyEeyz0ynlGNIPQlDkGnYP9qw.roa (hash: rPWU+wKJ+ccuMgvRWcLsdSjoKQhoTdU4QLcfL/aRiOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IUblYKP1ysfGT-DxO-Zj2UyHFFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 19:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:0e:6d:47:ea:25:c8:eb:a4:e1:db:72:75:b2:fd:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2146e560a3f5cac7c64fe0f13be663d94c871453
Validity
Not Before: Jun 11 19:00:13 2026 GMT
Not After : Jun 12 19:00:13 2026 GMT
Subject: CN=b74d30319de9bb43cdac514cc6f43aac791f401d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cd:7e:d1:86:cd:8e:16:47:79:17:59:68:e7:
08:d8:f0:68:63:21:54:c3:f6:e8:8c:25:46:9c:6e:
98:2b:b4:e5:f9:55:53:3e:52:ac:1f:74:c1:1c:43:
e4:fb:f3:a1:eb:3f:7e:95:0f:b7:1c:ae:72:be:1b:
78:a6:f6:85:1f:0f:c0:43:a6:58:3c:0c:aa:65:23:
b8:f5:36:63:c2:b6:f6:14:ca:c5:39:bf:a7:1f:d7:
03:6d:64:9e:f5:a9:d2:42:b3:f2:62:53:01:e6:06:
fe:7f:c3:14:be:2b:b2:bc:fb:86:d6:ed:fe:cb:76:
df:d2:7e:0f:22:68:68:73:cd:21:b6:68:7f:fd:4a:
b4:45:1f:37:6f:98:92:ef:21:4a:f2:b1:75:ea:01:
e3:6c:33:2f:f4:5b:92:dc:d7:01:cf:97:04:23:c9:
06:10:84:74:b0:c2:34:4c:70:9d:c8:59:b1:d1:f1:
b8:68:8f:04:1f:28:d2:4f:7a:03:d7:14:10:1c:a6:
06:e1:eb:63:08:b5:46:f1:37:59:06:f5:d1:8e:b2:
d6:a0:c6:37:6f:e6:4d:ca:c8:36:12:ca:3f:12:63:
60:e7:45:69:20:4d:13:98:37:9f:4e:9c:33:37:cb:
24:5c:56:0c:08:50:12:fc:2d:d2:05:64:4c:64:f1:
78:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:4D:30:31:9D:E9:BB:43:CD:AC:51:4C:C6:F4:3A:AC:79:1F:40:1D
X509v3 Authority Key Identifier:
keyid:21:46:E5:60:A3:F5:CA:C7:C6:4F:E0:F1:3B:E6:63:D9:4C:87:14:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IUblYKP1ysfGT-DxO-Zj2UyHFFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:0c:5d:bb:6d:88:87:b2:04:39:66:8e:8d:4a:6f:ff:6a:5b:
1b:ff:fa:66:18:89:cf:98:25:25:d4:08:bb:04:a9:aa:25:74:
99:ec:c5:94:fe:07:60:6a:6d:84:34:1c:f3:93:0c:a8:dc:1f:
c5:11:a3:b9:85:35:fd:12:72:d4:3a:95:ce:6f:84:39:b7:02:
db:19:14:69:90:69:6e:67:2e:97:05:38:04:08:e9:b8:bf:87:
cc:1b:21:43:b3:82:89:4c:50:6b:2f:45:1d:80:3e:db:76:77:
c6:a5:6f:ef:8c:21:99:11:65:33:fb:da:9c:85:17:72:d4:64:
19:83:f4:cc:ac:be:9a:8d:af:35:f3:29:b5:3c:66:78:d8:c8:
b0:ae:e9:d0:80:c2:31:18:a1:da:92:09:38:3a:34:7d:2f:74:
a4:0a:c1:8d:49:f8:a0:d4:8b:bb:a8:f5:35:c4:1b:08:72:16:
04:56:ce:b9:75:92:24:26:ce:a6:75:96:fc:e2:ae:f6:85:ec:
70:09:0b:f4:e7:5c:94:d0:b6:53:1a:7a:51:d6:ac:6a:a8:7d:
04:9e:f7:61:4c:eb:09:c1:fd:62:ad:dd:3f:71:6a:d3:61:36:
0e:02:52:a6:56:18:f5:b2:ba:7f:4a:75:3c:64:83:5a:7d:da:
ec:5c:8b:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:56:02 2026 by rpki-client