Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/281dfb-3293-4bab-ba22-1becb5dcd7aa/1/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.mft
File: Iw0xH8GUY_3TCt7MkXtfAph0G0Q.mft (raw, json)
Hash identifier: IsjztVzLpUz+VCszdtydyVaziOHxlt0eOmqdKbo1DAc=
Subject key identifier: 7C:7F:13:13:CD:E7:90:06:D3:66:CE:27:61:33:23:2C:8F:B1:BB:09
Authority key identifier: 23:0D:31:1F:C1:94:63:FD:D3:0A:DE:CC:91:7B:5F:02:98:74:1B:44
Certificate issuer: /CN=230d311fc19463fdd30adecc917b5f0298741b44
Certificate serial: 019E928265EA07CA9938B2ACBCFA2D14DBC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/281dfb-3293-4bab-ba22-1becb5dcd7aa/1/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.mft
Manifest number: 135F
Signing time: Thu 04 Jun 2026 12:01:19 +0000
Manifest this update: Thu 04 Jun 2026 12:01:19 +0000
Manifest next update: Fri 05 Jun 2026 12:01:19 +0000
Files and hashes: 1: 3kj2IZUmhg4c3fn_vDNshjS1bYM.roa (hash: F1j+Rw7AK0w/RfaxR+vC5zwL/WwgyQ05RgO+QAvekpY=)
2: Iw0xH8GUY_3TCt7MkXtfAph0G0Q.crl (hash: R8sW31pQ3wYnzxR3bcSyZ6BVmgF+vWrZbG2ERbp6AKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/281dfb-3293-4bab-ba22-1becb5dcd7aa/1/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/281dfb-3293-4bab-ba22-1becb5dcd7aa/1/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 07:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:92:82:65:ea:07:ca:99:38:b2:ac:bc:fa:2d:14:db:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=230d311fc19463fdd30adecc917b5f0298741b44
Validity
Not Before: Jun 4 12:01:19 2026 GMT
Not After : Jun 5 12:01:19 2026 GMT
Subject: CN=7c7f1313cde79006d366ce276133232c8fb1bb09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:76:a9:6c:1f:8a:d2:3c:bd:df:5e:87:b7:91:
5c:1f:90:2b:fc:1b:ea:95:50:eb:4c:14:ad:94:2d:
3a:ac:76:85:36:f4:7c:3b:26:58:ed:35:45:78:5b:
52:a1:da:45:05:2c:74:ac:f4:87:9b:86:95:47:62:
54:15:de:85:4e:d5:ce:07:c3:cb:c1:1d:e9:f4:bc:
21:b9:86:0d:95:c7:32:6c:0d:e4:0f:67:a0:b5:7d:
5b:5f:bf:a6:43:9a:a6:be:49:36:7d:b4:89:66:2c:
99:5e:87:b1:f5:a0:62:1e:d9:6b:82:6b:fe:43:0f:
8e:35:c4:28:6c:e3:94:9f:a8:eb:46:e2:03:58:87:
b3:a3:5b:8a:2d:0f:f0:a2:ee:36:f2:08:83:bd:a3:
db:c3:3a:69:7d:96:b3:75:e8:db:fa:48:3d:97:51:
c2:0c:cb:c9:f5:b4:25:28:a6:14:86:dc:bd:75:70:
26:7b:b2:8c:ef:08:d0:43:d9:77:93:f7:cb:c0:e8:
e1:4c:20:a7:93:b4:51:a7:60:12:51:6a:c1:b2:22:
e3:f0:28:28:63:bb:54:6a:b7:65:6d:02:c6:2e:be:
ca:b0:8f:02:9b:80:da:61:16:f7:9d:8f:b2:50:f9:
15:4e:57:46:19:39:11:f0:79:46:21:dd:79:3b:79:
c8:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:7F:13:13:CD:E7:90:06:D3:66:CE:27:61:33:23:2C:8F:B1:BB:09
X509v3 Authority Key Identifier:
keyid:23:0D:31:1F:C1:94:63:FD:D3:0A:DE:CC:91:7B:5F:02:98:74:1B:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/281dfb-3293-4bab-ba22-1becb5dcd7aa/1/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/281dfb-3293-4bab-ba22-1becb5dcd7aa/1/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:bd:97:ae:a1:26:bc:cb:e9:f0:be:96:f0:ae:b3:96:22:6c:
07:38:bb:93:8b:11:b7:7e:47:dc:34:80:67:28:5c:c5:18:02:
f6:cf:77:56:6e:82:72:b3:5c:29:05:61:2c:dd:cd:68:b8:66:
df:16:23:19:75:a3:ae:2f:f6:b2:23:54:3d:0a:25:fc:af:13:
17:d2:af:f4:01:28:af:e9:a2:17:3e:e7:aa:08:d8:41:eb:ad:
31:cc:b3:4b:2f:c2:36:3c:c9:41:a0:9f:aa:e3:e2:54:89:e7:
c5:a2:27:4e:98:92:60:b7:f0:69:4d:78:5f:a7:27:73:bb:14:
64:76:32:9e:cb:9b:90:b0:17:e6:29:d8:03:49:fb:dc:7a:6b:
13:2d:78:28:ba:42:bb:d6:1c:f9:c8:d3:3d:f0:98:01:55:19:
4a:4a:34:8e:db:cf:35:48:75:8d:21:5f:95:5f:44:3a:6a:0e:
a3:7b:f7:2f:46:cc:1f:73:14:1b:d8:cd:fd:c1:be:3d:e0:93:
3e:a9:a2:36:89:e9:bf:59:de:8b:5b:2d:6f:c8:32:96:92:6a:
53:db:cd:1b:56:81:e8:44:5d:f1:7a:83:65:c3:2b:51:f0:40:
2d:ea:41:80:b0:48:86:0f:aa:d1:37:4d:73:2a:ac:29:e7:f6:
e1:bf:aa:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 14:15:58 2026 by rpki-client