Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft
File: IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft (raw, json)
Hash identifier: Wn52b74RbdK4S364XbaPqtd+BGlBaCYAtNRbwxjWKFg=
Subject key identifier: 32:01:2C:23:3A:E3:BF:11:F1:3D:43:65:FE:B7:B6:C9:73:07:F6:90
Authority key identifier: 21:A0:00:80:CD:2C:B1:BB:07:39:03:B3:2B:25:AD:66:0A:36:64:86
Certificate issuer: /CN=21a00080cd2cb1bb073903b32b25ad660a366486
Certificate serial: 019F3784CE7A8414E0F3617A6DA59F7E89E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft
Manifest number: 186D
Signing time: Mon 06 Jul 2026 13:01:18 +0000
Manifest this update: Mon 06 Jul 2026 13:01:18 +0000
Manifest next update: Tue 07 Jul 2026 13:01:18 +0000
Files and hashes: 1: IaAAgM0ssbsHOQOzKyWtZgo2ZIY.crl (hash: fzGcbesHHi3RD4bflayVnz2evVtIYXMvKBTyq0rqYEo=)
2: VND09LSiHkpjSOuhfnkKXr1ycfk.roa (hash: EuKqokjCANLNooQ3HgGRZe/o74jjpFvSm4Mcmm5yRzA=)
3: a8PSnoMbEUhv4Faq7MVolsfXT_Y.roa (hash: BPdIhgn9ulm4J7RgTCmSDSsMLRstDEKHEvI4iWcZR7s=)
4: u26fRlT_magCXskBSsLbW-Zc4HE.roa (hash: 9IYpduU01RzT9y1ftFaznGYathxT6zXqQawir2B1XDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 13:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:37:84:ce:7a:84:14:e0:f3:61:7a:6d:a5:9f:7e:89:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21a00080cd2cb1bb073903b32b25ad660a366486
Validity
Not Before: Jul 6 13:01:18 2026 GMT
Not After : Jul 7 13:01:18 2026 GMT
Subject: CN=32012c233ae3bf11f13d4365feb7b6c97307f690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6e:4f:a0:eb:f1:8b:bc:8d:4e:cf:f4:26:7a:
d2:fa:9b:9f:8b:89:59:01:51:f0:8b:d3:ea:b4:13:
1a:31:9f:af:d1:f3:85:23:8e:79:ef:2d:27:02:d7:
9e:db:41:8e:8b:1e:50:10:4a:68:da:18:b1:5d:4b:
f3:56:63:5c:8c:0e:10:f1:85:03:ca:72:b3:e7:a3:
71:09:10:24:e4:c9:67:cc:8c:2a:b3:71:a4:68:2d:
45:cb:e5:7c:65:af:66:10:2d:87:b0:2d:dc:7f:2e:
1c:8e:2d:83:17:db:77:b8:2f:8b:c5:2a:63:99:08:
a2:3e:99:0a:99:19:3a:7f:81:60:c8:0e:37:8f:3b:
c6:2a:59:3e:ed:f5:98:07:21:44:f0:f8:4b:37:9c:
3f:8c:e5:4a:71:f2:a1:64:61:96:2f:20:b7:ca:da:
5a:83:4f:db:06:cf:f3:34:61:68:8e:79:f3:15:0f:
34:56:28:c6:eb:06:27:94:38:71:0e:d2:73:e9:1e:
89:39:04:cd:28:fa:52:97:0d:12:47:5a:63:84:c2:
94:e6:45:0f:f6:f6:b3:2c:21:10:f3:b0:5a:17:57:
3f:d0:2d:fd:f4:4b:61:a8:8d:09:66:04:7e:e2:d2:
c1:8b:00:63:8c:09:ec:da:90:3c:17:ef:b5:08:bd:
cf:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:01:2C:23:3A:E3:BF:11:F1:3D:43:65:FE:B7:B6:C9:73:07:F6:90
X509v3 Authority Key Identifier:
keyid:21:A0:00:80:CD:2C:B1:BB:07:39:03:B3:2B:25:AD:66:0A:36:64:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:6d:91:cd:7a:e8:d3:dc:d7:6e:1e:96:69:04:3e:20:a0:92:
5f:a6:99:60:e3:a0:38:8c:fb:b9:ad:6d:24:e7:a6:7c:05:54:
4c:7f:e1:f7:f6:a2:03:51:d0:8e:6a:58:41:87:e0:79:0c:23:
1a:12:19:52:a8:75:b9:22:4e:4a:60:d2:fe:7c:83:90:2d:a3:
0d:96:5d:4f:06:76:87:50:9e:50:1e:51:b6:57:28:a7:7a:89:
bf:e4:42:03:9b:9c:9b:ce:3f:03:c3:8e:73:ab:ff:62:63:57:
5c:21:f7:8a:39:df:b5:72:5c:ae:63:5e:e8:fd:1b:ba:d0:85:
04:52:dd:1c:9d:0b:75:65:23:1b:ff:90:c5:71:59:ac:28:0d:
57:b0:41:1a:33:e0:2e:5d:3d:90:d9:8f:db:e3:67:86:db:34:
68:77:a6:9a:40:d3:d2:08:9d:32:cf:6f:03:47:91:7f:05:ce:
15:43:1f:3d:6e:98:5e:77:ee:d2:5b:84:6a:57:cd:ed:17:f9:
fc:44:bb:eb:f4:76:76:a5:20:ca:b4:87:1a:0f:c0:92:01:e8:
8a:bf:03:d9:6a:df:93:c0:99:46:75:68:08:63:40:e2:63:d4:
5c:6f:14:78:a7:2e:44:6e:79:0b:d6:36:06:3c:a6:03:da:34:
16:df:27:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:06:41 2026 by rpki-client