Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft
File: IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft (raw, json)
Hash identifier: hW/xg+IgCiNrHoNSNH29rTwgkdMC5nlZM2qyemUrLQ4=
Subject key identifier: 94:03:63:98:C2:2D:F4:DB:D4:A3:21:CB:26:F9:45:67:1B:6E:3A:1B
Authority key identifier: 21:A0:00:80:CD:2C:B1:BB:07:39:03:B3:2B:25:AD:66:0A:36:64:86
Certificate issuer: /CN=21a00080cd2cb1bb073903b32b25ad660a366486
Certificate serial: 019E4FC635B31D3C33FAC4FAB60295BC56A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft
Manifest number: 17F5
Signing time: Fri 22 May 2026 13:00:50 +0000
Manifest this update: Fri 22 May 2026 13:00:50 +0000
Manifest next update: Sat 23 May 2026 13:00:50 +0000
Files and hashes: 1: IaAAgM0ssbsHOQOzKyWtZgo2ZIY.crl (hash: jNpLyl/qmREZnNvz2qExt0kTwTMak9wI1cSrasdyIyo=)
2: VND09LSiHkpjSOuhfnkKXr1ycfk.roa (hash: EuKqokjCANLNooQ3HgGRZe/o74jjpFvSm4Mcmm5yRzA=)
3: a8PSnoMbEUhv4Faq7MVolsfXT_Y.roa (hash: BPdIhgn9ulm4J7RgTCmSDSsMLRstDEKHEvI4iWcZR7s=)
4: u26fRlT_magCXskBSsLbW-Zc4HE.roa (hash: 9IYpduU01RzT9y1ftFaznGYathxT6zXqQawir2B1XDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4f:c6:35:b3:1d:3c:33:fa:c4:fa:b6:02:95:bc:56:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21a00080cd2cb1bb073903b32b25ad660a366486
Validity
Not Before: May 22 13:00:50 2026 GMT
Not After : May 23 13:00:50 2026 GMT
Subject: CN=94036398c22df4dbd4a321cb26f945671b6e3a1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:97:52:7e:79:93:5b:b0:0b:f9:fc:86:77:41:
66:92:ca:10:79:e3:9f:45:21:e4:56:76:6c:76:db:
22:a5:f4:0c:e2:98:78:70:7c:f9:10:36:67:98:52:
b3:7d:86:f9:d3:88:64:37:d4:31:37:21:c6:9b:f2:
7f:ce:ae:49:cd:1f:78:ff:bb:60:fb:aa:00:49:2d:
d7:23:7c:30:22:d1:6e:ed:83:d6:c2:dd:0c:9b:33:
b0:6a:49:8a:25:83:5f:89:f1:56:de:97:21:6a:39:
5a:c2:15:48:cd:ae:4d:bd:00:3e:83:58:9e:1e:4d:
13:cf:48:e6:0e:c5:31:de:a6:36:20:3c:f6:8c:b8:
df:aa:fa:b1:79:c2:05:b7:e4:07:d8:58:14:03:3b:
30:06:d0:99:41:e3:63:38:1d:17:cb:13:77:07:30:
9b:4d:61:d1:a8:6f:c5:5a:09:02:b3:09:1b:00:81:
58:f7:98:82:90:b2:ce:ba:4d:7a:60:d3:de:eb:59:
aa:1a:9f:66:81:cc:b1:91:b1:98:11:db:5d:ef:9b:
3d:a8:3d:54:d5:b2:16:49:f2:ee:64:37:45:59:51:
05:1c:5b:8c:dc:c1:88:ac:0e:7d:01:f6:6b:44:58:
45:e7:81:5d:df:99:0a:15:1f:a7:01:f2:f7:cb:77:
40:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:03:63:98:C2:2D:F4:DB:D4:A3:21:CB:26:F9:45:67:1B:6E:3A:1B
X509v3 Authority Key Identifier:
keyid:21:A0:00:80:CD:2C:B1:BB:07:39:03:B3:2B:25:AD:66:0A:36:64:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:a6:77:7b:2c:28:0d:28:c2:f9:e6:be:a0:99:bc:4a:8c:35:
5a:de:95:74:53:09:b0:07:44:c6:1c:69:91:c6:61:e7:45:d9:
86:54:d8:ee:d8:13:2e:36:50:eb:ec:be:7b:d3:28:b7:c4:84:
db:6d:f1:0a:0e:be:34:50:84:92:88:e4:45:33:da:a9:98:2a:
57:86:37:2c:c6:7d:e8:f1:a9:71:d4:ab:a2:cb:a1:72:be:b8:
c6:8b:b7:14:d2:37:c3:58:7c:47:4f:3b:97:88:f5:27:d1:56:
e2:c3:40:79:f5:76:c8:17:db:e9:06:0d:66:6b:44:3f:07:28:
3e:4d:f2:4d:10:75:99:a9:50:e5:17:fb:60:ab:5d:fd:ef:6d:
a0:7e:26:9c:2f:c3:a8:c8:98:7c:8b:42:ef:10:7b:77:1b:fe:
25:a6:ad:ba:50:49:de:22:db:30:e9:2d:fe:9a:f7:55:72:0b:
01:d3:19:16:f7:a8:78:e5:05:ba:af:a4:a2:17:6a:7c:a8:55:
5e:3c:8b:69:02:a8:3f:b0:03:d2:cb:72:94:50:2c:30:87:cd:
7c:be:22:06:e9:85:4d:f6:01:fe:7a:87:64:29:bb:d3:f9:de:
15:ac:22:ed:f6:88:9c:57:21:0e:21:88:b1:61:a0:9e:22:e0:
2c:b9:27:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 15:07:32 2026 by rpki-client