Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft
File: I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft (raw, json)
Hash identifier: rT3Y63KRswtXAsI56D6XmD/pmXqR2pS/gD+ocDzOCIQ=
Subject key identifier: 3C:47:5D:F2:68:BF:9A:BC:9E:BE:4A:62:5D:33:0E:B5:33:4D:6A:C3
Authority key identifier: 23:89:34:1E:10:E6:B0:21:FA:84:7F:55:5E:56:03:DE:F8:5D:2C:2B
Certificate issuer: /CN=2389341e10e6b021fa847f555e5603def85d2c2b
Certificate serial: 019F860D7DCD6772752AB853496CB44D1FF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I4k0HhDmsCH6hH9VXlYD3vhdLCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft
Manifest number: 0D87
Signing time: Tue 21 Jul 2026 19:00:58 +0000
Manifest this update: Tue 21 Jul 2026 19:00:58 +0000
Manifest next update: Wed 22 Jul 2026 19:00:58 +0000
Files and hashes: 1: I4k0HhDmsCH6hH9VXlYD3vhdLCs.crl (hash: UgdJKlQxmchRPRQ2VahDVnbPcrAEpEzFR9Zg4qj8XHo=)
2: ame8Z_daacjlEpmtE4K5w-dphW4.roa (hash: +YVtLUb/550grkiEIWmP1qcdaH2cQJ56+a6ZIvzeo2Y=)
3: b336X3WeMeMqlclahAX3Nlijuow.roa (hash: qBZyaLyDbfB2OL3m5O3Gqj9tW/vJBs1SdtUmTpwnruE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/I4k0HhDmsCH6hH9VXlYD3vhdLCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:0d:7d:cd:67:72:75:2a:b8:53:49:6c:b4:4d:1f:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2389341e10e6b021fa847f555e5603def85d2c2b
Validity
Not Before: Jul 21 19:00:58 2026 GMT
Not After : Jul 22 19:00:58 2026 GMT
Subject: CN=3c475df268bf9abc9ebe4a625d330eb5334d6ac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:14:be:6a:f5:08:d3:be:2e:24:d0:3c:9f:39:
d5:7d:fb:8a:8a:15:2d:9f:dc:99:65:f9:f6:34:65:
d3:6d:e2:91:07:ce:0f:7d:07:0b:6c:e2:8c:62:aa:
4b:be:6e:f7:ac:a3:f0:22:17:8e:22:50:7c:b7:3f:
1d:04:05:06:c9:cf:aa:bf:a6:b7:0b:35:3b:51:44:
33:c5:be:40:7f:d8:53:41:c8:f5:73:da:4e:aa:c1:
6f:fe:b2:4b:9c:c6:8c:bb:31:04:0c:6d:e6:77:e6:
16:11:09:c9:81:22:fc:0c:91:47:87:0c:d5:bd:0b:
58:ef:58:57:1c:88:08:01:2f:d6:85:2a:85:14:0a:
06:cd:d5:19:3d:6d:a8:16:6f:90:25:9a:62:bb:58:
b5:4d:ab:f6:03:dd:f7:5f:f4:bc:a8:db:a3:0a:ea:
43:a7:f5:4a:4d:b2:e1:da:4c:7a:a9:94:c5:61:1e:
6b:00:34:6c:aa:87:89:29:8a:99:5a:3c:35:ab:b6:
f2:fa:2c:8f:a0:6a:b8:57:c1:ef:8a:00:8a:c7:91:
38:97:a5:79:98:01:df:6c:b9:87:af:bd:ec:62:a0:
41:4d:57:7a:38:c0:e8:d7:48:b5:83:8f:89:b5:9c:
02:c6:90:20:bb:c9:e8:d9:4c:8b:65:0f:2d:7e:5c:
3a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:47:5D:F2:68:BF:9A:BC:9E:BE:4A:62:5D:33:0E:B5:33:4D:6A:C3
X509v3 Authority Key Identifier:
keyid:23:89:34:1E:10:E6:B0:21:FA:84:7F:55:5E:56:03:DE:F8:5D:2C:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I4k0HhDmsCH6hH9VXlYD3vhdLCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:35:ba:47:c6:14:1e:4d:dc:69:43:88:d2:96:56:66:c7:f2:
5c:43:1f:e5:75:8d:fd:a4:e6:40:a1:02:5c:38:43:99:4b:01:
8e:28:cd:3d:bc:13:5b:44:f2:27:86:3c:54:85:b3:c0:ed:6b:
f2:68:52:a6:c8:d5:6d:22:b5:a9:6c:bd:78:9c:e3:d0:65:a8:
b9:4d:f3:a0:4f:ca:b3:6d:b7:be:0d:0e:b9:c4:60:bc:c4:eb:
5f:b7:eb:b5:12:d9:74:51:b2:4a:65:d5:b8:85:f2:7b:30:77:
8e:4b:2b:ac:a9:74:9a:ca:8a:a5:2d:3a:ff:d1:52:75:23:e0:
fc:dd:db:d9:58:fd:62:c2:e9:ed:1f:83:e4:48:bc:18:9c:74:
e0:80:6c:81:dd:13:e4:bd:0e:6e:19:58:18:9e:0b:c1:b7:43:
31:5f:a4:03:d8:8a:9f:a1:f4:5f:45:4a:d9:99:72:d7:40:e4:
42:a5:79:5c:53:f8:22:83:c2:a9:44:aa:0a:b8:67:69:45:9f:
d4:74:40:f1:eb:2e:da:73:1d:fc:5b:73:b7:36:df:cf:ab:c9:
f6:12:2c:d4:64:7e:99:12:66:7a:09:ab:bc:a0:65:2d:28:d8:
c9:7a:af:d2:d9:7f:1f:ff:29:08:c7:a3:f0:28:85:e0:58:fb:
a6:d8:47:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 02:03:29 2026 by rpki-client