Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft
File: IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft (raw, json)
Hash identifier: l3Ail3EDOdnrIT+q9R3taE2KWi9MiaN1f5zjxpxCnhM=
Subject key identifier: CD:54:6B:5E:85:3B:DD:5A:04:8E:8C:D0:3B:26:F5:B2:F4:CB:B9:AA
Authority key identifier: 20:59:45:44:3C:5B:25:E4:DC:F6:20:3F:06:1A:C0:4D:36:87:15:54
Certificate issuer: /CN=205945443c5b25e4dcf6203f061ac04d36871554
Certificate serial: 019F11C0AFC7FB593B523D5886331A69FF53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IFlFRDxbJeTc9iA_BhrATTaHFVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft
Manifest number: 1988
Signing time: Mon 29 Jun 2026 05:01:08 +0000
Manifest this update: Mon 29 Jun 2026 05:01:08 +0000
Manifest next update: Tue 30 Jun 2026 05:01:08 +0000
Files and hashes: 1: GxGTOBMeu2N1blMJyGtOJ7pqxXk.roa (hash: zCml5uGaaanR/bHz+EfmHiD1+eZh00uY8Hx7W5hVHSg=)
2: IFlFRDxbJeTc9iA_BhrATTaHFVQ.crl (hash: iAIQkVPaaD1CRFfJyY5cO2xBuw2i7B6ZsQ1SQkEAD7A=)
3: YjNimSSaeGK3n8MwVhk-9Cqv_GI.asa (hash: +F1lNWpsiSJ4ZGqtn3gB2gX0yzl211t0f9qJlyvkLm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IFlFRDxbJeTc9iA_BhrATTaHFVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:c0:af:c7:fb:59:3b:52:3d:58:86:33:1a:69:ff:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=205945443c5b25e4dcf6203f061ac04d36871554
Validity
Not Before: Jun 29 05:01:08 2026 GMT
Not After : Jun 30 05:01:08 2026 GMT
Subject: CN=cd546b5e853bdd5a048e8cd03b26f5b2f4cbb9aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:5d:24:0d:58:df:3e:67:ad:f8:42:c8:5c:cd:
6f:db:b7:70:e7:f9:da:e1:1c:d6:b3:41:ec:a5:e0:
9b:60:49:fb:80:50:85:2f:03:62:ad:99:ae:af:08:
1d:8e:dd:78:b1:91:54:f0:b5:0e:ac:57:3e:7d:6e:
68:5d:b9:02:3e:da:59:d7:5d:50:da:a9:43:5c:14:
d9:23:36:c7:42:e2:09:8e:a9:39:d5:4f:bb:e0:f0:
12:34:15:d9:3f:f9:9c:8e:4a:52:c4:ce:32:26:72:
c3:3b:c7:03:a8:d3:85:e9:90:9b:e3:f9:95:a5:ff:
ec:1f:d3:f2:b1:27:55:45:ce:be:57:b1:ad:a4:bd:
41:4f:03:64:2c:50:82:69:ef:bf:2b:fb:5f:d7:65:
cd:1f:27:13:e0:12:8f:4a:16:8a:21:67:ea:e8:2c:
dc:00:dd:03:0f:2e:25:b2:51:58:34:46:05:da:a1:
24:7b:d7:a7:7e:8e:4c:db:ac:ec:e5:52:27:11:54:
25:6c:a1:87:7f:f6:06:1c:94:92:b8:ea:45:fc:53:
8b:14:8a:68:2a:fc:6e:de:0e:6f:cf:b9:ec:76:0c:
6a:47:8d:1f:bb:3a:dd:42:b7:06:48:90:ec:be:7a:
82:38:4f:9a:e0:0d:ff:51:67:43:c9:df:08:84:4a:
a4:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:54:6B:5E:85:3B:DD:5A:04:8E:8C:D0:3B:26:F5:B2:F4:CB:B9:AA
X509v3 Authority Key Identifier:
keyid:20:59:45:44:3C:5B:25:E4:DC:F6:20:3F:06:1A:C0:4D:36:87:15:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IFlFRDxbJeTc9iA_BhrATTaHFVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:d7:bc:86:8c:f1:20:10:5b:f6:25:b2:c5:0b:b8:2d:b8:e6:
7b:92:3a:fd:46:15:09:db:b6:d3:2a:40:e0:07:5a:55:34:af:
db:14:4a:77:4f:8c:2f:10:b9:dc:ff:00:6c:e0:33:67:a1:0b:
50:48:03:7f:26:38:35:60:d4:37:b2:07:37:7e:d0:a9:e4:4c:
4a:12:50:4c:7e:27:a0:48:c7:9e:68:61:ed:7e:fe:60:9c:2b:
36:92:56:d6:0a:e7:65:e0:b9:fe:43:ce:3a:10:43:05:e3:0a:
f4:1a:db:5c:32:86:50:49:64:d4:ec:16:0b:85:a5:e7:a7:d3:
4c:eb:0f:ee:da:86:97:7c:c3:93:9a:29:63:0f:6a:38:27:47:
6f:59:5e:48:fb:d8:77:9d:aa:5d:3f:6f:30:a9:45:be:17:7d:
5d:2d:08:70:08:98:3d:e8:9f:2c:e0:2c:72:41:11:e8:69:a9:
38:e8:f8:e3:01:71:9f:0c:46:07:6f:55:46:87:79:c1:7a:e8:
67:c1:73:4e:a6:c8:02:55:73:6c:85:67:5b:4a:3b:15:32:d2:
ff:0a:45:fd:f8:d2:6c:9c:a0:2d:1a:e1:96:30:c5:02:16:ca:
11:7f:39:db:87:08:0d:bd:09:01:e5:78:59:6f:7b:a9:fc:a2:
57:2b:17:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:43:14 2026 by rpki-client