Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.mft
File: i25luC_kAH6C_S2xNM9Cxq7E4Lw.mft (raw, json)
Hash identifier: HWI+y5V24xNDF9e8zj5A+AEaH1oMWukpSNO71LFYXu4=
Subject key identifier: D3:97:1E:7D:F0:AE:70:61:D9:6A:CC:84:34:32:AC:3F:8D:45:D7:44
Authority key identifier: 8B:6E:65:B8:2F:E4:00:7E:82:FD:2D:B1:34:CF:42:C6:AE:C4:E0:BC
Certificate issuer: /CN=8b6e65b82fe4007e82fd2db134cf42c6aec4e0bc
Certificate serial: 019FA18451830E330E4025D19196C4D5A945
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i25luC_kAH6C_S2xNM9Cxq7E4Lw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.mft
Manifest number: 19CE
Signing time: Mon 27 Jul 2026 03:00:31 +0000
Manifest this update: Mon 27 Jul 2026 03:00:31 +0000
Manifest next update: Tue 28 Jul 2026 03:00:31 +0000
Files and hashes: 1: fe5q7Ym0eOTsgMAB1IUrjncVBXg.roa (hash: 5UUqkfEzMB1xSChuf7PbFjMq0H7jo6WK6DJ2it+YBAc=)
2: i25luC_kAH6C_S2xNM9Cxq7E4Lw.crl (hash: TEDoJ56w2IZfKJKfTFimuPOQnLqNVu4L/DIIMJ/xz5s=)
3: tX7VJWazlnGg57nYx0SdqCcW42M.roa (hash: a4ThqNr+E56D9pM0rGPy4dnLeWvNfcYrPQOSDN6v3Ws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.mft
rsync://rpki.ripe.net/repository/DEFAULT/i25luC_kAH6C_S2xNM9Cxq7E4Lw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 03:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:84:51:83:0e:33:0e:40:25:d1:91:96:c4:d5:a9:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6e65b82fe4007e82fd2db134cf42c6aec4e0bc
Validity
Not Before: Jul 27 03:00:31 2026 GMT
Not After : Jul 28 03:00:31 2026 GMT
Subject: CN=d3971e7df0ae7061d96acc843432ac3f8d45d744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:69:66:40:43:a9:77:d9:e6:77:ca:a7:4e:3f:
cc:9e:46:76:b6:cb:81:d1:5b:c3:95:82:f4:0c:9b:
1d:8d:e0:3c:74:fa:d9:71:eb:96:ff:12:a1:6f:18:
6b:96:d8:d2:2e:e8:a9:04:d1:06:bc:99:98:6f:e0:
25:f0:ec:53:04:31:55:f2:04:3f:07:37:2b:3a:96:
1b:3c:e8:f9:61:f3:09:57:74:87:ed:e4:18:58:f8:
f2:9c:d8:d1:2b:bd:0d:f8:ac:c5:05:19:18:87:ee:
ba:a1:82:ed:23:38:08:81:c5:9e:72:e0:3e:59:d4:
20:cd:fb:58:2a:fd:b6:02:38:88:f1:19:3f:15:6a:
81:1a:27:61:c8:34:c4:e2:ac:b0:47:82:e7:a6:22:
4a:86:2c:6b:cd:e2:c9:bc:3e:da:f7:3e:35:95:35:
8e:23:64:4b:c1:4b:c2:15:be:e3:b5:7f:40:a4:71:
78:9b:bd:34:a7:0d:8b:cb:66:2c:be:42:a7:7b:dd:
1d:3c:b2:85:ab:38:a2:c5:46:07:90:dc:08:2d:27:
a2:15:ac:42:4f:fd:ed:57:aa:d7:4d:e7:f4:ae:38:
90:9b:cc:be:c6:ea:ff:54:c9:e2:bb:af:11:ee:6a:
d3:43:e9:60:26:89:13:16:8f:d8:d8:b4:2d:64:0c:
09:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:97:1E:7D:F0:AE:70:61:D9:6A:CC:84:34:32:AC:3F:8D:45:D7:44
X509v3 Authority Key Identifier:
keyid:8B:6E:65:B8:2F:E4:00:7E:82:FD:2D:B1:34:CF:42:C6:AE:C4:E0:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i25luC_kAH6C_S2xNM9Cxq7E4Lw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:a6:bf:e2:e0:9c:d9:44:b0:28:86:2d:8c:86:fa:2a:bb:65:
2f:cc:1d:84:21:f3:06:63:38:30:07:6f:ad:5a:be:55:fc:1f:
28:bc:28:1e:12:59:d2:88:fc:3a:b6:b4:4f:ea:5d:44:dd:91:
99:b3:31:3c:8a:98:27:34:e6:2b:9b:36:c8:6c:9a:c9:9e:86:
c4:f6:e0:86:ac:80:63:7e:b6:db:ef:72:66:e9:7e:55:4b:30:
8c:34:35:04:20:d7:25:57:76:c2:8a:30:d0:87:82:1e:40:62:
98:63:f9:25:9e:de:16:cd:98:2e:6c:c5:e7:ea:bc:4b:b9:8f:
af:bd:0a:5c:0a:d5:6e:fd:ae:96:c9:90:60:e0:78:f2:43:91:
f0:b8:b3:8b:38:e8:57:77:5a:30:b5:46:9b:90:ad:88:ad:c6:
37:43:d8:c3:c5:79:49:e1:92:ce:72:d8:d5:6c:2f:e1:81:e4:
22:0d:8a:93:ec:5e:c5:6f:d6:6a:a6:80:2c:cc:ce:95:76:b4:
33:7a:13:45:17:f6:89:68:c9:41:34:8a:e9:a4:6e:74:66:ec:
06:bb:e8:4b:76:50:70:d7:a3:fe:24:c5:9d:9a:2f:da:65:40:
8f:24:35:a7:5a:4b:60:c5:a9:ad:0e:0d:fc:ca:82:6a:75:cd:
3e:d1:2b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:14:39 2026 by rpki-client