Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.mft
File: IURHLRaXNp2DK6Em5eFyMqzV9fM.mft (raw, json)
Hash identifier: Hf7RyXtWQkhggywZoX2C8kOrEhnMsW1uMFWvkQuOuVA=
Subject key identifier: 28:E3:7F:EE:BD:9E:56:BE:61:4F:D3:2B:01:5A:31:DF:35:D5:34:B9
Authority key identifier: 21:44:47:2D:16:97:36:9D:83:2B:A1:26:E5:E1:72:32:AC:D5:F5:F3
Certificate issuer: /CN=2144472d1697369d832ba126e5e17232acd5f5f3
Certificate serial: 019EE47A15055190E178BAE81B4416C42E74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IURHLRaXNp2DK6Em5eFyMqzV9fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.mft
Manifest number: 196D
Signing time: Sat 20 Jun 2026 10:01:06 +0000
Manifest this update: Sat 20 Jun 2026 10:01:06 +0000
Manifest next update: Sun 21 Jun 2026 10:01:06 +0000
Files and hashes: 1: DGukc6480PTm8A6qHwc8DlqO2P4.roa (hash: f9ejFsVfN9O7L7m90T24ZiiptOfoC8NK6uhiGNPuCps=)
2: IURHLRaXNp2DK6Em5eFyMqzV9fM.crl (hash: gNmvz05tgNk2uxkZ2AiW0B4whuPG8C5IajucQe9d2W0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IURHLRaXNp2DK6Em5eFyMqzV9fM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Jun 2026 08:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e4:7a:15:05:51:90:e1:78:ba:e8:1b:44:16:c4:2e:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2144472d1697369d832ba126e5e17232acd5f5f3
Validity
Not Before: Jun 20 10:01:06 2026 GMT
Not After : Jun 21 10:01:06 2026 GMT
Subject: CN=28e37feebd9e56be614fd32b015a31df35d534b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:77:62:cb:f0:27:aa:05:11:b0:a8:97:64:f2:
1b:2e:22:7b:f3:82:ec:a0:15:35:4e:03:03:43:38:
e0:64:21:e9:d7:fa:66:95:2f:0c:8e:e1:e3:ed:08:
db:24:13:83:d8:24:b7:20:6f:ea:72:4a:c2:0b:1a:
51:60:bd:51:e6:82:57:0c:7a:81:b9:51:43:4d:18:
10:95:c2:9d:82:67:3f:3a:bd:72:99:d7:da:4e:89:
fe:1e:4a:66:21:f6:91:16:a7:90:70:37:74:24:00:
f8:48:19:91:08:b4:d0:79:b8:98:b7:20:37:8a:60:
af:49:ef:0c:40:c5:15:0c:48:fe:74:92:71:cd:5b:
b1:6e:e3:73:e5:5b:3c:6a:4b:8b:fd:9d:8c:5f:8b:
77:95:3e:e1:c8:f2:c8:49:71:92:44:e5:8f:de:cd:
be:38:b4:fb:27:6f:e6:9e:12:91:a4:8f:57:6b:55:
cf:66:2b:87:09:79:e4:94:d2:07:2b:88:7b:db:a7:
97:a5:56:78:ab:9c:68:b6:0e:ec:ff:5e:b6:ed:44:
a4:e2:d5:28:b3:85:23:58:0f:cd:16:dd:2c:49:a5:
91:e3:1c:dc:5d:d9:44:44:e2:2f:eb:ad:f3:ec:18:
d4:c5:39:e4:f9:92:38:89:94:c3:0c:61:a6:93:4d:
8b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:E3:7F:EE:BD:9E:56:BE:61:4F:D3:2B:01:5A:31:DF:35:D5:34:B9
X509v3 Authority Key Identifier:
keyid:21:44:47:2D:16:97:36:9D:83:2B:A1:26:E5:E1:72:32:AC:D5:F5:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IURHLRaXNp2DK6Em5eFyMqzV9fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:c1:90:dd:94:0f:ab:b7:c2:10:30:50:e5:d1:6e:9c:50:c3:
63:75:ac:f7:c2:e1:bf:7f:fa:3e:b6:7b:48:27:d4:61:75:fb:
99:4b:f2:4c:df:98:79:53:3e:21:a0:5f:59:1a:c0:a8:6d:04:
4d:38:37:7e:c8:df:14:13:20:69:3f:84:f4:09:54:72:16:ea:
67:bc:b1:10:da:ce:8b:a3:ff:94:25:ff:8f:4f:82:14:06:d7:
94:62:d1:57:0e:8c:5d:f0:52:55:fd:f1:1d:7a:35:67:4e:25:
53:75:a9:06:dd:81:31:52:5a:27:0a:70:13:af:bc:23:7f:7a:
1c:eb:fb:e7:65:61:4b:5f:53:6b:b5:60:a5:a8:c4:95:03:53:
a9:aa:e0:2f:13:b0:18:a4:cb:da:f1:1c:f2:6f:da:82:ea:b6:
8e:bf:97:f9:cc:3f:4f:91:c4:74:6f:aa:2b:f0:44:4e:a0:0b:
35:b6:46:c3:ce:dc:f9:c2:ff:3a:d2:a0:a3:0d:40:cb:c3:1a:
ed:0d:d0:ee:b9:a1:d4:1c:01:59:66:4f:cb:99:d2:85:dd:63:
e1:a1:16:58:80:d4:86:f7:0c:88:3f:30:30:90:d9:f2:ae:fb:
f2:64:0c:93:cc:68:61:a1:06:78:25:08:6a:45:87:d5:1a:08:
18:11:d2:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 17:57:23 2026 by rpki-client