Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/bb8b5c-4964-442d-aa7f-3fc54a76ced5/1/I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.mft
File: I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.mft (raw, json)
Hash identifier: wAQU3VgPbP93HeoHKAsgVwIecp4e/u1bGxxbExHMRV8=
Subject key identifier: CD:DB:88:CC:E2:24:37:46:75:3B:82:0A:B6:1D:D0:50:82:17:FC:79
Authority key identifier: 23:FD:1A:A1:9E:59:32:F2:4C:27:77:E7:EC:18:D8:A6:CA:92:4C:5E
Certificate issuer: /CN=23fd1aa19e5932f24c2777e7ec18d8a6ca924c5e
Certificate serial: 019EFBDDDF4A7769B91AA1A4E8BA2893C8D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/bb8b5c-4964-442d-aa7f-3fc54a76ced5/1/I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.mft
Manifest number: 011A
Signing time: Wed 24 Jun 2026 23:01:22 +0000
Manifest this update: Wed 24 Jun 2026 23:01:22 +0000
Manifest next update: Thu 25 Jun 2026 23:01:22 +0000
Files and hashes: 1: I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.crl (hash: moAMZqzARLK4gdhh/3wBPHxVfSK1eNSZofme0eVsEyg=)
2: M_CYpRI8SqN2pbVtKePdOnYWUSE.asa (hash: M0fsFeA37g+aMXBHQ8+8jEtPr1DuQjy82Sio4c1x2i4=)
3: b1swFPJJREwO7cx297uALIQsAqo.roa (hash: OKc3LjMWMxGzGg+rjr90PHIdb2q9ia63zVSKKzhRN5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/bb8b5c-4964-442d-aa7f-3fc54a76ced5/1/I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/bb8b5c-4964-442d-aa7f-3fc54a76ced5/1/I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fb:dd:df:4a:77:69:b9:1a:a1:a4:e8:ba:28:93:c8:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23fd1aa19e5932f24c2777e7ec18d8a6ca924c5e
Validity
Not Before: Jun 24 23:01:22 2026 GMT
Not After : Jun 25 23:01:22 2026 GMT
Subject: CN=cddb88cce2243746753b820ab61dd0508217fc79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a1:9d:d4:40:56:cc:3b:f9:72:9d:2c:24:0f:
07:58:e5:c1:42:03:5d:0f:42:23:31:17:b6:97:45:
3d:f0:01:88:19:ab:bf:af:ff:fa:7d:b5:75:58:92:
0e:ce:b0:fe:cb:f4:46:f9:89:12:b9:2d:86:b1:01:
9d:aa:2f:00:f7:d4:97:b5:b8:d6:c7:35:c6:16:fc:
ed:9a:85:b9:4b:df:9d:80:09:61:70:1a:ef:0f:f5:
a2:5a:44:4d:4b:e4:6c:91:2c:df:96:ff:76:27:37:
4e:65:fd:91:9b:c7:3e:c2:ff:02:61:5b:20:01:45:
b6:5e:d9:61:10:ca:cb:b0:95:f5:f0:13:38:96:71:
4c:ac:c4:21:3c:c7:b8:25:a3:1b:33:75:28:88:7e:
47:af:4d:af:f3:88:49:37:26:f7:c0:fe:fe:8e:2e:
bc:8d:81:ff:84:e5:4f:b7:bc:58:fb:48:cf:b9:e7:
f8:dd:00:cb:32:ae:a7:42:6b:e3:87:8a:73:e6:6e:
f7:36:0f:9c:b6:49:5d:46:6b:3f:58:af:19:2c:be:
58:1d:6d:bb:94:82:c4:98:02:65:b7:54:3f:a2:3d:
b3:81:69:e1:90:8e:ad:eb:f2:51:5a:e3:16:ce:b6:
e2:07:02:2f:17:ca:90:01:a0:7c:00:96:83:52:0d:
e9:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:DB:88:CC:E2:24:37:46:75:3B:82:0A:B6:1D:D0:50:82:17:FC:79
X509v3 Authority Key Identifier:
keyid:23:FD:1A:A1:9E:59:32:F2:4C:27:77:E7:EC:18:D8:A6:CA:92:4C:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bb8b5c-4964-442d-aa7f-3fc54a76ced5/1/I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bb8b5c-4964-442d-aa7f-3fc54a76ced5/1/I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:98:93:7e:3a:87:cf:a4:0f:e1:29:8a:4f:f8:5d:09:83:0e:
b4:99:24:58:23:69:81:75:39:cb:1e:b8:b1:76:a4:c2:d3:b2:
af:75:05:c1:a1:52:b5:16:2f:1f:8c:df:f0:a4:b6:a9:0c:37:
3e:91:6e:47:8f:0e:6d:97:e8:4e:1b:e3:d8:6a:27:5b:4e:fe:
ce:7b:c8:47:b9:d3:40:d9:52:70:f8:a7:a6:16:79:54:00:18:
04:9f:e6:d6:a2:9c:e7:3f:a2:f0:ed:b1:6d:06:9d:f4:eb:23:
06:df:93:27:86:d5:64:b5:e0:f4:4a:43:55:dc:4c:60:2b:a4:
31:7a:12:78:d6:a6:ad:0e:2b:8a:9c:b0:ad:69:c0:28:2b:4c:
7a:6c:31:77:a9:bd:6e:25:33:95:10:1c:3c:74:b9:7a:1a:63:
28:1f:5a:4a:5c:00:7c:e4:a2:d8:89:30:a2:cc:7e:d1:ea:21:
6d:53:83:86:d5:3e:5f:40:da:38:cf:6e:c4:5c:e2:9f:b9:05:
b6:c5:1b:de:43:24:ac:ea:0d:07:12:2f:88:c4:3e:a8:f0:45:
87:5e:8e:f2:ee:30:ba:48:6b:95:54:af:5d:f9:8e:f3:79:5c:
71:81:bf:aa:6c:0a:fc:64:a1:9f:02:24:9e:0f:1f:26:e8:eb:
1a:e8:45:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 08:29:25 2026 by rpki-client