Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.mft
File: ixJLEklCpdfq1rt9N6ZOWMfm2kE.mft (raw, json)
Hash identifier: 0S2nz+QC+pPMAztuAbygZpdvWMpn9DMVc2U3sgfsghw=
Subject key identifier: CC:34:58:BD:37:48:0E:ED:9E:53:FE:15:64:0D:CD:A7:8E:65:2D:8F
Authority key identifier: 8B:12:4B:12:49:42:A5:D7:EA:D6:BB:7D:37:A6:4E:58:C7:E6:DA:41
Certificate issuer: /CN=8b124b124942a5d7ead6bb7d37a64e58c7e6da41
Certificate serial: 019DFCBC7FC8BA14236EE2057812ACA00A0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ixJLEklCpdfq1rt9N6ZOWMfm2kE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.mft
Manifest number: 09C8
Signing time: Wed 06 May 2026 10:01:45 +0000
Manifest this update: Wed 06 May 2026 10:01:45 +0000
Manifest next update: Thu 07 May 2026 10:01:45 +0000
Files and hashes: 1: 606JAzklsOqsRlrbcuzv28QnWpo.roa (hash: Ui6APTAkf1hdKOgIZctUG0CdW7HPm77LlztW2I8sf0k=)
2: ixJLEklCpdfq1rt9N6ZOWMfm2kE.crl (hash: kUW8moe728XiYgu3skU0VQ6duJtM/0ipKaykpkIMNMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ixJLEklCpdfq1rt9N6ZOWMfm2kE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 May 2026 07:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fc:bc:7f:c8:ba:14:23:6e:e2:05:78:12:ac:a0:0a:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b124b124942a5d7ead6bb7d37a64e58c7e6da41
Validity
Not Before: May 6 10:01:45 2026 GMT
Not After : May 7 10:01:45 2026 GMT
Subject: CN=cc3458bd37480eed9e53fe15640dcda78e652d8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:bd:4e:ee:25:19:78:95:b5:63:9f:54:61:57:
4c:46:ea:6d:86:7e:ad:6e:21:00:ae:a0:82:da:f2:
fa:94:5f:b9:fe:3b:f7:a2:6d:a0:64:6d:e1:26:ae:
51:df:d0:ef:38:21:50:ae:b3:94:9c:da:de:37:b3:
04:d1:65:96:4e:da:cd:85:2a:ef:01:7f:74:76:90:
bc:48:6f:3f:bc:80:fa:f5:ac:35:18:ab:e1:a9:ec:
10:ff:51:b8:65:55:9a:22:43:90:83:a5:d6:06:0f:
6d:2f:c8:51:46:67:ff:87:55:46:8f:2e:0a:4a:5d:
15:67:22:84:d3:ee:c8:d6:57:db:d0:a9:9b:7a:a8:
34:24:54:df:04:71:5d:86:08:a4:7d:92:6a:44:56:
e9:cc:15:a4:d6:af:51:45:73:aa:7e:14:bc:ad:f9:
6c:70:1c:e4:63:3e:c3:16:1f:5c:3f:5f:4d:e7:f8:
e4:6a:e4:6d:5a:22:b6:91:51:06:ac:c8:61:63:59:
50:9e:3d:31:bc:6c:08:3a:cf:21:e2:4f:66:b2:c5:
b2:19:8b:93:72:5f:78:20:c4:37:0b:fe:5b:fd:ca:
e5:fe:5b:6b:88:02:ce:57:ab:df:6f:73:0e:9a:77:
a9:b3:be:e7:c8:35:b2:16:c5:fb:09:3c:50:f1:ad:
ff:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:34:58:BD:37:48:0E:ED:9E:53:FE:15:64:0D:CD:A7:8E:65:2D:8F
X509v3 Authority Key Identifier:
keyid:8B:12:4B:12:49:42:A5:D7:EA:D6:BB:7D:37:A6:4E:58:C7:E6:DA:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixJLEklCpdfq1rt9N6ZOWMfm2kE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:93:f0:df:ac:a5:52:59:26:4c:78:bc:bb:99:6f:12:af:7b:
b0:22:d9:ce:af:ca:e1:90:e9:7f:91:2b:2e:e1:4e:d2:46:cd:
af:e4:3d:47:e6:76:d2:4a:c9:0f:ac:9d:7c:57:0e:2d:0d:ae:
ca:a3:47:a6:de:f5:8e:0d:d3:15:c4:44:1b:22:41:30:b3:af:
c2:94:b6:e0:85:bf:36:ec:f0:84:10:58:9e:79:8b:c3:9a:46:
7e:d9:e8:36:f7:39:49:91:1f:f5:ed:4c:36:e1:ac:2c:c1:e8:
6f:cc:cb:17:b7:21:81:75:35:72:e1:e6:f7:ab:1c:49:1d:75:
c4:2a:d1:89:9e:c9:90:29:bf:01:0d:d5:1f:00:f3:a3:a3:9d:
01:0a:e0:ad:24:20:fe:82:31:31:4a:e9:cf:27:e5:52:97:c0:
d1:b6:7e:5c:0c:9f:0a:9f:2a:f3:34:73:a7:c7:bf:ca:56:35:
c4:17:a7:08:ea:47:c2:41:74:55:1b:e3:f8:10:47:e7:73:13:
86:d2:b5:68:a0:c1:65:ff:10:41:39:28:8f:72:5b:ae:46:ce:
73:77:7c:c1:7d:20:b5:8f:b3:15:56:4c:33:bc:88:ab:04:24:
d8:25:65:c1:0e:80:ba:bf:df:79:37:55:35:bb:d9:b8:d1:8f:
d3:f3:24:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ38vH/IuhQjbuIFeBKsoAoLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiMTI0YjEyNDk0MmE1ZDdlYWQ2YmI3ZDM3YTY0ZTU4Yzdl
NmRhNDEwHhcNMjYwNTA2MTAwMTQ1WhcNMjYwNTA3MTAwMTQ1WjAzMTEwLwYDVQQD
EyhjYzM0NThiZDM3NDgwZWVkOWU1M2ZlMTU2NDBkY2RhNzhlNjUyZDhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA171O7iUZeJW1Y59UYVdMRupthn6t
biEArqCC2vL6lF+5/jv3om2gZG3hJq5R39DvOCFQrrOUnNreN7ME0WWWTtrNhSrv
AX90dpC8SG8/vID69aw1GKvhqewQ/1G4ZVWaIkOQg6XWBg9tL8hRRmf/h1VGjy4K
Sl0VZyKE0+7I1lfb0Kmbeqg0JFTfBHFdhgikfZJqRFbpzBWk1q9RRXOqfhS8rfls
cBzkYz7DFh9cP19N5/jkauRtWiK2kVEGrMhhY1lQnj0xvGwIOs8h4k9mssWyGYuT
cl94IMQ3C/5b/crl/ltriALOV6vfb3MOmneps77nyDWyFsX7CTxQ8a3/LQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMw0WL03SA7tnlP+FWQNzaeOZS2PMB8GA1UdIwQY
MBaAFIsSSxJJQqXX6ta7fTemTljH5tpBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXhKTEVrbENwZGZxMXJ0OU42Wk9XTWZtMmtFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9jNjU1M2UtOWVhYy00ZWFmLTg1ZmIt
ZWI2NTkxYjg3N2FlLzEvaXhKTEVrbENwZGZxMXJ0OU42Wk9XTWZtMmtFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC9jNjU1M2UtOWVhYy00ZWFmLTg1ZmItZWI2NTkxYjg3N2Fl
LzEvaXhKTEVrbENwZGZxMXJ0OU42Wk9XTWZtMmtFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOpPw36yl
UlkmTHi8u5lvEq97sCLZzq/K4ZDpf5ErLuFO0kbNr+Q9R+Z20krJD6ydfFcOLQ2u
yqNHpt71jg3TFcREGyJBMLOvwpS24IW/NuzwhBBYnnmLw5pGftnoNvc5SZEf9e1M
NuGsLMHob8zLF7chgXU1cuHm96scSR11xCrRiZ7JkCm/AQ3VHwDzo6OdAQrgrSQg
/oIxMUrpzyflUpfA0bZ+XAyfCp8q8zRzp8e/ylY1xBenCOpHwkF0VRvj+BBH53MT
htK1aKDBZf8QQTkoj3JbrkbOc3d8wX0gtY+zFVZMM7yIqwQk2CVlwQ6Aur/feTdV
NbvZuNGP0/Mkow==
-----END CERTIFICATE-----
Generated at Wed May 6 13:22:45 2026 by rpki-client