Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.mft
File: ibMy1XzhT6sevXRoF91wEGLHSog.mft (raw, json)
Hash identifier: jGTbNkAdTlXRQSK/o2jJddnCLBTAZuRi7D1aXSzzYRY=
Subject key identifier: 7F:A6:A5:7D:9C:23:AD:89:93:4A:A9:5D:BA:38:38:8E:19:3B:31:A0
Authority key identifier: 89:B3:32:D5:7C:E1:4F:AB:1E:BD:74:68:17:DD:70:10:62:C7:4A:88
Certificate issuer: /CN=89b332d57ce14fab1ebd746817dd701062c74a88
Certificate serial: 019F1A1F7F1BD8A6729EDD5EF3A8E0A44408
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ibMy1XzhT6sevXRoF91wEGLHSog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.mft
Manifest number: 1993
Signing time: Tue 30 Jun 2026 20:01:39 +0000
Manifest this update: Tue 30 Jun 2026 20:01:39 +0000
Manifest next update: Wed 01 Jul 2026 20:01:39 +0000
Files and hashes: 1: KuMp-T9rHWOUUL9bo8UBMERxJdY.roa (hash: h2sZnCOwhT2tqn40Qa1cfFPCyVBeCwa6Egkx9SNG7y8=)
2: W_9CizajI-Jq4yu8EOHAH-58qn0.roa (hash: ak8K9GcxXdSZ7IyX+XNEN4b3nMc5HWmOv+1OxaewRRQ=)
3: ibMy1XzhT6sevXRoF91wEGLHSog.crl (hash: 98dW1fEStdx8IILdmbcx2thtKQExzco5mCPciroNLP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.mft
rsync://rpki.ripe.net/repository/DEFAULT/ibMy1XzhT6sevXRoF91wEGLHSog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 20:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1a:1f:7f:1b:d8:a6:72:9e:dd:5e:f3:a8:e0:a4:44:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89b332d57ce14fab1ebd746817dd701062c74a88
Validity
Not Before: Jun 30 20:01:39 2026 GMT
Not After : Jul 1 20:01:39 2026 GMT
Subject: CN=7fa6a57d9c23ad89934aa95dba38388e193b31a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:5c:7d:e3:66:56:a3:a2:71:34:37:c7:2c:39:
7f:6e:1f:3e:fc:8b:80:61:5b:91:da:0f:17:13:1a:
07:89:8e:f7:37:c3:2f:48:2a:fd:1f:f3:97:31:47:
c8:1d:3a:e6:9b:c9:12:b9:9e:e5:8b:3d:d5:47:89:
2b:19:fb:23:8a:35:23:f2:1c:c3:03:4c:c2:9d:6b:
24:c5:32:ce:d3:84:4f:10:8f:f0:7b:de:da:d2:c9:
8f:dc:51:c1:19:f3:b5:28:34:b4:9f:92:ed:9e:8f:
66:d8:e0:4c:82:84:e5:5d:b5:60:85:85:f7:bd:1d:
d7:e9:fd:19:f9:7b:ff:57:3b:0d:f3:ea:76:4e:21:
cb:df:92:2e:e6:a6:07:ac:8b:02:b3:2d:34:d9:96:
b2:c8:89:1c:f4:41:20:e4:0b:79:c5:f6:9f:0f:1c:
3c:62:7d:dd:4b:0b:90:01:a2:64:e8:63:53:10:9c:
1a:01:ee:cb:47:53:cc:72:d5:d0:e1:ed:6b:c2:ae:
40:4e:6a:88:4c:74:72:47:12:59:6e:40:56:f6:f2:
84:f5:7d:95:c5:ec:24:4f:fb:77:b4:06:19:ea:71:
3b:0d:58:f8:57:b6:20:ec:6b:68:80:d3:82:1d:07:
44:b3:c1:00:11:84:d4:cc:23:02:a0:0e:62:a2:1e:
ce:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:A6:A5:7D:9C:23:AD:89:93:4A:A9:5D:BA:38:38:8E:19:3B:31:A0
X509v3 Authority Key Identifier:
keyid:89:B3:32:D5:7C:E1:4F:AB:1E:BD:74:68:17:DD:70:10:62:C7:4A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ibMy1XzhT6sevXRoF91wEGLHSog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:37:35:50:64:81:c8:fd:4b:6d:0a:f9:45:31:81:2c:4d:9d:
ae:f7:4b:59:aa:ab:5f:c6:fd:7f:04:5c:15:b6:3d:15:89:44:
32:cb:45:02:75:28:73:54:d0:8a:a5:de:98:57:d2:ca:a0:8e:
7f:aa:4f:c3:84:36:80:fd:be:03:7b:96:81:fa:72:d3:83:dd:
c0:81:c9:02:91:ed:34:75:3e:a4:1d:3b:a0:86:1f:b4:38:01:
60:12:01:d5:85:7b:eb:32:94:94:67:d4:6f:05:a7:4f:32:23:
69:fd:ed:b1:f4:6d:a0:e8:b2:5f:ea:36:fa:6c:1b:92:ac:76:
ef:25:ac:64:ce:9f:63:b1:a0:2f:54:05:e2:1a:ec:d3:c1:1e:
5f:d3:98:ed:28:05:92:1c:c6:55:32:1e:fa:b4:3b:86:22:e2:
4f:9c:53:a3:2f:59:ad:61:50:d3:57:c0:2e:81:43:bf:6e:99:
23:4b:a3:6c:fc:26:d3:cd:59:fc:44:a9:93:fd:5a:23:d7:0e:
c2:04:c0:bf:02:c6:55:01:12:35:92:aa:67:a2:ef:18:fe:35:
f5:11:4b:1d:4f:29:13:cd:56:4c:51:1b:50:74:b0:94:46:4d:
b9:a1:45:8c:ad:38:2a:a9:6c:cb:e2:24:12:06:39:a3:5e:e8:
d7:dd:8d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 03:34:00 2026 by rpki-client