Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.mft
File: IJejEXyhwdYpKuUpEbTwyk-OkBk.mft (raw, json)
Hash identifier: engfM4+9tEzeKajrzvyiuoPoQCIvt/w8HobYnUP3IVA=
Subject key identifier: 3A:52:C0:55:67:9C:9E:C4:6B:D2:02:12:21:5A:9F:3C:06:51:CD:9C
Authority key identifier: 20:97:A3:11:7C:A1:C1:D6:29:2A:E5:29:11:B4:F0:CA:4F:8E:90:19
Certificate issuer: /CN=2097a3117ca1c1d6292ae52911b4f0ca4f8e9019
Certificate serial: 019F190CDFE867D9EA4800FEE15AF629E3F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IJejEXyhwdYpKuUpEbTwyk-OkBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.mft
Manifest number: 198B
Signing time: Tue 30 Jun 2026 15:01:41 +0000
Manifest this update: Tue 30 Jun 2026 15:01:41 +0000
Manifest next update: Wed 01 Jul 2026 15:01:41 +0000
Files and hashes: 1: IJejEXyhwdYpKuUpEbTwyk-OkBk.crl (hash: qFEd3Rl3MdDmP3LUbD9cXgs2J7qLImfew9h18aOagwg=)
2: KA5g_HNHUEKe_cvpril1qZT7WME.roa (hash: h+IZFf9Go1iBnD4l0ji1OQ+Otog1vzczX/D4h1/qh78=)
3: d7CeX97gO-ipX3QBzFbXz8P0wTI.roa (hash: Qut1PV0++44yG4RR3eDPMqfYLiMgZvD3UqCPDmMsQWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IJejEXyhwdYpKuUpEbTwyk-OkBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:0c:df:e8:67:d9:ea:48:00:fe:e1:5a:f6:29:e3:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2097a3117ca1c1d6292ae52911b4f0ca4f8e9019
Validity
Not Before: Jun 30 15:01:41 2026 GMT
Not After : Jul 1 15:01:41 2026 GMT
Subject: CN=3a52c055679c9ec46bd20212215a9f3c0651cd9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1d:a4:e3:d7:69:93:88:98:2e:f7:cb:c2:fc:
b5:5d:8c:0b:92:aa:32:dc:cd:a0:32:14:74:bc:89:
16:2f:49:8c:d9:d6:e9:36:65:30:36:33:a5:bc:1a:
e5:31:0e:09:e4:f1:aa:43:da:66:04:61:1b:b1:f4:
23:6c:fa:76:4e:ef:f3:a2:bb:89:30:6b:49:3b:83:
ff:b1:dd:15:61:66:6c:41:f1:5c:c2:41:f0:02:eb:
f4:d0:4d:48:3a:1c:0a:ec:b6:98:b3:6d:e3:71:1f:
86:6a:d3:68:65:05:f1:36:b7:59:79:09:67:b4:40:
9a:fa:8b:66:ca:88:15:5b:64:81:10:1c:e0:fc:65:
ca:a5:8e:65:c6:44:d5:2c:a0:ce:6f:2e:c0:b2:9f:
37:48:fa:4c:c4:ed:a7:00:4d:04:8a:09:95:2e:6c:
c1:01:da:a3:48:f6:54:9f:83:2e:21:e8:b7:48:c3:
8e:cd:c6:16:fc:56:3c:7c:e0:9a:d6:fb:12:84:11:
68:63:a2:ee:c7:1a:9d:71:24:b6:8d:35:0e:43:c0:
90:7e:48:9a:23:8d:f3:03:f3:5f:5c:c7:8a:be:92:
1c:e5:84:49:bc:fb:16:f3:89:85:f5:cf:46:22:6a:
39:24:83:c7:d2:23:7e:60:4f:a6:da:82:b5:e5:47:
f4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:52:C0:55:67:9C:9E:C4:6B:D2:02:12:21:5A:9F:3C:06:51:CD:9C
X509v3 Authority Key Identifier:
keyid:20:97:A3:11:7C:A1:C1:D6:29:2A:E5:29:11:B4:F0:CA:4F:8E:90:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IJejEXyhwdYpKuUpEbTwyk-OkBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:ed:c7:3f:18:7f:c9:a7:bd:cf:e1:e3:02:43:63:75:b8:f7:
66:f8:98:60:e6:3c:c7:7e:06:14:05:23:d3:23:ba:8d:30:ba:
93:10:22:0b:b9:d0:f4:53:71:de:cb:61:32:c3:86:d6:b0:50:
92:59:68:a1:11:96:38:da:af:bc:6d:c9:b2:69:06:aa:42:8c:
ca:d1:0e:4a:c8:c4:ea:28:0e:5f:a1:44:67:4c:df:af:9e:dd:
4b:18:19:f1:b9:e2:bb:09:5f:f0:7b:51:3b:e3:d6:08:27:c5:
5f:32:55:cd:48:a1:7d:90:11:0c:ae:46:5d:9d:f4:b6:05:64:
9c:1f:b1:cb:42:a3:3a:d4:05:f5:0b:3f:fa:3a:51:24:e4:0a:
78:29:a4:eb:61:22:39:62:ec:c0:7c:80:7d:a2:b3:f4:fc:18:
99:c8:9d:d9:f8:70:ba:9c:ec:08:40:84:a3:a1:6a:e3:e3:d5:
76:e3:74:43:f4:f1:4e:12:38:2b:2f:3b:b0:e3:60:89:73:8d:
0c:7c:85:e9:0d:cf:14:fb:cc:0f:56:f8:24:6c:39:10:5d:b0:
74:87:4c:31:22:ca:05:43:20:4b:d1:e5:f3:c3:59:e3:dd:82:
b9:13:d0:0a:38:57:fc:2f:ee:99:ae:e4:97:74:c4:84:77:72:
b5:38:63:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:19:13 2026 by rpki-client