Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.mft
File: IXtJHcy1YyIW2AtI-NYoax7_2Nc.mft (raw, json)
Hash identifier: sk60aMRBSzv3mk8udUfNssnYfhfWbQfip7tKkUkxDX0=
Subject key identifier: 69:DB:80:B2:F6:C1:49:AB:BA:BC:A7:F4:E0:BB:99:AF:5E:DA:E0:67
Authority key identifier: 21:7B:49:1D:CC:B5:63:22:16:D8:0B:48:F8:D6:28:6B:1E:FF:D8:D7
Certificate issuer: /CN=217b491dccb5632216d80b48f8d6286b1effd8d7
Certificate serial: 019FAC75AA2D2573D8A0619E06C16BC28002
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IXtJHcy1YyIW2AtI-NYoax7_2Nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.mft
Manifest number: 1529
Signing time: Wed 29 Jul 2026 06:00:20 +0000
Manifest this update: Wed 29 Jul 2026 06:00:20 +0000
Manifest next update: Thu 30 Jul 2026 06:00:20 +0000
Files and hashes: 1: IXtJHcy1YyIW2AtI-NYoax7_2Nc.crl (hash: 5l9RSeB9RC3T3XeQGl4RN2CY0SJ29U7HuoCZ0K3cq94=)
2: Ry13RGPYJVvtpvhKEOm6pAfriNc.roa (hash: oTL00T36xjABiLlLnyyxwdABnaFfTiLLRpEKK+wxv9o=)
3: TYPr3RJ5yO-DDveN9UKe3IFvuiY.asa (hash: QAM+8Y7IXNl8McE2u38ceOVi6OQTLcaAjr7T4vt1spg=)
4: XmK83eJDzPMsOo6NG4b7hC8Q6ik.roa (hash: LiOPt6WyR9nnxeKYrKkKUN50OOD6CsvfUFylT6hefd4=)
5: lMyPvW5droFVn6Tk385-cqRx17c.roa (hash: gpoTflIdMdUsvV/coCFUIU3cd1nO0X3/iYdUbk7d574=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.mft
rsync://rpki.ripe.net/repository/DEFAULT/IXtJHcy1YyIW2AtI-NYoax7_2Nc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:75:aa:2d:25:73:d8:a0:61:9e:06:c1:6b:c2:80:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=217b491dccb5632216d80b48f8d6286b1effd8d7
Validity
Not Before: Jul 29 06:00:20 2026 GMT
Not After : Jul 30 06:00:20 2026 GMT
Subject: CN=69db80b2f6c149abbabca7f4e0bb99af5edae067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a1:46:9d:e5:c8:b6:1a:f1:8d:3f:46:a7:4d:
29:46:5c:13:51:fb:75:90:e8:04:9e:87:36:22:e4:
17:35:57:71:3a:dc:47:2d:25:17:95:4e:a8:fb:ec:
c6:45:5a:50:50:2e:88:35:16:84:b1:f4:21:e7:d1:
52:b6:d3:dc:d4:25:6f:d7:b5:f1:f7:66:2d:13:94:
d9:6e:bf:81:97:e0:f1:ea:30:0c:33:48:40:71:6b:
52:22:75:e2:35:e3:7c:2a:43:23:7f:04:8d:49:3b:
92:1f:23:f6:d1:22:ba:f5:78:9a:a0:c5:7a:1e:b7:
a2:44:cb:f2:82:23:e5:40:59:78:9e:20:93:5f:12:
93:43:cd:3c:c4:5d:be:e3:90:3e:6f:ab:ee:1c:78:
c5:c3:8c:72:5e:c3:cd:ca:05:a5:ca:91:a6:2b:c5:
7e:b0:56:ff:15:58:f2:61:20:f1:11:6f:95:f1:39:
47:78:0a:2e:77:61:34:e3:c3:74:05:cf:37:9f:cb:
df:e6:f7:7e:ac:f2:ba:4f:54:14:1a:30:07:9e:b9:
62:00:90:4b:61:94:02:ed:1c:4f:55:a5:14:ee:9d:
65:5a:bd:da:1f:3d:40:6e:fb:86:4a:b1:44:2f:cd:
b6:82:fe:aa:69:98:1f:a7:b8:28:67:0f:21:28:b4:
e0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:DB:80:B2:F6:C1:49:AB:BA:BC:A7:F4:E0:BB:99:AF:5E:DA:E0:67
X509v3 Authority Key Identifier:
keyid:21:7B:49:1D:CC:B5:63:22:16:D8:0B:48:F8:D6:28:6B:1E:FF:D8:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IXtJHcy1YyIW2AtI-NYoax7_2Nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:ec:76:a6:58:a2:fb:23:3f:62:54:d7:20:9a:58:5d:eb:3b:
60:9b:bb:33:73:ae:0b:ef:a2:6d:51:cb:85:8e:fe:9e:fb:b0:
20:e2:14:be:fb:35:a0:e5:10:16:65:34:22:ee:4a:5a:83:8e:
3f:89:b4:4c:e4:04:fb:3d:be:df:96:fa:ce:47:0d:d9:16:35:
f2:07:1a:b0:2b:f9:98:1c:56:12:04:91:82:19:8c:63:74:4d:
fb:06:b1:04:3f:18:3a:ca:7c:f5:35:1f:12:52:ea:3c:08:8e:
04:f6:b2:44:8f:78:3a:8b:20:70:04:4a:d2:fe:40:52:41:21:
56:d6:b6:25:61:ee:5d:19:5e:98:b2:73:4c:f1:a1:16:cc:be:
87:24:de:73:d0:73:f2:12:bc:0b:63:4f:d8:c6:d0:d2:02:1c:
4c:59:6f:77:ad:be:0a:6f:b3:20:81:2f:7d:a8:09:8f:ca:3b:
a1:d8:69:40:12:80:e5:4e:81:7e:d3:65:6f:9c:22:a6:9c:4c:
49:f9:8e:d8:bc:7c:08:b2:f0:37:89:52:62:d9:2a:77:c3:9f:
5c:1c:73:aa:0f:14:99:3b:c2:3e:05:f4:92:9b:f8:09:b6:de:
d7:f7:fd:07:ed:7b:ce:38:a7:de:98:af:95:2e:69:64:d9:34:
d2:3c:f7:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sdaotJXPYoGGeBsFrwoACMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxN2I0OTFkY2NiNTYzMjIxNmQ4MGI0OGY4ZDYyODZiMWVm
ZmQ4ZDcwHhcNMjYwNzI5MDYwMDIwWhcNMjYwNzMwMDYwMDIwWjAzMTEwLwYDVQQD
Eyg2OWRiODBiMmY2YzE0OWFiYmFiY2E3ZjRlMGJiOTlhZjVlZGFlMDY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKFGneXIthrxjT9Gp00pRlwTUft1
kOgEnoc2IuQXNVdxOtxHLSUXlU6o++zGRVpQUC6INRaEsfQh59FSttPc1CVv17Xx
92YtE5TZbr+Bl+Dx6jAMM0hAcWtSInXiNeN8KkMjfwSNSTuSHyP20SK69XiaoMV6
HreiRMvygiPlQFl4niCTXxKTQ808xF2+45A+b6vuHHjFw4xyXsPNygWlypGmK8V+
sFb/FVjyYSDxEW+V8TlHeAoud2E048N0Bc83n8vf5vd+rPK6T1QUGjAHnrliAJBL
YZQC7RxPVaUU7p1lWr3aHz1AbvuGSrFEL822gv6qaZgfp7goZw8hKLTglQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGnbgLL2wUmruryn9OC7ma9e2uBnMB8GA1UdIwQY
MBaAFCF7SR3MtWMiFtgLSPjWKGse/9jXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVh0SkhjeTFZeUlXMkF0SS1OWW9heDdfMk5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9lOWYyOWMtOTIzMS00NTBkLWFkYjAt
NmRlMDVhMzE2MjM5LzEvSVh0SkhjeTFZeUlXMkF0SS1OWW9heDdfMk5jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9lOWYyOWMtOTIzMS00NTBkLWFkYjAtNmRlMDVhMzE2MjM5
LzEvSVh0SkhjeTFZeUlXMkF0SS1OWW9heDdfMk5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZex2plii
+yM/YlTXIJpYXes7YJu7M3OuC++ibVHLhY7+nvuwIOIUvvs1oOUQFmU0Iu5KWoOO
P4m0TOQE+z2+35b6zkcN2RY18gcasCv5mBxWEgSRghmMY3RN+waxBD8YOsp89TUf
ElLqPAiOBPayRI94OosgcARK0v5AUkEhVta2JWHuXRlemLJzTPGhFsy+hyTec9Bz
8hK8C2NP2MbQ0gIcTFlvd62+Cm+zIIEvfagJj8o7odhpQBKA5U6BftNlb5wippxM
SfmO2Lx8CLLwN4lSYtkqd8OfXBxzqg8UmTvCPgX0kpv4Cbbe1/f9B+17zjin3piv
lS5pZNk00jz3Sg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 09:01:12 2026 by rpki-client