Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.mft
File: I02TlaK6I5y50njrWJty7VyWctE.mft (raw, json)
Hash identifier: lF3WyypTftFAf9eH/VqRgOBQd2fXAf8uHWUXJ2JesJU=
Subject key identifier: 12:55:9D:96:17:79:87:64:77:AA:08:37:72:A7:F9:D0:3A:14:00:D5
Authority key identifier: 23:4D:93:95:A2:BA:23:9C:B9:D2:78:EB:58:9B:72:ED:5C:96:72:D1
Certificate issuer: /CN=234d9395a2ba239cb9d278eb589b72ed5c9672d1
Certificate serial: 019FA8625BC6B163471EC100E4FD47A4597A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I02TlaK6I5y50njrWJty7VyWctE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.mft
Manifest number: 141B
Signing time: Tue 28 Jul 2026 11:00:45 +0000
Manifest this update: Tue 28 Jul 2026 11:00:45 +0000
Manifest next update: Wed 29 Jul 2026 11:00:45 +0000
Files and hashes: 1: 1RriZf_G6a5fiIgqSsiVHC2xloA.roa (hash: qktLxOpEQif1HcKz+YuiexbELL1xls3mW6RuMkPJWuA=)
2: I02TlaK6I5y50njrWJty7VyWctE.crl (hash: eBzHxcyhqD6dpf+SfbPCrwScKliNL0mZHl+HQxQYaDc=)
3: wYpHa59YPrwp7w7D2dTnVQglgA8.roa (hash: BD7Ds/9U/dBV0/NTSSvHr9U29EXY5C+d+r87UR7HX3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.mft
rsync://rpki.ripe.net/repository/DEFAULT/I02TlaK6I5y50njrWJty7VyWctE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 11:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:62:5b:c6:b1:63:47:1e:c1:00:e4:fd:47:a4:59:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234d9395a2ba239cb9d278eb589b72ed5c9672d1
Validity
Not Before: Jul 28 11:00:45 2026 GMT
Not After : Jul 29 11:00:45 2026 GMT
Subject: CN=12559d961779876477aa083772a7f9d03a1400d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:68:58:ae:05:b6:43:8e:8a:7a:e8:af:ce:17:
68:57:a3:0b:c1:0e:17:15:94:13:f3:b1:cb:91:31:
5f:9c:be:4f:cb:61:2c:7d:c9:6c:7a:3e:7b:c2:e7:
d4:7b:9c:cd:4c:7a:1f:25:35:ad:da:d5:5e:91:dd:
31:1c:49:e6:cd:95:6a:c3:d5:c1:cc:22:28:64:a2:
7a:97:6e:6d:dc:ba:61:6d:20:7f:46:ff:63:1d:4f:
c7:fd:68:52:d1:b4:60:42:cd:bc:2d:50:5a:32:f9:
d2:0e:da:c5:20:69:6f:e3:ef:b4:7e:fa:01:3b:b9:
76:ab:a6:6d:f7:9a:42:61:59:53:2a:dc:16:f7:77:
63:d3:d2:d4:be:c6:f1:1a:b1:c1:61:40:68:4d:87:
fa:9f:3e:11:91:16:70:d8:70:f5:e3:df:ca:37:2b:
85:66:f7:e3:1e:95:1d:a6:6d:71:df:cc:7f:d7:9f:
1f:82:4d:af:67:c5:e3:eb:da:13:58:e6:4c:dd:82:
0d:76:9b:a9:0a:dc:4b:b0:8d:21:bb:0a:36:0d:4b:
19:73:33:f9:65:b1:db:38:89:76:64:b8:fc:70:19:
e6:fc:28:e7:52:7e:cc:2c:72:e2:5d:ca:6d:2e:18:
91:44:89:59:a6:4b:ec:02:d6:0d:d6:32:9a:7f:4e:
3e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:55:9D:96:17:79:87:64:77:AA:08:37:72:A7:F9:D0:3A:14:00:D5
X509v3 Authority Key Identifier:
keyid:23:4D:93:95:A2:BA:23:9C:B9:D2:78:EB:58:9B:72:ED:5C:96:72:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I02TlaK6I5y50njrWJty7VyWctE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:dd:fe:4b:e9:6b:71:4d:11:f1:fa:c0:85:0c:f6:0a:b6:50:
12:39:de:3b:d8:96:76:6b:a4:f8:c2:46:14:0e:e4:cb:23:86:
23:12:e3:a5:1c:63:f3:03:a8:84:54:a4:16:84:5e:f0:a8:e3:
f0:2d:09:2a:d0:55:86:bc:39:65:7a:36:f2:da:7f:af:ed:25:
50:03:eb:7f:40:66:62:9d:e9:31:c8:dd:ea:e1:3e:29:54:b6:
37:9d:a7:da:22:4d:84:75:ab:16:78:2c:de:35:8f:5c:d2:20:
4f:1e:ff:31:a8:d7:ca:96:db:2e:df:c8:c0:d9:c5:83:64:e3:
66:59:64:40:68:0f:4d:d7:53:e3:8f:9c:3e:3b:6e:cc:fb:e4:
39:82:bf:f8:b7:a7:14:a8:d3:7b:84:bf:56:6a:82:1a:4e:1b:
a7:57:c9:2d:21:d2:b2:d6:8d:08:39:2b:f2:06:58:e7:d1:66:
cf:5b:f2:5d:aa:bf:71:e7:2d:20:b0:08:60:c7:75:7c:f0:ee:
24:5e:2e:22:08:67:01:ab:b7:d6:7f:78:d7:b8:fa:b9:c3:b6:
fa:21:b8:97:5b:cb:8b:0b:70:11:fe:03:a6:7f:b7:58:ee:ae:
39:27:ce:00:41:53:40:9b:73:e8:64:5b:0d:ad:8b:3b:8d:fd:
91:60:2b:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:34:47 2026 by rpki-client