Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft
File: Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft (raw, json)
Hash identifier: GtUrQzDIfZ0dk6E6LwMjiCWniHtesYLqkXSHzIR365U=
Subject key identifier: 15:02:C0:E3:FC:8A:A7:AD:91:B7:87:8C:0F:F2:FA:BA:73:C0:6C:EC
Authority key identifier: 22:A7:76:A6:95:5C:01:63:C9:CF:1A:83:8C:41:DF:EE:5D:A9:DB:3D
Certificate issuer: /CN=22a776a6955c0163c9cf1a838c41dfee5da9db3d
Certificate serial: 019FA9E31544A12612AAE930ECCFB09B77C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft
Manifest number: 14B6
Signing time: Tue 28 Jul 2026 18:00:59 +0000
Manifest this update: Tue 28 Jul 2026 18:00:59 +0000
Manifest next update: Wed 29 Jul 2026 18:00:59 +0000
Files and hashes: 1: Iqd2ppVcAWPJzxqDjEHf7l2p2z0.crl (hash: +yy4YHCbs+zn1elCzsClZj/HgswPDvM5th/j/lczagA=)
2: _NXhURzxEgUQOx1t27VNmnsADf8.roa (hash: kmT3XzeKsZmAbDA1dijKJM9ptJsrZrB5WHGBEuWYsf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 18:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e3:15:44:a1:26:12:aa:e9:30:ec:cf:b0:9b:77:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a776a6955c0163c9cf1a838c41dfee5da9db3d
Validity
Not Before: Jul 28 18:00:59 2026 GMT
Not After : Jul 29 18:00:59 2026 GMT
Subject: CN=1502c0e3fc8aa7ad91b7878c0ff2faba73c06cec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8e:a2:e7:fd:fd:20:db:2e:82:8a:f5:71:46:
ab:62:08:64:2e:3c:41:44:01:65:bf:f1:cb:6f:c5:
76:56:5b:71:4b:7a:97:94:71:c3:3b:61:35:98:1c:
e2:40:5f:c3:74:22:c3:a2:b0:f6:a8:ff:11:c1:68:
b4:f6:2c:8a:07:84:36:b2:e0:21:d2:93:67:b3:a4:
56:0b:d2:37:4b:dc:94:fc:bb:43:1e:7a:cb:35:15:
f1:97:24:50:1b:e2:a7:96:b3:a8:0c:95:26:3b:a9:
5b:7a:83:b7:de:4a:7c:cd:00:27:94:50:f3:e2:be:
59:7d:98:bc:ad:0d:14:a7:d7:de:37:eb:0c:98:96:
d7:09:ca:db:9a:be:c6:88:a6:9f:dc:b0:87:40:fc:
19:c1:8e:65:3d:71:b1:c2:7b:72:c0:00:f4:ea:cc:
3d:0f:38:9f:7e:d5:49:d2:60:67:bf:ea:c9:ab:43:
91:29:45:b1:9d:8a:3f:3c:85:be:d0:fe:68:fa:35:
13:a2:0b:99:dc:b3:0a:cc:fe:be:f1:73:0a:70:b8:
9a:e1:6e:68:73:bd:9f:f6:a2:fa:b6:91:bf:a3:12:
5d:a0:87:d2:88:8a:f0:c6:8d:97:10:52:95:6c:d7:
c7:1f:c3:8a:b5:eb:30:21:78:0d:da:70:cc:5c:2d:
28:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:02:C0:E3:FC:8A:A7:AD:91:B7:87:8C:0F:F2:FA:BA:73:C0:6C:EC
X509v3 Authority Key Identifier:
keyid:22:A7:76:A6:95:5C:01:63:C9:CF:1A:83:8C:41:DF:EE:5D:A9:DB:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:07:3b:0d:f2:ac:5b:ea:c2:29:8e:55:74:36:2f:1e:5f:d5:
b0:3c:5e:4b:e6:92:66:fa:de:b5:2c:1a:95:58:ac:63:4d:8b:
f0:a9:6d:06:31:53:22:cb:f6:d9:d5:68:41:c4:0e:21:3e:b3:
c1:c7:e1:b6:ca:74:6e:54:8e:1a:85:56:9e:9a:df:7c:4d:19:
54:01:8d:75:b2:7d:7d:d8:19:0b:c9:65:32:7a:88:78:75:39:
99:bf:8d:1e:37:75:fc:64:be:b2:ae:e3:1e:c5:72:3f:3d:1c:
64:92:7a:cf:0a:2a:ab:3c:89:f9:81:b2:cc:3e:3f:ca:95:dc:
5b:1d:1d:4a:b2:c7:aa:87:31:31:15:f7:7f:72:15:6c:1a:74:
6c:a0:1c:1f:9d:06:2f:03:69:ff:97:30:4c:76:23:73:c6:ec:
8c:7f:ab:4f:76:4b:29:ce:cf:6a:1e:ef:59:2b:c5:aa:22:33:
2f:43:e5:e9:c7:e0:52:ff:1f:68:a4:55:c7:1c:98:54:be:b0:
c7:00:ef:bd:30:a9:5f:c6:0e:cf:dc:22:97:2c:4d:2a:78:bf:
1c:22:f7:ae:e9:22:2b:aa:e0:d6:e4:36:ec:75:ab:51:5f:32:
f5:0b:be:4a:13:4d:3b:66:f9:c4:12:10:3a:d7:2f:c2:55:56:
e0:bb:86:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:23:16 2026 by rpki-client