Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/76d0ea-48ad-4be1-a799-df3796b34856/1/IiKkikiuRfINe4Ok6fP0P9sDqQ4.mft
File: IiKkikiuRfINe4Ok6fP0P9sDqQ4.mft (raw, json)
Hash identifier: asSdZBKRrT22qswH7yY/pynBnn2vBf5gKUfpJn1Tcb4=
Subject key identifier: 79:28:6C:E5:D2:DC:4D:91:19:D5:18:16:07:D0:7F:21:32:57:93:49
Authority key identifier: 22:22:A4:8A:48:AE:45:F2:0D:7B:83:A4:E9:F3:F4:3F:DB:03:A9:0E
Certificate issuer: /CN=2222a48a48ae45f20d7b83a4e9f3f43fdb03a90e
Certificate serial: 019FAA8898550BD6C65B1D86FC45C055763C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IiKkikiuRfINe4Ok6fP0P9sDqQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/76d0ea-48ad-4be1-a799-df3796b34856/1/IiKkikiuRfINe4Ok6fP0P9sDqQ4.mft
Manifest number: 4D
Signing time: Tue 28 Jul 2026 21:01:45 +0000
Manifest this update: Tue 28 Jul 2026 21:01:45 +0000
Manifest next update: Wed 29 Jul 2026 21:01:45 +0000
Files and hashes: 1: IiKkikiuRfINe4Ok6fP0P9sDqQ4.crl (hash: y50w649UIFHCp6X12/tMadyPXgq4K5JBbRx7iqENEYw=)
2: h2MUZzK6jX-iU91egrEXxJwrlhU.roa (hash: AQQQoSdiJ+jplNp9p3VB8GeXhyTD6RNK0y5PzB9A1Pk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/76d0ea-48ad-4be1-a799-df3796b34856/1/IiKkikiuRfINe4Ok6fP0P9sDqQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/76d0ea-48ad-4be1-a799-df3796b34856/1/IiKkikiuRfINe4Ok6fP0P9sDqQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IiKkikiuRfINe4Ok6fP0P9sDqQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:98:55:0b:d6:c6:5b:1d:86:fc:45:c0:55:76:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2222a48a48ae45f20d7b83a4e9f3f43fdb03a90e
Validity
Not Before: Jul 28 21:01:45 2026 GMT
Not After : Jul 29 21:01:45 2026 GMT
Subject: CN=79286ce5d2dc4d9119d5181607d07f2132579349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:93:4c:7e:4c:da:8c:3e:42:5e:d1:e8:10:e6:
29:82:ca:c6:60:fe:d7:4f:aa:18:14:75:c4:ee:fb:
6c:29:2c:54:22:e1:5a:ea:71:dc:68:63:8b:3e:4b:
5d:18:2e:76:06:38:2b:56:95:dd:70:85:1e:88:75:
71:07:f4:19:f8:57:df:dc:8a:a5:4f:55:45:f4:67:
69:b9:d4:67:f4:49:7f:b9:31:f2:2d:0a:7a:e9:12:
0f:0a:17:a8:54:ae:27:a5:39:ec:fb:14:51:b4:91:
9e:a7:c8:c2:79:ce:f7:5f:88:ef:aa:c5:36:97:1c:
68:0d:fc:19:70:04:1f:16:ed:58:d8:3f:19:dd:c8:
9e:f0:5b:1f:e9:1f:f2:10:e4:29:b4:b7:9e:88:77:
d7:f4:aa:32:51:36:4e:3c:af:b4:95:45:a2:0c:04:
a0:d9:de:e7:75:dc:48:2d:f4:c4:c7:76:44:85:c2:
f8:e1:77:6e:96:56:e8:85:32:93:fb:04:c2:ae:a6:
8d:14:e8:fc:aa:00:4e:5c:0c:ea:cd:f7:fd:99:ed:
f6:8d:db:49:61:d4:59:b6:1d:61:f6:be:a7:55:af:
67:5a:18:eb:1e:42:7c:23:cd:5f:23:1b:8f:7c:c2:
68:61:fd:84:94:65:61:14:05:4a:ed:4d:2e:20:a9:
fd:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:28:6C:E5:D2:DC:4D:91:19:D5:18:16:07:D0:7F:21:32:57:93:49
X509v3 Authority Key Identifier:
keyid:22:22:A4:8A:48:AE:45:F2:0D:7B:83:A4:E9:F3:F4:3F:DB:03:A9:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IiKkikiuRfINe4Ok6fP0P9sDqQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/76d0ea-48ad-4be1-a799-df3796b34856/1/IiKkikiuRfINe4Ok6fP0P9sDqQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/76d0ea-48ad-4be1-a799-df3796b34856/1/IiKkikiuRfINe4Ok6fP0P9sDqQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:bd:e6:b7:30:83:9b:f8:46:b0:0c:7f:ae:ae:36:f9:c7:88:
ec:fa:8d:2e:03:a6:70:a0:e8:ea:6f:c1:49:e6:96:79:0c:ee:
64:86:7f:83:45:a1:c8:b5:d3:39:a1:67:e1:7d:ae:1a:c0:7b:
d9:58:8c:3c:45:b4:e3:c5:e6:ea:d0:82:49:e7:60:9f:66:24:
16:ed:ae:97:e2:dd:f8:18:30:68:24:e0:39:29:bf:fc:6b:a5:
56:1d:f6:8d:14:b2:0b:c7:bf:55:14:41:89:ad:85:a0:2c:85:
79:54:05:06:26:f5:3d:f7:25:4d:68:e9:8a:f5:c6:d0:24:49:
98:c9:c1:d6:6c:29:75:a4:26:50:7c:5d:67:90:bb:05:2c:b3:
a9:2c:58:7c:93:94:dd:45:1f:b5:ae:17:c2:7d:8d:40:03:c7:
9e:ba:21:29:4a:ab:ee:a1:63:13:a9:2c:1c:1e:dc:67:00:c8:
76:c6:ca:b4:35:9f:b6:9c:c3:3e:4b:64:78:2a:da:98:ff:c1:
ec:d1:d4:69:98:8a:0a:84:8b:04:25:7b:d8:23:b9:d9:3e:cd:
4a:94:0b:26:9b:20:f6:ca:48:e5:ae:20:11:3d:9e:eb:c8:d0:
df:54:93:88:a5:9b:62:54:19:72:85:88:02:67:b7:8b:15:9c:
0c:d0:76:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:34:41 2026 by rpki-client