Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/9e5cbd-4d5a-4ed6-b1c2-4ef9cc751517/1/IATWKTJ0OW9ajWkUhdaHagogcdk.mft
File: IATWKTJ0OW9ajWkUhdaHagogcdk.mft (raw, json)
Hash identifier: VFcNgo5pjJcVpNnFIIZEIgOHPHJelMo+oHUWsvMPj9Q=
Subject key identifier: A2:25:1C:F6:8C:6C:51:73:FA:49:E0:3F:E5:74:5F:5A:4A:FF:31:0C
Authority key identifier: 20:04:D6:29:32:74:39:6F:5A:8D:69:14:85:D6:87:6A:0A:20:71:D9
Certificate issuer: /CN=2004d6293274396f5a8d691485d6876a0a2071d9
Certificate serial: 019FABD16CB45D1E7AA23FDB07BC5BA8ECCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IATWKTJ0OW9ajWkUhdaHagogcdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/9e5cbd-4d5a-4ed6-b1c2-4ef9cc751517/1/IATWKTJ0OW9ajWkUhdaHagogcdk.mft
Manifest number: 1675
Signing time: Wed 29 Jul 2026 03:00:56 +0000
Manifest this update: Wed 29 Jul 2026 03:00:56 +0000
Manifest next update: Thu 30 Jul 2026 03:00:56 +0000
Files and hashes: 1: IATWKTJ0OW9ajWkUhdaHagogcdk.crl (hash: Tmi5I/dlG7OXUKGKvAybaYXZT+WO4HWsWtwGZf2kMUM=)
2: hnmnA26xKXY54jFPUcSN_0PAckk.roa (hash: iZnIOMbwxqj7gdSqvCeT/1vFVrhvoJ0Z39/9nmcH68s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/9e5cbd-4d5a-4ed6-b1c2-4ef9cc751517/1/IATWKTJ0OW9ajWkUhdaHagogcdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/9e5cbd-4d5a-4ed6-b1c2-4ef9cc751517/1/IATWKTJ0OW9ajWkUhdaHagogcdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IATWKTJ0OW9ajWkUhdaHagogcdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 03:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:d1:6c:b4:5d:1e:7a:a2:3f:db:07:bc:5b:a8:ec:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2004d6293274396f5a8d691485d6876a0a2071d9
Validity
Not Before: Jul 29 03:00:56 2026 GMT
Not After : Jul 30 03:00:56 2026 GMT
Subject: CN=a2251cf68c6c5173fa49e03fe5745f5a4aff310c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b7:da:29:7d:f1:ba:f6:d0:81:29:2d:02:e4:
2f:a6:c6:df:4d:4c:f8:97:20:02:3f:40:a8:21:2e:
e3:9a:fd:d7:6f:68:af:d2:ec:71:96:51:46:13:a6:
1b:06:4e:7f:9d:7f:3a:f4:1b:cb:c7:7e:7c:74:b2:
10:b9:78:9f:37:13:12:af:13:7e:72:74:62:2a:93:
a2:51:76:a1:7d:8f:4a:64:81:39:52:bf:d2:05:13:
6c:de:d2:75:2a:77:9a:7a:4e:d2:60:d9:92:75:99:
6f:dc:88:7c:7b:22:31:cc:ce:17:6c:f8:a9:96:5f:
90:63:79:0f:c3:56:8e:5e:3c:60:1f:be:45:ef:66:
2b:5a:b7:ad:0e:02:60:a7:9d:8c:65:7e:d5:79:b1:
f3:bf:75:a3:26:79:dd:12:a1:9b:a6:66:06:38:8e:
82:1a:9b:82:04:00:97:83:65:ff:11:52:ac:48:1a:
46:3a:36:14:d9:ba:0b:17:07:03:96:9c:f6:cc:a2:
f1:bd:d9:1f:42:73:a2:f3:b0:cd:dc:90:fd:87:f5:
93:3e:98:f0:c5:af:4a:65:d5:e2:c3:7a:6e:bd:4e:
d8:c9:be:0a:cc:87:1e:a1:75:ec:05:53:ca:de:a0:
33:01:91:f3:dd:e2:ae:00:bd:ef:68:a7:50:24:4f:
ac:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:25:1C:F6:8C:6C:51:73:FA:49:E0:3F:E5:74:5F:5A:4A:FF:31:0C
X509v3 Authority Key Identifier:
keyid:20:04:D6:29:32:74:39:6F:5A:8D:69:14:85:D6:87:6A:0A:20:71:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IATWKTJ0OW9ajWkUhdaHagogcdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9e5cbd-4d5a-4ed6-b1c2-4ef9cc751517/1/IATWKTJ0OW9ajWkUhdaHagogcdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9e5cbd-4d5a-4ed6-b1c2-4ef9cc751517/1/IATWKTJ0OW9ajWkUhdaHagogcdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:0c:e8:c6:12:f9:97:8f:85:44:92:65:2c:38:31:e9:d3:8c:
9e:ed:d9:86:cd:88:43:2e:62:01:30:5c:6c:dd:65:5c:d6:61:
87:2d:67:0c:09:35:e9:9b:00:dd:66:b3:9e:c5:02:37:53:fa:
f9:26:86:79:34:b0:00:4f:3f:89:e4:14:1e:97:56:8a:0a:87:
83:6e:f7:80:93:95:af:c2:02:b0:9d:6d:d8:00:d4:68:12:12:
35:28:d8:15:44:d5:f5:63:90:ea:af:81:4d:ab:bf:9f:a3:0f:
ec:23:ec:0d:a4:df:82:dc:e0:2e:33:00:27:c9:19:66:de:f9:
a2:79:5c:92:97:22:c3:3e:76:78:d0:96:ca:e3:ab:57:01:60:
bb:3e:82:d3:75:44:1e:8c:98:76:4b:3c:0e:92:18:dc:fd:39:
4a:87:7d:04:7a:b7:32:f3:61:f8:7e:81:75:5d:27:ea:a6:93:
93:6b:e2:da:0d:c3:9b:4e:fc:0e:13:09:40:e2:aa:f8:ea:55:
a3:62:c6:5c:18:0d:35:e8:d9:33:4d:43:a9:55:df:6c:eb:8e:
07:af:03:1c:5f:74:a4:9b:cf:51:7c:a9:0b:74:c8:60:e7:77:
67:50:5a:78:05:e1:57:f8:fa:93:94:68:49:63:88:30:2c:57:
d0:92:3c:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+r0Wy0XR56oj/bB7xbqOzLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwMDRkNjI5MzI3NDM5NmY1YThkNjkxNDg1ZDY4NzZhMGEy
MDcxZDkwHhcNMjYwNzI5MDMwMDU2WhcNMjYwNzMwMDMwMDU2WjAzMTEwLwYDVQQD
EyhhMjI1MWNmNjhjNmM1MTczZmE0OWUwM2ZlNTc0NWY1YTRhZmYzMTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7faKX3xuvbQgSktAuQvpsbfTUz4
lyACP0CoIS7jmv3Xb2iv0uxxllFGE6YbBk5/nX869BvLx358dLIQuXifNxMSrxN+
cnRiKpOiUXahfY9KZIE5Ur/SBRNs3tJ1Kneaek7SYNmSdZlv3Ih8eyIxzM4XbPip
ll+QY3kPw1aOXjxgH75F72YrWretDgJgp52MZX7VebHzv3WjJnndEqGbpmYGOI6C
GpuCBACXg2X/EVKsSBpGOjYU2boLFwcDlpz2zKLxvdkfQnOi87DN3JD9h/WTPpjw
xa9KZdXiw3puvU7Yyb4KzIceoXXsBVPK3qAzAZHz3eKuAL3vaKdQJE+sOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKIlHPaMbFFz+kngP+V0X1pK/zEMMB8GA1UdIwQY
MBaAFCAE1ikydDlvWo1pFIXWh2oKIHHZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUFUV0tUSjBPVzlhaldrVWhkYUhhZ29nY2RrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC85ZTVjYmQtNGQ1YS00ZWQ2LWIxYzIt
NGVmOWNjNzUxNTE3LzEvSUFUV0tUSjBPVzlhaldrVWhkYUhhZ29nY2RrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC85ZTVjYmQtNGQ1YS00ZWQ2LWIxYzItNGVmOWNjNzUxNTE3
LzEvSUFUV0tUSjBPVzlhaldrVWhkYUhhZ29nY2RrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALwzoxhL5
l4+FRJJlLDgx6dOMnu3Zhs2IQy5iATBcbN1lXNZhhy1nDAk16ZsA3WaznsUCN1P6
+SaGeTSwAE8/ieQUHpdWigqHg273gJOVr8ICsJ1t2ADUaBISNSjYFUTV9WOQ6q+B
Tau/n6MP7CPsDaTfgtzgLjMAJ8kZZt75onlckpciwz52eNCWyuOrVwFguz6C03VE
HoyYdks8DpIY3P05Sod9BHq3MvNh+H6BdV0n6qaTk2vi2g3Dm078DhMJQOKq+OpV
o2LGXBgNNejZM01DqVXfbOuOB68DHF90pJvPUXypC3TIYOd3Z1BaeAXhV/j6k5Ro
SWOIMCxX0JI8Lw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 10:14:29 2026 by rpki-client