Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft
File: c_IQ8SmaHgrucdwdeeX7EgktMKk.mft (raw, json)
Hash identifier: yLeULF0pn33xQxK1qVrZAJ/F04mPzBlBSHQIXdVVCrQ=
Subject key identifier: 51:39:BA:63:49:C4:6B:52:74:17:23:3F:A3:25:48:72:9A:DD:75:EA
Authority key identifier: 73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9
Certificate issuer: /CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9
Certificate serial: 019FA9E30859A4A1EBE57D4439018560030F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft
Manifest number: 19FC
Signing time: Tue 28 Jul 2026 18:00:56 +0000
Manifest this update: Tue 28 Jul 2026 18:00:56 +0000
Manifest next update: Wed 29 Jul 2026 18:00:56 +0000
Files and hashes: 1: DZMUgwqZTew_AIq02ZLPKDpbTYE.roa (hash: zHfVpuiksrUGKB8ICNHjrDl5IxhuSu4hChZHL57TIOU=)
2: E_7ISSwzh-AzkcURcKG1UBHObwg.roa (hash: fZa0WBEUKgsquXMzv9u9jFUdHdw7HPHhLmdCS89OIG4=)
3: PdhTLCzS94CSZKH6b3DIBk5Rvps.roa (hash: aEYKUEVb3YSj13VmPxeTpVeblAEFaCEyE+oxalL99hY=)
4: PdiLR6TNVHL1PiwB_9TjhY2_4Mw.roa (hash: fxJolf7HcMsKt8n4SeoLRKU0s9QwXZsLgW50Kw3yYQM=)
5: c_IQ8SmaHgrucdwdeeX7EgktMKk.crl (hash: VkbpNRzR+eLezOk6D2eVPFqovYM/YBUCZIa4qsaNU8Q=)
6: ct7G4Mom5Boc802bEbFFnAVpv-0.roa (hash: adbr+0r2/YFext/ZvzXaEL0mKU5w0/dxwR1z36K4Lc4=)
7: gDzhjRCZK_FApJYIWCYUq-55Q2U.roa (hash: cqVkcQFspksV97CWkorGKdmXrskou3R0TD9pkV2DUcA=)
8: mhTVQr4r3DZ7VGITyIG_xnJTKZ0.roa (hash: wCR6DC8Pqa4qxwOFxGkFj4Y4ZzJ+te0bBqmlHbBzVjQ=)
9: rguuKu0JocggKCL3qQF5U1vu6P0.roa (hash: 6Ae1aACirOJ8duoAp8UtLd/ooRChADVPUXnqoj0mDb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e3:08:59:a4:a1:eb:e5:7d:44:39:01:85:60:03:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9
Validity
Not Before: Jul 28 18:00:56 2026 GMT
Not After : Jul 29 18:00:56 2026 GMT
Subject: CN=5139ba6349c46b527417233fa32548729add75ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:93:31:2d:4b:4c:85:ff:c7:14:48:4c:17:c2:
65:df:2f:1c:39:78:9b:14:71:eb:35:ea:d1:8b:64:
ea:bc:19:d9:73:d8:b4:10:6f:5c:4f:46:be:7a:f9:
d4:b9:5f:83:72:18:e0:e1:ce:3e:36:c7:65:3f:78:
e2:46:bd:ba:2e:ee:8f:f3:df:a2:61:20:10:2c:65:
e4:3c:f5:64:0d:9b:bc:56:d8:0c:ca:0c:2f:f2:5c:
cf:8c:d7:ad:a6:5c:53:2f:09:cc:9c:7f:14:95:db:
a2:07:50:5a:57:b3:4f:8d:49:03:53:b2:6b:cb:b9:
f8:8d:7b:14:f9:d4:b2:e3:8e:92:dd:d2:1b:c6:fd:
41:3a:a0:be:76:73:96:a0:c6:a8:71:f1:a7:a2:3e:
87:14:4b:8e:4d:c4:5b:dc:c8:70:70:d5:26:d3:2d:
90:08:2e:e1:60:2d:5f:27:e2:cf:9c:4d:5f:3d:d7:
50:7f:c2:5b:79:93:61:5c:e8:49:8c:39:0c:54:73:
e9:b9:b1:12:68:a8:a1:66:09:e9:ee:a2:23:c1:43:
7d:04:77:cb:08:a6:6f:bc:a8:dc:0b:60:b9:30:d4:
13:4d:80:3d:9b:d0:ad:ed:ba:d0:a6:dd:07:34:f1:
a1:55:5a:3f:19:d2:1c:8c:62:9f:87:f7:c3:d0:8d:
94:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:39:BA:63:49:C4:6B:52:74:17:23:3F:A3:25:48:72:9A:DD:75:EA
X509v3 Authority Key Identifier:
keyid:73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:1b:ce:00:c3:ca:c4:52:e8:f1:62:11:6a:75:96:c0:06:ae:
01:27:b4:61:17:c1:fd:4b:a6:b4:54:0b:8a:8a:4a:50:30:60:
54:33:d5:da:df:a6:65:19:87:0b:6f:6e:9c:ba:30:c9:8b:96:
e2:f7:3f:e2:6a:f8:01:4c:37:7f:3d:e6:45:56:b8:d4:6b:08:
fa:00:4a:59:dd:1e:7b:0c:58:1f:b4:b5:81:ec:6d:10:ca:fe:
c1:ea:f7:e1:2c:c8:c1:0e:ba:60:33:f9:43:b1:86:8d:60:63:
ed:29:21:6f:52:41:db:a0:a4:93:6f:08:76:51:3f:ff:cc:02:
32:7e:84:a8:14:7c:48:99:c7:fb:67:17:e5:c4:f1:14:ca:d0:
98:72:e2:3b:93:ac:7f:ab:01:3d:55:2f:de:38:96:73:e3:48:
ed:54:4d:b5:c9:8b:35:5a:52:b0:d3:df:7d:49:69:57:31:f7:
95:8e:c3:3e:ee:c2:cc:b2:5f:d5:71:36:b1:90:16:92:13:e6:
3a:77:c1:a4:39:46:99:cd:41:f1:d7:90:b2:20:1c:1d:a7:0f:
52:c8:90:0c:fd:5d:8c:8c:e8:ad:64:f1:a5:e4:6b:5c:8e:bb:
3d:83:3b:9b:da:23:7f:51:0d:4f:82:e7:07:65:5e:48:08:83:
13:f8:1e:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:22:17 2026 by rpki-client