Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft
File: IjbtX1Yj7et5EKzTHV9u6B5csX4.mft (raw, json)
Hash identifier: mKJxLvVFyNO+LuqR/KmLap6rWFpTJ1N3pxn8Z6NZrDk=
Subject key identifier: AA:25:FB:7E:C5:90:0F:26:56:B0:A4:C0:45:42:2B:2A:E1:3D:73:81
Authority key identifier: 22:36:ED:5F:56:23:ED:EB:79:10:AC:D3:1D:5F:6E:E8:1E:5C:B1:7E
Certificate issuer: /CN=2236ed5f5623edeb7910acd31d5f6ee81e5cb17e
Certificate serial: 019EC0367764021A98B05041467D059E589C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IjbtX1Yj7et5EKzTHV9u6B5csX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft
Manifest number: 1141
Signing time: Sat 13 Jun 2026 09:00:55 +0000
Manifest this update: Sat 13 Jun 2026 09:00:55 +0000
Manifest next update: Sun 14 Jun 2026 09:00:55 +0000
Files and hashes: 1: CPndinjPYr6tuDu76KQaJ-aGMwI.roa (hash: nrsdPAkRRrAV3pIEBSnHKX1eqjnFVOeohTv704UK0JA=)
2: IjbtX1Yj7et5EKzTHV9u6B5csX4.crl (hash: Drdo49WEtMRoEaClN/qAlVEtIHMLwm8SdIcuYzW+tRA=)
3: b9-WVQZEPxKTQu4HO3vpyGGIgyM.roa (hash: zJruMssE6fAWn+HUVB4+RJJ7aVS5WNO5nmK7xyX8S+g=)
4: dmE1mURwbo1v9xYDFiuIvh4HZz4.roa (hash: E0j3Vog7/eKV4rz8QxbpUA9nxxFmMsDogYNNNnTdFVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IjbtX1Yj7et5EKzTHV9u6B5csX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:36:77:64:02:1a:98:b0:50:41:46:7d:05:9e:58:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2236ed5f5623edeb7910acd31d5f6ee81e5cb17e
Validity
Not Before: Jun 13 09:00:55 2026 GMT
Not After : Jun 14 09:00:55 2026 GMT
Subject: CN=aa25fb7ec5900f2656b0a4c045422b2ae13d7381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0c:5c:43:c1:40:b7:e1:14:07:7a:45:16:fd:
66:55:21:32:45:b5:3d:03:bd:83:f9:9e:ac:94:36:
cc:ee:b0:69:13:7b:25:5c:b6:cb:23:a6:74:b9:ab:
ff:48:15:4d:99:76:b2:5d:7b:73:6a:a9:05:59:98:
5d:74:98:4e:39:1b:cc:64:86:df:e0:5b:0c:43:c6:
a1:82:05:03:c7:3c:9e:f3:06:fe:c1:51:a3:26:6f:
d5:57:ec:06:a5:87:ce:86:6a:a8:4a:dd:b0:e4:e5:
5c:be:42:ed:b3:94:d7:84:67:25:7e:0b:e1:5a:31:
bb:3b:83:f5:e2:6d:c0:f6:0e:4f:13:ab:ca:a4:34:
6e:46:79:aa:c3:ba:8a:ce:7c:98:5b:9e:fe:68:ba:
c5:8d:28:5d:78:75:e2:1f:17:ab:de:d6:82:79:da:
1f:80:73:23:5d:42:b8:7a:1c:0d:48:a0:f0:10:dc:
a5:a7:a7:41:1f:0c:fe:e8:67:6a:8a:1d:41:52:2d:
4c:4f:a2:ea:8d:06:23:ef:32:0c:04:7d:a0:68:d1:
b3:89:5b:9f:e6:b2:6d:76:35:d4:d9:ed:22:a2:99:
89:24:2a:79:c9:bb:14:78:4f:c4:e4:ac:8d:cb:b9:
ac:b9:07:55:90:ab:e0:cc:03:43:d4:30:ad:af:0c:
a0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:25:FB:7E:C5:90:0F:26:56:B0:A4:C0:45:42:2B:2A:E1:3D:73:81
X509v3 Authority Key Identifier:
keyid:22:36:ED:5F:56:23:ED:EB:79:10:AC:D3:1D:5F:6E:E8:1E:5C:B1:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IjbtX1Yj7et5EKzTHV9u6B5csX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:e5:67:6c:ab:11:bd:0b:ec:a5:03:d4:6f:21:ee:b3:18:8e:
2e:d8:fb:a0:44:b1:ee:8e:29:5a:42:42:79:5c:f2:de:36:14:
1e:49:7b:01:8a:e1:cb:eb:8f:d5:68:c7:90:85:f4:35:25:c8:
bd:d7:74:3f:e6:c4:2e:34:d1:65:3d:9d:5b:0c:64:b4:fd:ce:
87:99:50:ac:16:c0:31:b0:ff:c6:34:48:44:d5:a1:6e:b6:b9:
56:fb:ed:8e:46:ca:0d:42:37:33:c5:be:c2:30:7f:4d:8a:1c:
59:08:e3:81:02:9c:21:81:21:bb:10:8b:d6:39:0d:b8:67:55:
79:e6:49:ab:19:dc:d6:de:2e:aa:c7:fd:45:ad:42:c9:e7:54:
37:bb:b8:c4:d0:d1:17:ea:1e:c5:67:4e:bc:ee:19:31:50:b7:
c2:44:8a:38:e3:c5:a0:f2:73:02:28:d1:2e:83:7b:f5:fc:eb:
d0:9b:8e:81:66:06:c0:77:94:1c:2a:e9:00:f3:c5:d0:56:4f:
6f:b5:3b:10:1e:8e:97:a1:41:0b:db:71:52:0b:94:dd:f1:e3:
e2:bb:6b:13:3d:cc:78:e1:01:d3:0e:b0:33:e6:5e:85:83:fc:
84:0d:06:84:1f:e6:0c:3a:94:6a:f2:1a:5c:90:11:b0:e6:fd:
d9:41:8b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:24:11 2026 by rpki-client