Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.mft
File: Iw6axkUQ-jkYRrsTmrUrgAHVgDg.mft (raw, json)
Hash identifier: LU2i4Ut2ajT/upaa+DmWtg1qwaQpa8nWZOopG5b9gKU=
Subject key identifier: DD:8D:20:18:D7:89:30:69:2F:F5:B1:3C:12:30:86:AF:52:7F:6E:67
Authority key identifier: 23:0E:9A:C6:45:10:FA:39:18:46:BB:13:9A:B5:2B:80:01:D5:80:38
Certificate issuer: /CN=230e9ac64510fa391846bb139ab52b8001d58038
Certificate serial: 019EC1B75691BC1C50C6553779E8A52072F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.mft
Manifest number: 15F0
Signing time: Sat 13 Jun 2026 16:01:18 +0000
Manifest this update: Sat 13 Jun 2026 16:01:18 +0000
Manifest next update: Sun 14 Jun 2026 16:01:18 +0000
Files and hashes: 1: Iw6axkUQ-jkYRrsTmrUrgAHVgDg.crl (hash: GMH2cxFtnrOH5ZuaDv8ZqfV7Nt4MfIG+Ak8Y7W6tF7w=)
2: Jc3bkiFIpTCnI7iepJAdAbekabs.roa (hash: NwsftHfqSo5igUnmJFDaLhMgga9JlSbY/WwsognqQyI=)
3: e3q1V2fD2QBr302Nmb_jtOVn5-M.roa (hash: kNGhLH15D9N/CBFSD4P6hJtpDjbOe8kg0SMmM1H5/j0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 16:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:b7:56:91:bc:1c:50:c6:55:37:79:e8:a5:20:72:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=230e9ac64510fa391846bb139ab52b8001d58038
Validity
Not Before: Jun 13 16:01:18 2026 GMT
Not After : Jun 14 16:01:18 2026 GMT
Subject: CN=dd8d2018d78930692ff5b13c123086af527f6e67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:73:13:0b:b6:35:a5:b2:5d:68:66:cb:f8:05:
01:76:b2:65:cc:ea:ef:8c:a1:ca:34:ae:08:76:57:
74:fd:60:1e:a7:75:f1:ee:67:0f:72:3a:a2:de:3a:
db:81:67:59:5a:e4:84:72:91:7b:dc:e5:22:86:07:
2c:63:1c:de:1d:b3:e1:2b:65:9e:ff:06:25:af:5e:
77:97:e1:04:86:2f:77:19:1b:46:11:06:0b:ff:ed:
65:d2:9a:10:cd:91:34:d4:f4:2f:fa:92:ee:7c:75:
17:79:62:3f:5b:12:dd:92:fa:b5:12:89:1e:e5:f6:
af:4a:5a:5e:99:4c:70:de:30:9b:e4:b9:ea:ee:f6:
d4:e8:df:9b:f9:b7:3d:2b:3b:48:9c:76:e7:2f:08:
7c:50:0d:f0:56:e4:65:bf:50:7c:f2:13:a2:ec:cc:
6f:a3:80:65:07:e3:81:93:aa:d7:c6:8b:93:74:4f:
f1:6e:54:6d:77:2b:07:0f:0d:e5:30:6c:65:b6:38:
89:4b:f7:6c:8e:6f:61:e1:42:a9:1e:fb:9e:6d:7f:
35:a3:98:ba:02:db:46:ab:9a:c2:ff:fd:de:3f:d5:
72:ed:0d:bd:bc:b5:2f:68:25:47:37:af:9f:8c:7d:
38:7d:95:98:c5:3b:b6:20:d8:09:4f:ee:a2:42:b1:
5e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:8D:20:18:D7:89:30:69:2F:F5:B1:3C:12:30:86:AF:52:7F:6E:67
X509v3 Authority Key Identifier:
keyid:23:0E:9A:C6:45:10:FA:39:18:46:BB:13:9A:B5:2B:80:01:D5:80:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:e1:c5:92:74:70:f3:30:6f:88:a7:1a:f0:00:c8:93:31:ff:
60:ff:89:1e:96:80:0c:c0:ac:72:c1:43:22:08:00:15:8a:d5:
ac:96:66:d7:03:57:6e:87:b8:ff:51:a5:4c:3c:ff:53:71:a2:
26:75:a1:e7:8b:a1:1c:3a:8f:09:18:e3:49:58:68:a6:5b:cc:
f1:13:ff:63:73:68:d5:d9:ff:87:b3:ab:9f:d4:18:f7:a4:ed:
62:73:ba:69:d4:7b:cb:92:19:c6:cb:66:4e:18:29:60:37:09:
1f:7e:ff:b1:67:db:c6:14:84:cb:1a:0d:0d:21:83:25:65:b3:
2d:9e:a9:eb:0d:ee:1f:51:fe:88:c0:6e:db:4e:57:01:7a:08:
94:74:9e:a2:30:ff:54:d2:73:73:99:3d:50:35:06:83:bd:f8:
d1:64:2c:ee:7b:60:5a:0c:7d:83:2d:44:fe:9e:13:af:72:09:
7d:e5:68:aa:7a:6c:cb:73:49:0f:25:08:cc:03:3c:ef:ea:21:
85:68:c9:f0:24:03:d8:a9:c6:28:e3:37:88:dc:7c:0b:99:b6:
6c:6b:2a:55:69:13:20:69:ec:ed:3d:74:16:fa:88:8b:bb:50:
8b:15:ad:91:ce:3d:8f:67:94:51:32:ec:a3:ee:ba:69:5b:5a:
b3:dd:d4:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:59:04 2026 by rpki-client