
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.mft
File: ieXrHhIJiXh0XVQNypbP8N5HBNo.mft (raw, json)
Hash identifier: ZvOf5YGeK7jKGT67jFu7l5qvnPvyLm5HiLUjqXlHNUs=
Subject key identifier: 5F:1D:FF:AB:56:DC:DA:68:88:51:45:28:BC:A0:A8:C0:D9:24:73:3E
Authority key identifier: 89:E5:EB:1E:12:09:89:78:74:5D:54:0D:CA:96:CF:F0:DE:47:04:DA
Certificate issuer: /CN=89e5eb1e12098978745d540dca96cff0de4704da
Certificate serial: 019EC2923965D921B6066817C989FC0E7B8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ieXrHhIJiXh0XVQNypbP8N5HBNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.mft
Manifest number: 0DD1
Signing time: Sat 13 Jun 2026 20:00:23 +0000
Manifest this update: Sat 13 Jun 2026 20:00:23 +0000
Manifest next update: Sun 14 Jun 2026 20:00:23 +0000
Files and hashes: 1: ieXrHhIJiXh0XVQNypbP8N5HBNo.crl (hash: 4qyguqNt48Lzjxsn2r3nWPqbr/fimmzMyU+1kQJcp40=)
2: mdTsNfdOLmAj5Ib0bSI7RIV96g0.roa (hash: xAGPZrEW2fEUSd+UrPEI5hWaivVab8Rku87e+bOIo2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ieXrHhIJiXh0XVQNypbP8N5HBNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:92:39:65:d9:21:b6:06:68:17:c9:89:fc:0e:7b:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89e5eb1e12098978745d540dca96cff0de4704da
Validity
Not Before: Jun 13 20:00:23 2026 GMT
Not After : Jun 14 20:00:23 2026 GMT
Subject: CN=5f1dffab56dcda6888514528bca0a8c0d924733e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:2a:31:d9:77:ab:55:1b:31:f3:83:c4:e9:95:
a3:1f:48:6e:62:0c:ba:d0:5f:d9:59:97:61:88:9c:
13:53:a7:f0:eb:b1:ef:18:f9:61:61:a3:2e:5a:5a:
24:68:25:9e:62:f4:5c:9a:67:20:d4:fc:4e:77:90:
1c:db:19:88:1c:a0:a3:39:2c:ce:4f:38:bd:15:f7:
0c:47:de:fd:89:32:29:62:5f:5f:6b:52:e2:b5:ca:
40:12:34:41:e0:2e:44:60:3c:60:12:ad:41:b8:9b:
26:4c:26:b7:b8:e7:b4:25:3d:c0:0b:df:81:7d:7e:
cd:e0:3c:9c:2e:79:bb:52:a2:58:7b:85:1c:75:e8:
20:5b:36:89:46:f6:29:0c:f2:1e:76:66:cf:31:5d:
d4:fc:b2:ba:6f:91:6f:9c:65:85:aa:40:cf:58:1e:
90:b7:a8:ec:95:8c:f7:eb:40:5a:d8:d4:34:ab:a9:
16:05:25:b0:86:4d:34:3c:c3:01:40:5b:8c:d0:2f:
cf:f3:c9:ad:cc:49:54:69:46:7d:77:43:33:f0:58:
24:10:43:e6:79:41:71:22:42:ff:b9:70:e3:99:ec:
e8:cf:02:de:5d:ed:2c:61:88:74:43:30:f3:6c:e9:
82:db:14:98:95:4b:fd:2e:ee:97:89:ff:a2:4a:a3:
f9:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:1D:FF:AB:56:DC:DA:68:88:51:45:28:BC:A0:A8:C0:D9:24:73:3E
X509v3 Authority Key Identifier:
keyid:89:E5:EB:1E:12:09:89:78:74:5D:54:0D:CA:96:CF:F0:DE:47:04:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ieXrHhIJiXh0XVQNypbP8N5HBNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:9f:65:ee:13:11:07:13:eb:55:4a:5b:6f:18:b6:dc:8d:e1:
52:c5:5b:73:ad:2c:d8:0c:77:4a:e9:59:75:2f:14:9f:72:8f:
d4:89:dd:4a:19:25:1c:4c:84:4a:59:4c:30:19:2a:3d:eb:69:
29:63:50:de:59:a6:ea:e7:13:10:82:32:ce:7e:91:2b:1e:4c:
77:5d:0f:3f:7d:d9:9d:70:ee:0f:7c:c6:58:54:e4:29:b8:7b:
15:d6:eb:6d:87:87:dc:c0:4b:4e:d8:43:d0:b5:84:8b:ff:de:
d2:dd:fd:ed:d0:ac:dd:fe:56:d0:9e:99:97:d4:74:cf:99:ae:
6d:26:d0:e8:03:62:e9:d8:1e:8b:9c:1b:db:ae:a8:ee:7e:34:
96:4d:a9:85:80:b0:89:de:74:f2:f4:b3:48:c4:fa:48:66:a0:
1b:fe:cc:57:17:af:22:22:54:67:e8:fc:04:9e:94:65:e4:e4:
67:fb:9c:7c:1c:f7:56:c8:9c:bb:5e:ed:f3:c3:2a:fc:85:51:
02:47:b5:18:96:25:f5:7b:dd:ab:c9:a0:a7:7e:06:4e:16:3e:
38:a2:c7:31:26:45:2a:9b:1d:d8:d5:6f:bb:5c:d4:1d:f9:79:
0b:ca:f8:0f:98:76:54:c5:64:93:9b:0d:61:87:99:f2:ae:0d:
be:6d:94:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:22:51 2026 by rpki-client