Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft
File: Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft (raw, json)
Hash identifier: sob6+lB7uf8i3R4OGY17RP+dT7KtoWVUwDwnpyHkpJU=
Subject key identifier: ED:54:CA:34:6B:75:97:28:E2:B8:D4:11:21:72:EA:38:C2:14:A2:CB
Authority key identifier: 23:1E:28:35:9C:18:0E:A6:C4:88:A9:8C:A3:AF:77:B5:BB:79:3D:EE
Certificate issuer: /CN=231e28359c180ea6c488a98ca3af77b5bb793dee
Certificate serial: 019FACE46D3F561BCAF164B87BACF333F07F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ix4oNZwYDqbEiKmMo693tbt5Pe4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft
Manifest number: 19D5
Signing time: Wed 29 Jul 2026 08:01:18 +0000
Manifest this update: Wed 29 Jul 2026 08:01:18 +0000
Manifest next update: Thu 30 Jul 2026 08:01:18 +0000
Files and hashes: 1: Ix4oNZwYDqbEiKmMo693tbt5Pe4.crl (hash: Acw0ExcjF2vSkbwXRE5EdByhRmyagEpHQbc3YDnK9vY=)
2: eMGDdbWRH5Z7Ggcz_C-UuWgytSA.roa (hash: yeQz6KJsUVMwbssIQpUY/HsteXeV6YTAPt+B2xHK1j8=)
3: jgrgGJ7rf2LX0XINO9c30QdaUWA.roa (hash: A76RxsC50O0v/gwBJ9yUpgGn/DjKbkzrJUvq58cmXPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ix4oNZwYDqbEiKmMo693tbt5Pe4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:e4:6d:3f:56:1b:ca:f1:64:b8:7b:ac:f3:33:f0:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=231e28359c180ea6c488a98ca3af77b5bb793dee
Validity
Not Before: Jul 29 08:01:18 2026 GMT
Not After : Jul 30 08:01:18 2026 GMT
Subject: CN=ed54ca346b759728e2b8d4112172ea38c214a2cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:72:17:e3:ea:9a:e7:c8:b5:a6:2d:64:f1:be:
76:e4:05:81:ef:03:d1:f0:75:20:4e:1f:64:26:61:
cf:a1:20:c5:3f:bd:b8:0e:47:a8:2c:63:04:20:84:
cd:d2:07:c7:43:9d:7c:fa:0e:c3:cb:4c:69:cc:e4:
86:f6:c7:2b:00:0b:54:f9:79:59:8e:36:61:bd:75:
35:af:88:c3:06:a3:2d:89:f0:98:d4:23:d5:62:5e:
bd:c8:96:be:06:e8:f7:a2:54:94:cb:d2:b9:3a:0b:
68:19:94:99:a4:20:51:cb:b8:93:b3:5a:ec:83:6c:
b6:a1:84:c9:9e:74:a8:2b:d0:8c:89:b6:9a:ef:a9:
08:94:af:37:42:03:17:38:4a:9d:14:f4:60:b2:71:
59:b0:07:29:41:30:53:08:a1:e5:55:1d:68:b9:dc:
17:27:57:31:07:c6:fc:41:19:0a:89:fa:53:5c:fb:
64:60:28:23:e6:a4:95:c9:be:d7:ad:eb:04:b3:4b:
93:17:4f:58:ec:ae:20:c6:7e:15:36:d5:d1:ac:68:
a3:d6:b4:ed:97:ca:68:ea:29:ba:8a:5c:f3:7e:f8:
20:c9:57:78:e9:a3:1c:d5:19:e1:b1:e2:23:b5:fe:
52:05:da:bf:7a:e1:c7:a4:1d:08:e7:9a:60:a0:e7:
6c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:54:CA:34:6B:75:97:28:E2:B8:D4:11:21:72:EA:38:C2:14:A2:CB
X509v3 Authority Key Identifier:
keyid:23:1E:28:35:9C:18:0E:A6:C4:88:A9:8C:A3:AF:77:B5:BB:79:3D:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ix4oNZwYDqbEiKmMo693tbt5Pe4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:59:18:0c:12:5a:d5:d8:86:77:40:e4:c5:07:4d:bb:08:d6:
79:c8:de:d8:a3:f8:6c:c3:d5:3d:be:1d:13:e6:37:72:10:c8:
8d:dd:ae:c4:c7:52:77:e9:26:19:1b:fa:1b:c9:0c:d5:c7:3c:
18:89:52:3f:76:a0:a8:16:a4:33:18:23:5e:1e:e9:27:49:46:
cb:c0:fc:19:35:56:83:5e:1a:16:24:86:fa:1c:29:10:70:e7:
4f:79:43:3e:4f:b3:6d:f0:4b:39:23:e8:c8:a8:72:03:05:07:
c2:b5:b9:0d:46:68:d4:cf:25:a4:75:c7:aa:c8:14:09:ec:8a:
a3:81:51:a2:79:9a:f5:12:8c:50:64:5a:eb:84:9c:8a:22:4a:
61:66:26:24:e6:66:63:f7:a8:24:46:ec:6c:05:4d:3a:f4:52:
f8:0c:83:c0:d7:5c:f6:3f:6b:cb:73:40:4f:59:c3:67:27:16:
03:e5:3a:cd:b7:e4:07:10:ab:3f:82:69:71:87:f1:19:93:4f:
f2:ba:6c:fd:3e:e9:03:1e:f5:47:36:a8:bd:fa:03:12:a2:5e:
6c:1d:c5:7d:6b:3a:81:d2:01:17:16:85:65:be:55:f1:0b:c7:
4e:0f:62:dc:72:b9:df:ff:8d:16:2c:7b:34:3d:da:5b:22:ac:
5f:39:99:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:07:27 2026 by rpki-client