Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft
File: IacXNhMJ0pOTUcnYuiFz24MZqI8.mft (raw, json)
Hash identifier: Swz7o4ukT52JtL79bChqH5QwLZfVrxfSWddB2QosvpU=
Subject key identifier: 29:07:FB:A4:93:DB:3C:AB:AA:0D:BC:8C:D6:93:81:4C:2E:4B:4D:A4
Authority key identifier: 21:A7:17:36:13:09:D2:93:93:51:C9:D8:BA:21:73:DB:83:19:A8:8F
Certificate issuer: /CN=21a717361309d2939351c9d8ba2173db8319a88f
Certificate serial: 019EC29268ABFE7CA7BF980FFD66D3E68CAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IacXNhMJ0pOTUcnYuiFz24MZqI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft
Manifest number: 1178
Signing time: Sat 13 Jun 2026 20:00:35 +0000
Manifest this update: Sat 13 Jun 2026 20:00:35 +0000
Manifest next update: Sun 14 Jun 2026 20:00:35 +0000
Files and hashes: 1: 1-lmEP6bvSg72yf_GUeD4MSKNWhk.roa (hash: UZw/L6lxwycncfuJtQDWqM2GbKpxVlPtsRDnOtxZfq4=)
2: IacXNhMJ0pOTUcnYuiFz24MZqI8.crl (hash: Dq/IN6R+oAQj/2Aa8lDuc7rKPTEcnsJRhE0hezCfRK8=)
3: uy5YZrZ342ZeZ2NGVVpULZDoPcE.roa (hash: ePYFBpMymgZ8ANPnNiychRqaQ6Srx/8bC1+U5miv+Ng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft
rsync://rpki.ripe.net/repository/DEFAULT/IacXNhMJ0pOTUcnYuiFz24MZqI8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:92:68:ab:fe:7c:a7:bf:98:0f:fd:66:d3:e6:8c:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21a717361309d2939351c9d8ba2173db8319a88f
Validity
Not Before: Jun 13 20:00:35 2026 GMT
Not After : Jun 14 20:00:35 2026 GMT
Subject: CN=2907fba493db3cabaa0dbc8cd693814c2e4b4da4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:0d:37:18:d5:12:5b:22:76:ec:8e:cc:fd:7d:
1d:ef:c0:84:20:d3:38:da:f2:ee:99:e5:84:4a:7e:
bc:89:7c:d5:c1:93:48:76:19:c8:1a:2d:72:c7:e6:
2b:f2:05:73:99:c0:7a:12:32:c8:73:37:a8:01:55:
e0:14:fa:81:c5:80:b4:52:3f:bc:c6:1b:00:95:05:
49:a3:ec:ca:51:38:64:7b:58:17:8d:8f:4e:8c:70:
42:7c:42:eb:7a:3b:a5:e1:a0:5e:67:0c:a9:8b:04:
cc:16:27:99:01:48:b2:a9:85:b2:8e:7f:cb:a4:b1:
c9:29:25:ac:3b:a7:21:40:ed:8a:fb:c2:90:67:f9:
c6:36:aa:41:d4:78:15:10:d5:fa:49:de:87:b1:e1:
95:a1:93:43:4e:a8:ac:45:c8:02:36:8d:0f:41:bb:
5c:bd:f1:67:c8:91:0d:e7:55:7c:ad:b0:77:82:47:
1b:f3:88:9b:d7:fd:d9:7f:e4:7d:f7:5f:ea:7d:df:
be:61:e0:0a:8e:dd:12:26:66:1e:dd:df:a8:c1:e6:
8e:a2:22:c3:34:c9:b4:b5:57:19:3f:58:a2:ad:bb:
d2:1a:a0:1c:7a:05:f3:0d:ca:35:5f:9c:ea:42:9a:
3f:a0:5b:82:ba:08:77:86:66:9d:dd:57:d4:a0:9a:
e0:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:07:FB:A4:93:DB:3C:AB:AA:0D:BC:8C:D6:93:81:4C:2E:4B:4D:A4
X509v3 Authority Key Identifier:
keyid:21:A7:17:36:13:09:D2:93:93:51:C9:D8:BA:21:73:DB:83:19:A8:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IacXNhMJ0pOTUcnYuiFz24MZqI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:1e:f2:63:a7:25:ea:88:04:e1:c1:93:1f:dd:67:8d:b8:ca:
e6:7c:cd:48:07:83:5a:9b:6a:23:20:53:cf:23:61:88:4c:77:
c9:50:64:16:9a:6d:7c:96:b8:6a:ff:47:98:e5:25:04:ab:37:
f1:74:74:7d:78:23:e4:6d:29:a8:7a:fc:63:88:52:ac:bc:87:
c2:2d:62:66:0c:3d:10:3b:3b:41:b5:98:00:27:21:f1:9b:fd:
46:7a:59:8f:a8:c5:39:72:3e:18:c9:3d:cf:99:b4:6c:07:a5:
cd:0d:02:9c:ba:71:36:d4:8a:e6:56:81:ac:a4:b4:61:81:cc:
c6:08:e4:31:d7:f6:1a:48:9a:c5:77:1f:51:28:5f:29:db:9e:
c6:03:68:8a:ea:8e:e4:a4:73:15:c4:32:47:e4:74:92:af:25:
06:87:b0:45:3a:cd:8a:f0:e4:41:f1:23:7e:73:a9:2a:3a:a2:
8d:24:e8:81:f1:cb:e6:86:d0:5e:d6:6f:ec:33:eb:69:8d:6c:
bf:7f:02:d9:ee:52:d7:39:84:fe:41:2d:5a:89:5f:c4:c6:0b:
ad:33:7a:fa:15:0f:36:d4:d2:0e:1a:e2:cb:e5:80:df:9e:dd:
65:66:c6:db:a6:94:96:a4:4a:22:17:c6:4c:85:e5:0b:8b:9b:
b2:b2:e7:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:45:57 2026 by rpki-client