Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft
File: IixFhb2I-yfK3ynuW7ldZXX874M.mft (raw, json)
Hash identifier: rI/X+RuJtJDnSGM66dZGercad8EKaf38d9b9D4cxeZU=
Subject key identifier: 0B:A7:59:37:1B:24:0F:B6:2C:F1:36:82:29:5D:24:0C:B4:5D:A2:34
Authority key identifier: 22:2C:45:85:BD:88:FB:27:CA:DF:29:EE:5B:B9:5D:65:75:FC:EF:83
Certificate issuer: /CN=222c4585bd88fb27cadf29ee5bb95d6575fcef83
Certificate serial: 01A0BD9E1682458D568F03A104135C955CE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft
Manifest number: 11B4
Signing time: Sun 20 Sep 2026 07:00:49 +0000
Manifest this update: Sun 20 Sep 2026 07:00:49 +0000
Manifest next update: Mon 21 Sep 2026 07:00:49 +0000
Files and hashes: 1: 1lY-CsGva2obFTlBMU3iZDfCreA.roa (hash: Snn45LbsQALIONEF3gxNerrBtObVtDy584EK4tr9H6g=)
2: 2bVvxRffnJ6GQKgs2LoPDWvUcK4.roa (hash: er7wIVOxtiLCvuKAAvSBfYTSBvkd5n1t/IW0taeZM7Y=)
3: EKwGj8cGWTKa1emZfvaG-_KFnug.roa (hash: 0WqMi3eKQHHkupGYUjixsLx2D37mbsIXi9Fsl7hZLiw=)
4: IixFhb2I-yfK3ynuW7ldZXX874M.crl (hash: pMyU38XV86d96vW7HUvDR7yyfHbTfOByIjOt8uKm99k=)
5: QdRrKIrH4mGJmO4pGdzpank3gew.roa (hash: uL5ZvBd0SOggdi3Ll3eXsAHR4s6R5DvUqu2sa+EiNtI=)
6: TruqXXhyrBV8Cwe5yzCBt7QLsCE.roa (hash: Ab+jWWB0kPKqVoiUmBfNBgr0bDHAA/s+gzbI3fKh/Jo=)
7: YIiAdksRfvM2tL27jCCRXB5ju3Q.roa (hash: QClgQMgXCLixY3zPZ3xGliorGs5EkE6bJGcMO+wqsBg=)
8: hD3IqorNDrlwkzGUmybhJLv5L2k.roa (hash: ZaWNL4A6CBZBDeNroOwIUO67tG+ZeiSsCvPL+QQ5od4=)
9: hRGXnqMuvvp8ezdGfd45_rLgiwA.roa (hash: c1R3TI5GdxYNvsLIzQT5n+CI+5W996We99FtvnhCTiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft
rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bd:9e:16:82:45:8d:56:8f:03:a1:04:13:5c:95:5c:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=222c4585bd88fb27cadf29ee5bb95d6575fcef83
Validity
Not Before: Sep 20 07:00:49 2026 GMT
Not After : Sep 21 07:00:49 2026 GMT
Subject: CN=0ba759371b240fb62cf13682295d240cb45da234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e4:55:32:af:9d:62:34:0d:c4:1a:69:c7:4e:
03:61:dd:18:53:ac:fe:d5:5a:8b:67:4b:85:e4:7e:
af:c6:3d:d8:d7:41:95:80:fe:e8:57:f6:db:ac:4b:
ac:3d:74:56:7f:0b:f1:16:6a:ea:ba:50:9a:73:9b:
f8:a3:b0:23:50:5f:b3:52:e4:10:2f:d6:6a:62:3b:
ab:bf:b6:96:00:82:7f:9c:ba:15:fd:ae:a4:71:8b:
30:f6:45:7b:f2:fe:69:69:48:35:b1:67:d7:66:d3:
33:17:ca:b5:e5:9e:64:11:a3:49:96:16:e3:6b:f6:
05:ad:ae:2e:17:f2:2f:6b:97:c6:ac:ed:3d:5a:e8:
5c:63:f1:63:6d:c1:55:c1:fd:ce:da:7b:c6:ab:b0:
f3:c8:73:ff:3c:12:63:95:df:bb:b2:cf:ca:1a:3e:
cb:12:0d:ef:43:b9:36:03:62:b2:94:69:8f:54:bf:
03:51:17:fd:53:70:69:9a:8f:f8:50:bf:41:1f:72:
f2:2f:4e:88:df:86:d8:81:60:19:58:d7:32:12:fd:
7c:fb:47:c1:d8:fb:65:7c:b2:60:49:07:48:9d:de:
c9:3f:6a:14:86:05:ab:ce:04:cf:61:75:70:67:f5:
13:ae:de:c6:71:66:1b:bd:1c:50:36:e6:0e:d5:83:
23:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:A7:59:37:1B:24:0F:B6:2C:F1:36:82:29:5D:24:0C:B4:5D:A2:34
X509v3 Authority Key Identifier:
keyid:22:2C:45:85:BD:88:FB:27:CA:DF:29:EE:5B:B9:5D:65:75:FC:EF:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:60:d3:32:43:20:9d:b8:11:26:b6:d9:ad:c2:8d:56:f5:07:
b3:98:39:43:5d:a3:5a:29:bd:41:b7:31:2d:39:d7:e8:67:cf:
da:6e:c4:bb:06:f3:71:4b:0c:7a:b4:01:d2:f0:1d:7a:1a:2f:
0a:12:ed:db:7a:c5:5f:0e:62:f0:47:64:9e:2c:1f:37:31:19:
35:3a:d2:dc:33:9f:fe:d8:ff:6a:fb:43:69:9d:af:ae:c2:eb:
ff:48:b7:bb:7e:56:b8:6f:4c:79:5f:2a:8b:41:08:fb:78:05:
be:97:2f:71:e9:37:dc:15:f7:01:42:e5:e6:6d:9b:70:af:b0:
69:b0:c5:0b:8b:5e:42:8a:f7:b8:43:98:13:cc:16:4e:1a:dd:
54:48:cc:09:ee:8b:86:55:a4:fe:f7:88:a4:fc:a8:da:66:32:
8e:33:cd:94:f2:db:18:c3:f7:4d:42:58:5b:41:63:7e:5e:7e:
cd:55:51:cb:11:ad:e5:40:4b:3a:b6:0c:72:83:88:60:f3:8d:
35:db:82:f4:2a:2c:d3:3e:40:ed:ac:a9:53:51:3e:69:ee:3a:
42:40:b7:cb:a2:1c:e3:f4:3e:78:dc:da:a9:8a:fc:c3:aa:2f:
de:b7:b2:6e:d7:13:dd:10:3e:47:b0:15:e1:0a:dc:96:40:d4:
0a:55:6a:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:47:28 2026 by rpki-client