Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/b56463-59ea-494b-8816-e02023f122e8/1/IkRK1QtOfbbWPJiQF9DlknSV52s.mft
File: IkRK1QtOfbbWPJiQF9DlknSV52s.mft (raw, json)
Hash identifier: iiBcOhNyYPTrJ0lmR5ePVQCV958zNiD0cinA8wcjrII=
Subject key identifier: DB:AA:D2:7E:7A:5C:C5:26:7E:C8:E7:1B:8A:34:B0:B8:A5:04:75:76
Authority key identifier: 22:44:4A:D5:0B:4E:7D:B6:D6:3C:98:90:17:D0:E5:92:74:95:E7:6B
Certificate issuer: /CN=22444ad50b4e7db6d63c989017d0e5927495e76b
Certificate serial: 019FAC08C0B946E247C89A314A024216A14A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IkRK1QtOfbbWPJiQF9DlknSV52s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/b56463-59ea-494b-8816-e02023f122e8/1/IkRK1QtOfbbWPJiQF9DlknSV52s.mft
Manifest number: 022E
Signing time: Wed 29 Jul 2026 04:01:22 +0000
Manifest this update: Wed 29 Jul 2026 04:01:22 +0000
Manifest next update: Thu 30 Jul 2026 04:01:22 +0000
Files and hashes: 1: 0UJ55DUEjeibc7wTso1_f6VUnhc.asa (hash: FH/6k5/NmJrDnuK/OxObcfgW++VOBxemcPQj9UKf598=)
2: IkRK1QtOfbbWPJiQF9DlknSV52s.crl (hash: IK45trRtouG7RogvygOxHx4jpU5yE2+wX06eHxTaZr0=)
3: psWf16-euXoZZyipKgg4GGHcKWo.roa (hash: 9Dq5TbddVkCgvKuTdX4uUTRcMjOGR2syGrgqitoMwqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/b56463-59ea-494b-8816-e02023f122e8/1/IkRK1QtOfbbWPJiQF9DlknSV52s.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/b56463-59ea-494b-8816-e02023f122e8/1/IkRK1QtOfbbWPJiQF9DlknSV52s.mft
rsync://rpki.ripe.net/repository/DEFAULT/IkRK1QtOfbbWPJiQF9DlknSV52s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:08:c0:b9:46:e2:47:c8:9a:31:4a:02:42:16:a1:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22444ad50b4e7db6d63c989017d0e5927495e76b
Validity
Not Before: Jul 29 04:01:22 2026 GMT
Not After : Jul 30 04:01:22 2026 GMT
Subject: CN=dbaad27e7a5cc5267ec8e71b8a34b0b8a5047576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:fc:b7:88:b9:b3:2b:81:ff:b9:9f:9f:61:7d:
32:10:c2:56:a2:52:d1:4a:ce:40:f1:9f:8a:a7:19:
e9:75:cc:84:c6:49:b8:2d:9b:c5:b4:08:1f:fe:c4:
a8:a8:77:64:11:a7:03:35:a8:2b:f7:9c:a9:96:e9:
13:ca:d3:02:f5:e9:6d:84:ce:37:f6:11:60:5b:7d:
2f:c5:95:d6:2d:35:d6:15:1d:73:52:00:88:4f:05:
43:03:60:08:5d:3f:92:00:21:81:6c:40:ec:73:52:
68:8d:cc:d1:a8:b9:2f:71:1a:87:87:40:c0:4c:38:
89:dd:21:a2:38:df:40:6d:7a:8c:e3:20:6c:2d:56:
58:57:5a:cd:da:90:7b:f9:3d:49:4f:0e:9b:50:92:
82:35:ea:d0:88:4d:e6:41:26:74:5d:5b:f0:1d:5f:
ba:46:f4:e5:2e:6e:09:83:75:25:c7:b2:94:cb:70:
47:7c:bb:35:18:41:d6:48:16:54:ac:fa:59:f8:e9:
f4:79:fd:2e:f0:e4:97:35:c8:36:00:c4:93:13:3a:
6c:bd:2f:f2:59:6f:ce:3c:c5:7e:18:3b:d7:3c:c2:
4d:32:07:59:d4:1f:a4:80:af:49:08:76:19:76:08:
7b:fe:ec:50:09:88:aa:eb:ee:79:56:3b:48:19:64:
52:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:AA:D2:7E:7A:5C:C5:26:7E:C8:E7:1B:8A:34:B0:B8:A5:04:75:76
X509v3 Authority Key Identifier:
keyid:22:44:4A:D5:0B:4E:7D:B6:D6:3C:98:90:17:D0:E5:92:74:95:E7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IkRK1QtOfbbWPJiQF9DlknSV52s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/b56463-59ea-494b-8816-e02023f122e8/1/IkRK1QtOfbbWPJiQF9DlknSV52s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/b56463-59ea-494b-8816-e02023f122e8/1/IkRK1QtOfbbWPJiQF9DlknSV52s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:0b:5b:fd:d8:19:08:64:81:28:09:cd:7f:1b:66:04:bd:d5:
da:f9:63:ea:ab:04:20:53:ad:7f:8d:ad:34:50:bd:aa:15:3e:
ab:ed:f1:6f:f1:6a:e8:63:f1:23:fa:90:6e:8a:cc:28:fb:52:
71:71:14:c2:d1:cf:94:bb:2e:ff:b0:99:10:f6:48:43:2f:de:
62:64:6b:91:11:f8:c9:fd:27:3d:fd:ab:57:9a:2f:06:b9:79:
08:99:36:15:c3:08:a6:dc:01:0e:52:89:4d:a5:c6:43:74:db:
f7:78:8f:6d:e4:42:5b:39:30:46:e7:ae:fc:0e:54:07:8f:96:
52:16:10:d8:a5:b9:d5:f8:99:0a:c3:a8:44:f2:fd:21:6e:37:
20:14:51:be:cb:a7:7a:eb:ab:24:56:d7:b9:09:84:55:73:32:
54:f0:e4:84:10:b5:55:97:b0:11:68:91:02:7c:f9:08:9c:c3:
dc:1f:19:ff:30:d2:b7:1a:5a:34:51:47:1f:3a:02:87:ee:cf:
43:2e:7d:6f:be:60:70:d0:e7:d6:8b:f1:b3:99:65:3a:54:f3:
87:8e:62:76:84:20:6a:9a:6a:18:90:73:ff:51:d3:94:c0:2e:
34:00:a2:3d:54:4a:f2:42:bf:91:e7:de:7d:9a:4b:62:e1:fb:
90:db:b7:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:50:22 2026 by rpki-client