Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/5e4d7e-ac21-4f02-9581-f00d92dc07b8/1/mIb0shUIFe2ng-fzz7m35Tzn2X8.mft
File: mIb0shUIFe2ng-fzz7m35Tzn2X8.mft (raw, json)
Hash identifier: 0TKHQLDzdE9RY1gVRcBOA+huwEhLG/1MTPIqj6sjOmc=
Subject key identifier: A4:5C:8E:0D:DB:54:BD:56:69:49:75:93:1F:B5:2D:AE:90:93:75:FB
Authority key identifier: 98:86:F4:B2:15:08:15:ED:A7:83:E7:F3:CF:B9:B7:E5:3C:E7:D9:7F
Certificate issuer: /CN=9886f4b2150815eda783e7f3cfb9b7e53ce7d97f
Certificate serial: 019EC25C1105F63774AAEA158C609CA24421
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mIb0shUIFe2ng-fzz7m35Tzn2X8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/5e4d7e-ac21-4f02-9581-f00d92dc07b8/1/mIb0shUIFe2ng-fzz7m35Tzn2X8.mft
Manifest number: 36
Signing time: Sat 13 Jun 2026 19:01:14 +0000
Manifest this update: Sat 13 Jun 2026 19:01:14 +0000
Manifest next update: Sun 14 Jun 2026 19:01:14 +0000
Files and hashes: 1: E6Emgi8OOcxRYIN6dlPoick6xdc.roa (hash: b17vqDW+cXgHkIk7rlMgxV1W0X2t1+N9MIRFO/oaFGs=)
2: cJhwzvA4MmD9szzdzlqYrmM_RIk.roa (hash: 0CQ7EyVMolzZdZkEGpCpBtQGO5aHXkTTya7T0UCv1hY=)
3: mIb0shUIFe2ng-fzz7m35Tzn2X8.crl (hash: pGOMYV1oQU3H7UTXL3f3hE8phI7JhFlsMo12bV/L53Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/5e4d7e-ac21-4f02-9581-f00d92dc07b8/1/mIb0shUIFe2ng-fzz7m35Tzn2X8.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/5e4d7e-ac21-4f02-9581-f00d92dc07b8/1/mIb0shUIFe2ng-fzz7m35Tzn2X8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mIb0shUIFe2ng-fzz7m35Tzn2X8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:5c:11:05:f6:37:74:aa:ea:15:8c:60:9c:a2:44:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9886f4b2150815eda783e7f3cfb9b7e53ce7d97f
Validity
Not Before: Jun 13 19:01:14 2026 GMT
Not After : Jun 14 19:01:14 2026 GMT
Subject: CN=a45c8e0ddb54bd56694975931fb52dae909375fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:17:54:ae:32:4b:27:cc:0c:56:7b:d7:8c:f3:
26:0a:d6:1a:6f:a9:ad:bc:4b:70:09:62:8e:b7:9d:
b1:9d:f2:4b:ae:b4:30:6a:fe:5f:17:77:a2:e9:ad:
88:c7:65:d7:77:08:99:00:47:c1:1f:31:a6:20:1b:
ec:6a:03:ed:d5:1c:2d:ca:89:08:67:5e:e2:07:79:
9d:eb:c0:ed:b9:1c:9a:37:4b:53:3a:1d:ac:89:c0:
9d:da:05:82:76:61:f9:39:c6:41:c4:08:c9:e9:00:
ec:f7:4f:b4:81:38:e6:ee:66:4f:3d:55:d1:5a:cd:
b0:22:29:81:e5:c9:96:6b:3d:f7:a6:25:8c:89:76:
63:a1:a0:aa:4f:7d:34:d9:ea:92:c2:4d:10:1e:d4:
53:4e:47:5c:b6:a3:32:96:3d:d0:0e:24:06:8d:ef:
29:e1:cc:93:e1:dd:64:25:19:ae:91:3e:ae:da:25:
e7:50:10:ae:1d:b2:3f:b1:8f:23:bc:5b:ef:52:b0:
f4:e3:13:88:4e:d2:02:36:f6:93:6f:a2:12:30:02:
05:f0:3e:2b:bf:de:ac:a0:99:7f:d2:bf:f5:d8:2a:
82:19:dd:d4:92:fc:96:06:63:ce:2d:4f:ae:8b:c8:
de:d9:78:be:4c:2b:72:1e:76:66:aa:d8:a8:67:81:
09:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:5C:8E:0D:DB:54:BD:56:69:49:75:93:1F:B5:2D:AE:90:93:75:FB
X509v3 Authority Key Identifier:
keyid:98:86:F4:B2:15:08:15:ED:A7:83:E7:F3:CF:B9:B7:E5:3C:E7:D9:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mIb0shUIFe2ng-fzz7m35Tzn2X8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/5e4d7e-ac21-4f02-9581-f00d92dc07b8/1/mIb0shUIFe2ng-fzz7m35Tzn2X8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/5e4d7e-ac21-4f02-9581-f00d92dc07b8/1/mIb0shUIFe2ng-fzz7m35Tzn2X8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:d4:cb:3f:f0:2c:68:4c:04:fa:31:8f:d5:19:42:59:bb:8d:
b4:27:68:bf:40:72:c3:2d:cd:3c:b1:2f:85:08:dc:6d:39:9a:
3f:4b:1b:4f:a5:29:43:77:11:29:b2:00:db:29:eb:d0:fe:ee:
ec:92:0f:4d:d1:52:f4:3a:e4:8b:9b:a3:96:1f:30:ce:d9:98:
ff:93:2f:3e:d4:2a:a8:d5:ae:e3:53:cc:95:76:01:0b:9c:d6:
05:0b:4e:24:88:14:ed:61:08:20:3a:b0:a8:d9:d2:03:e2:71:
0e:c5:1f:1a:7e:ce:fc:ee:6f:9d:c3:d0:e4:f0:5b:96:20:37:
11:44:2b:06:66:cd:84:cd:2d:b0:03:86:be:57:fc:ba:fb:e5:
6e:3d:55:3b:1f:4e:a5:c1:87:e4:21:a6:58:94:f9:20:57:1a:
65:a0:50:54:03:24:ff:b5:11:22:d2:dc:01:ed:81:36:59:e9:
73:61:19:89:b1:b2:a5:56:69:64:fd:59:4f:2c:5b:eb:06:05:
33:a5:17:df:90:59:38:00:fe:cd:42:17:2e:5f:51:90:d6:78:
90:a4:bc:24:78:b3:40:77:96:9d:17:83:fa:24:28:3c:bc:8b:
7c:5e:53:e8:91:bd:22:e5:53:1c:c1:b8:0a:79:5e:4b:f3:fe:
32:95:d7:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:47:10 2026 by rpki-client