Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/177f1d-ac39-4a9d-941d-fa8d8ca9495b/1/IONyheqmIxC8nncrST2dYrqKeTg.mft
File: IONyheqmIxC8nncrST2dYrqKeTg.mft (raw, json)
Hash identifier: ftUk73ig7d/iP/8+dzxwSRLEaSOQyNbEnft+LItkMrg=
Subject key identifier: 6A:1B:E4:89:5F:A3:60:67:4E:C6:0E:E8:4C:CC:37:1E:6D:9B:F4:7A
Authority key identifier: 20:E3:72:85:EA:A6:23:10:BC:9E:77:2B:49:3D:9D:62:BA:8A:79:38
Certificate issuer: /CN=20e37285eaa62310bc9e772b493d9d62ba8a7938
Certificate serial: 019FAE2D5EFD5E3530118B2F24FD28D457ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IONyheqmIxC8nncrST2dYrqKeTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/177f1d-ac39-4a9d-941d-fa8d8ca9495b/1/IONyheqmIxC8nncrST2dYrqKeTg.mft
Manifest number: 0A12
Signing time: Wed 29 Jul 2026 14:00:36 +0000
Manifest this update: Wed 29 Jul 2026 14:00:36 +0000
Manifest next update: Thu 30 Jul 2026 14:00:36 +0000
Files and hashes: 1: IONyheqmIxC8nncrST2dYrqKeTg.crl (hash: yMED7EgeoXDkX2iqpZOXCqT5F6jXiqfJTreH3yatZlY=)
2: dshUZvB4McXbpCwuJto_ABAOvNQ.roa (hash: V5ln1lpZELvPyBOpg3oQ56WAm93C6lBYruWQT9Rpyxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/177f1d-ac39-4a9d-941d-fa8d8ca9495b/1/IONyheqmIxC8nncrST2dYrqKeTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/177f1d-ac39-4a9d-941d-fa8d8ca9495b/1/IONyheqmIxC8nncrST2dYrqKeTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IONyheqmIxC8nncrST2dYrqKeTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ae:2d:5e:fd:5e:35:30:11:8b:2f:24:fd:28:d4:57:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20e37285eaa62310bc9e772b493d9d62ba8a7938
Validity
Not Before: Jul 29 14:00:36 2026 GMT
Not After : Jul 30 14:00:36 2026 GMT
Subject: CN=6a1be4895fa360674ec60ee84ccc371e6d9bf47a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2c:c3:e3:b3:f3:89:f5:ef:5d:f2:84:90:62:
31:69:3f:0c:dc:f4:5a:89:2c:84:a1:41:83:3c:b4:
5f:2d:90:fe:9c:34:68:fd:0e:f3:33:c2:fe:b6:69:
8d:b4:8a:bc:54:f1:2f:6b:03:88:84:df:0e:dd:56:
23:d7:9e:f6:ee:ca:92:24:b4:88:be:f3:46:16:5b:
00:01:56:bd:b8:bc:51:e6:88:b6:20:0c:ce:e9:e6:
86:be:43:55:15:86:8a:46:de:40:22:45:14:77:26:
81:87:12:45:b9:bf:a1:b7:14:fd:3a:af:8a:c1:20:
64:e9:b6:6d:4d:ce:ba:fd:ba:aa:47:6a:c7:d8:97:
51:cf:71:7f:5a:e8:a6:0c:4b:8e:0f:77:9a:01:eb:
49:8e:cc:eb:00:5c:e3:27:99:e2:ba:da:3f:41:c9:
35:25:6a:bc:fd:8f:de:a9:47:51:d2:17:80:6a:b1:
d6:fd:8b:d6:ff:68:16:cf:09:69:fb:06:12:7d:4c:
f5:73:e0:0c:dd:38:d9:00:2e:de:79:fa:17:63:99:
e7:b5:bb:6d:e8:90:4d:f4:48:11:25:c3:01:60:af:
16:73:9f:a8:ff:00:a8:51:00:71:91:7c:9c:59:9e:
77:a3:bd:14:fa:1b:a8:38:6a:a5:45:ec:a0:38:b6:
b8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:1B:E4:89:5F:A3:60:67:4E:C6:0E:E8:4C:CC:37:1E:6D:9B:F4:7A
X509v3 Authority Key Identifier:
keyid:20:E3:72:85:EA:A6:23:10:BC:9E:77:2B:49:3D:9D:62:BA:8A:79:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IONyheqmIxC8nncrST2dYrqKeTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/177f1d-ac39-4a9d-941d-fa8d8ca9495b/1/IONyheqmIxC8nncrST2dYrqKeTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/177f1d-ac39-4a9d-941d-fa8d8ca9495b/1/IONyheqmIxC8nncrST2dYrqKeTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:a4:ee:88:31:82:0d:ee:78:e4:b3:c3:43:0b:27:04:c0:1d:
df:8d:4e:03:be:21:f0:75:4d:6d:2c:a0:da:ee:cf:de:56:f0:
bb:67:64:c2:0a:5d:1f:03:c2:a8:dc:3d:94:09:b4:93:43:50:
41:4d:f6:00:2a:b3:5b:b4:fc:a5:a0:a2:23:fe:10:a6:44:bc:
dd:d9:ec:26:39:51:fd:30:c8:9b:ef:ee:0e:a5:79:be:23:a1:
3b:b6:7c:13:1f:7f:07:9b:95:8f:a7:76:31:7b:13:a6:cb:d9:
61:8c:89:db:6e:09:ee:58:47:71:5b:34:14:19:97:d0:0b:1b:
a0:26:f9:c1:42:86:81:38:23:33:6a:f3:6f:60:1d:c8:90:2b:
4f:67:95:4d:57:07:98:b2:8f:a3:0a:2b:6f:9e:cf:96:fb:a7:
24:91:44:a4:d1:9a:23:17:7a:02:3a:ab:d8:f5:61:7d:3b:43:
46:d9:a4:8f:ad:1e:48:aa:33:e8:bb:5f:3c:db:fd:7e:65:83:
30:3e:65:00:4f:2a:7f:f0:31:05:ca:ef:17:a0:cc:15:12:da:
e7:07:09:8e:c1:d2:ab:36:a3:ff:0a:bb:18:af:b1:4d:2a:99:
68:a0:61:da:d5:64:3c:cf:ac:0c:6a:9b:34:be:5a:6c:17:b7:
f6:86:7a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 16:31:24 2026 by rpki-client