Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.mft
File: IUblYKP1ysfGT-DxO-Zj2UyHFFM.mft (raw, json)
Hash identifier: ZUZ9OpUMOdRfEh8RrojLVRuoYBGxyR8yl/ROXwO5c6c=
Subject key identifier: D7:8A:39:DC:24:2F:3E:C6:91:AE:81:04:4E:40:BB:FD:F2:A0:C1:75
Authority key identifier: 21:46:E5:60:A3:F5:CA:C7:C6:4F:E0:F1:3B:E6:63:D9:4C:87:14:53
Certificate issuer: /CN=2146e560a3f5cac7c64fe0f13be663d94c871453
Certificate serial: 019EBFC82C3D3132E9915AC552176D4E2F04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IUblYKP1ysfGT-DxO-Zj2UyHFFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.mft
Manifest number: 07DF
Signing time: Sat 13 Jun 2026 07:00:27 +0000
Manifest this update: Sat 13 Jun 2026 07:00:27 +0000
Manifest next update: Sun 14 Jun 2026 07:00:27 +0000
Files and hashes: 1: IUblYKP1ysfGT-DxO-Zj2UyHFFM.crl (hash: tuL7Hxf42dY93ga0pthWntWzMx5J889uBFfhslozUIU=)
2: LjoyTAIqIdVonXqWj6vk4FoukK0.roa (hash: bQBFj6QQOo1AQBEY/tE2iTw4IsOMKBpMDv9YhAGGsps=)
3: PAUyEeyz0ynlGNIPQlDkGnYP9qw.roa (hash: rPWU+wKJ+ccuMgvRWcLsdSjoKQhoTdU4QLcfL/aRiOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IUblYKP1ysfGT-DxO-Zj2UyHFFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:c8:2c:3d:31:32:e9:91:5a:c5:52:17:6d:4e:2f:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2146e560a3f5cac7c64fe0f13be663d94c871453
Validity
Not Before: Jun 13 07:00:27 2026 GMT
Not After : Jun 14 07:00:27 2026 GMT
Subject: CN=d78a39dc242f3ec691ae81044e40bbfdf2a0c175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f9:9b:5b:28:48:58:ff:a3:11:22:fe:db:19:
07:df:8b:f1:ae:67:24:8d:fd:d8:9c:89:21:0d:6c:
d7:15:89:91:a2:e1:bc:dd:6a:c5:cd:91:1f:83:68:
fc:4d:c0:83:73:1f:3a:3b:1c:be:f5:87:30:63:8f:
29:bb:96:20:d2:4e:9d:6c:5b:c0:3e:56:b9:a6:4d:
df:c3:a3:11:8a:53:cb:10:17:bf:34:bd:62:e0:84:
c9:e2:c3:7b:6a:eb:c5:c1:99:b7:81:95:bf:5c:93:
5f:a9:5f:42:7e:04:ca:7d:b9:16:20:52:e9:4d:a3:
16:ec:ec:31:0e:fa:13:ea:62:f9:02:0c:d3:54:b4:
02:f8:55:52:a6:b9:4b:46:1e:c4:60:45:24:53:58:
df:af:8f:75:fc:0f:c6:22:55:fa:57:41:b1:09:73:
ee:01:65:b2:c2:fd:1a:41:c3:85:b7:59:5f:39:a7:
b0:70:10:2d:43:14:e3:f9:d4:c3:12:56:11:d1:15:
1b:ec:4d:6f:38:5f:94:cc:84:cf:86:8f:7d:97:2b:
c1:e3:59:ae:22:76:b1:15:38:1f:e0:b1:1d:fd:28:
88:8b:d1:16:35:49:c2:04:70:b1:e7:52:68:20:14:
83:1c:92:81:71:46:80:da:d5:de:88:37:32:60:36:
38:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:8A:39:DC:24:2F:3E:C6:91:AE:81:04:4E:40:BB:FD:F2:A0:C1:75
X509v3 Authority Key Identifier:
keyid:21:46:E5:60:A3:F5:CA:C7:C6:4F:E0:F1:3B:E6:63:D9:4C:87:14:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IUblYKP1ysfGT-DxO-Zj2UyHFFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:27:b7:71:68:4c:e6:07:f2:06:7d:51:6e:6b:dc:2f:da:71:
88:fa:bb:6e:94:78:19:e7:d2:ac:1c:56:b3:83:01:d3:e1:63:
6b:3a:61:1b:83:ba:57:65:09:05:a1:d5:c3:bb:73:21:fa:29:
e7:f8:94:6d:3e:70:5d:e0:a3:a2:5f:56:74:71:b5:c5:a5:b0:
6a:5d:41:9a:6c:d1:8a:12:e6:0f:73:6e:5c:c7:89:89:6b:2d:
51:4a:fd:3a:37:a8:92:1c:ad:3c:cc:b9:bc:b6:41:49:9a:30:
cb:37:58:69:0f:f7:55:2a:28:6e:47:83:28:d3:25:fe:5e:77:
ad:00:99:61:f3:9b:4f:83:62:1e:99:a3:fa:77:6b:26:d4:fe:
f6:5e:31:31:d5:aa:44:e7:60:70:78:f8:b8:84:70:3f:ba:9c:
cb:97:17:d4:6c:60:ab:a5:1c:ea:29:d4:47:3b:8f:57:ae:32:
a5:bf:cb:7f:45:5f:48:20:6c:cf:31:e9:9e:ab:55:fd:22:70:
64:64:12:59:a1:21:9c:5c:74:7f:a8:bd:4a:4d:21:61:d6:b8:
df:e4:c9:a1:54:79:39:be:5f:bb:d9:4b:e9:e8:2e:19:e6:c5:
a1:47:9d:3c:6b:ff:f7:43:46:11:38:8e:ec:f1:b3:2e:2b:47:
5b:2f:c0:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:44:52 2026 by rpki-client