
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft
File: I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft (raw, json)
Hash identifier: FK2fzbTtucxby4eVrze3C97fW6Tq4VJ6kc3MLRnhUIo=
Subject key identifier: 48:5B:BC:8C:15:46:01:18:43:6F:F2:89:B1:BC:94:D9:FB:48:6B:B7
Authority key identifier: 23:89:34:1E:10:E6:B0:21:FA:84:7F:55:5E:56:03:DE:F8:5D:2C:2B
Certificate issuer: /CN=2389341e10e6b021fa847f555e5603def85d2c2b
Certificate serial: 019FAABE69784ADD2843A1A2D31442325755
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I4k0HhDmsCH6hH9VXlYD3vhdLCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft
Manifest number: 0D9A
Signing time: Tue 28 Jul 2026 22:00:33 +0000
Manifest this update: Tue 28 Jul 2026 22:00:33 +0000
Manifest next update: Wed 29 Jul 2026 22:00:33 +0000
Files and hashes: 1: I4k0HhDmsCH6hH9VXlYD3vhdLCs.crl (hash: XmKY7jFhss/45BgXOnFpEDMBRaS4mbGUVSn8p6HNYjA=)
2: ame8Z_daacjlEpmtE4K5w-dphW4.roa (hash: +YVtLUb/550grkiEIWmP1qcdaH2cQJ56+a6ZIvzeo2Y=)
3: b336X3WeMeMqlclahAX3Nlijuow.roa (hash: qBZyaLyDbfB2OL3m5O3Gqj9tW/vJBs1SdtUmTpwnruE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/I4k0HhDmsCH6hH9VXlYD3vhdLCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:69:78:4a:dd:28:43:a1:a2:d3:14:42:32:57:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2389341e10e6b021fa847f555e5603def85d2c2b
Validity
Not Before: Jul 28 22:00:33 2026 GMT
Not After : Jul 29 22:00:33 2026 GMT
Subject: CN=485bbc8c15460118436ff289b1bc94d9fb486bb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c9:cc:7f:30:55:db:19:8a:e6:b8:90:54:8b:
3b:5f:b5:ce:25:29:f1:5e:3c:60:ed:12:64:47:52:
3a:1e:0e:57:4a:52:a1:ab:a3:b6:f7:d5:d8:ab:5e:
34:79:db:d6:74:c4:b8:b2:6d:46:13:8e:e3:3f:ca:
f7:d4:7c:1f:a0:e1:9f:b9:f9:20:17:31:14:7c:31:
5c:ef:a5:63:d1:96:41:1d:7b:6a:8a:d1:30:f3:82:
f2:48:1e:fc:4d:d7:e5:04:99:b3:d9:5f:1f:53:6e:
88:d4:87:ea:13:8f:51:9b:1c:94:4b:c9:62:e7:01:
ce:2f:1a:9f:34:5a:f7:20:2e:ca:d7:19:56:5d:f1:
86:1b:69:f6:5b:b3:3c:f4:a9:10:62:23:a8:63:ae:
56:41:73:7b:32:f7:60:98:d0:58:8a:30:51:30:87:
94:64:25:e0:e0:76:d1:0c:e6:38:d1:cb:3f:2f:e4:
bf:16:63:ac:07:3f:6a:1d:18:bb:14:46:58:89:67:
a6:aa:15:ea:71:7a:1d:4f:5e:b4:8a:6a:30:a0:61:
ca:56:c3:fa:c9:ae:46:db:39:2d:46:ef:31:0d:d8:
45:5e:f9:b4:c3:1c:81:bd:51:b7:8e:38:02:b4:1c:
ec:4f:c4:7c:7d:fa:4c:2f:c5:9c:65:4d:56:71:f0:
44:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:5B:BC:8C:15:46:01:18:43:6F:F2:89:B1:BC:94:D9:FB:48:6B:B7
X509v3 Authority Key Identifier:
keyid:23:89:34:1E:10:E6:B0:21:FA:84:7F:55:5E:56:03:DE:F8:5D:2C:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I4k0HhDmsCH6hH9VXlYD3vhdLCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:50:3a:42:10:ea:6a:30:0d:c6:93:61:6b:c2:5a:ba:85:6e:
1a:55:38:9b:ae:c9:4c:3f:e5:7e:05:2a:bd:ec:2a:0e:8f:99:
8b:9d:80:17:73:71:8a:cc:2e:c7:6a:0e:24:ed:4f:06:b8:e1:
78:17:27:6e:31:28:b8:1e:1e:2d:55:83:ae:ac:d9:a8:6a:ad:
d7:09:2c:d0:ee:a1:4c:ec:19:19:58:95:f6:be:f7:33:db:f4:
d5:76:6d:84:00:db:f2:96:b3:ca:04:ed:e2:72:72:d1:7a:55:
f9:f1:62:a9:5e:63:bb:f0:77:bd:4d:aa:e4:a4:3c:55:6b:37:
4f:88:3e:59:82:c6:0c:e7:ab:38:e8:26:bc:43:3a:ad:a3:b2:
91:bf:8e:6f:77:92:45:6d:a0:cb:55:89:f4:16:86:60:83:a2:
0f:80:da:5b:d2:8e:74:19:6e:e4:a1:05:0b:8a:ff:5f:70:2e:
0a:7a:90:c6:ae:1f:a8:6e:18:4a:37:0b:06:7c:69:5d:b3:44:
61:36:8e:35:a1:2c:e7:22:40:b1:a6:c2:3a:50:fc:1e:d7:03:
86:1f:9d:e6:2e:21:e5:27:ad:05:44:b9:23:17:be:15:1f:f0:
84:03:3d:ab:d4:1a:98:00:ff:ad:26:36:0d:13:09:bf:17:14:
59:ba:ea:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:45:52 2026 by rpki-client