Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft
File: IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft (raw, json)
Hash identifier: Nz9WZe27zX9KHFbyNpNgNnhwCK+0grd66Vq9CgRS/bw=
Subject key identifier: A6:EA:84:FE:D8:9E:3B:38:E0:AC:7D:16:65:2E:F3:75:2E:B8:C2:98
Authority key identifier: 20:59:45:44:3C:5B:25:E4:DC:F6:20:3F:06:1A:C0:4D:36:87:15:54
Certificate issuer: /CN=205945443c5b25e4dcf6203f061ac04d36871554
Certificate serial: 019FAA5070E4C5FF5FF7ACA2AE731E0B950A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IFlFRDxbJeTc9iA_BhrATTaHFVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft
Manifest number: 19D7
Signing time: Tue 28 Jul 2026 20:00:26 +0000
Manifest this update: Tue 28 Jul 2026 20:00:26 +0000
Manifest next update: Wed 29 Jul 2026 20:00:26 +0000
Files and hashes: 1: GxGTOBMeu2N1blMJyGtOJ7pqxXk.roa (hash: zCml5uGaaanR/bHz+EfmHiD1+eZh00uY8Hx7W5hVHSg=)
2: IFlFRDxbJeTc9iA_BhrATTaHFVQ.crl (hash: GBRUK3EPEwBIHzjGJV3TsxFQ0XLZDZTpa8LzwaJ7bbM=)
3: YjNimSSaeGK3n8MwVhk-9Cqv_GI.asa (hash: +F1lNWpsiSJ4ZGqtn3gB2gX0yzl211t0f9qJlyvkLm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IFlFRDxbJeTc9iA_BhrATTaHFVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 20:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:70:e4:c5:ff:5f:f7:ac:a2:ae:73:1e:0b:95:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=205945443c5b25e4dcf6203f061ac04d36871554
Validity
Not Before: Jul 28 20:00:26 2026 GMT
Not After : Jul 29 20:00:26 2026 GMT
Subject: CN=a6ea84fed89e3b38e0ac7d16652ef3752eb8c298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:49:55:d1:09:02:7c:d9:97:3d:c0:bc:15:5b:
40:c3:ab:20:7a:b4:e6:64:8c:bf:d5:0b:62:94:58:
dd:22:60:14:9c:10:95:75:57:56:00:b1:bd:21:fa:
e6:c3:42:c1:5e:d9:81:7f:be:8e:50:92:e6:71:80:
88:06:8e:41:7c:b1:ec:7e:6f:5b:34:05:06:53:76:
cf:34:9a:c8:59:1e:42:ad:c6:15:bf:2d:6b:a1:ca:
f7:9a:7e:99:b4:2f:04:4e:40:31:4a:e2:53:db:d2:
3a:2b:fb:64:05:0f:b0:35:d0:d6:42:b9:ae:62:42:
06:e8:0f:c7:9e:27:25:d0:ce:6f:40:57:79:96:57:
85:c3:c4:24:ec:e8:d2:b3:17:64:36:f2:e5:6a:25:
63:ff:81:4e:9a:76:95:b9:59:df:a9:e6:f8:14:79:
85:ea:dc:ca:2c:ef:93:cc:05:2c:32:d9:66:f9:e4:
9c:f4:85:59:a4:57:b9:97:1b:08:99:88:a7:f9:3b:
21:28:f0:24:14:20:be:49:89:a0:04:8e:5b:21:a2:
54:3e:1e:69:42:a1:d4:42:35:0b:3b:13:a2:93:99:
f5:5b:60:4c:ff:4b:cf:43:d9:dc:88:70:ae:fa:e5:
d8:6c:72:f3:1e:d4:2d:09:c6:6a:fc:db:46:22:f8:
2f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:EA:84:FE:D8:9E:3B:38:E0:AC:7D:16:65:2E:F3:75:2E:B8:C2:98
X509v3 Authority Key Identifier:
keyid:20:59:45:44:3C:5B:25:E4:DC:F6:20:3F:06:1A:C0:4D:36:87:15:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IFlFRDxbJeTc9iA_BhrATTaHFVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:36:82:df:d3:43:80:85:85:f9:0b:a3:91:9b:2f:2a:05:9e:
07:35:1b:cc:b9:ff:b1:79:86:48:d4:11:57:d9:73:e1:09:2e:
7a:26:94:5f:f3:8b:a5:72:47:9a:71:a8:60:03:da:72:50:3d:
f7:85:5b:63:70:91:86:55:5e:b0:32:29:6f:21:b0:46:e5:fe:
cd:d8:61:83:08:90:ea:d1:1d:f7:5c:f8:83:c5:6f:92:f7:c2:
39:a8:f7:db:80:b1:4a:18:7e:b1:13:a5:a2:8c:39:39:af:8c:
ce:34:dd:62:96:1a:da:7e:60:94:53:1d:75:ff:b9:e1:11:2d:
19:32:4e:99:07:e0:1e:d4:52:ef:d0:5c:5d:20:77:6c:82:12:
24:6e:e8:93:d1:71:07:48:55:2d:28:d6:fd:04:01:7b:f9:3d:
c0:d9:5b:bb:9d:6b:cc:3c:0b:24:02:9b:ba:c7:6d:da:2c:8d:
15:9c:a7:b6:83:29:d7:68:b4:af:19:a3:b2:8f:00:e8:ad:59:
b6:49:cc:99:b4:83:44:77:5c:32:b9:99:64:8f:15:03:f1:9d:
b2:1d:06:11:48:f5:bf:ef:33:30:e5:43:b2:20:b5:81:b7:5f:
af:1c:04:04:19:32:63:50:b5:e7:ce:b5:24:54:ab:6f:d5:6a:
27:f0:d6:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:01:04 2026 by rpki-client