
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.mft
File: i25luC_kAH6C_S2xNM9Cxq7E4Lw.mft (raw, json)
Hash identifier: HWtUPi1k1CYK/XugM1jfH0niDRomdHQDIzOCXuw3epE=
Subject key identifier: 1B:91:6D:DB:C0:58:CC:C2:86:3D:A5:C3:B5:C6:6E:06:87:84:60:5E
Authority key identifier: 8B:6E:65:B8:2F:E4:00:7E:82:FD:2D:B1:34:CF:42:C6:AE:C4:E0:BC
Certificate issuer: /CN=8b6e65b82fe4007e82fd2db134cf42c6aec4e0bc
Certificate serial: 019FAD1A9FE835F19B21DD3CEC9C549C01EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i25luC_kAH6C_S2xNM9Cxq7E4Lw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.mft
Manifest number: 19D4
Signing time: Wed 29 Jul 2026 09:00:30 +0000
Manifest this update: Wed 29 Jul 2026 09:00:30 +0000
Manifest next update: Thu 30 Jul 2026 09:00:30 +0000
Files and hashes: 1: fe5q7Ym0eOTsgMAB1IUrjncVBXg.roa (hash: 5UUqkfEzMB1xSChuf7PbFjMq0H7jo6WK6DJ2it+YBAc=)
2: i25luC_kAH6C_S2xNM9Cxq7E4Lw.crl (hash: pqrkhoX0J1HOdNAFus+2H3s+tLXOUukNtNXQh2g4m9g=)
3: tX7VJWazlnGg57nYx0SdqCcW42M.roa (hash: a4ThqNr+E56D9pM0rGPy4dnLeWvNfcYrPQOSDN6v3Ws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.mft
rsync://rpki.ripe.net/repository/DEFAULT/i25luC_kAH6C_S2xNM9Cxq7E4Lw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:1a:9f:e8:35:f1:9b:21:dd:3c:ec:9c:54:9c:01:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6e65b82fe4007e82fd2db134cf42c6aec4e0bc
Validity
Not Before: Jul 29 09:00:30 2026 GMT
Not After : Jul 30 09:00:30 2026 GMT
Subject: CN=1b916ddbc058ccc2863da5c3b5c66e068784605e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f5:22:8f:9f:40:3d:fc:92:32:2d:04:fe:fd:
67:55:11:a6:de:95:fb:75:83:06:6c:bd:9a:80:87:
b3:48:63:6b:00:40:a5:f2:06:71:76:98:8b:63:5c:
9c:4b:6a:85:cf:d2:ef:94:36:81:55:10:60:fc:d5:
91:34:24:a4:5a:92:55:ad:b1:eb:f3:a6:65:6f:19:
a3:99:7d:ba:1d:68:c4:ac:c2:b4:53:f8:12:fc:cd:
44:f4:5d:ab:1b:bf:5c:d8:5a:e7:ed:0a:92:5e:0a:
19:b6:60:a2:e9:8d:42:dd:ea:f1:8f:57:16:87:87:
a2:f0:83:ef:45:e0:30:74:8d:9f:4b:0d:51:83:05:
ed:2a:ac:6b:76:2a:06:38:01:23:d0:cd:56:de:98:
dc:0d:12:11:55:30:4a:ce:e9:cb:26:91:44:9f:07:
d2:22:bb:02:d7:0f:c0:4f:ee:d9:cf:b5:09:e6:8e:
32:23:d6:2d:40:6b:4d:60:7c:05:4e:c8:2d:87:b2:
d6:3a:cb:a9:bc:ef:a4:e7:64:75:ba:2a:a0:df:00:
e8:1c:53:b3:8b:58:d1:47:a8:a5:f9:d5:27:88:94:
01:77:15:23:66:82:25:9d:21:9b:e3:fb:a4:61:ac:
f3:48:13:ac:ff:0a:09:92:0d:9c:ac:d1:82:85:58:
74:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:91:6D:DB:C0:58:CC:C2:86:3D:A5:C3:B5:C6:6E:06:87:84:60:5E
X509v3 Authority Key Identifier:
keyid:8B:6E:65:B8:2F:E4:00:7E:82:FD:2D:B1:34:CF:42:C6:AE:C4:E0:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i25luC_kAH6C_S2xNM9Cxq7E4Lw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:9d:1e:be:bc:64:13:fd:56:bc:44:85:e1:2a:e9:1c:ec:f3:
12:e4:00:f3:93:be:a8:e9:14:ad:32:41:8f:7a:21:15:81:2c:
0d:e3:2a:7f:fb:3d:60:b6:5e:db:16:98:05:1d:7b:f3:a1:25:
4a:1e:ee:e5:71:dd:12:e9:09:52:78:14:40:a2:c7:37:1e:22:
a4:c4:bc:d2:ac:78:78:f2:1a:1e:df:3f:49:39:cc:34:c9:fa:
79:17:f9:32:f2:61:84:59:cb:51:d7:df:f8:a4:af:5c:56:27:
4e:54:8f:2a:02:46:ba:15:83:84:2e:ba:84:d1:06:23:89:29:
77:34:ab:17:48:eb:95:46:83:fd:44:49:d9:32:f4:76:56:ce:
12:73:05:d0:b2:db:aa:25:75:c4:ee:2d:02:cc:3b:9c:05:fd:
5e:24:c7:4b:4b:42:0e:82:a6:fe:ee:b0:a9:d3:07:03:9a:90:
52:b3:22:f1:ae:bc:cc:09:83:ad:97:39:c4:6a:88:0d:f8:94:
0d:b6:89:49:c4:a6:6c:16:1b:7c:57:15:48:76:65:ea:46:bf:
81:7d:bf:01:1d:2c:88:0c:98:66:02:4f:24:c3:7a:dc:af:19:
4d:3f:c9:f8:1b:20:4b:fd:dd:2f:d9:54:a3:54:5e:4e:c0:a2:
59:2c:c6:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:10:45 2026 by rpki-client