Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.mft
File: IURHLRaXNp2DK6Em5eFyMqzV9fM.mft (raw, json)
Hash identifier: ilKYt0nzrRCBSEQvtuWKPt1IdZm0FGro/smKtYfyNH8=
Subject key identifier: 69:15:03:08:B8:C6:5D:08:C3:71:8E:B5:26:F1:35:32:6C:75:57:52
Authority key identifier: 21:44:47:2D:16:97:36:9D:83:2B:A1:26:E5:E1:72:32:AC:D5:F5:F3
Certificate issuer: /CN=2144472d1697369d832ba126e5e17232acd5f5f3
Certificate serial: 019ED5078416BC8F2ABDD279ED4988C1BAAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IURHLRaXNp2DK6Em5eFyMqzV9fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.mft
Manifest number: 1965
Signing time: Wed 17 Jun 2026 10:01:40 +0000
Manifest this update: Wed 17 Jun 2026 10:01:40 +0000
Manifest next update: Thu 18 Jun 2026 10:01:40 +0000
Files and hashes: 1: DGukc6480PTm8A6qHwc8DlqO2P4.roa (hash: f9ejFsVfN9O7L7m90T24ZiiptOfoC8NK6uhiGNPuCps=)
2: IURHLRaXNp2DK6Em5eFyMqzV9fM.crl (hash: lcKw0XgnFBSr90Qd87gM0OdB1YesEmNGJJ8Ez+bolLQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IURHLRaXNp2DK6Em5eFyMqzV9fM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 08:33:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d5:07:84:16:bc:8f:2a:bd:d2:79:ed:49:88:c1:ba:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2144472d1697369d832ba126e5e17232acd5f5f3
Validity
Not Before: Jun 17 10:01:40 2026 GMT
Not After : Jun 18 10:01:40 2026 GMT
Subject: CN=69150308b8c65d08c3718eb526f135326c755752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9b:78:90:0e:ec:b8:4c:59:e0:6d:52:83:36:
c7:b4:dd:98:18:38:18:51:c5:0f:c9:10:8e:c8:d9:
89:13:ae:7c:fe:a5:f2:65:fe:a0:a6:93:80:a8:d4:
97:fa:b0:04:a6:f3:a1:43:fb:d3:0d:dd:39:fe:ae:
24:7b:a8:ac:0a:8a:52:5c:13:4f:2b:f5:90:fd:ed:
6d:22:d4:50:8a:25:6b:88:ad:e2:e7:06:75:39:de:
2f:2c:b0:83:1b:d5:60:80:45:af:be:35:93:f1:a1:
97:2c:b6:f6:62:58:ad:bc:1f:fd:4c:80:37:e4:6a:
7c:e1:a9:30:f3:60:17:d5:1a:60:ec:19:d6:e8:b5:
0b:07:91:11:a9:a2:f4:d9:02:a9:00:d6:92:a0:a7:
18:be:64:cb:6b:24:cc:96:5f:38:d1:bf:ce:f2:4d:
b5:6e:6f:1f:bc:dc:0f:9b:8c:71:85:6b:64:ab:33:
ea:28:cc:48:7c:ec:6d:5c:e3:4e:9c:9e:06:ec:03:
dc:c8:16:47:08:e7:91:f4:af:d7:90:8f:ef:18:f3:
d5:ff:4a:b8:d3:95:eb:a9:62:58:f9:45:32:3e:c8:
4a:40:b2:ab:28:9e:08:ef:76:09:d8:0b:9b:0e:9a:
35:49:e0:b7:da:7e:d0:18:31:6e:f3:a5:39:52:fe:
c7:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:15:03:08:B8:C6:5D:08:C3:71:8E:B5:26:F1:35:32:6C:75:57:52
X509v3 Authority Key Identifier:
keyid:21:44:47:2D:16:97:36:9D:83:2B:A1:26:E5:E1:72:32:AC:D5:F5:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IURHLRaXNp2DK6Em5eFyMqzV9fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:98:2a:4b:7a:9e:fb:fe:d8:1c:bf:4a:fb:dc:c9:1c:84:5e:
33:22:ad:de:59:d9:80:eb:c0:13:93:f9:4a:44:d4:16:1c:b2:
9d:51:d4:23:de:8c:b9:92:93:5d:bb:19:eb:ca:ff:68:5c:82:
67:aa:d8:4f:85:e3:28:b3:64:68:86:78:6c:1a:a0:21:21:09:
06:da:91:40:3f:31:c6:44:36:01:c8:45:f5:ea:3f:f0:88:be:
42:b6:8a:2a:db:29:4c:68:51:c5:83:6e:a9:22:8a:aa:a6:e4:
9f:80:8f:18:1b:0f:85:d8:27:6c:de:94:df:3c:c0:ee:dd:0f:
63:07:14:03:70:f1:99:d7:23:17:f4:33:5f:f3:dc:c0:68:b7:
2b:db:a6:1b:56:20:e5:47:0f:86:98:c6:9f:0e:ce:c5:0f:72:
cb:09:e9:40:17:d1:72:3f:95:55:26:da:7c:6c:e9:7e:93:3a:
aa:50:61:46:65:06:87:a0:76:5b:71:b0:df:aa:68:59:57:1a:
ea:93:16:3c:d2:30:d9:ed:7d:eb:68:b4:1c:f3:5a:c4:7a:7e:
d6:26:cb:2a:a9:7c:ff:bf:e9:0b:67:57:78:6f:cb:5a:c0:2d:
f9:9f:3d:cb:35:b0:82:7f:1f:63:7a:1e:0d:b0:11:6a:85:7d:
2e:9e:d8:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 14:36:40 2026 by rpki-client