Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft
File: i992xUueaTXDCptMm6kwmsRw7AI.mft (raw, json)
Hash identifier: Hoq7cPssMMr1L+ejBIkVi5meLpvR6G2INtjrRvYXr1I=
Subject key identifier: 90:67:B4:FF:3D:37:86:6D:AD:63:A8:FA:6A:3D:9F:07:CB:7A:F3:48
Authority key identifier: 8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02
Certificate issuer: /CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
Certificate serial: 019FA97569EF6F5994BAA07AA37FCB9C9895
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft
Manifest number: 1720
Signing time: Tue 28 Jul 2026 16:01:12 +0000
Manifest this update: Tue 28 Jul 2026 16:01:12 +0000
Manifest next update: Wed 29 Jul 2026 16:01:12 +0000
Files and hashes: 1: 1-e3X3nnOITuhFUTt48TdT2Qw-5U.roa (hash: u9UX0jZDejI6w83BZaY3pHdg72rNaFEVz4TXqidtNXA=)
2: FO34XpplAW7QlRa_nhaWh0bzK1M.roa (hash: OY8jMW/Q0/vSfJsf4E0K4jOzUbbQOka6dbLisQTbUTM=)
3: VDzTMSvfBKqHEPkPZy5QxtuwU4Q.roa (hash: nbe4oKw1dzzL8XTpfLmk2OwowG5rknPjlUlPj/nEWbw=)
4: i992xUueaTXDCptMm6kwmsRw7AI.crl (hash: AQBDRQXtYrHG+SdzaRdCL5d3nPrmwyUUbGifpZ5ZByk=)
5: nIcvudeqlMIht11QekdVthrczgo.roa (hash: svSV1NBTRVorlHVW7eGPa2t3Z9YIKYtLoAxuuHh5a0M=)
6: q1z9wEUZ-3q2dVe1kVMgwooEueU.roa (hash: 0i6Usfk5Np9doym2lgfbGxDGei4jmouvH6UyKjL5l/k=)
7: umA8ie990SaJO3qAQ7xl_O3i6jM.roa (hash: QhoEkmFGY40VFv9BAqjKSQOiC3qc6ciaemVpb78Q6Lo=)
8: z7PU2MzlVVAvlrQw6iVcszWYAXo.roa (hash: 9X6Zea/pUy8vlr4IvEYXZRJ/+mqoqTxPdepT8vjAq6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:69:ef:6f:59:94:ba:a0:7a:a3:7f:cb:9c:98:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
Validity
Not Before: Jul 28 16:01:12 2026 GMT
Not After : Jul 29 16:01:12 2026 GMT
Subject: CN=9067b4ff3d37866dad63a8fa6a3d9f07cb7af348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d1:db:43:71:45:96:06:fc:c5:6a:a3:6b:2a:
a8:87:51:08:c6:94:a2:10:ee:0a:1f:12:b0:24:56:
74:39:9c:c4:3a:1d:db:a3:8c:c2:8d:07:c7:4e:f0:
7c:49:c9:32:ab:d6:9c:d9:fc:ce:46:be:9a:92:f9:
5a:8e:85:9b:9e:04:29:b3:c9:6a:87:9d:8b:c6:d8:
d8:5f:51:d4:2f:96:bb:2c:bf:0a:e1:02:44:c8:6a:
dc:0d:b7:6b:90:d3:ca:60:48:47:72:8d:e7:af:30:
7f:52:dd:de:97:fc:e5:c1:a7:ab:c7:21:1e:fc:f4:
75:3d:54:82:70:33:17:d1:aa:3e:45:87:98:d6:1d:
bc:52:98:7f:7e:a3:18:b1:5f:2a:c7:45:4a:55:35:
c9:7b:c7:c8:7d:39:f6:85:b2:a9:a5:8b:eb:bd:ae:
58:35:e1:a7:66:c7:eb:67:99:92:87:b3:e3:e8:71:
8c:c6:74:3d:f3:dc:99:d0:54:be:4f:bf:da:5a:09:
3f:2a:44:e7:0e:0b:b1:ff:e2:fe:89:f7:98:df:97:
27:6b:ab:dd:5f:4f:54:cb:2b:1d:31:e7:62:6a:14:
a8:a8:74:44:e9:df:a8:e5:e4:b4:4f:84:28:9d:93:
a5:20:ed:40:fc:68:3c:1c:aa:0e:98:da:28:6c:29:
60:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:67:B4:FF:3D:37:86:6D:AD:63:A8:FA:6A:3D:9F:07:CB:7A:F3:48
X509v3 Authority Key Identifier:
keyid:8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:1f:a4:d0:07:8b:3b:82:eb:29:17:04:8d:a5:6b:fb:92:5c:
0d:43:05:9b:7f:f1:9a:8d:a5:f8:2c:97:23:75:66:98:9f:f6:
de:ce:8a:e5:53:5b:77:03:2f:87:46:b3:86:8a:29:90:91:d0:
f1:17:82:bb:17:8c:b5:a4:4d:97:27:4b:58:ed:47:c8:e9:07:
ee:3a:64:de:83:57:cf:b2:59:74:27:1b:39:2e:c5:33:af:25:
ab:35:2d:39:65:9c:2c:d2:ce:9c:e8:32:62:0b:bb:bf:73:cc:
1c:67:08:bb:7a:8a:5e:10:3e:07:ae:fc:f8:97:ba:bf:58:38:
45:97:78:fa:a7:10:4f:bd:f0:78:ea:b3:1e:94:e4:5f:01:4b:
e2:bd:ae:58:63:b1:af:85:ce:09:78:55:69:ea:fb:da:bd:43:
61:2c:ba:ad:ea:55:27:65:10:31:ac:d4:ac:ac:50:41:ee:40:
c5:50:f7:f9:ff:5d:e1:e2:92:d4:c3:9b:3b:b0:ea:77:8c:24:
fe:b5:ed:20:e1:03:62:2b:9c:72:78:0b:81:f9:be:d5:c0:10:
db:78:91:bc:4b:dd:b8:99:e4:5c:c6:6b:89:6e:e6:1a:7c:c9:
f2:be:19:62:33:55:65:72:67:48:bd:fe:0b:d0:50:46:37:b6:
08:30:22:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:14:59 2026 by rpki-client