Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.mft
File: IxMMmax6pAhscXVxFKQWP4AJAUI.mft (raw, json)
Hash identifier: c4vzCadkusb7RivO8yIPbh+GakBbGFBuMSwbKyI4lGQ=
Subject key identifier: 1A:D4:38:7A:4D:6B:20:08:7F:3C:B5:5C:49:8A:6D:B6:B9:78:2F:E1
Authority key identifier: 23:13:0C:99:AC:7A:A4:08:6C:71:75:71:14:A4:16:3F:80:09:01:42
Certificate issuer: /CN=23130c99ac7aa4086c71757114a4163f80090142
Certificate serial: 019FA974D5AAD5C5F5A3261C54D18C569C18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IxMMmax6pAhscXVxFKQWP4AJAUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.mft
Manifest number: 0D1C
Signing time: Tue 28 Jul 2026 16:00:34 +0000
Manifest this update: Tue 28 Jul 2026 16:00:34 +0000
Manifest next update: Wed 29 Jul 2026 16:00:34 +0000
Files and hashes: 1: IxMMmax6pAhscXVxFKQWP4AJAUI.crl (hash: VQPHBfG6vMTCUZjKK5aebtZtzITc+ThC0p7c/l9qKD4=)
2: M7AsOPJRuDvyqpdVNAPIyt4dy4E.roa (hash: VA2KwTkb4NGqo/O9WoJ31YAHnrH27JkWDC9odiYJKyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IxMMmax6pAhscXVxFKQWP4AJAUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 16:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:74:d5:aa:d5:c5:f5:a3:26:1c:54:d1:8c:56:9c:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23130c99ac7aa4086c71757114a4163f80090142
Validity
Not Before: Jul 28 16:00:34 2026 GMT
Not After : Jul 29 16:00:34 2026 GMT
Subject: CN=1ad4387a4d6b20087f3cb55c498a6db6b9782fe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:88:0a:b9:68:42:cf:6f:c4:e4:9f:ec:ef:c4:
7b:1d:a7:08:85:ca:fb:37:5f:49:f3:d1:7a:27:83:
03:c8:a4:c3:10:85:61:d5:26:62:94:2c:83:e1:f5:
a0:dd:40:51:b0:9c:a9:88:61:86:62:ec:9a:f6:63:
3f:de:f4:27:59:a2:fc:84:e3:93:84:f4:f7:e1:d8:
a0:1f:2f:5f:27:68:ec:6d:14:4e:76:fe:f0:e0:42:
bc:13:82:d8:10:68:85:30:4f:0a:3e:ef:e0:80:5e:
b4:69:68:a7:00:dd:d6:95:8d:5d:55:79:fe:11:68:
45:e4:e7:e4:08:6c:04:4b:72:1d:2f:d0:4e:6e:fd:
69:e6:b0:52:72:cb:7f:ac:07:01:b1:80:0a:c0:30:
d2:7d:d5:af:6a:53:60:5e:5e:a4:89:d0:8a:46:b2:
ff:66:ad:85:fe:af:53:d4:8d:26:27:a0:bb:de:36:
86:60:65:0f:e5:35:d5:60:67:b1:95:d8:95:da:b7:
02:a4:45:ac:b0:b8:8a:45:ee:f1:8f:21:64:44:27:
c7:c8:f7:f7:8b:6d:21:50:89:aa:ae:9f:17:d8:4d:
63:9a:e3:38:50:62:03:7d:25:52:4d:6a:1a:43:ca:
d8:33:a9:b0:2c:bd:6a:ee:77:07:d1:51:90:10:ed:
f3:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:D4:38:7A:4D:6B:20:08:7F:3C:B5:5C:49:8A:6D:B6:B9:78:2F:E1
X509v3 Authority Key Identifier:
keyid:23:13:0C:99:AC:7A:A4:08:6C:71:75:71:14:A4:16:3F:80:09:01:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IxMMmax6pAhscXVxFKQWP4AJAUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:5a:c9:b1:6f:77:12:3d:58:6f:66:5d:bd:6b:98:3f:71:41:
47:1b:dc:66:d5:ea:d0:5f:83:8b:cb:8c:5c:17:5f:08:cd:4d:
1e:32:14:06:cd:d2:6b:cd:5a:cd:50:65:52:3a:f9:32:e2:88:
ae:ba:da:c3:78:ac:dc:96:2b:73:d7:5f:0d:9f:db:ce:9c:45:
42:ae:5a:0e:35:94:b5:9c:76:ed:7c:39:3e:a3:83:d1:0d:30:
23:f6:c5:b5:ae:3a:d2:5e:e1:63:47:7e:54:e4:87:09:93:0a:
bb:3f:cf:e6:f9:b4:de:f4:eb:b5:e2:20:44:2d:3f:8e:32:5f:
13:21:bc:19:08:be:ff:2c:06:41:fd:32:27:af:c3:c5:a1:0f:
61:ce:6d:c4:b7:0a:32:93:24:f7:e8:82:4c:3d:8e:2a:f6:6a:
45:94:90:84:6f:13:b9:3c:61:3f:ef:19:70:72:de:93:32:f8:
ba:c2:9d:42:99:60:bc:dd:45:fe:bf:16:0e:b8:32:9a:94:83:
60:6a:74:b5:fb:57:03:a4:1e:08:83:b4:f1:47:77:98:10:0a:
54:c2:3d:e1:3f:c5:d7:6e:65:7b:ad:7a:22:a2:37:a8:1a:34:
c4:80:23:58:45:c2:fa:5b:b5:bc:51:6e:52:f0:0b:3b:de:e1:
2a:f6:e9:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:22:19 2026 by rpki-client