
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/iBvRQCkk7CpkTo9U5plMtKyOJKY.mft
File: iBvRQCkk7CpkTo9U5plMtKyOJKY.mft (raw, json)
Hash identifier: NP9jYt6yx3yh8mfmI8adUoxkH6whb4sNXa7zyaP5QSY=
Subject key identifier: C1:EC:DC:C4:00:EF:5D:E6:6D:F7:AA:2C:C1:DC:2C:55:B6:81:C8:37
Authority key identifier: 88:1B:D1:40:29:24:EC:2A:64:4E:8F:54:E6:99:4C:B4:AC:8E:24:A6
Certificate issuer: /CN=881bd1402924ec2a644e8f54e6994cb4ac8e24a6
Certificate serial: 019FAB63880F582CB0DCCD1E0F80FF937C21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBvRQCkk7CpkTo9U5plMtKyOJKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/iBvRQCkk7CpkTo9U5plMtKyOJKY.mft
Manifest number: 129A
Signing time: Wed 29 Jul 2026 01:00:54 +0000
Manifest this update: Wed 29 Jul 2026 01:00:54 +0000
Manifest next update: Thu 30 Jul 2026 01:00:54 +0000
Files and hashes: 1: 8mKhApHYp_839P6yQXD0oAwm2qo.roa (hash: dEUbCXMVw9xAIsh0W5Y8ji1NQ46062f5dJUppcXKzCY=)
2: C3xZ11UfhI0GeWTbExlimKS-cZs.roa (hash: xhykIG9PAX9cR5qhXwtefG/7lrssloObCNE0+5PnTIg=)
3: ZQHzJnKmGMmYQF_x6i-pgoB3otk.roa (hash: y+ugl+hZqb559F4FeCaZ0WayeCgZERvzHW8L8s5FBBo=)
4: iBvRQCkk7CpkTo9U5plMtKyOJKY.crl (hash: Y4bHtclytL1xlupqFKGrKzLhWSMV2r2Bdr24pj2mhTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/iBvRQCkk7CpkTo9U5plMtKyOJKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/iBvRQCkk7CpkTo9U5plMtKyOJKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iBvRQCkk7CpkTo9U5plMtKyOJKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:88:0f:58:2c:b0:dc:cd:1e:0f:80:ff:93:7c:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=881bd1402924ec2a644e8f54e6994cb4ac8e24a6
Validity
Not Before: Jul 29 01:00:54 2026 GMT
Not After : Jul 30 01:00:54 2026 GMT
Subject: CN=c1ecdcc400ef5de66df7aa2cc1dc2c55b681c837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f5:f0:d2:48:86:79:95:29:4d:83:26:df:b8:
cf:ea:27:0a:68:1f:60:55:13:1b:0b:e1:db:d4:0b:
be:12:e5:4a:a9:76:3f:fe:8e:6d:bc:6b:e4:ae:92:
19:d6:c2:a1:96:23:37:e7:26:c6:fd:bc:3c:58:79:
1e:ed:bc:33:35:c4:8a:64:8c:f0:77:5f:98:a2:9c:
18:0e:30:70:6e:33:bb:39:3c:9f:2b:cb:92:89:c1:
6c:a6:23:b1:40:b9:c5:a6:54:0c:96:d9:16:cc:28:
83:7d:1e:0d:3c:10:16:82:8c:19:2e:02:ac:a3:69:
0e:a5:03:ab:e0:77:27:77:85:4e:f6:ff:6f:43:f0:
aa:ff:97:b9:5a:34:9f:e4:16:fc:c0:34:f3:3c:ef:
43:1e:58:83:96:19:0a:20:04:1f:cd:c2:ce:15:1e:
fe:40:49:44:ff:04:42:0b:dd:8f:be:37:09:fa:7e:
08:eb:2a:7f:c4:61:99:20:c3:02:13:99:60:e7:f5:
45:0d:86:b7:ff:f1:4a:f3:1f:17:c8:b3:a6:a2:25:
39:56:97:d3:5e:60:b7:7d:70:6f:80:62:c4:c0:44:
0c:30:59:93:77:ba:bf:65:01:7c:d3:5e:5d:3f:1c:
e0:7d:5e:14:45:ad:93:bc:b0:ca:a7:0b:3b:eb:6b:
fc:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:EC:DC:C4:00:EF:5D:E6:6D:F7:AA:2C:C1:DC:2C:55:B6:81:C8:37
X509v3 Authority Key Identifier:
keyid:88:1B:D1:40:29:24:EC:2A:64:4E:8F:54:E6:99:4C:B4:AC:8E:24:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBvRQCkk7CpkTo9U5plMtKyOJKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/iBvRQCkk7CpkTo9U5plMtKyOJKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/iBvRQCkk7CpkTo9U5plMtKyOJKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:6e:8b:61:fe:cb:76:3b:2b:4e:2e:4b:63:cc:59:f5:c7:0c:
8e:39:69:18:2a:27:ba:7b:38:27:c8:75:23:19:42:db:34:58:
bc:f0:1f:6a:49:7e:51:dc:10:0c:99:bc:5e:53:6c:b7:57:9d:
b4:a4:41:38:99:88:ad:11:89:dd:1e:cb:ea:f2:25:8a:fd:ca:
a9:73:fb:d4:f0:b3:3f:c9:be:3b:69:51:19:3f:40:70:c8:78:
8f:e0:16:32:cb:a2:8c:fa:6f:e9:96:1c:af:77:e6:1a:e6:5b:
0f:2b:39:0f:34:e4:a6:ce:ca:be:57:3b:02:46:38:ea:6a:39:
50:7a:a0:30:50:3c:33:43:9a:5f:f4:24:69:a5:6d:c4:af:f5:
10:dd:7a:27:e3:86:72:c8:b9:3f:3c:59:47:ec:69:52:8e:ce:
1d:b6:69:80:16:bd:42:81:6d:23:64:2c:c5:b0:1a:51:8f:c8:
6a:92:e2:53:54:a1:a5:e0:76:56:69:21:9b:37:9e:e9:88:1c:
08:55:8b:b3:b7:ca:12:3f:40:3e:22:89:3e:af:9e:38:07:81:
79:3c:67:3b:66:a3:89:85:90:db:3a:69:38:85:37:df:61:ed:
a8:2e:aa:d7:43:c6:1e:3d:50:34:f3:08:8a:3a:33:0d:78:10:
ad:d5:e2:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:28:50 2026 by rpki-client