
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.mft
File: iKeAc4uFOs_7q9sjkUxQ42Qh93M.mft (raw, json)
Hash identifier: dTvCSgU8HPNEpaMKGF9fQWq0hgkfvTxDR2AoaXdRiKI=
Subject key identifier: 1C:F1:BD:24:44:7B:27:FA:F8:1F:4C:95:E3:87:F4:BA:BD:1F:1D:4C
Authority key identifier: 88:A7:80:73:8B:85:3A:CF:FB:AB:DB:23:91:4C:50:E3:64:21:F7:73
Certificate issuer: /CN=88a780738b853acffbabdb23914c50e36421f773
Certificate serial: 019F90917C3F8AEAA32AB93FC305EA47E8D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iKeAc4uFOs_7q9sjkUxQ42Qh93M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.mft
Manifest number: 19C8
Signing time: Thu 23 Jul 2026 20:01:21 +0000
Manifest this update: Thu 23 Jul 2026 20:01:21 +0000
Manifest next update: Fri 24 Jul 2026 20:01:21 +0000
Files and hashes: 1: cqgfNLDExy7FaffRoXOKMQXtqL4.roa (hash: TWz48Wr5Z6qhNEoUkqeyNmR7SZVnU/2APhq7EOM+kUQ=)
2: iKeAc4uFOs_7q9sjkUxQ42Qh93M.crl (hash: MECWjsfiSxa0soCf0UG4dyvEv2BZVL0VUUUHTQeleF0=)
3: wy6ybCdcWedAi4Mt3ixAA7PS5a0.roa (hash: G/CGlMinA8eb2TiqC5edW4JcIc15BJpfk+/kohiZa2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.mft
rsync://rpki.ripe.net/repository/DEFAULT/iKeAc4uFOs_7q9sjkUxQ42Qh93M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 20:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:91:7c:3f:8a:ea:a3:2a:b9:3f:c3:05:ea:47:e8:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88a780738b853acffbabdb23914c50e36421f773
Validity
Not Before: Jul 23 20:01:21 2026 GMT
Not After : Jul 24 20:01:21 2026 GMT
Subject: CN=1cf1bd24447b27faf81f4c95e387f4babd1f1d4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d1:fa:52:62:43:2c:18:38:37:fe:01:5f:6a:
1a:24:49:77:78:9c:4e:4c:0a:7c:b5:64:10:fe:68:
f9:4c:c8:0d:9d:c2:37:f1:e9:cb:da:91:85:13:45:
7e:a9:d4:e8:b5:9c:a9:52:c3:e2:d8:f7:18:13:09:
a7:83:79:c7:ff:45:67:e6:ed:d3:7b:a9:cc:93:dc:
a5:b3:87:07:a5:1d:52:c7:d6:cc:62:9f:a4:de:fa:
58:1f:fd:1a:3e:79:42:59:62:5a:71:4d:ca:ec:3a:
72:6c:12:a1:9e:44:ce:be:7d:e0:cf:11:23:df:12:
a7:99:b6:2b:b0:c7:69:36:ff:87:ba:5e:d2:c5:27:
74:2c:59:ae:68:2c:51:d9:b8:5c:f5:e9:ac:f2:e3:
6e:5b:65:06:8c:7a:28:d1:87:20:01:93:6b:6c:57:
8c:05:a4:54:07:f2:f9:0b:d1:76:a9:5f:c2:25:50:
94:ce:45:33:fa:83:5a:2f:10:45:0e:5b:7a:b4:a9:
1b:de:8d:ea:94:73:33:0c:45:38:a8:4c:c0:0e:ba:
4b:d9:b0:c6:b1:84:d1:4a:fb:eb:5b:26:0d:ba:b0:
17:9a:09:7b:aa:b6:86:a8:e1:83:5a:c8:09:6f:2d:
d4:58:81:9c:fa:56:e0:4f:d4:55:4c:76:4d:0f:a7:
51:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:F1:BD:24:44:7B:27:FA:F8:1F:4C:95:E3:87:F4:BA:BD:1F:1D:4C
X509v3 Authority Key Identifier:
keyid:88:A7:80:73:8B:85:3A:CF:FB:AB:DB:23:91:4C:50:E3:64:21:F7:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKeAc4uFOs_7q9sjkUxQ42Qh93M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:b3:e7:47:c2:cb:9b:e3:29:1e:5a:55:57:c4:e1:df:37:d4:
f5:0e:51:64:65:2d:e6:58:e3:50:8b:79:6c:76:d8:fa:42:03:
fd:7c:02:a8:97:88:c0:e0:db:c1:1e:19:da:d3:54:89:77:93:
d5:0f:09:01:12:9c:28:a5:53:f2:b9:63:bc:02:16:c3:9c:17:
59:cb:33:32:cb:27:b7:bc:4b:d4:0e:a7:2e:9c:8a:38:40:8a:
88:50:b0:72:e6:48:93:08:e7:af:af:95:5b:cc:39:73:6d:05:
a7:36:70:ac:12:cd:5e:72:c1:73:9f:43:bf:d3:67:9a:0e:5b:
18:10:82:af:b9:02:e9:85:fd:0c:6f:1b:98:31:35:b7:8a:25:
f9:19:df:a6:da:3d:6c:55:39:89:7d:59:23:40:54:36:67:1f:
68:0a:c1:2c:93:d0:47:09:bc:ad:8b:4a:79:b2:6a:2f:0e:8f:
e1:59:6c:00:b8:04:80:49:1b:9f:34:2b:41:d2:e9:0b:bc:d6:
f2:e5:52:7f:50:dd:43:ab:48:b6:3b:64:14:66:10:78:83:b6:
9f:70:04:14:d7:ee:00:56:5d:8a:8c:94:07:f7:33:b5:81:2f:
0d:8d:9b:5d:5a:69:0d:37:70:95:a3:6e:da:9d:2b:97:3e:64:
14:70:c2:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:12:10 2026 by rpki-client