
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/iCdfXxLHVuoJSy-iztIXc9aa6JY.mft
File: iCdfXxLHVuoJSy-iztIXc9aa6JY.mft (raw, json)
Hash identifier: MHnPeb6dbuh4Rw+w+C5DtuBYqVtp0fuxnlfWzRBQcMg=
Subject key identifier: C9:61:BF:D1:AF:AC:A4:71:5E:32:91:20:3A:B5:D3:B7:36:D2:41:D1
Authority key identifier: 88:27:5F:5F:12:C7:56:EA:09:4B:2F:A2:CE:D2:17:73:D6:9A:E8:96
Certificate issuer: /CN=88275f5f12c756ea094b2fa2ced21773d69ae896
Certificate serial: 019F916D3C2AB73D81444A13C89789107C7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iCdfXxLHVuoJSy-iztIXc9aa6JY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/iCdfXxLHVuoJSy-iztIXc9aa6JY.mft
Manifest number: 40
Signing time: Fri 24 Jul 2026 00:01:22 +0000
Manifest this update: Fri 24 Jul 2026 00:01:22 +0000
Manifest next update: Sat 25 Jul 2026 00:01:22 +0000
Files and hashes: 1: B1z4xoRxZ4h1nuQU7fiGHIusmcs.roa (hash: AH8e1SFxP7mwVEgpLVC0rJF7pyGIB69p63iAMsbetvc=)
2: CUsD8lt5-lXh9LkZsJ6cPOX6hsc.roa (hash: vpk8KShRqahOvvvQQ5KHNcIKAntGCFPSkwmHDUnFRTk=)
3: iCdfXxLHVuoJSy-iztIXc9aa6JY.crl (hash: 5l//0RYcTuryHFC++DS/qJ/rsOza047tQNROEIEYtsQ=)
4: wRv9fBJmvre20xMdwIU9laC5e10.roa (hash: PtCj3wS6CUonUfFeQe3p1omlsL2UMohFubS3Dus/vvU=)
5: zSxXam422uceBcDgVTQwKML7HzQ.roa (hash: GpllbBF29LkUDq+WEWLkHp5EqGZXeUURJtYTQzOT19Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/iCdfXxLHVuoJSy-iztIXc9aa6JY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/iCdfXxLHVuoJSy-iztIXc9aa6JY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iCdfXxLHVuoJSy-iztIXc9aa6JY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:3c:2a:b7:3d:81:44:4a:13:c8:97:89:10:7c:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88275f5f12c756ea094b2fa2ced21773d69ae896
Validity
Not Before: Jul 24 00:01:22 2026 GMT
Not After : Jul 25 00:01:22 2026 GMT
Subject: CN=c961bfd1afaca4715e3291203ab5d3b736d241d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e4:8f:20:d3:88:e8:6f:5c:6b:20:35:66:4e:
47:0e:ab:14:09:39:91:b7:50:53:68:46:e8:75:07:
d7:ba:d8:49:bb:c5:d4:83:11:b4:81:cf:f7:9f:af:
51:e8:fa:a9:70:61:47:f2:c3:9a:f9:e0:e6:37:8c:
b4:7e:97:40:b6:37:c1:95:50:5d:10:62:a6:74:b5:
4a:a6:c3:89:dc:ee:46:ce:37:81:13:b0:96:2f:fe:
06:24:7c:aa:67:d3:96:23:9d:79:42:42:b7:65:ea:
74:4b:ed:fc:17:44:54:d8:5a:a8:e1:50:f6:bc:ee:
be:ad:49:a3:28:09:72:1a:6a:b0:6a:d4:b7:fb:fd:
38:0b:2c:e9:70:e5:32:0b:64:ae:d2:4f:df:86:5b:
c0:1b:fb:21:c1:50:33:b9:95:33:af:b3:36:84:c2:
77:72:2d:04:f7:56:0f:4d:4d:45:0c:20:84:77:c4:
77:65:dc:92:ea:01:78:7d:e2:03:9a:84:e2:c3:bd:
b9:16:c8:82:ee:8b:da:4d:c5:ad:9f:bc:29:d3:d5:
d3:22:61:58:bf:e5:68:97:92:7b:a8:90:37:a2:22:
61:05:ec:f4:1f:a7:7c:ca:89:e7:9b:10:ec:9a:e7:
2a:e5:0d:49:7e:00:1f:7e:de:9d:ad:a8:dc:a4:63:
5f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:61:BF:D1:AF:AC:A4:71:5E:32:91:20:3A:B5:D3:B7:36:D2:41:D1
X509v3 Authority Key Identifier:
keyid:88:27:5F:5F:12:C7:56:EA:09:4B:2F:A2:CE:D2:17:73:D6:9A:E8:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iCdfXxLHVuoJSy-iztIXc9aa6JY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/iCdfXxLHVuoJSy-iztIXc9aa6JY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/iCdfXxLHVuoJSy-iztIXc9aa6JY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:55:44:7a:01:e5:4b:12:63:58:cd:98:6d:b9:68:3e:08:06:
b4:df:ef:f5:a9:18:34:59:2d:c6:e3:f0:64:bd:e5:b4:c1:e5:
73:ca:23:f9:82:f3:2d:5e:bf:c3:d8:07:79:6b:cc:48:94:33:
85:f6:3d:23:a0:9c:3d:d5:9f:27:e2:4e:d8:36:8f:de:36:b6:
ef:a6:4d:b7:fb:01:d2:bf:2d:60:31:4d:93:8c:2b:92:d4:9b:
6d:95:3a:28:47:29:f4:c8:e4:78:c3:60:8e:e6:71:c9:ac:ec:
fa:9e:3d:c6:7b:30:b6:ac:81:f5:79:7e:fe:ac:b5:6c:1d:24:
20:03:4c:21:e7:f9:39:71:3a:af:9a:c0:86:b8:2c:9a:c6:b3:
49:b8:3d:28:46:5b:9c:1a:d1:e2:c8:66:bd:d1:a3:94:d8:3a:
3b:42:59:c3:c2:b4:f8:b1:9b:1e:ed:2a:52:1d:92:04:0a:34:
4e:3d:a0:00:76:9e:8f:98:dc:b3:fd:73:2e:6e:1b:31:75:4d:
cf:90:c2:63:4a:f6:18:5a:ec:44:b4:fa:c6:36:e4:c6:02:32:
c3:32:11:bd:d0:c5:b5:55:a3:04:a3:a6:9f:ab:72:07:02:6b:
9a:a3:8d:31:6e:f5:3f:f1:37:be:4c:44:00:ea:74:fe:e0:34:
5a:e6:72:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:30:51 2026 by rpki-client