Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.mft
File: Iv9bz3ObBzL7G823F-xxf28csOI.mft (raw, json)
Hash identifier: sgN06hb4j9v3zm/2u8USgBGsWvX9IGMrdobSiTM2+6E=
Subject key identifier: DA:3E:E7:9F:DE:A7:7A:E7:E6:CF:45:91:97:3A:42:8F:4F:B0:D4:1A
Authority key identifier: 22:FF:5B:CF:73:9B:07:32:FB:1B:CD:B7:17:EC:71:7F:6F:1C:B0:E2
Certificate issuer: /CN=22ff5bcf739b0732fb1bcdb717ec717f6f1cb0e2
Certificate serial: 019F92483A1624B02FAAC526B438C95D0DB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iv9bz3ObBzL7G823F-xxf28csOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.mft
Manifest number: 17C8
Signing time: Fri 24 Jul 2026 04:00:34 +0000
Manifest this update: Fri 24 Jul 2026 04:00:34 +0000
Manifest next update: Sat 25 Jul 2026 04:00:34 +0000
Files and hashes: 1: Iv9bz3ObBzL7G823F-xxf28csOI.crl (hash: uKQhwRibu0zPLN8eeUyS5AjG57FPloBg8yAlGWrBzv0=)
2: KGVSyU1wIj7N4iY-yGjJQ4nk1wo.roa (hash: JwvzeqlxWkg3az+woqZ5+VwCzs4K2YIxQ2yc7nZEKzM=)
3: _1spXT-fNgBWQ52DMUTuvrFr3B8.roa (hash: 0BaKLx6BfvTvlAXkJodDBjYBD7kri1g1ufdyiNOpYl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iv9bz3ObBzL7G823F-xxf28csOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:3a:16:24:b0:2f:aa:c5:26:b4:38:c9:5d:0d:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22ff5bcf739b0732fb1bcdb717ec717f6f1cb0e2
Validity
Not Before: Jul 24 04:00:34 2026 GMT
Not After : Jul 25 04:00:34 2026 GMT
Subject: CN=da3ee79fdea77ae7e6cf4591973a428f4fb0d41a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:9b:0f:2f:ac:ac:f4:bf:b7:b1:95:09:cc:3d:
08:f7:2d:8a:60:c8:7b:9c:3c:72:bd:ec:26:e7:f8:
3c:60:c6:f8:24:ee:ca:90:75:02:77:6d:05:09:42:
4a:ac:1a:e0:44:35:27:0d:d2:4d:9b:2a:a8:fa:bc:
26:d6:ae:d0:e4:45:6b:65:7d:2d:e6:b6:30:ed:05:
b8:bb:3a:52:ef:41:51:a7:ca:17:37:0a:1d:7a:7e:
7c:36:aa:11:84:f6:af:23:d9:94:34:1c:6f:6a:fd:
d0:98:bb:f4:08:6d:4f:43:3d:26:41:36:83:29:1a:
09:b8:b5:f3:4a:b5:e9:0c:fc:3a:b7:d6:88:05:d6:
ea:4c:17:b2:55:e2:23:b0:75:35:e5:7c:82:b4:69:
58:42:59:b4:45:55:c8:fe:2c:11:88:6c:93:07:c9:
2d:9a:1b:46:d6:32:b9:e0:50:b2:ed:8c:cc:94:67:
6e:69:1a:0c:2d:61:47:0c:21:16:38:04:ad:9e:50:
27:fe:9a:d0:6f:46:f7:80:16:46:4e:1c:c1:b5:5e:
2f:f7:fa:27:07:1a:5c:ad:79:d3:9f:48:89:e9:c1:
aa:06:4d:ed:1f:75:25:e3:ff:58:7c:63:ff:5f:a1:
7d:dc:6b:bb:c1:4a:f6:95:9e:e5:95:0a:11:a4:e9:
fd:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:3E:E7:9F:DE:A7:7A:E7:E6:CF:45:91:97:3A:42:8F:4F:B0:D4:1A
X509v3 Authority Key Identifier:
keyid:22:FF:5B:CF:73:9B:07:32:FB:1B:CD:B7:17:EC:71:7F:6F:1C:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iv9bz3ObBzL7G823F-xxf28csOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:cb:f1:5a:a8:45:f4:da:f3:78:2f:5e:5b:52:c5:b3:26:82:
46:df:82:53:3f:55:b1:4a:6e:6e:8a:fa:5a:d5:7d:34:96:51:
f9:21:fa:ff:82:46:9f:ce:58:e0:89:81:8f:16:a4:54:30:c2:
f4:8f:88:43:9c:bd:cd:5b:79:22:5b:fc:28:c7:67:78:9d:2f:
4b:02:4c:88:cb:17:c2:72:cb:03:68:07:43:6f:9b:8f:8d:31:
e7:98:16:1f:dc:1b:7a:f6:a2:de:26:9a:be:74:bc:d8:74:02:
ee:56:69:bd:75:d1:d8:cc:9d:bf:be:29:65:23:2a:b0:54:af:
5e:24:9d:4d:10:f3:c3:b1:a4:3c:30:8c:5d:ae:64:72:d5:21:
32:16:60:b2:4c:4e:09:e7:ed:ea:6c:37:ff:b7:fa:4d:d7:5a:
1f:d9:19:1c:56:75:9d:41:cf:bf:db:09:e4:15:3c:e6:93:95:
bd:2e:b3:a9:03:73:e5:b5:dc:0a:60:72:c1:93:36:52:b0:3f:
fd:78:5e:4b:6e:45:bf:08:8f:1e:7e:0e:27:60:29:9f:cf:62:
aa:49:71:cf:0d:a4:23:3e:1f:cf:3f:6b:a2:e8:25:d0:80:a3:
1a:b6:a9:ca:a2:43:c0:8e:88:05:0c:4b:11:b0:96:14:4e:49:
21:dd:37:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:56:27 2026 by rpki-client