Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.mft
File: Iv9bz3ObBzL7G823F-xxf28csOI.mft (raw, json)
Hash identifier: VMudnNAdEvtSBWEd1Eqyn2gxQkbwfFmb2XnEMfgHofQ=
Subject key identifier: 48:A4:DB:93:FD:EB:FF:97:95:3F:91:EF:53:A0:0E:68:F9:49:FC:21
Authority key identifier: 22:FF:5B:CF:73:9B:07:32:FB:1B:CD:B7:17:EC:71:7F:6F:1C:B0:E2
Certificate issuer: /CN=22ff5bcf739b0732fb1bcdb717ec717f6f1cb0e2
Certificate serial: 019E1F7EE75353B3BA29095A28BFF82521A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iv9bz3ObBzL7G823F-xxf28csOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.mft
Manifest number: 1708
Signing time: Wed 13 May 2026 04:01:10 +0000
Manifest this update: Wed 13 May 2026 04:01:10 +0000
Manifest next update: Thu 14 May 2026 04:01:10 +0000
Files and hashes: 1: Iv9bz3ObBzL7G823F-xxf28csOI.crl (hash: NmKgg5VGKYLieZRVBIJUtr4CK2qNiPaVJNx3Cr2hev0=)
2: KGVSyU1wIj7N4iY-yGjJQ4nk1wo.roa (hash: JwvzeqlxWkg3az+woqZ5+VwCzs4K2YIxQ2yc7nZEKzM=)
3: _1spXT-fNgBWQ52DMUTuvrFr3B8.roa (hash: 0BaKLx6BfvTvlAXkJodDBjYBD7kri1g1ufdyiNOpYl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iv9bz3ObBzL7G823F-xxf28csOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7e:e7:53:53:b3:ba:29:09:5a:28:bf:f8:25:21:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22ff5bcf739b0732fb1bcdb717ec717f6f1cb0e2
Validity
Not Before: May 13 04:01:10 2026 GMT
Not After : May 14 04:01:10 2026 GMT
Subject: CN=48a4db93fdebff97953f91ef53a00e68f949fc21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:b1:4a:c1:51:ae:8a:9f:26:1a:ab:f0:a9:82:
3b:77:23:d0:a1:a4:fe:32:1a:42:b9:f5:07:0a:7b:
9a:3d:7c:59:70:65:53:1d:0d:9b:c9:ba:78:fa:3b:
f1:43:35:39:6e:61:f2:03:59:f2:a1:f7:34:8c:f3:
74:9d:09:af:94:04:f3:c8:a9:2d:84:ad:15:4e:34:
88:14:eb:14:a5:50:fc:87:59:ab:79:84:b6:e4:cb:
7c:ba:00:4b:ae:b3:85:33:0b:72:44:e4:22:5d:d4:
7b:85:a8:70:3f:6f:ac:ca:d5:75:c0:1d:bc:ce:21:
d9:f3:03:71:2d:87:06:44:d0:00:cf:7e:d2:4e:2c:
3f:28:bd:e5:7f:40:b5:82:98:f3:20:0a:c7:d0:97:
94:41:80:74:8f:fa:a9:8f:27:58:4e:67:6d:b7:27:
3a:e1:77:25:e6:5b:a2:7f:78:f6:44:4b:e1:9f:e3:
e9:f6:4f:d1:41:36:65:5a:a7:b2:c8:7b:08:3a:c5:
33:4f:4e:1c:89:22:1e:0f:39:d6:b8:50:65:7d:85:
0a:f5:eb:3e:ac:ce:7a:e5:1a:a6:5f:e3:ae:73:97:
0d:ae:5e:81:36:c8:e2:3d:ae:c5:d2:6a:ca:a2:74:
5b:91:6c:0d:e0:0f:0e:e8:c5:92:5e:39:bb:8b:70:
65:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:A4:DB:93:FD:EB:FF:97:95:3F:91:EF:53:A0:0E:68:F9:49:FC:21
X509v3 Authority Key Identifier:
keyid:22:FF:5B:CF:73:9B:07:32:FB:1B:CD:B7:17:EC:71:7F:6F:1C:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iv9bz3ObBzL7G823F-xxf28csOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:24:26:ba:2d:7a:8e:9d:f4:64:ac:49:73:69:2d:7a:db:a0:
7f:dd:97:f9:bd:35:c1:df:4f:31:35:cc:df:7f:8d:99:81:3b:
59:1e:cc:c1:8b:1e:5d:45:7f:68:bf:b7:bf:26:8a:9e:c9:5f:
d5:ac:2d:8a:98:7d:76:a2:75:76:7a:50:5e:76:79:b6:58:0d:
93:c2:84:e7:52:16:09:b6:3c:e4:b1:a3:8a:07:90:af:c3:78:
c7:aa:22:bc:7a:81:69:eb:5e:9f:02:e6:81:e4:e2:c8:d8:27:
a2:2c:8a:48:cb:ce:6e:71:3b:59:f3:a4:47:b4:9b:24:0e:a4:
a8:c7:a8:b3:e2:ac:6d:36:9e:a6:87:bb:9f:d7:9d:28:db:6e:
fd:ef:6e:bc:c1:63:25:cd:84:d9:80:b3:64:c2:a6:f7:73:27:
c6:c2:2b:fc:91:3c:00:e1:03:18:19:81:a9:82:28:b6:db:a4:
7d:30:12:8e:c2:c0:0f:96:72:d2:00:68:8d:0c:18:e2:b6:67:
a5:26:3d:68:12:bf:28:6e:af:df:26:e3:e4:68:47:80:90:41:
88:b3:46:b4:4c:36:0f:09:28:d7:45:2c:74:c2:5a:d8:9e:0f:
c3:6d:79:88:07:bf:30:d5:b1:60:9c:e5:b4:21:15:a9:9f:f0:
42:8f:b1:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:42:38 2026 by rpki-client