
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/76d0ea-48ad-4be1-a799-df3796b34856/1/IiKkikiuRfINe4Ok6fP0P9sDqQ4.mft
File: IiKkikiuRfINe4Ok6fP0P9sDqQ4.mft (raw, json)
Hash identifier: khBmxd7BleNkBcrT3DVewzMtYeKI0frYq1YE1uZL/qs=
Subject key identifier: 72:69:D4:64:0E:C5:D0:35:BC:92:26:31:9B:D9:6B:C7:D9:59:A7:33
Authority key identifier: 22:22:A4:8A:48:AE:45:F2:0D:7B:83:A4:E9:F3:F4:3F:DB:03:A9:0E
Certificate issuer: /CN=2222a48a48ae45f20d7b83a4e9f3f43fdb03a90e
Certificate serial: 019F916D4165B05163A1531F587C3B465D15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IiKkikiuRfINe4Ok6fP0P9sDqQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/76d0ea-48ad-4be1-a799-df3796b34856/1/IiKkikiuRfINe4Ok6fP0P9sDqQ4.mft
Manifest number: 40
Signing time: Fri 24 Jul 2026 00:01:24 +0000
Manifest this update: Fri 24 Jul 2026 00:01:24 +0000
Manifest next update: Sat 25 Jul 2026 00:01:24 +0000
Files and hashes: 1: IiKkikiuRfINe4Ok6fP0P9sDqQ4.crl (hash: MXW7va8yDdCyCnbgB4UF/W73ZE9/McWYDiU3KElc+tY=)
2: h2MUZzK6jX-iU91egrEXxJwrlhU.roa (hash: AQQQoSdiJ+jplNp9p3VB8GeXhyTD6RNK0y5PzB9A1Pk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/76d0ea-48ad-4be1-a799-df3796b34856/1/IiKkikiuRfINe4Ok6fP0P9sDqQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/76d0ea-48ad-4be1-a799-df3796b34856/1/IiKkikiuRfINe4Ok6fP0P9sDqQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IiKkikiuRfINe4Ok6fP0P9sDqQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:41:65:b0:51:63:a1:53:1f:58:7c:3b:46:5d:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2222a48a48ae45f20d7b83a4e9f3f43fdb03a90e
Validity
Not Before: Jul 24 00:01:24 2026 GMT
Not After : Jul 25 00:01:24 2026 GMT
Subject: CN=7269d4640ec5d035bc9226319bd96bc7d959a733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c3:f7:28:62:2e:e2:18:d6:b7:b4:10:b1:34:
4e:f1:82:bc:9e:f5:bd:7f:c5:ae:a2:4c:b4:5e:2e:
1f:4e:25:b8:c2:be:f5:66:5f:9d:4b:49:1c:ca:da:
71:45:09:20:35:ea:cc:63:6f:6c:3c:6e:47:5d:5b:
d5:9e:7a:47:b6:48:cd:e2:e3:92:4a:1e:c0:82:26:
dc:a6:ad:15:0c:77:be:0e:24:71:c2:94:21:84:07:
93:0f:ce:18:6b:98:33:28:74:11:2f:cf:8d:7f:b5:
63:0b:0d:57:e5:fc:a3:23:ee:df:91:dd:f9:3b:e0:
f9:5f:8f:48:7e:e3:7d:6d:39:89:35:35:bb:ac:6b:
b3:33:ef:bb:2f:50:5d:0b:36:2c:0d:0a:21:15:04:
58:ff:2c:b7:af:4f:18:6f:32:fe:9f:78:b0:52:7f:
14:61:46:8b:b7:89:4a:f2:c6:c3:9c:41:09:4c:4b:
7e:4c:3a:22:2e:95:e7:d4:e8:6b:78:e0:0b:ab:5e:
81:f0:64:b4:61:d1:5b:43:bb:9c:51:8e:39:90:d9:
64:c8:b1:9b:ba:09:2e:77:b5:88:8d:45:65:59:9c:
84:3b:12:22:d8:5e:3e:86:ff:f7:4d:a0:9c:b3:d4:
63:bc:e8:b0:7c:cb:a7:76:02:d5:b6:01:aa:d6:bf:
68:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:69:D4:64:0E:C5:D0:35:BC:92:26:31:9B:D9:6B:C7:D9:59:A7:33
X509v3 Authority Key Identifier:
keyid:22:22:A4:8A:48:AE:45:F2:0D:7B:83:A4:E9:F3:F4:3F:DB:03:A9:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IiKkikiuRfINe4Ok6fP0P9sDqQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/76d0ea-48ad-4be1-a799-df3796b34856/1/IiKkikiuRfINe4Ok6fP0P9sDqQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/76d0ea-48ad-4be1-a799-df3796b34856/1/IiKkikiuRfINe4Ok6fP0P9sDqQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:b8:da:89:8d:fb:33:e3:c3:95:0e:b8:85:76:b3:3e:8f:fa:
de:93:e2:ad:21:05:e5:e1:9d:bd:8e:aa:99:04:11:1f:c4:92:
4e:62:9f:6b:c0:75:7e:77:c3:3b:9c:5d:ff:fa:8a:5c:e9:45:
46:e5:e1:df:e5:32:cb:5b:e5:d0:3d:b0:f3:d6:4f:bf:80:e6:
14:30:74:2d:a8:4f:72:f1:be:00:9c:2a:af:08:89:8b:13:75:
30:73:ce:e4:67:ec:d9:d0:06:8b:1f:f1:1f:9f:cc:7d:da:32:
75:21:21:1f:4b:55:d9:d9:40:35:da:e8:33:64:04:2f:d1:6a:
90:0c:9f:1e:35:1b:4d:0e:ef:dc:c7:bf:05:38:3a:8c:80:3d:
4b:8f:b6:57:70:b2:19:3d:1d:93:60:b5:71:84:49:18:2d:e0:
d1:2e:72:dd:0e:62:6c:c6:63:11:fb:4c:de:78:ff:4a:4a:40:
73:eb:1e:88:33:3b:f8:a6:84:d8:04:1e:37:43:95:28:6c:95:
c1:b8:91:f9:9d:78:cf:79:29:7b:cb:79:d1:ca:7b:f9:28:6f:
e1:fb:24:79:96:5e:83:3c:9e:9d:1c:39:15:76:63:46:ec:12:
11:df:29:92:8c:2d:43:0c:33:d3:7c:95:39:d0:d8:07:3e:22:
48:1e:4e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:19:05 2026 by rpki-client