Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft
File: I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft (raw, json)
Hash identifier: QnCLum1vMt6GUf5R6xjLzb2h0QdXdKkPoZoH7Ni+vV4=
Subject key identifier: 88:4A:E3:1E:AB:78:85:13:98:66:D4:41:A3:2E:50:79:A2:7B:BA:95
Authority key identifier: 23:88:57:66:0D:C7:FA:60:84:6F:76:5B:94:CB:69:57:62:55:AD:B6
Certificate issuer: /CN=238857660dc7fa60846f765b94cb69576255adb6
Certificate serial: 019F8ED9A74F88E948F66B7B99DBF67CD665
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I4hXZg3H-mCEb3ZblMtpV2JVrbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft
Manifest number: 19C9
Signing time: Thu 23 Jul 2026 12:00:56 +0000
Manifest this update: Thu 23 Jul 2026 12:00:56 +0000
Manifest next update: Fri 24 Jul 2026 12:00:56 +0000
Files and hashes: 1: I4hXZg3H-mCEb3ZblMtpV2JVrbY.crl (hash: jo/c/zrpQmtAY0Qq1Q+CeloQbe+68uSmCRT/xTTeRnA=)
2: hc6aXK62WoI8LVWQXzH6eABWVV4.roa (hash: VubjcNf1CkPqEAAAxHPS2Rw1XmdvlVTyVEabkLIibOU=)
3: j_dlNBpw9nrxphVhyhTmP13d1VY.roa (hash: b2h18Cq9Or7dr/VEm7f4JBC1yManVn4ntGbbM1+L8w8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/I4hXZg3H-mCEb3ZblMtpV2JVrbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 12:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:d9:a7:4f:88:e9:48:f6:6b:7b:99:db:f6:7c:d6:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=238857660dc7fa60846f765b94cb69576255adb6
Validity
Not Before: Jul 23 12:00:56 2026 GMT
Not After : Jul 24 12:00:56 2026 GMT
Subject: CN=884ae31eab7885139866d441a32e5079a27bba95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ae:da:e4:e4:aa:b1:b2:f2:88:8d:60:61:a2:
5a:c0:b9:22:00:a7:ee:61:33:95:05:d4:25:69:c9:
26:21:3e:b1:d3:a0:0f:15:3a:f2:47:70:b2:c0:9d:
f2:e8:18:e2:d0:03:9d:6a:76:3b:66:d1:90:c8:86:
f9:07:3c:a9:61:29:1d:28:dd:54:dd:05:1d:c6:5c:
af:c8:b9:ba:da:33:47:18:80:28:f3:ec:c2:af:5d:
84:a7:a2:77:4c:cb:c2:39:91:e6:3a:ae:96:bb:70:
9c:f1:a4:e9:4a:d4:d1:7d:59:57:8e:0d:d9:a8:99:
fb:d7:0d:b9:71:cb:97:cc:94:5f:9c:06:66:ca:3e:
4f:25:a4:72:15:d1:22:05:b1:45:5e:42:2f:4b:0a:
f5:2b:1d:89:14:c2:0f:fc:91:bb:76:80:39:ef:7b:
c7:2e:48:02:28:d9:da:58:82:f4:53:96:70:93:fc:
9e:25:83:a5:e1:81:78:9e:2e:b8:3e:5c:d6:36:00:
7b:cb:09:57:b1:4b:b9:f5:3c:34:5d:3f:2a:1e:a2:
3d:b4:a1:c6:56:ad:14:9a:aa:a5:85:bc:74:4b:1c:
68:c1:2b:5c:a5:a9:e0:74:b9:ea:21:83:01:e5:f0:
38:b8:75:98:41:5a:83:04:e7:54:7f:d0:bb:64:4c:
cd:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:4A:E3:1E:AB:78:85:13:98:66:D4:41:A3:2E:50:79:A2:7B:BA:95
X509v3 Authority Key Identifier:
keyid:23:88:57:66:0D:C7:FA:60:84:6F:76:5B:94:CB:69:57:62:55:AD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I4hXZg3H-mCEb3ZblMtpV2JVrbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:18:d7:d8:ec:76:d1:46:d4:f9:d8:3c:a6:be:97:c9:42:c1:
7d:60:f8:63:fe:3d:e1:b2:f7:19:60:c5:58:3a:7f:d1:23:bf:
03:27:d7:c9:c9:c4:41:62:dc:cc:da:8e:28:85:e5:aa:1c:bd:
ac:c5:ed:91:84:7c:95:07:19:e5:21:d9:ea:b1:16:e0:34:9e:
ef:77:37:56:b2:12:39:b2:b7:2f:d0:8c:67:40:ec:7d:1f:b8:
10:10:2c:84:84:29:e4:31:0a:a5:1d:ef:04:d7:8d:7a:e8:5d:
d6:bf:02:98:2f:38:b0:1a:a6:e0:a1:49:f6:3d:13:cd:36:0f:
f9:a1:07:e9:17:04:95:55:23:1b:7f:d5:79:f7:dc:a6:af:ef:
d3:d8:cd:ed:df:5c:0d:0f:9d:b6:59:ba:36:67:91:5c:d6:17:
6e:30:f8:12:cc:75:df:3e:a7:85:aa:fb:dc:85:59:3a:08:8c:
83:64:7c:55:41:22:25:78:b6:c6:35:e1:1f:a7:6c:4c:aa:04:
67:80:b7:90:85:69:31:b1:9d:83:80:77:69:d8:44:9e:3e:82:
9e:8d:16:a2:fc:db:34:49:17:fe:1e:a1:b7:14:34:57:d5:f8:
9e:de:0b:64:82:d2:8c:2f:8e:c9:ba:e1:82:7c:03:10:b4:5b:
10:dc:fc:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:27:00 2026 by rpki-client