Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft
File: I2YsmpgK11hGUKuqNUW56pHT414.mft (raw, json)
Hash identifier: PMLAFRoWWvwKrX2ffJdCj0fg11zaMAO7Um5cI3RjZ3A=
Subject key identifier: BC:5C:F7:D6:48:5B:70:E0:B2:04:1C:4C:74:A3:8D:8B:BD:C2:8F:0C
Authority key identifier: 23:66:2C:9A:98:0A:D7:58:46:50:AB:AA:35:45:B9:EA:91:D3:E3:5E
Certificate issuer: /CN=23662c9a980ad7584650abaa3545b9ea91d3e35e
Certificate serial: 019F9437109061BB6E4369F85A1323EFFC28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I2YsmpgK11hGUKuqNUW56pHT414.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 13:01:04 +0000
Manifest this update: Fri 24 Jul 2026 13:01:04 +0000
Manifest next update: Sat 25 Jul 2026 13:01:04 +0000
Files and hashes: 1: I2YsmpgK11hGUKuqNUW56pHT414.crl (hash: znuF24pAez1cEf52miSaOibRcXcmkNyRGprF78djQzg=)
2: Tfq0-Nhgv3VBbk9n3Vq4GI4iE_0.roa (hash: /bnj20jmvQ1RfURsnTm2hkQVvQm8WHvC5U4MWvcKmj0=)
3: UeUxs8O7BQG0PZAERCcpvW9oGJU.roa (hash: RA/5tda8Js/MvHGINkhN95bDFA6hSRU7RaQvgqea3Ts=)
4: fQxumP61VhB9FVDhoZcA_ZnxqZE.roa (hash: QVf5rDdwShREzqt48QWp/0TmeWtlZGZgnBrXgvvda9I=)
5: u8pBAQ-Z3p2H9WD6gzLyx7OKtRM.roa (hash: oA/e5+fvQLLxtw5lvTdOJVbmZhfodYNiZ+D6A/AnOCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft
rsync://rpki.ripe.net/repository/DEFAULT/I2YsmpgK11hGUKuqNUW56pHT414.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 13:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:37:10:90:61:bb:6e:43:69:f8:5a:13:23:ef:fc:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23662c9a980ad7584650abaa3545b9ea91d3e35e
Validity
Not Before: Jul 24 13:01:04 2026 GMT
Not After : Jul 25 13:01:04 2026 GMT
Subject: CN=bc5cf7d6485b70e0b2041c4c74a38d8bbdc28f0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:be:38:a4:f6:28:99:bf:f9:a9:9f:37:19:66:
1a:ac:a0:8b:a0:0b:2c:6a:b0:c9:e0:1a:4d:f9:7f:
e4:61:c2:be:0b:9c:c3:f3:90:b9:ca:46:eb:12:4f:
a6:ec:ba:29:97:a0:ba:db:6c:50:ab:b4:f4:4e:b9:
3b:67:23:ef:6a:a6:33:33:76:57:5d:21:a6:4f:e0:
7e:0a:76:52:3f:e4:8f:af:5b:f7:98:b2:af:fa:69:
7f:5a:6b:ce:43:4d:99:a0:2f:a3:4f:1e:ce:43:14:
e3:86:87:f3:8f:01:61:15:ed:c2:29:0e:85:d2:6c:
04:03:51:38:5a:09:15:e4:9f:68:7c:73:fd:d8:7d:
9f:97:c2:d8:3d:20:9e:a5:23:d5:f6:91:60:f9:04:
58:a7:df:01:e5:05:9a:b1:18:80:c3:b9:33:5e:4a:
6b:63:02:ee:5a:82:41:60:1e:89:a2:99:76:32:14:
1f:e1:eb:d1:32:01:1d:0e:c3:c9:b9:bb:84:eb:c4:
3b:bf:a0:22:bd:80:b5:c5:f2:0d:d1:3c:c7:53:26:
ef:f8:f5:91:02:11:40:83:00:d1:71:4a:1c:be:fd:
d4:4a:a8:db:e8:ed:de:eb:72:67:00:82:8e:58:ec:
92:79:5b:5f:b5:b2:cb:24:db:24:20:c7:34:86:81:
32:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:5C:F7:D6:48:5B:70:E0:B2:04:1C:4C:74:A3:8D:8B:BD:C2:8F:0C
X509v3 Authority Key Identifier:
keyid:23:66:2C:9A:98:0A:D7:58:46:50:AB:AA:35:45:B9:EA:91:D3:E3:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I2YsmpgK11hGUKuqNUW56pHT414.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:a2:a6:44:f5:1f:8a:9d:61:db:a2:82:05:61:3f:49:2e:0e:
8b:b8:11:96:56:bc:25:73:21:48:16:64:f5:7e:bc:c1:32:4f:
93:e8:f4:89:f9:f4:67:3d:fa:f0:2e:0a:ae:a7:ef:83:be:88:
d1:4a:d4:4c:52:f8:a5:aa:22:ee:9b:74:e2:46:a9:15:a8:0d:
59:1f:0e:1f:81:95:17:f1:e0:08:9e:81:6c:3f:ae:5d:da:f7:
36:d7:52:08:9a:91:14:27:01:4a:4c:7f:45:5b:e8:78:86:1b:
ee:82:89:35:f5:49:1e:da:57:9f:6f:12:b8:61:3d:b9:7f:b5:
9f:42:5c:82:30:06:8f:b2:81:85:3d:3f:cf:07:87:ff:38:6b:
6c:dc:64:9f:0a:48:d1:f3:a0:f8:16:34:9c:04:86:d0:31:66:
6a:ba:79:0d:0d:6c:34:24:cc:01:f3:9a:84:68:c9:56:8d:2d:
a8:61:a1:93:1f:25:e9:33:21:b8:7b:3b:ad:ab:69:bc:fe:89:
d7:95:95:86:86:0a:36:3f:ab:36:37:b4:00:6f:16:7f:fb:36:
c1:46:d6:ab:7c:1c:08:b1:6d:9b:3e:10:1c:6d:dd:67:ce:41:
1a:b0:03:fe:2d:55:54:0f:01:e8:3f:ab:28:6e:19:a9:00:2d:
ee:eb:0d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:17:53 2026 by rpki-client