Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/75211e-3619-425f-babd-79dc3d0bbed8/1/IY2yiCPzcIslWqEkum73QdET6vM.mft
File: IY2yiCPzcIslWqEkum73QdET6vM.mft (raw, json)
Hash identifier: hs4vFXZjdEstQK23MuSAAJxMs13jJcPpt9PB2IjJ8/Y=
Subject key identifier: A3:11:11:8B:F5:DE:FB:BC:24:3A:3F:FD:D6:9C:56:AC:A0:AC:48:4E
Authority key identifier: 21:8D:B2:88:23:F3:70:8B:25:5A:A1:24:BA:6E:F7:41:D1:13:EA:F3
Certificate issuer: /CN=218db28823f3708b255aa124ba6ef741d113eaf3
Certificate serial: 019F94A42A17BCF21A65C38C278C83AE0383
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IY2yiCPzcIslWqEkum73QdET6vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/75211e-3619-425f-babd-79dc3d0bbed8/1/IY2yiCPzcIslWqEkum73QdET6vM.mft
Manifest number: 11C3
Signing time: Fri 24 Jul 2026 15:00:14 +0000
Manifest this update: Fri 24 Jul 2026 15:00:14 +0000
Manifest next update: Sat 25 Jul 2026 15:00:14 +0000
Files and hashes: 1: IY2yiCPzcIslWqEkum73QdET6vM.crl (hash: ZeMKg7Klo7MISzdVORelbBL2s825c5vZ8ujWlnS+0NU=)
2: f7qLZUl_FwNxE3w_k0K8MDDnPE4.roa (hash: iT3SrQGihsPU4xD+7248AXf2sfstLnnSHt1kFE/x28E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/75211e-3619-425f-babd-79dc3d0bbed8/1/IY2yiCPzcIslWqEkum73QdET6vM.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/75211e-3619-425f-babd-79dc3d0bbed8/1/IY2yiCPzcIslWqEkum73QdET6vM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IY2yiCPzcIslWqEkum73QdET6vM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 15:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:a4:2a:17:bc:f2:1a:65:c3:8c:27:8c:83:ae:03:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218db28823f3708b255aa124ba6ef741d113eaf3
Validity
Not Before: Jul 24 15:00:14 2026 GMT
Not After : Jul 25 15:00:14 2026 GMT
Subject: CN=a311118bf5defbbc243a3ffdd69c56aca0ac484e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:d2:5c:2a:35:fe:b5:0b:d6:95:32:b6:e8:0e:
b2:cf:8d:5d:d4:a1:03:8d:ce:62:bf:55:3e:b9:69:
a7:90:db:91:9f:bb:8e:6b:73:89:34:f2:8f:f1:fb:
22:3f:ce:2e:99:e4:cd:b5:3b:0f:49:52:3b:5f:ce:
1e:55:e9:6e:c1:b6:ba:30:14:75:b4:8b:10:56:91:
9a:a6:f6:7f:a9:f7:5f:c2:97:60:65:e7:81:ed:77:
19:e4:ef:41:41:6b:b1:d4:7b:43:5a:61:ab:ef:5b:
d0:16:a3:45:2b:d6:d8:e7:30:b1:46:e2:a1:e0:a5:
b7:51:49:a8:f7:c2:87:c7:65:d0:f7:36:29:33:93:
1b:7c:0a:ef:49:9a:83:17:0a:81:df:39:7f:6c:5d:
1c:ed:15:97:27:a3:2a:c3:d9:d6:f7:2a:25:b4:70:
34:63:4c:2d:44:91:14:20:49:06:76:85:b9:27:70:
7c:0a:49:df:43:bd:d4:a3:53:59:26:79:99:0b:bb:
07:ff:32:1a:91:be:8d:33:9c:2a:16:df:4c:88:38:
00:b2:66:65:6d:7b:31:22:9d:a1:02:05:d7:89:17:
9f:57:68:44:d7:8c:93:07:1f:b2:91:83:7e:f0:ed:
38:26:e8:a5:a5:ed:5d:10:18:81:21:e9:2d:8b:85:
b3:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:11:11:8B:F5:DE:FB:BC:24:3A:3F:FD:D6:9C:56:AC:A0:AC:48:4E
X509v3 Authority Key Identifier:
keyid:21:8D:B2:88:23:F3:70:8B:25:5A:A1:24:BA:6E:F7:41:D1:13:EA:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IY2yiCPzcIslWqEkum73QdET6vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/75211e-3619-425f-babd-79dc3d0bbed8/1/IY2yiCPzcIslWqEkum73QdET6vM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/75211e-3619-425f-babd-79dc3d0bbed8/1/IY2yiCPzcIslWqEkum73QdET6vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:91:41:46:ef:08:c2:03:94:27:0f:be:f5:6a:4d:16:df:e8:
3d:23:de:7d:cb:df:19:51:ce:41:0f:eb:fb:19:f6:1b:5f:a8:
b3:fc:21:a7:97:cf:04:16:e4:a9:7d:81:75:af:d6:48:3d:23:
37:0c:a7:f6:df:3d:76:a2:00:c0:98:2c:9f:68:df:92:5a:d1:
6a:a2:db:4a:2a:53:00:dd:fc:bb:51:48:b7:fe:f3:6e:fa:d7:
76:20:71:50:8b:ec:ba:97:fd:2e:00:72:61:28:64:8a:93:f5:
6d:e5:ca:cc:65:72:97:85:41:24:7a:95:34:8f:fb:e6:d8:92:
8c:9c:f3:14:ec:87:58:bd:d9:20:dc:b7:ba:06:d2:f5:db:03:
7b:2b:e1:49:82:78:3b:c9:f5:34:eb:3d:18:fb:87:60:a0:24:
bf:0b:13:fb:17:52:04:9a:24:61:a2:15:18:88:cc:d4:65:42:
a2:59:d9:62:82:6b:ca:b0:b9:34:5c:9d:ad:3e:9d:de:f9:9f:
12:0a:ac:1d:aa:b1:3f:c1:8d:7b:de:da:d1:02:e2:30:e3:83:
1d:90:b7:02:57:3d:36:42:3b:09:48:c9:e4:ee:5a:22:fa:d7:
d6:a3:55:d1:5e:cc:9d:da:f1:66:e5:b8:65:e8:f0:3e:6d:2d:
7f:e5:c2:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:47:45 2026 by rpki-client