Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.mft
File: ieXrHhIJiXh0XVQNypbP8N5HBNo.mft (raw, json)
Hash identifier: o/zlj6NFsYkTt8Rm3tHaRc4wy+U98LEqV99B69rKXWo=
Subject key identifier: 6B:AE:08:7C:BE:62:14:B7:BB:99:9E:FD:CD:E8:AA:03:FF:0C:97:99
Authority key identifier: 89:E5:EB:1E:12:09:89:78:74:5D:54:0D:CA:96:CF:F0:DE:47:04:DA
Certificate issuer: /CN=89e5eb1e12098978745d540dca96cff0de4704da
Certificate serial: 019E205A1F656043D58C379AE41EABF1491E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ieXrHhIJiXh0XVQNypbP8N5HBNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.mft
Manifest number: 0D7D
Signing time: Wed 13 May 2026 08:00:37 +0000
Manifest this update: Wed 13 May 2026 08:00:37 +0000
Manifest next update: Thu 14 May 2026 08:00:37 +0000
Files and hashes: 1: ieXrHhIJiXh0XVQNypbP8N5HBNo.crl (hash: jR0BkvcfSOhiXHGaQXTal2a5tkO5yrCkC45MyD7r1VM=)
2: mdTsNfdOLmAj5Ib0bSI7RIV96g0.roa (hash: xAGPZrEW2fEUSd+UrPEI5hWaivVab8Rku87e+bOIo2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ieXrHhIJiXh0XVQNypbP8N5HBNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:5a:1f:65:60:43:d5:8c:37:9a:e4:1e:ab:f1:49:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89e5eb1e12098978745d540dca96cff0de4704da
Validity
Not Before: May 13 08:00:37 2026 GMT
Not After : May 14 08:00:37 2026 GMT
Subject: CN=6bae087cbe6214b7bb999efdcde8aa03ff0c9799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:01:e9:3f:75:8e:28:90:67:e4:0f:2c:79:19:
df:ca:1b:61:d3:4d:b6:0d:75:f0:a2:fe:85:a4:6c:
89:0f:01:7f:c6:6e:95:4e:78:06:66:59:7d:7c:09:
c9:ce:a8:18:7d:59:90:83:34:fc:ff:12:16:07:32:
c8:07:b2:55:94:7d:28:3a:c7:a4:b9:75:22:d5:b9:
98:3b:56:58:cb:0d:1c:d9:7e:bb:ec:c9:6c:2c:94:
78:79:d2:b5:59:bb:a6:71:ed:83:35:96:95:2b:db:
66:93:31:8d:e9:f0:35:d1:c8:e9:3d:d8:9d:d6:99:
86:5d:47:38:5d:05:a5:a1:00:70:05:86:06:91:71:
59:db:78:02:ec:5f:c9:b7:f3:98:25:5e:86:18:17:
66:91:7f:98:91:d8:ac:ea:ae:14:48:fe:a8:06:85:
8a:25:25:d4:5b:88:e5:05:a0:2e:8c:23:8d:0e:de:
74:07:b5:ab:c9:fa:47:17:b6:93:d0:e9:c4:e0:eb:
d0:40:60:f3:4f:46:cc:e8:0c:99:d3:cc:de:bf:16:
55:09:ae:3b:5c:72:74:8c:70:e1:26:df:5e:5e:f1:
43:cc:55:56:06:98:f6:f8:ef:dc:75:65:fb:38:3a:
a6:f5:cd:32:e9:df:69:ec:68:6c:54:3f:4e:f3:4b:
bb:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:AE:08:7C:BE:62:14:B7:BB:99:9E:FD:CD:E8:AA:03:FF:0C:97:99
X509v3 Authority Key Identifier:
keyid:89:E5:EB:1E:12:09:89:78:74:5D:54:0D:CA:96:CF:F0:DE:47:04:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ieXrHhIJiXh0XVQNypbP8N5HBNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:4c:e0:77:6c:74:ca:46:da:c6:36:52:db:e3:c9:d1:e0:aa:
c2:43:b8:a5:c4:4a:84:7d:54:91:9f:7a:7f:25:ea:c7:e1:90:
b3:04:5f:d7:6f:16:67:18:15:f8:75:31:7c:4f:db:9e:c8:ac:
df:99:3d:bb:a9:71:75:fb:66:90:ea:5d:cb:89:6d:fe:74:49:
e5:83:7c:f0:40:ef:28:74:76:ed:a4:2a:47:a3:45:aa:f3:bd:
3d:8f:93:bb:9c:2c:7f:b6:6d:45:f3:5e:05:0a:6d:30:8e:23:
68:9a:8b:7e:db:a1:0e:23:ff:76:b2:41:b3:1a:68:63:6b:fc:
98:32:56:e7:e7:00:a4:1a:84:f4:69:f4:1c:6f:6a:ce:30:e9:
1b:a5:62:40:c8:d8:4e:f8:7f:bb:28:32:5c:35:15:87:a0:b3:
74:1b:da:d0:6f:7b:4a:84:a3:83:5a:ae:8e:2a:b2:52:9c:ea:
6b:c1:b8:da:22:74:16:df:4b:59:72:cb:09:9f:d1:08:eb:83:
24:65:b5:3b:02:21:1e:66:6a:c8:3d:7d:a8:c4:77:a5:35:61:
fb:93:4a:46:7b:e1:af:e0:90:5c:4d:0f:0a:4c:76:bf:01:12:
89:2e:09:36:dc:51:45:92:a6:d0:89:6b:6c:db:db:94:58:a1:
8e:ea:af:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:55:52 2026 by rpki-client