Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/0d57ff-5530-460d-8b53-b6656cc1bd59/1/IUoPQhkJRKxrReAKJK5Bo0X9yzU.mft
File: IUoPQhkJRKxrReAKJK5Bo0X9yzU.mft (raw, json)
Hash identifier: XaVMIVdmkuDtdTBbQOSDu4gVbQ/1eDwvAa7BH8Udn18=
Subject key identifier: AC:93:32:20:97:44:03:10:7F:3B:E8:5B:16:00:C9:DB:A9:1B:3F:F8
Authority key identifier: 21:4A:0F:42:19:09:44:AC:6B:45:E0:0A:24:AE:41:A3:45:FD:CB:35
Certificate issuer: /CN=214a0f42190944ac6b45e00a24ae41a345fdcb35
Certificate serial: 019F91DB4E16FC49E6B57FEE6D09E415CD9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IUoPQhkJRKxrReAKJK5Bo0X9yzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/0d57ff-5530-460d-8b53-b6656cc1bd59/1/IUoPQhkJRKxrReAKJK5Bo0X9yzU.mft
Manifest number: 19C7
Signing time: Fri 24 Jul 2026 02:01:36 +0000
Manifest this update: Fri 24 Jul 2026 02:01:36 +0000
Manifest next update: Sat 25 Jul 2026 02:01:36 +0000
Files and hashes: 1: IUoPQhkJRKxrReAKJK5Bo0X9yzU.crl (hash: lO947VafaHROjBUhQhf765ZaPuwIb4BqIsKDos74nj4=)
2: ToOm_DRG8L881LK0bTvQrJEi9zE.roa (hash: DCNqoXRqfdwODxjtc8J2/AVxGOKRF24UDLD2fHtc4vM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/0d57ff-5530-460d-8b53-b6656cc1bd59/1/IUoPQhkJRKxrReAKJK5Bo0X9yzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/0d57ff-5530-460d-8b53-b6656cc1bd59/1/IUoPQhkJRKxrReAKJK5Bo0X9yzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IUoPQhkJRKxrReAKJK5Bo0X9yzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:db:4e:16:fc:49:e6:b5:7f:ee:6d:09:e4:15:cd:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=214a0f42190944ac6b45e00a24ae41a345fdcb35
Validity
Not Before: Jul 24 02:01:36 2026 GMT
Not After : Jul 25 02:01:36 2026 GMT
Subject: CN=ac933220974403107f3be85b1600c9dba91b3ff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1e:7e:03:b8:fa:4d:19:bb:7a:07:e1:e4:c3:
54:f1:ae:09:2d:da:28:60:68:36:a2:1f:72:4c:e4:
b5:cf:5a:48:a3:dd:62:cd:81:03:f9:9b:74:c0:12:
7c:f6:ec:1a:7e:3f:b0:d8:df:9d:60:ca:bf:ff:d8:
31:bc:6b:06:0f:b2:5e:9e:13:4e:02:c1:a3:92:c8:
86:14:5d:b0:c8:5d:0a:44:5f:23:a8:1c:60:7c:02:
4b:4c:ea:57:92:72:73:06:a7:e1:e5:b4:86:1a:4c:
c3:f1:49:09:59:a1:0e:95:28:63:e9:67:93:2d:22:
89:d9:4d:70:1b:07:c7:a2:3f:6e:51:88:22:27:f1:
ef:dd:89:fd:05:4b:ed:1e:23:47:25:58:2b:f4:9f:
b8:03:57:63:17:25:5e:af:e5:9a:c3:01:a3:9d:eb:
fc:7e:50:67:08:e6:8b:1c:51:d0:45:12:87:ca:0d:
d9:36:da:04:7c:d1:57:b6:fd:db:a3:bd:23:52:af:
af:c0:82:6a:d3:d4:08:3d:84:6e:69:9a:90:6c:25:
e6:39:b0:7d:e1:cf:13:f2:79:cd:e1:5d:79:8a:f7:
fe:20:b5:d8:c4:79:fc:7e:24:2e:60:40:3e:05:da:
7d:0d:a5:6a:f0:b9:e6:5e:2a:4a:43:78:81:94:3c:
0c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:93:32:20:97:44:03:10:7F:3B:E8:5B:16:00:C9:DB:A9:1B:3F:F8
X509v3 Authority Key Identifier:
keyid:21:4A:0F:42:19:09:44:AC:6B:45:E0:0A:24:AE:41:A3:45:FD:CB:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IUoPQhkJRKxrReAKJK5Bo0X9yzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/0d57ff-5530-460d-8b53-b6656cc1bd59/1/IUoPQhkJRKxrReAKJK5Bo0X9yzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/0d57ff-5530-460d-8b53-b6656cc1bd59/1/IUoPQhkJRKxrReAKJK5Bo0X9yzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:65:a4:74:e8:53:c6:e3:93:9c:02:8d:7d:c5:ca:8e:01:4c:
e0:5a:27:92:eb:74:51:99:39:04:dd:71:6a:0e:ce:cd:e4:fb:
4d:28:f5:89:94:c9:b8:d5:8a:56:f1:52:75:d9:64:8b:06:e4:
d6:fc:3d:d9:27:fe:d5:4b:88:14:b1:92:fc:88:73:04:7e:5f:
55:96:d1:2e:d3:fe:fb:d7:b9:b9:09:f1:12:6f:a6:6c:20:48:
83:06:a0:0e:8e:da:81:8a:11:66:5f:5b:84:2d:cd:ea:1e:e2:
89:71:6a:9b:8b:31:44:5e:11:e0:30:2c:36:d6:88:39:3a:29:
b6:59:c2:26:03:54:b2:07:86:4e:d2:09:88:20:6e:0e:fd:9d:
97:18:67:9e:c0:98:b5:eb:8b:db:4f:80:6b:a5:a2:d7:f6:cf:
40:4e:39:ab:d9:eb:c9:71:52:d9:a0:16:a5:90:0e:eb:d8:81:
99:bc:9a:cb:35:55:80:08:72:82:51:4e:24:5b:c8:9a:cc:aa:
2e:2e:ad:29:e3:01:7d:6a:71:df:7a:85:42:49:14:52:e4:f1:
d7:0f:ae:d7:d9:f5:1a:1e:11:9e:dd:59:82:01:d3:46:c4:2a:
ba:26:79:92:fe:ea:64:4d:2a:f8:d5:59:7c:c1:a8:13:4b:43:
d4:f6:ef:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:42:29 2026 by rpki-client