Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.mft
File: ie36QUlE0BCsae5b-yJ3OySyfvs.mft (raw, json)
Hash identifier: ksGbTPMnCJpBScCtOPQ2eaIx9Q9jsNeW9TZBoZTE/Tw=
Subject key identifier: EA:D0:7C:E2:DF:80:33:18:A5:4A:CC:BA:83:96:80:91:D8:9B:8D:A6
Authority key identifier: 89:ED:FA:41:49:44:D0:10:AC:69:EE:5B:FB:22:77:3B:24:B2:7E:FB
Certificate issuer: /CN=89edfa414944d010ac69ee5bfb22773b24b27efb
Certificate serial: 019F92B69F652BD1FD6AA7AA89FD46AB2EAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ie36QUlE0BCsae5b-yJ3OySyfvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.mft
Manifest number: 0E3F
Signing time: Fri 24 Jul 2026 06:01:09 +0000
Manifest this update: Fri 24 Jul 2026 06:01:09 +0000
Manifest next update: Sat 25 Jul 2026 06:01:09 +0000
Files and hashes: 1: dvkk0AF8tQcZnUPQCg9wGxPygAk.roa (hash: rFoeKgkf83K3sPDF/5ELGk/RlwiuIW6RTOiVohUUKGA=)
2: ie36QUlE0BCsae5b-yJ3OySyfvs.crl (hash: PPGjxdV7AsXYBwweAkqzFSU/O9z4EphSUNycj4NqpW8=)
3: xoWvafIMJ6TLt2ZntxrZctfmhMc.roa (hash: Rhaku6Y4Ce9/CA5bX0DFke+wrnSAKtC/WyFWuc4Uj/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ie36QUlE0BCsae5b-yJ3OySyfvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:9f:65:2b:d1:fd:6a:a7:aa:89:fd:46:ab:2e:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89edfa414944d010ac69ee5bfb22773b24b27efb
Validity
Not Before: Jul 24 06:01:09 2026 GMT
Not After : Jul 25 06:01:09 2026 GMT
Subject: CN=ead07ce2df803318a54accba83968091d89b8da6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e0:93:0c:e8:5a:b0:ed:46:97:c4:7b:fb:aa:
b2:69:03:11:bf:17:07:f1:3e:23:b9:ce:d7:d3:ba:
9a:6c:62:e7:31:59:79:e6:1d:5b:d2:39:53:7b:cc:
bf:55:ca:8a:0d:88:7e:57:76:36:b4:02:61:cb:31:
02:6f:dd:a4:63:96:a6:3b:02:b5:5b:84:02:0e:bc:
eb:21:96:d0:c8:33:c5:76:35:bc:83:a6:5c:ba:cd:
e0:1c:28:95:2e:b7:72:35:b2:85:d4:ed:3c:44:4d:
5e:bf:bf:7a:ea:7d:66:c4:85:32:b4:59:04:0b:12:
76:9f:9a:eb:12:ec:89:2e:52:04:5a:cd:a5:9d:c5:
d6:ff:d6:87:dc:81:26:4f:b7:7b:f2:d9:70:69:ba:
50:e6:7a:ae:9d:d1:2f:83:98:f9:0c:fe:0e:28:8f:
6c:42:6d:e9:43:1f:73:2d:4b:c6:59:b3:2b:a0:84:
b5:d9:07:4c:c9:eb:c3:fc:87:81:de:84:49:94:1b:
7b:05:a6:2b:44:cc:c5:f8:f3:0a:ba:24:bb:24:f1:
97:0b:65:e9:25:f1:15:97:43:2a:a1:f9:60:87:e3:
da:82:19:61:bb:24:b9:1d:96:cf:0c:f7:0d:f7:20:
07:6e:01:38:26:5b:aa:1d:38:29:6c:49:c2:b9:b9:
46:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:D0:7C:E2:DF:80:33:18:A5:4A:CC:BA:83:96:80:91:D8:9B:8D:A6
X509v3 Authority Key Identifier:
keyid:89:ED:FA:41:49:44:D0:10:AC:69:EE:5B:FB:22:77:3B:24:B2:7E:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ie36QUlE0BCsae5b-yJ3OySyfvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:c8:8c:9d:6a:27:7e:2a:41:2f:0b:4c:ec:ca:98:dc:16:eb:
eb:1e:39:e7:68:10:77:5f:0f:5e:87:e0:81:6b:16:75:d3:a1:
50:c0:b4:a5:7d:0a:d9:42:26:1d:34:5e:18:1d:49:16:33:d9:
a0:8c:07:c5:15:e9:0d:d1:ed:ec:1b:33:bf:5a:68:68:7e:96:
74:73:2b:cd:dc:e5:95:61:91:24:27:af:10:e3:03:01:a2:4a:
b6:93:81:c8:83:6c:58:28:c7:02:f5:b8:0a:65:f9:7e:03:0f:
fc:63:8f:68:41:26:a0:b7:16:89:74:f1:8f:4a:ac:8f:a7:49:
b6:5d:fe:48:90:4a:74:b2:06:6e:22:b3:09:b7:ea:80:14:e4:
70:ec:04:58:72:09:31:99:74:a9:c1:ba:f2:7b:99:6b:ad:3b:
56:22:e8:f0:ba:f6:ca:d4:4c:85:d3:6e:a3:cd:47:19:77:c3:
08:ef:4d:3c:d7:8b:5a:5a:c9:de:de:5b:51:80:1c:df:05:d8:
c8:35:36:8a:b7:bf:9d:d6:0d:67:c2:00:f0:bd:74:2f:8b:ad:
51:61:d8:9f:77:5c:8d:9e:35:56:9a:c4:66:c9:61:f0:c4:df:
e3:80:d9:0a:b0:42:a4:d7:37:03:02:c5:5e:07:84:40:5c:02:
08:55:33:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:55:24 2026 by rpki-client