Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft
File: IixFhb2I-yfK3ynuW7ldZXX874M.mft (raw, json)
Hash identifier: I6xwF+EE3aImECqbB4W4wur5zcee4OydUuzk/0FPv8E=
Subject key identifier: EA:27:AA:41:3A:DE:7D:36:B8:22:0F:02:2F:30:C1:62:69:95:99:7B
Authority key identifier: 22:2C:45:85:BD:88:FB:27:CA:DF:29:EE:5B:B9:5D:65:75:FC:EF:83
Certificate issuer: /CN=222c4585bd88fb27cadf29ee5bb95d6575fcef83
Certificate serial: 019E1E6CC0050C6C82A6249A308FCC37ED83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft
Manifest number: 1058
Signing time: Tue 12 May 2026 23:01:43 +0000
Manifest this update: Tue 12 May 2026 23:01:43 +0000
Manifest next update: Wed 13 May 2026 23:01:43 +0000
Files and hashes: 1: 1lY-CsGva2obFTlBMU3iZDfCreA.roa (hash: Snn45LbsQALIONEF3gxNerrBtObVtDy584EK4tr9H6g=)
2: 2bVvxRffnJ6GQKgs2LoPDWvUcK4.roa (hash: er7wIVOxtiLCvuKAAvSBfYTSBvkd5n1t/IW0taeZM7Y=)
3: EKwGj8cGWTKa1emZfvaG-_KFnug.roa (hash: 0WqMi3eKQHHkupGYUjixsLx2D37mbsIXi9Fsl7hZLiw=)
4: IixFhb2I-yfK3ynuW7ldZXX874M.crl (hash: aqhvqpHJ8KLgNP8MeyCkO/Am0jfE9qou7UjvxeDhVLM=)
5: QdRrKIrH4mGJmO4pGdzpank3gew.roa (hash: uL5ZvBd0SOggdi3Ll3eXsAHR4s6R5DvUqu2sa+EiNtI=)
6: TruqXXhyrBV8Cwe5yzCBt7QLsCE.roa (hash: Ab+jWWB0kPKqVoiUmBfNBgr0bDHAA/s+gzbI3fKh/Jo=)
7: YIiAdksRfvM2tL27jCCRXB5ju3Q.roa (hash: QClgQMgXCLixY3zPZ3xGliorGs5EkE6bJGcMO+wqsBg=)
8: hD3IqorNDrlwkzGUmybhJLv5L2k.roa (hash: ZaWNL4A6CBZBDeNroOwIUO67tG+ZeiSsCvPL+QQ5od4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft
rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:c0:05:0c:6c:82:a6:24:9a:30:8f:cc:37:ed:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=222c4585bd88fb27cadf29ee5bb95d6575fcef83
Validity
Not Before: May 12 23:01:43 2026 GMT
Not After : May 13 23:01:43 2026 GMT
Subject: CN=ea27aa413ade7d36b8220f022f30c1626995997b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b9:4e:b5:72:38:c4:23:00:52:6c:18:19:54:
7e:28:74:84:0f:26:25:d9:a2:15:6e:5f:ab:04:16:
11:71:6f:cb:4c:19:02:f3:ba:30:2c:be:66:eb:dc:
27:da:7c:72:85:94:2e:fa:8c:a9:74:cd:f0:ff:e4:
9f:0f:93:53:42:ab:15:f9:61:ff:24:12:a5:ed:97:
0e:97:b1:fa:96:d7:8d:9e:3a:0b:94:c1:3b:a4:f1:
47:87:ec:c5:15:3d:17:68:00:78:a1:fe:9d:eb:57:
d6:7f:77:a7:53:e1:53:92:85:9e:24:40:b1:b7:bb:
e8:89:9a:40:8c:f4:30:9a:36:27:6e:48:17:02:9a:
0c:87:3b:12:7a:60:ed:8f:a3:08:03:89:67:fc:20:
a9:75:11:5d:14:a2:1f:d7:28:9f:93:8e:ca:1b:15:
70:be:7a:ba:14:ee:84:f1:92:cc:f4:f1:15:9d:db:
20:d7:15:78:c0:3d:60:50:7b:23:dc:a6:7b:16:ba:
cd:21:34:5e:92:d0:f5:e0:07:3d:f8:4f:41:08:89:
59:fd:25:8f:7d:36:81:60:d5:9a:7a:66:85:97:aa:
54:73:06:ee:f1:d5:42:c1:04:a3:25:77:5d:9e:eb:
7e:e8:a7:6a:82:2a:2c:d3:75:2a:cf:4c:53:61:44:
86:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:27:AA:41:3A:DE:7D:36:B8:22:0F:02:2F:30:C1:62:69:95:99:7B
X509v3 Authority Key Identifier:
keyid:22:2C:45:85:BD:88:FB:27:CA:DF:29:EE:5B:B9:5D:65:75:FC:EF:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:01:a8:d7:f7:47:23:58:3c:5c:e8:99:85:12:3a:c9:a2:0c:
c7:d9:6c:1f:c2:0a:4f:0a:63:67:5d:8c:77:26:f7:15:a9:3b:
a0:38:86:0c:83:29:42:0c:9d:2d:8b:30:3d:3f:d0:a9:19:19:
e6:cb:d9:70:a1:fa:c6:1d:a1:9d:e5:b9:df:14:57:12:01:b0:
34:6f:66:47:96:0d:5a:23:61:b2:bd:cc:43:0f:0e:c6:ba:94:
2e:ed:16:e5:dc:68:09:ff:f5:5b:e5:bd:48:28:55:9b:81:21:
c2:83:76:bb:f9:bb:e1:51:9c:07:99:15:f6:04:56:f1:5a:3e:
08:c6:2f:a8:1d:b1:60:11:d2:0c:27:b8:ea:d0:ca:24:8a:b8:
13:c9:fa:14:52:4a:82:c1:44:63:71:e5:57:db:86:b7:b8:b4:
8d:71:ec:d3:37:b9:1e:0e:67:5a:40:a7:c2:b7:81:ad:db:b4:
86:47:af:50:02:4e:e3:12:77:fd:a3:8f:6f:26:2b:96:13:db:
d5:1e:7a:5a:36:86:a9:44:b5:68:6f:2e:de:07:2b:80:d1:f8:
b3:ec:f8:78:d0:92:79:d4:af:dc:f7:8a:44:f4:00:7e:9a:66:
42:62:7c:c0:5b:76:30:b7:41:eb:2e:6e:bb:8d:f0:07:69:09:
89:0b:aa:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:58:18 2026 by rpki-client