Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft
File: IixFhb2I-yfK3ynuW7ldZXX874M.mft (raw, json)
Hash identifier: 3DTXiktCP/aPcZboIGl7tLsILO2BNohrkCQU235ej6w=
Subject key identifier: 48:DE:0F:3B:2D:2C:D1:83:E7:CA:D8:2D:C2:F6:C8:20:FB:65:9F:05
Authority key identifier: 22:2C:45:85:BD:88:FB:27:CA:DF:29:EE:5B:B9:5D:65:75:FC:EF:83
Certificate issuer: /CN=222c4585bd88fb27cadf29ee5bb95d6575fcef83
Certificate serial: 019F8F474925952810AC31F2E50177A33617
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft
Manifest number: 1117
Signing time: Thu 23 Jul 2026 14:00:41 +0000
Manifest this update: Thu 23 Jul 2026 14:00:41 +0000
Manifest next update: Fri 24 Jul 2026 14:00:41 +0000
Files and hashes: 1: 1lY-CsGva2obFTlBMU3iZDfCreA.roa (hash: Snn45LbsQALIONEF3gxNerrBtObVtDy584EK4tr9H6g=)
2: 2bVvxRffnJ6GQKgs2LoPDWvUcK4.roa (hash: er7wIVOxtiLCvuKAAvSBfYTSBvkd5n1t/IW0taeZM7Y=)
3: EKwGj8cGWTKa1emZfvaG-_KFnug.roa (hash: 0WqMi3eKQHHkupGYUjixsLx2D37mbsIXi9Fsl7hZLiw=)
4: IixFhb2I-yfK3ynuW7ldZXX874M.crl (hash: FDkJuYM7NAXOtZz60fniJR2PyjKStHBLg0RsSEbIdJI=)
5: QdRrKIrH4mGJmO4pGdzpank3gew.roa (hash: uL5ZvBd0SOggdi3Ll3eXsAHR4s6R5DvUqu2sa+EiNtI=)
6: TruqXXhyrBV8Cwe5yzCBt7QLsCE.roa (hash: Ab+jWWB0kPKqVoiUmBfNBgr0bDHAA/s+gzbI3fKh/Jo=)
7: YIiAdksRfvM2tL27jCCRXB5ju3Q.roa (hash: QClgQMgXCLixY3zPZ3xGliorGs5EkE6bJGcMO+wqsBg=)
8: hD3IqorNDrlwkzGUmybhJLv5L2k.roa (hash: ZaWNL4A6CBZBDeNroOwIUO67tG+ZeiSsCvPL+QQ5od4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft
rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:47:49:25:95:28:10:ac:31:f2:e5:01:77:a3:36:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=222c4585bd88fb27cadf29ee5bb95d6575fcef83
Validity
Not Before: Jul 23 14:00:41 2026 GMT
Not After : Jul 24 14:00:41 2026 GMT
Subject: CN=48de0f3b2d2cd183e7cad82dc2f6c820fb659f05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b4:e7:2e:14:d6:7e:b4:64:7f:5c:97:c7:47:
fa:fd:f1:f6:11:90:ac:cc:4b:04:0d:f2:b2:79:ae:
f7:b6:63:2b:26:e9:fc:0a:d1:b9:20:4e:f5:a2:54:
6a:f5:0b:d3:55:dd:ae:26:65:27:e4:bc:d5:ca:d5:
38:5d:cf:70:4b:01:f8:63:6f:bc:f4:df:6c:8b:42:
7f:84:78:3c:a2:ff:ba:ef:59:ae:d2:d7:8f:1a:a4:
08:c1:25:94:bd:94:37:db:62:fc:f7:67:ac:ff:e1:
09:f0:d7:84:cc:d3:52:85:13:18:7a:b0:75:5d:9f:
66:02:10:cd:ce:30:04:9b:c3:c5:36:8c:d7:52:2f:
95:6c:0a:7e:cc:d1:bf:cf:60:b7:cb:24:a6:c7:aa:
95:db:b2:96:ed:7b:c0:83:0a:0f:9e:29:c3:99:84:
fa:81:3f:30:8f:ce:53:ca:9f:a5:8a:a1:cf:7f:8a:
e8:2a:77:ba:91:ff:01:77:43:c0:12:47:4e:77:19:
b9:a5:99:da:cf:57:54:0f:be:bb:61:69:37:16:83:
5e:28:9a:83:ed:a3:f8:ac:35:ca:58:1c:a6:e0:c5:
03:2d:6a:26:72:4d:0d:6e:48:7e:73:5d:b4:bb:c7:
9c:44:53:3f:96:07:6b:b8:53:78:74:b0:67:88:5b:
90:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:DE:0F:3B:2D:2C:D1:83:E7:CA:D8:2D:C2:F6:C8:20:FB:65:9F:05
X509v3 Authority Key Identifier:
keyid:22:2C:45:85:BD:88:FB:27:CA:DF:29:EE:5B:B9:5D:65:75:FC:EF:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:b0:a5:aa:47:2c:21:37:ca:69:ed:cb:96:1a:57:23:61:58:
1a:49:c6:f0:0f:90:e6:5a:15:ef:5d:bb:e8:67:f1:52:b0:cb:
0c:f8:69:0f:2a:f7:1d:62:46:76:98:01:8d:9b:17:73:9f:bc:
5e:8d:0a:74:ca:88:5d:85:bb:23:f3:d3:14:7e:52:a3:bc:19:
83:b3:d0:4a:70:0c:64:a1:d4:14:84:cb:68:b7:37:cf:ef:bc:
50:eb:37:4d:f6:ed:40:5e:89:16:f1:09:c5:75:3b:28:6d:27:
a5:77:71:91:ea:62:00:61:97:53:c7:fb:6f:4f:27:d9:77:e2:
dc:27:b2:d8:2c:c4:50:48:65:d8:12:62:49:92:46:c0:b6:17:
43:16:9c:6d:c1:c3:7b:60:aa:ff:dc:64:38:a2:04:4d:19:1b:
f5:58:01:e9:57:e1:d5:14:6c:ae:43:c9:76:16:c5:55:4b:91:
e7:77:e2:5b:de:e3:04:fb:b9:26:35:1f:df:9e:0d:0b:e8:ef:
d6:b9:01:55:85:13:d3:20:84:5f:53:4e:74:cf:23:72:48:1c:
36:d4:5b:01:70:86:4a:0e:6b:9b:bd:f5:22:f7:81:8f:fc:86:
d5:52:24:38:ff:50:98:e2:41:8c:04:5b:81:a0:e3:4a:74:b5:
2f:28:0b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:32:41 2026 by rpki-client