Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/811db9-cbe0-4a89-a220-1174a428036b/1/I7KazNTA1fX4N36n9GNDt2Brq3w.mft
File: I7KazNTA1fX4N36n9GNDt2Brq3w.mft (raw, json)
Hash identifier: RWbWhwJvJUUVXVu99+tZNyqujpmf2FCC1fd8KyyblJs=
Subject key identifier: B5:00:C5:45:13:45:CA:2B:1B:48:A5:57:16:C8:8D:C5:76:43:D2:68
Authority key identifier: 23:B2:9A:CC:D4:C0:D5:F5:F8:37:7E:A7:F4:63:43:B7:60:6B:AB:7C
Certificate issuer: /CN=23b29accd4c0d5f5f8377ea7f46343b7606bab7c
Certificate serial: 019F951236E0CBC0083FCCDB56F97B9E03CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I7KazNTA1fX4N36n9GNDt2Brq3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/811db9-cbe0-4a89-a220-1174a428036b/1/I7KazNTA1fX4N36n9GNDt2Brq3w.mft
Manifest number: 1043
Signing time: Fri 24 Jul 2026 17:00:26 +0000
Manifest this update: Fri 24 Jul 2026 17:00:26 +0000
Manifest next update: Sat 25 Jul 2026 17:00:26 +0000
Files and hashes: 1: I7KazNTA1fX4N36n9GNDt2Brq3w.crl (hash: UrBnHRCYLkhFzCKT7HPRfBzVh1V55cXXiePlDbaUHQI=)
2: wr7KLyV4ClQnnTs8IQ6sq5gv_Bs.roa (hash: FVBmo5lpUPz2mK7tntWE423EtofmHFC0fD+FAYIPFZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/811db9-cbe0-4a89-a220-1174a428036b/1/I7KazNTA1fX4N36n9GNDt2Brq3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/811db9-cbe0-4a89-a220-1174a428036b/1/I7KazNTA1fX4N36n9GNDt2Brq3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/I7KazNTA1fX4N36n9GNDt2Brq3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:12:36:e0:cb:c0:08:3f:cc:db:56:f9:7b:9e:03:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23b29accd4c0d5f5f8377ea7f46343b7606bab7c
Validity
Not Before: Jul 24 17:00:26 2026 GMT
Not After : Jul 25 17:00:26 2026 GMT
Subject: CN=b500c5451345ca2b1b48a55716c88dc57643d268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f0:cd:60:1e:47:4c:98:37:97:1a:91:94:c8:
54:86:4d:b1:cb:ee:4b:db:b0:9a:2b:0a:a8:ae:6e:
75:9c:a0:0d:d4:79:9a:b3:da:9c:5b:35:14:b0:00:
2c:98:ca:74:06:5e:f6:07:6d:3c:ab:4f:d8:a8:b3:
18:ee:b8:f5:7f:56:c7:51:8f:21:5e:9f:34:01:b0:
cb:7e:1b:76:39:b6:3e:64:55:24:cc:95:35:fc:f1:
62:a4:e0:47:c5:f0:ae:06:e3:fa:a5:e0:cf:bc:c1:
7b:c6:30:f3:24:06:6c:fb:5d:b1:15:51:41:83:c1:
09:de:80:f3:a5:30:a4:c7:60:ac:b2:82:dd:c0:64:
34:84:4e:5c:19:02:0e:44:e7:e1:ef:c6:54:d3:29:
6a:88:7d:56:ff:94:cf:0e:c8:e2:d3:b0:11:82:3f:
6c:fe:08:f0:61:a7:ff:86:a0:31:a7:87:a9:f9:b6:
1c:17:35:73:f8:1e:7e:11:ed:c1:7d:09:ad:af:bb:
7c:07:c9:ed:15:29:01:83:cd:12:17:05:45:b7:75:
62:fb:80:b4:ec:19:aa:f2:8b:47:66:b0:b8:49:2b:
60:75:bf:55:cf:03:e1:51:f1:b0:2b:4b:89:2b:03:
c0:02:8e:20:f9:a6:7b:e1:4a:4b:99:50:4c:73:7e:
1c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:00:C5:45:13:45:CA:2B:1B:48:A5:57:16:C8:8D:C5:76:43:D2:68
X509v3 Authority Key Identifier:
keyid:23:B2:9A:CC:D4:C0:D5:F5:F8:37:7E:A7:F4:63:43:B7:60:6B:AB:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I7KazNTA1fX4N36n9GNDt2Brq3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/811db9-cbe0-4a89-a220-1174a428036b/1/I7KazNTA1fX4N36n9GNDt2Brq3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/811db9-cbe0-4a89-a220-1174a428036b/1/I7KazNTA1fX4N36n9GNDt2Brq3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:ac:e7:ed:1b:d8:ab:5d:d5:52:cb:35:32:44:7d:a5:a8:e2:
12:cd:d3:cc:72:65:13:9e:d7:ac:24:d6:ff:c5:d9:74:99:8d:
8c:17:af:73:9f:21:78:29:51:46:e3:16:55:28:a1:21:3e:7c:
b5:10:b5:d5:a1:cc:a9:20:38:15:cb:97:60:fe:6d:9b:a2:12:
e5:4a:f0:ee:e0:99:ab:d6:6a:e6:85:bb:58:9f:91:e4:06:b8:
0f:db:2e:e5:ee:e2:85:c2:4f:59:ec:4f:e4:60:68:e5:3c:1e:
31:63:e0:90:31:5b:83:5b:66:02:52:1b:ab:38:55:e0:4c:d5:
d8:7a:82:ea:76:06:be:ce:26:c3:ea:72:4c:d6:36:57:88:b9:
d7:04:a6:f9:ea:de:85:d1:04:8a:aa:36:5f:59:fa:61:38:cc:
84:f6:74:18:de:01:77:b7:a7:9a:d0:62:e2:1d:70:34:de:63:
de:4f:f3:95:e9:d2:d1:d6:5f:c6:07:6a:bb:d7:01:87:2b:04:
62:5c:c4:7e:4a:a3:61:1e:2d:cf:9f:45:a4:20:d0:3f:a0:49:
47:2a:09:95:df:f1:d7:6b:84:bb:b7:57:ac:0e:6f:83:ab:48:
a3:40:e5:14:d7:ed:47:f1:3f:98:3d:f9:b0:f7:bc:b3:13:ea:
be:a7:f5:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+VEjbgy8AIP8zbVvl7ngPNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzYjI5YWNjZDRjMGQ1ZjVmODM3N2VhN2Y0NjM0M2I3NjA2
YmFiN2MwHhcNMjYwNzI0MTcwMDI2WhcNMjYwNzI1MTcwMDI2WjAzMTEwLwYDVQQD
EyhiNTAwYzU0NTEzNDVjYTJiMWI0OGE1NTcxNmM4OGRjNTc2NDNkMjY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/DNYB5HTJg3lxqRlMhUhk2xy+5L
27CaKwqorm51nKAN1Hmas9qcWzUUsAAsmMp0Bl72B208q0/YqLMY7rj1f1bHUY8h
Xp80AbDLfht2ObY+ZFUkzJU1/PFipOBHxfCuBuP6peDPvMF7xjDzJAZs+12xFVFB
g8EJ3oDzpTCkx2CssoLdwGQ0hE5cGQIOROfh78ZU0ylqiH1W/5TPDsji07ARgj9s
/gjwYaf/hqAxp4ep+bYcFzVz+B5+Ee3BfQmtr7t8B8ntFSkBg80SFwVFt3Vi+4C0
7Bmq8otHZrC4SStgdb9VzwPhUfGwK0uJKwPAAo4g+aZ74UpLmVBMc34c3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLUAxUUTRcorG0ilVxbIjcV2Q9JoMB8GA1UdIwQY
MBaAFCOymszUwNX1+Dd+p/RjQ7dga6t8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTdLYXpOVEExZlg0TjM2bjlHTkR0MkJycTN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS84MTFkYjktY2JlMC00YTg5LWEyMjAt
MTE3NGE0MjgwMzZiLzEvSTdLYXpOVEExZlg0TjM2bjlHTkR0MkJycTN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS84MTFkYjktY2JlMC00YTg5LWEyMjAtMTE3NGE0MjgwMzZi
LzEvSTdLYXpOVEExZlg0TjM2bjlHTkR0MkJycTN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASazn7RvY
q13VUss1MkR9pajiEs3TzHJlE57XrCTW/8XZdJmNjBevc58heClRRuMWVSihIT58
tRC11aHMqSA4FcuXYP5tm6IS5Urw7uCZq9Zq5oW7WJ+R5Aa4D9su5e7ihcJPWexP
5GBo5TweMWPgkDFbg1tmAlIbqzhV4EzV2HqC6nYGvs4mw+pyTNY2V4i51wSm+ere
hdEEiqo2X1n6YTjMhPZ0GN4Bd7enmtBi4h1wNN5j3k/zlenS0dZfxgdqu9cBhysE
YlzEfkqjYR4tz59FpCDQP6BJRyoJld/x12uEu7dXrA5vg6tIo0DlFNftR/E/mD35
sPe8sxPqvqf1ug==
-----END CERTIFICATE-----
Generated at Fri Jul 24 21:42:04 2026 by rpki-client