Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.mft
File: iUkoo5YnzV7l-XW9iXwtd1qymUA.mft (raw, json)
Hash identifier: udT6sA5TmCK1+ztru+cuwsNNEH80NVmwxGbSF58CQGw=
Subject key identifier: 2F:5E:B0:3F:91:F5:03:BB:6E:38:B8:D0:F2:21:39:8F:B3:D3:28:57
Authority key identifier: 89:49:28:A3:96:27:CD:5E:E5:F9:75:BD:89:7C:2D:77:5A:B2:99:40
Certificate issuer: /CN=894928a39627cd5ee5f975bd897c2d775ab29940
Certificate serial: 019F91DA185EFC602D8A6EB87AF18D1C5238
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.mft
Manifest number: 17C6
Signing time: Fri 24 Jul 2026 02:00:17 +0000
Manifest this update: Fri 24 Jul 2026 02:00:17 +0000
Manifest next update: Sat 25 Jul 2026 02:00:17 +0000
Files and hashes: 1: AFQC7jHnRlCUVKp9-Y8DclCs6sw.roa (hash: K8ES0stF0B9nVEj6mDlZTMrk2WtUAQbBdwAem6tOZGY=)
2: V3G71UC8xUJzfEK-hF2a1Yy949k.roa (hash: yY9pBQvp1vLjACvkKNCIEskOtDHt2fp1vqTKV4RgjCM=)
3: XuYhwk-vZ6eHT9NMXZQLHvYX3mk.roa (hash: BjmLFR3czcNpgH0BRh9yLVvvlaso2JNdlmTSCadoaH8=)
4: ZgTKdwUh3SurmRUa8dm-u_MWcXw.roa (hash: qRP4wuFNa16Ds9pfHaXqX+aH3Ub6klNpQNjHeuFx6D8=)
5: fzC-AcNh2yOJ_5dGUvrvfw9vsok.roa (hash: tSTIZaYoRGt64j2os/R+JCN+/UAvU/awUqy9sBJwtAc=)
6: iUkoo5YnzV7l-XW9iXwtd1qymUA.crl (hash: rx2NlPox9O3izRFBK85zyJyBVZBXa7Ttpq6b5AHdYYo=)
7: q_lN0AMsr2Qj0y4K_NZe2rjNBPg.roa (hash: C6pfCVwE4cQONMTXJ4xVp576Td1nh/4UsOPJ8M0ylXo=)
8: tLU7_bzaau1tfdnsi8rr9NFZ168.roa (hash: 6yuhsyZZqvngC1bxHOsVAKXHySf91v1PlvKK7/v6/Ik=)
9: xpN5zraKiIDTkd918KKze_PLUR4.roa (hash: NFN27n7LM3oXIoVyd7siXk3IhtAWZMYT7ZhRr4tRlec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:18:5e:fc:60:2d:8a:6e:b8:7a:f1:8d:1c:52:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=894928a39627cd5ee5f975bd897c2d775ab29940
Validity
Not Before: Jul 24 02:00:17 2026 GMT
Not After : Jul 25 02:00:17 2026 GMT
Subject: CN=2f5eb03f91f503bb6e38b8d0f221398fb3d32857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d3:1f:8a:2a:54:b2:e8:49:cd:58:55:2d:39:
3d:d5:22:da:83:d3:d8:0c:2e:3f:97:f9:be:41:c4:
27:33:e9:80:e4:41:14:1f:8a:d7:48:a0:47:21:7f:
f9:30:b6:b1:46:b1:4f:e8:37:0f:96:62:e1:7a:bf:
aa:19:cd:87:39:aa:ec:8f:54:3b:75:e9:13:55:c3:
88:3f:39:ef:bb:84:59:85:cf:16:74:c3:c7:86:75:
ae:a9:29:e1:69:1e:5e:ea:3a:cb:1a:c7:94:68:4f:
b1:bc:24:36:d1:79:97:09:57:68:0b:05:e6:b3:cb:
f3:16:ad:51:52:b9:9a:f5:95:07:a7:b1:4d:1b:54:
dd:74:82:c4:6d:d1:09:8d:78:37:27:6a:92:c6:b0:
97:53:9d:d0:91:85:e3:d5:95:9d:cc:75:56:a2:af:
08:86:65:ee:58:e9:2e:fe:65:3d:e4:a5:b0:5e:ec:
e2:7c:8d:5d:ea:4b:aa:01:5f:1d:fc:b0:17:6e:70:
79:e1:13:8a:cf:a2:d9:59:a2:09:9d:ae:82:a1:38:
8f:85:1a:b6:56:57:a0:c6:bf:45:38:d9:32:ea:5e:
78:8c:ac:ae:9c:e6:6d:68:c6:45:f4:ee:0f:a5:7e:
5d:6a:a0:fd:95:19:6e:05:11:5d:f8:44:68:6f:26:
9b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:5E:B0:3F:91:F5:03:BB:6E:38:B8:D0:F2:21:39:8F:B3:D3:28:57
X509v3 Authority Key Identifier:
keyid:89:49:28:A3:96:27:CD:5E:E5:F9:75:BD:89:7C:2D:77:5A:B2:99:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:0e:eb:b3:07:6f:c6:43:09:2f:14:2e:83:a1:a8:db:2d:14:
89:30:af:95:04:23:92:16:6c:68:1e:a8:1e:96:27:50:9e:82:
bc:b9:1a:c6:ab:ad:37:a4:dc:e7:65:6d:88:f8:52:bc:42:7c:
df:57:38:ee:bf:25:6e:94:68:e7:01:0b:62:f8:41:09:c7:b7:
d5:7f:37:74:77:4e:3d:7c:df:25:db:75:77:e6:b2:35:e0:ce:
37:20:8d:d9:a2:84:cf:89:b1:67:9a:da:05:18:c7:a9:cd:c6:
85:bc:d6:d3:cc:a1:a2:0f:b7:d8:83:0e:e3:df:76:1f:7d:55:
6b:07:62:f0:05:55:bd:d0:13:a1:8a:94:7e:de:01:6c:50:f5:
27:70:a5:48:b8:4c:01:be:f7:23:14:fb:c2:40:ef:ee:95:7e:
16:10:af:9c:04:85:ac:98:10:08:24:e7:37:fc:f2:6c:e8:93:
de:44:bf:e4:62:94:39:6e:c5:f1:00:b9:a9:89:88:c9:68:f8:
c1:3d:59:10:c9:da:17:0a:3d:c4:bb:10:54:82:19:fe:96:73:
33:13:0a:74:9c:c2:46:65:28:9e:ce:24:53:ff:99:7e:76:00:
b2:21:36:59:a8:a7:d4:66:9d:9b:86:8f:7f:1b:6d:88:dd:e2:
cc:de:68:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:31:45 2026 by rpki-client