Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/b56463-59ea-494b-8816-e02023f122e8/1/IkRK1QtOfbbWPJiQF9DlknSV52s.mft
File: IkRK1QtOfbbWPJiQF9DlknSV52s.mft (raw, json)
Hash identifier: jynDUBvUCXJcvLDCKmLmSqizJkRKgDoCiCQM0FlUvkE=
Subject key identifier: 2D:98:B5:78:5D:9F:C9:42:CE:6B:34:A6:83:FB:D4:9A:DA:07:4D:FC
Authority key identifier: 22:44:4A:D5:0B:4E:7D:B6:D6:3C:98:90:17:D0:E5:92:74:95:E7:6B
Certificate issuer: /CN=22444ad50b4e7db6d63c989017d0e5927495e76b
Certificate serial: 019F8F1064454490643642A4384253F95389
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IkRK1QtOfbbWPJiQF9DlknSV52s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/b56463-59ea-494b-8816-e02023f122e8/1/IkRK1QtOfbbWPJiQF9DlknSV52s.mft
Manifest number: 021F
Signing time: Thu 23 Jul 2026 13:00:43 +0000
Manifest this update: Thu 23 Jul 2026 13:00:43 +0000
Manifest next update: Fri 24 Jul 2026 13:00:43 +0000
Files and hashes: 1: 0UJ55DUEjeibc7wTso1_f6VUnhc.asa (hash: FH/6k5/NmJrDnuK/OxObcfgW++VOBxemcPQj9UKf598=)
2: IkRK1QtOfbbWPJiQF9DlknSV52s.crl (hash: e2xuv+y5S7ozpyujagkzkOq0eUpDmwGK8Ub1S5PAyG4=)
3: psWf16-euXoZZyipKgg4GGHcKWo.roa (hash: 9Dq5TbddVkCgvKuTdX4uUTRcMjOGR2syGrgqitoMwqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/b56463-59ea-494b-8816-e02023f122e8/1/IkRK1QtOfbbWPJiQF9DlknSV52s.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/b56463-59ea-494b-8816-e02023f122e8/1/IkRK1QtOfbbWPJiQF9DlknSV52s.mft
rsync://rpki.ripe.net/repository/DEFAULT/IkRK1QtOfbbWPJiQF9DlknSV52s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:10:64:45:44:90:64:36:42:a4:38:42:53:f9:53:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22444ad50b4e7db6d63c989017d0e5927495e76b
Validity
Not Before: Jul 23 13:00:43 2026 GMT
Not After : Jul 24 13:00:43 2026 GMT
Subject: CN=2d98b5785d9fc942ce6b34a683fbd49ada074dfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:bc:37:fa:19:15:43:c5:6d:dd:95:c7:3d:44:
00:5f:07:d8:89:60:40:aa:bc:22:b0:a7:cc:c2:76:
8c:93:6d:f3:bc:97:31:4c:07:46:2e:4d:b8:32:8a:
53:e9:da:5a:b3:1a:e1:14:69:48:df:6f:9a:a3:5a:
a3:ab:94:79:14:57:5c:f7:7b:9e:3a:df:b9:54:56:
b0:1a:75:9b:19:c1:5a:4a:6a:7a:40:ba:f7:de:b0:
a1:f1:4a:a8:1d:15:8d:f1:49:51:e2:1f:97:c6:f8:
73:11:84:5d:97:84:9e:2d:65:9b:da:9c:1a:40:49:
52:80:52:40:a7:92:14:85:4b:11:14:41:c7:c9:fe:
11:8e:64:9c:18:95:32:10:1c:1f:5c:54:a7:e2:11:
b1:fd:9d:95:72:a2:ed:d4:b1:48:38:4a:ea:8f:4a:
73:c6:76:e8:bf:b5:7a:11:59:8c:19:e4:54:e8:1a:
fd:ca:51:56:e7:2e:a2:70:4b:36:dc:38:70:e5:6c:
b5:8d:26:8b:bf:18:b8:98:35:86:0f:f1:49:62:bc:
50:02:d3:ec:79:3c:ad:a3:be:c9:61:42:a2:a0:a5:
02:5e:54:b7:fc:34:1d:7d:cc:a0:c8:f0:c0:a7:3e:
6a:0f:02:21:b5:f6:90:d5:79:0f:8b:d9:3d:bb:36:
5a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:98:B5:78:5D:9F:C9:42:CE:6B:34:A6:83:FB:D4:9A:DA:07:4D:FC
X509v3 Authority Key Identifier:
keyid:22:44:4A:D5:0B:4E:7D:B6:D6:3C:98:90:17:D0:E5:92:74:95:E7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IkRK1QtOfbbWPJiQF9DlknSV52s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/b56463-59ea-494b-8816-e02023f122e8/1/IkRK1QtOfbbWPJiQF9DlknSV52s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/b56463-59ea-494b-8816-e02023f122e8/1/IkRK1QtOfbbWPJiQF9DlknSV52s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:14:ce:93:04:30:93:dd:b7:40:ee:64:f8:06:80:0f:62:2c:
e2:cb:f8:11:5c:9c:b8:2a:ce:ad:0d:00:52:10:96:f0:88:6e:
ea:2f:8b:58:ad:d6:3c:d8:40:61:1b:b9:b8:c3:c9:cd:c0:6e:
6a:0d:7e:b4:41:4f:08:c1:d7:00:4d:a0:c4:d3:d5:75:e5:62:
3e:76:25:1e:6e:6d:ed:73:59:88:2f:dc:a4:0a:83:77:01:af:
38:ec:6a:fe:21:ed:28:37:8f:9b:60:0b:d3:d6:64:87:97:44:
29:62:a1:fa:cb:15:58:6d:33:c8:77:7e:aa:4a:a0:88:48:ad:
b4:2a:0f:71:22:70:b4:7d:11:9a:4a:f7:fd:27:fb:eb:a0:cd:
4a:ec:52:fb:b6:71:b6:90:d8:94:c5:a9:7f:75:63:77:52:fd:
08:90:08:d7:35:35:b5:09:04:34:d6:ec:ac:cb:52:fc:3a:7d:
79:f3:30:57:3e:da:4d:5e:a3:a5:58:68:51:98:d7:18:e3:30:
c1:92:60:a1:48:e5:df:76:2b:96:3a:d8:c3:7f:ee:1b:e3:53:
3f:e4:8e:53:d7:87:b1:07:e4:98:64:b0:3a:35:ee:57:4d:9a:
bc:2a:3f:2d:73:6c:ef:a3:ba:42:b7:67:bb:0c:b1:5f:1d:ac:
b9:4c:46:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:37:13 2026 by rpki-client