Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/079594-e401-4ed5-98a6-90d35b245ced/1/IysXeNY2I3Q-2JyH3oDCpkCToGI.mft
File: IysXeNY2I3Q-2JyH3oDCpkCToGI.mft (raw, json)
Hash identifier: +eFrw7fJavy/QwCBg49a1HjAhJBjPMOutmOL+diwuYA=
Subject key identifier: 4F:46:56:C9:2D:2A:B0:3A:ED:54:E8:AC:FE:62:5F:4F:3E:4E:4C:15
Authority key identifier: 23:2B:17:78:D6:36:23:74:3E:D8:9C:87:DE:80:C2:A6:40:93:A0:62
Certificate issuer: /CN=232b1778d63623743ed89c87de80c2a64093a062
Certificate serial: 019F92ED2841AB8513FBC417CFFA82F992A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IysXeNY2I3Q-2JyH3oDCpkCToGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/079594-e401-4ed5-98a6-90d35b245ced/1/IysXeNY2I3Q-2JyH3oDCpkCToGI.mft
Manifest number: 0B00
Signing time: Fri 24 Jul 2026 07:00:43 +0000
Manifest this update: Fri 24 Jul 2026 07:00:43 +0000
Manifest next update: Sat 25 Jul 2026 07:00:43 +0000
Files and hashes: 1: 6JMmxrfiQpPlC_lOumLXACWDZqM.roa (hash: J1a3qyIyAUriipjYLsphj7xq5F7o8cCyCbTPqGYHNhI=)
2: IysXeNY2I3Q-2JyH3oDCpkCToGI.crl (hash: gcdMJbkUra+8UlwJZsRWKIhqKPvIgbgvSY8+9TxReMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/079594-e401-4ed5-98a6-90d35b245ced/1/IysXeNY2I3Q-2JyH3oDCpkCToGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/079594-e401-4ed5-98a6-90d35b245ced/1/IysXeNY2I3Q-2JyH3oDCpkCToGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IysXeNY2I3Q-2JyH3oDCpkCToGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:28:41:ab:85:13:fb:c4:17:cf:fa:82:f9:92:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=232b1778d63623743ed89c87de80c2a64093a062
Validity
Not Before: Jul 24 07:00:43 2026 GMT
Not After : Jul 25 07:00:43 2026 GMT
Subject: CN=4f4656c92d2ab03aed54e8acfe625f4f3e4e4c15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c5:ef:59:f9:b7:11:f9:8f:62:3d:11:11:bf:
1f:25:3e:ee:99:ed:b9:5d:6a:5d:33:10:8d:2b:d3:
52:5a:1b:e8:70:cb:c4:79:82:bc:8e:bc:ee:53:c1:
56:af:c9:e3:5f:43:c8:1e:4b:78:c1:e9:8a:ba:de:
76:2c:5f:41:d7:28:35:64:43:66:b9:26:bb:0f:4b:
bd:7d:0b:76:af:f4:bf:ab:aa:cc:f7:a2:79:bd:3c:
bf:99:15:d6:91:f6:e0:21:88:a2:ff:9a:53:d7:ef:
03:16:75:73:c4:e3:f4:c0:39:95:3f:b1:08:f3:0c:
9b:61:5e:45:55:b5:7d:61:8d:a5:fb:5f:83:72:ba:
32:94:37:9f:a6:df:05:a8:cb:d8:bb:d8:c2:ab:63:
8d:23:93:b3:e3:01:41:e6:89:c7:91:eb:72:1f:9d:
df:9f:44:ef:09:24:8d:19:e8:69:c2:8a:21:da:24:
4d:f2:aa:fd:d9:96:03:dc:5f:f2:02:9b:02:66:c2:
d7:42:2c:14:1a:90:c5:e4:6b:06:30:60:05:bc:74:
1e:30:14:58:0f:09:45:46:5b:9c:f8:8b:f6:91:35:
cd:f9:97:f6:af:ee:e3:61:ea:fc:39:63:5f:17:a2:
97:60:d2:d9:bc:71:43:41:06:be:d3:ad:7b:14:68:
a4:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:46:56:C9:2D:2A:B0:3A:ED:54:E8:AC:FE:62:5F:4F:3E:4E:4C:15
X509v3 Authority Key Identifier:
keyid:23:2B:17:78:D6:36:23:74:3E:D8:9C:87:DE:80:C2:A6:40:93:A0:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IysXeNY2I3Q-2JyH3oDCpkCToGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/079594-e401-4ed5-98a6-90d35b245ced/1/IysXeNY2I3Q-2JyH3oDCpkCToGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/079594-e401-4ed5-98a6-90d35b245ced/1/IysXeNY2I3Q-2JyH3oDCpkCToGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:63:15:de:9b:05:ce:03:ba:25:9e:d8:e4:d1:eb:96:99:f5:
66:fb:75:1f:74:f1:e9:67:76:44:f5:e4:44:30:0a:ae:32:3b:
a0:c6:29:47:c0:d9:bc:9d:91:36:96:cd:60:b7:6f:e4:b1:52:
01:08:3a:3a:7a:ee:ce:6f:a7:c7:ca:86:32:db:c4:ea:67:89:
e1:80:f2:7e:99:50:56:c4:a7:c7:f8:64:92:4c:96:2b:3b:92:
4d:c2:f8:1d:29:df:9e:25:36:87:4e:bf:88:38:34:9f:5a:7d:
48:7b:a4:36:3d:42:dd:b9:83:77:b5:11:01:fa:eb:b4:40:76:
75:ed:db:2f:81:64:80:b1:f3:e0:aa:73:75:81:60:b3:2f:41:
f5:15:d2:d1:b8:53:95:73:f4:b6:5a:bd:e8:85:1c:c9:8e:42:
6a:11:6b:c8:d9:55:31:ef:43:6b:67:04:17:4a:ff:e4:02:43:
7b:57:ba:ee:78:ca:52:5b:c5:c6:43:25:8d:d9:ef:f4:0f:54:
9c:0b:fb:6d:16:22:04:c2:8d:5d:6c:5b:ae:b0:f9:6a:43:42:
1c:00:9a:0a:83:db:3c:b4:26:1d:3b:05:e5:51:d1:df:de:82:
9d:69:dc:20:a9:a4:52:8d:9b:70:a8:e5:4c:31:73:4e:91:d9:
6d:81:ca:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:24:26 2026 by rpki-client