Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/ih8K1VcrribjnIdAxoqPu0buSGQ.mft
File: ih8K1VcrribjnIdAxoqPu0buSGQ.mft (raw, json)
Hash identifier: YyNTXsjFIeSHpvwLsspjEWNnmtEcooOvIf+1KuqIRko=
Subject key identifier: 93:6D:5B:2B:71:16:9F:D3:5E:2A:50:82:53:C9:4B:DF:EA:F6:AE:A2
Authority key identifier: 8A:1F:0A:D5:57:2B:AE:26:E3:9C:87:40:C6:8A:8F:BB:46:EE:48:64
Certificate issuer: /CN=8a1f0ad5572bae26e39c8740c68a8fbb46ee4864
Certificate serial: 019F9248C51530A542204334ACA9521FE675
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ih8K1VcrribjnIdAxoqPu0buSGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/ih8K1VcrribjnIdAxoqPu0buSGQ.mft
Manifest number: 0D58
Signing time: Fri 24 Jul 2026 04:01:10 +0000
Manifest this update: Fri 24 Jul 2026 04:01:10 +0000
Manifest next update: Sat 25 Jul 2026 04:01:10 +0000
Files and hashes: 1: ih8K1VcrribjnIdAxoqPu0buSGQ.crl (hash: l1Qaab6l4qcLB/SkItEwve06+qObNXb47osqbN6/Qp4=)
2: xMgS7QD9_G9EOx5x98EDuY-9yGs.roa (hash: hMlsCv6vl96geP53LLF12LxkGDU69mGZggpEWqFm3G4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/ih8K1VcrribjnIdAxoqPu0buSGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/ih8K1VcrribjnIdAxoqPu0buSGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ih8K1VcrribjnIdAxoqPu0buSGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:c5:15:30:a5:42:20:43:34:ac:a9:52:1f:e6:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a1f0ad5572bae26e39c8740c68a8fbb46ee4864
Validity
Not Before: Jul 24 04:01:10 2026 GMT
Not After : Jul 25 04:01:10 2026 GMT
Subject: CN=936d5b2b71169fd35e2a508253c94bdfeaf6aea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:3e:0c:50:19:77:df:3e:97:80:71:50:59:63:
dc:f4:54:00:22:09:82:17:d6:13:21:7c:45:cb:85:
70:2e:3f:c9:96:25:68:5f:24:fb:29:88:14:97:58:
03:6f:69:91:e6:5f:c7:63:26:e1:58:dc:1a:1d:d0:
bf:76:e5:2a:dc:60:00:0e:5a:d9:c8:1f:e8:1f:51:
f4:01:5b:9b:36:53:dc:0e:6b:07:c2:19:75:c5:e3:
21:96:55:65:8a:3b:4f:0e:ab:a9:de:e1:36:6a:fc:
4d:d0:98:4e:e3:3f:35:42:df:74:46:59:30:f3:ec:
33:c7:38:9f:60:19:26:60:18:02:c9:ec:68:12:2e:
e6:7b:c4:dd:b5:5b:69:7d:9b:ca:ef:4b:76:46:a8:
76:e6:aa:6e:f4:8b:4a:c7:08:5e:12:c3:da:ce:6c:
ad:a2:cc:73:83:11:0d:b8:d8:cc:0b:5d:17:18:dd:
92:26:bc:df:73:90:22:db:f4:e9:c5:ac:64:d0:cd:
36:33:b1:28:82:e9:5a:17:53:06:91:f9:98:e0:a7:
4e:22:dd:7a:87:9d:5e:fb:fd:07:3b:eb:85:57:7d:
12:c8:b8:92:8b:58:5d:a3:16:5b:03:36:7a:ff:4e:
6c:b1:30:25:48:24:a9:91:d8:00:95:bb:8d:33:1f:
41:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:6D:5B:2B:71:16:9F:D3:5E:2A:50:82:53:C9:4B:DF:EA:F6:AE:A2
X509v3 Authority Key Identifier:
keyid:8A:1F:0A:D5:57:2B:AE:26:E3:9C:87:40:C6:8A:8F:BB:46:EE:48:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ih8K1VcrribjnIdAxoqPu0buSGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/ih8K1VcrribjnIdAxoqPu0buSGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/ih8K1VcrribjnIdAxoqPu0buSGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:f5:06:06:0a:10:a2:7d:9d:85:5b:25:8d:2c:25:b4:5e:fd:
06:f4:30:cc:36:59:5e:05:aa:6b:f9:8d:f4:90:85:63:bb:ab:
a9:51:9e:49:15:ae:e1:57:25:2b:99:19:d9:4f:83:31:71:65:
e2:d1:00:d0:12:6d:3d:3e:ee:b3:99:f0:3d:3f:f9:aa:1b:2e:
9f:4d:b6:34:83:98:29:98:92:5b:bf:09:51:e0:10:eb:85:30:
50:a5:ae:6a:6f:22:2b:2c:9e:a5:2f:98:c0:3f:70:7a:ce:aa:
90:07:fc:bf:06:0f:ce:f4:6c:e0:6b:ee:1e:7c:f6:22:d3:80:
07:f3:a1:ac:47:58:05:3d:09:4e:76:53:5b:6f:55:58:ac:8a:
91:2d:c9:01:2f:39:b1:3d:cb:cf:07:b6:a5:59:9f:71:7e:f1:
36:a2:76:1d:8a:59:cc:25:fa:a3:ad:f5:f1:b8:d4:dd:28:1c:
20:56:99:6a:ec:94:95:c4:38:48:4e:1a:9e:17:f7:47:17:fe:
dd:c1:86:68:66:af:b3:19:be:04:1d:7b:83:49:96:5b:6d:d7:
ca:c0:38:7f:f6:43:1d:b6:5b:8f:da:c9:19:1a:51:fb:ab:73:
44:00:87:dc:a7:b7:e7:e2:37:a7:cb:73:e4:88:e2:ac:dd:a8:
eb:dd:36:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SSMUVMKVCIEM0rKlSH+Z1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhMWYwYWQ1NTcyYmFlMjZlMzljODc0MGM2OGE4ZmJiNDZl
ZTQ4NjQwHhcNMjYwNzI0MDQwMTEwWhcNMjYwNzI1MDQwMTEwWjAzMTEwLwYDVQQD
Eyg5MzZkNWIyYjcxMTY5ZmQzNWUyYTUwODI1M2M5NGJkZmVhZjZhZWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkT4MUBl33z6XgHFQWWPc9FQAIgmC
F9YTIXxFy4VwLj/JliVoXyT7KYgUl1gDb2mR5l/HYybhWNwaHdC/duUq3GAADlrZ
yB/oH1H0AVubNlPcDmsHwhl1xeMhllVlijtPDqup3uE2avxN0JhO4z81Qt90Rlkw
8+wzxzifYBkmYBgCyexoEi7me8TdtVtpfZvK70t2Rqh25qpu9ItKxwheEsPazmyt
osxzgxENuNjMC10XGN2SJrzfc5Ai2/Tpxaxk0M02M7EogulaF1MGkfmY4KdOIt16
h51e+/0HO+uFV30SyLiSi1hdoxZbAzZ6/05ssTAlSCSpkdgAlbuNMx9BrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJNtWytxFp/TXipQglPJS9/q9q6iMB8GA1UdIwQY
MBaAFIofCtVXK64m45yHQMaKj7tG7khkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWg4SzFWY3JyaWJqbklkQXhvcVB1MGJ1U0dRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS8yZmQyMGEtNTNhZS00YmVhLTgwYzkt
MDNmMjNhNzM5NDFkLzEvaWg4SzFWY3JyaWJqbklkQXhvcVB1MGJ1U0dRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS8yZmQyMGEtNTNhZS00YmVhLTgwYzktMDNmMjNhNzM5NDFk
LzEvaWg4SzFWY3JyaWJqbklkQXhvcVB1MGJ1U0dRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ/UGBgoQ
on2dhVsljSwltF79BvQwzDZZXgWqa/mN9JCFY7urqVGeSRWu4VclK5kZ2U+DMXFl
4tEA0BJtPT7us5nwPT/5qhsun022NIOYKZiSW78JUeAQ64UwUKWuam8iKyyepS+Y
wD9wes6qkAf8vwYPzvRs4GvuHnz2ItOAB/OhrEdYBT0JTnZTW29VWKyKkS3JAS85
sT3Lzwe2pVmfcX7xNqJ2HYpZzCX6o6318bjU3SgcIFaZauyUlcQ4SE4anhf3Rxf+
3cGGaGavsxm+BB17g0mWW23XysA4f/ZDHbZbj9rJGRpR+6tzRACH3Ke35+I3p8tz
5IjirN2o6902ng==
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:48:06 2026 by rpki-client