Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.mft
File: hI2YANad664Rt_gWHDzogYH957Q.mft (raw, json)
Hash identifier: OLoHgukaEd+O6CQC7ilCvGj+HLwXsUJRgA9s5aFXleI=
Subject key identifier: C2:EB:97:29:F1:C6:65:79:A6:B6:66:9F:C5:66:8C:C0:04:DB:FA:13
Authority key identifier: 84:8D:98:00:D6:9D:EB:AE:11:B7:F8:16:1C:3C:E8:81:81:FD:E7:B4
Certificate issuer: /CN=848d9800d69debae11b7f8161c3ce88181fde7b4
Certificate serial: 019F8ED9C2779D78F190194045032D2AA1F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hI2YANad664Rt_gWHDzogYH957Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.mft
Manifest number: 0DBE
Signing time: Thu 23 Jul 2026 12:01:03 +0000
Manifest this update: Thu 23 Jul 2026 12:01:03 +0000
Manifest next update: Fri 24 Jul 2026 12:01:03 +0000
Files and hashes: 1: K_y2fKHPzfyMG_X9CTHflV0WLi0.roa (hash: KabNvipw1vq+vrMlPeKcdUkL/gp9b7QpFWkct8rC9KU=)
2: MmD4LpG9L1abWhzDe3zsHGjMcKk.roa (hash: BYA/AELd944eyEW5OY9zqZeNygCSSsS+zSrCK5eSS0g=)
3: hI2YANad664Rt_gWHDzogYH957Q.crl (hash: dNYAOVI8IxVzx8QFMIeIosy2SeVkmhTycnYxF+Xs9q0=)
4: hKJDVK08o4RIWoWlt6lBuBhmgR0.roa (hash: MAApWzskbzneHqBQ6AJZbIOluhaLfJyDC3dItvxt1eM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/hI2YANad664Rt_gWHDzogYH957Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 12:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:d9:c2:77:9d:78:f1:90:19:40:45:03:2d:2a:a1:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=848d9800d69debae11b7f8161c3ce88181fde7b4
Validity
Not Before: Jul 23 12:01:03 2026 GMT
Not After : Jul 24 12:01:03 2026 GMT
Subject: CN=c2eb9729f1c66579a6b6669fc5668cc004dbfa13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:9c:f7:25:d5:c0:ca:8c:63:22:83:e8:36:24:
49:47:73:18:56:52:16:f6:c0:ae:86:e2:56:60:d3:
09:61:0d:26:c5:22:ca:bc:75:9a:89:1b:ae:ad:69:
a5:12:c4:a6:ff:82:73:d8:c7:ff:38:37:92:3d:de:
82:56:e3:bb:23:b6:7a:fe:e4:7b:c1:55:d4:84:b0:
12:9f:49:dd:40:b5:84:82:f0:22:59:e5:2d:b0:20:
05:88:2e:66:ee:46:10:1e:46:90:24:da:a1:87:fb:
df:1a:a2:a2:e2:aa:7e:97:28:95:db:a9:02:2a:60:
af:c3:c5:60:c5:f1:ba:39:42:e6:ec:15:8f:75:2e:
f6:9d:15:fd:ef:7a:84:fa:6e:26:f3:89:5d:e2:2e:
9b:27:f4:6a:2b:64:c6:17:97:9e:c4:0a:43:7c:69:
c0:19:5a:cf:5e:1b:24:58:5a:ca:5a:6f:b8:4d:9c:
f9:b1:f3:6e:01:89:a2:18:75:d5:ab:9d:05:3b:64:
0a:5f:4b:07:07:73:e1:16:54:96:0a:af:62:e4:5a:
b4:10:0f:70:54:19:80:69:1f:42:ab:b7:a3:74:ab:
2c:29:85:57:62:6a:25:f8:24:7d:d5:c5:d9:70:cb:
8e:61:78:54:e6:6f:6f:62:56:5c:2f:d4:f8:15:14:
90:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:EB:97:29:F1:C6:65:79:A6:B6:66:9F:C5:66:8C:C0:04:DB:FA:13
X509v3 Authority Key Identifier:
keyid:84:8D:98:00:D6:9D:EB:AE:11:B7:F8:16:1C:3C:E8:81:81:FD:E7:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hI2YANad664Rt_gWHDzogYH957Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:51:6a:55:0e:4f:f2:99:6a:4f:6c:1a:34:e3:86:3e:da:bc:
69:48:fc:4f:ca:8f:7d:61:0a:45:7c:9a:49:89:41:6c:cc:5f:
6e:47:64:41:1d:b6:4b:d2:da:59:0c:85:72:ec:e8:cd:8d:96:
e6:29:9e:4c:31:4b:df:2d:b3:12:f7:04:eb:02:0f:68:b6:e4:
bd:f5:f6:a7:d3:fe:0e:ef:3e:69:57:3b:20:8d:93:01:75:84:
dd:ba:c2:78:c1:16:26:1e:96:fe:8c:5b:26:20:6c:72:b0:5b:
d8:eb:4a:4d:0f:35:e9:5d:5b:cc:42:46:5e:0d:67:9e:e6:55:
7a:d4:16:47:c8:b5:a7:c5:84:42:bd:0e:79:b0:60:ea:7a:8a:
bd:ef:73:fe:a6:b4:0c:69:b0:74:36:fe:69:43:55:ef:77:59:
5a:79:06:b3:58:7b:94:65:28:e7:6d:cf:65:61:8c:1e:19:3a:
23:91:09:de:32:7a:ae:7d:6e:05:0d:93:d5:44:72:e4:91:3f:
c3:13:34:70:2b:12:5f:71:82:a3:ae:c8:35:95:4b:70:96:8d:
54:18:ca:d1:6a:42:b5:72:3b:b3:cf:67:8d:32:4a:32:22:95:
af:40:45:13:66:fc:24:9e:30:46:1e:7c:38:09:76:37:fe:64:
22:5e:51:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:28:06 2026 by rpki-client