Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft
File: IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft (raw, json)
Hash identifier: SR3yu/m/JArcDMoEKROw2XBQ3OsJPUZCvfQU9nOjrLk=
Subject key identifier: 50:0B:C9:35:C0:F5:E1:7D:84:F7:6D:C8:3A:37:25:39:6A:6B:C7:64
Authority key identifier: 21:A0:00:80:CD:2C:B1:BB:07:39:03:B3:2B:25:AD:66:0A:36:64:86
Certificate issuer: /CN=21a00080cd2cb1bb073903b32b25ad660a366486
Certificate serial: 019E1D902A2043402F727ECAB8755F735511
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft
Manifest number: 17DB
Signing time: Tue 12 May 2026 19:00:47 +0000
Manifest this update: Tue 12 May 2026 19:00:47 +0000
Manifest next update: Wed 13 May 2026 19:00:47 +0000
Files and hashes: 1: IaAAgM0ssbsHOQOzKyWtZgo2ZIY.crl (hash: IXrXX+htIUW1bW31xNfIYYZethUYqJenJRW4qhxCYJI=)
2: VND09LSiHkpjSOuhfnkKXr1ycfk.roa (hash: EuKqokjCANLNooQ3HgGRZe/o74jjpFvSm4Mcmm5yRzA=)
3: a8PSnoMbEUhv4Faq7MVolsfXT_Y.roa (hash: BPdIhgn9ulm4J7RgTCmSDSsMLRstDEKHEvI4iWcZR7s=)
4: u26fRlT_magCXskBSsLbW-Zc4HE.roa (hash: 9IYpduU01RzT9y1ftFaznGYathxT6zXqQawir2B1XDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:2a:20:43:40:2f:72:7e:ca:b8:75:5f:73:55:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21a00080cd2cb1bb073903b32b25ad660a366486
Validity
Not Before: May 12 19:00:47 2026 GMT
Not After : May 13 19:00:47 2026 GMT
Subject: CN=500bc935c0f5e17d84f76dc83a3725396a6bc764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:92:d4:63:01:13:20:50:f6:02:b5:53:77:87:
63:5c:95:c1:67:94:9d:8e:3c:7a:9b:7e:e9:59:75:
34:34:b1:af:a8:c4:2d:86:38:b0:2c:1f:f7:c7:44:
a4:9e:7b:9c:49:aa:b1:91:71:5c:1c:a8:3f:f9:32:
20:b1:b4:b3:51:5a:7b:92:b4:f4:31:38:dd:87:49:
f4:55:4a:8d:07:73:87:ff:2f:14:67:e1:31:8a:f2:
73:62:50:e7:e4:2c:9a:65:03:e7:31:22:36:67:1d:
96:c0:ef:d2:6a:1b:77:57:24:a6:15:e2:07:96:61:
36:8e:53:75:1e:53:82:80:f7:c8:7b:64:0d:53:29:
74:cf:59:4e:6b:f6:4c:78:ba:91:77:de:d2:b3:6d:
74:49:fa:0c:fb:5d:b1:39:f7:b8:2c:22:23:ea:9e:
8d:ff:14:41:7d:9a:49:d7:b3:89:b1:2b:bd:fe:80:
af:ed:89:6f:24:79:b4:54:aa:d9:dc:2b:aa:2b:c9:
72:06:38:a0:38:d6:d4:79:96:19:c1:56:d3:ff:4a:
d6:c6:5e:d1:15:8c:6e:2d:98:2d:6f:a9:bc:27:72:
2f:b8:ca:83:a2:ab:bb:08:c8:4d:8c:74:2d:2d:fa:
d4:0e:d3:48:d9:92:b5:15:da:4f:ef:46:1c:97:c5:
a5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:0B:C9:35:C0:F5:E1:7D:84:F7:6D:C8:3A:37:25:39:6A:6B:C7:64
X509v3 Authority Key Identifier:
keyid:21:A0:00:80:CD:2C:B1:BB:07:39:03:B3:2B:25:AD:66:0A:36:64:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:e9:7f:1d:91:d5:0c:81:c9:d4:f1:cf:38:af:86:c8:1f:a1:
82:2b:ab:0d:e4:8b:82:1b:82:d2:46:c8:ff:a3:38:ae:02:3f:
4a:15:7e:08:9b:57:9e:6c:ed:90:c9:06:00:8e:bf:ec:1d:79:
c8:0d:99:c9:97:65:9d:ed:88:fc:4f:89:e0:f6:00:da:29:37:
61:60:6a:59:60:2f:df:cd:12:07:5e:ee:ae:ad:85:1a:37:db:
7d:c4:76:77:c9:1b:1b:12:f5:e9:c6:6a:b1:b7:79:9e:15:6d:
ce:fd:3b:ae:5c:9c:84:3d:1a:5a:6a:41:ac:64:83:9f:0f:8d:
49:31:01:5d:e3:74:08:6f:05:49:9c:fb:48:6e:9c:6a:38:72:
b9:80:f4:53:52:09:74:1b:94:69:5c:f2:01:e3:88:77:71:96:
f9:3d:42:31:a3:b9:45:71:ac:80:ea:61:d6:db:3e:14:cd:f3:
2f:12:c6:5d:1d:12:49:6d:ab:be:11:d2:45:c2:2c:e1:93:53:
f5:24:1c:2d:6a:8b:20:08:8c:18:06:f9:58:46:89:c9:02:fd:
20:8b:db:eb:7a:5c:42:00:23:f6:4e:2e:75:e8:d9:b3:b8:93:
9e:bf:ce:8b:a4:a9:94:e4:ac:98:96:bf:62:c8:df:72:39:cd:
c4:24:20:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:49:16 2026 by rpki-client