Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.mft
File: i25luC_kAH6C_S2xNM9Cxq7E4Lw.mft (raw, json)
Hash identifier: S5huiE/BjPlS6dT31D1tyamgOX0gRQlpBYiYdbT4G+s=
Subject key identifier: E3:0F:A4:3E:B6:07:1F:BC:25:F3:08:4C:1D:3F:FA:42:01:80:F2:04
Authority key identifier: 8B:6E:65:B8:2F:E4:00:7E:82:FD:2D:B1:34:CF:42:C6:AE:C4:E0:BC
Certificate issuer: /CN=8b6e65b82fe4007e82fd2db134cf42c6aec4e0bc
Certificate serial: 019F93FFC3F5B14C816E7E31D424C7E94816
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i25luC_kAH6C_S2xNM9Cxq7E4Lw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.mft
Manifest number: 19C7
Signing time: Fri 24 Jul 2026 12:00:40 +0000
Manifest this update: Fri 24 Jul 2026 12:00:40 +0000
Manifest next update: Sat 25 Jul 2026 12:00:40 +0000
Files and hashes: 1: fe5q7Ym0eOTsgMAB1IUrjncVBXg.roa (hash: 5UUqkfEzMB1xSChuf7PbFjMq0H7jo6WK6DJ2it+YBAc=)
2: i25luC_kAH6C_S2xNM9Cxq7E4Lw.crl (hash: VFi3RWJX1X9f1F4EIFkflBafAmkCIwwW+ezzcTur9nA=)
3: tX7VJWazlnGg57nYx0SdqCcW42M.roa (hash: a4ThqNr+E56D9pM0rGPy4dnLeWvNfcYrPQOSDN6v3Ws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.mft
rsync://rpki.ripe.net/repository/DEFAULT/i25luC_kAH6C_S2xNM9Cxq7E4Lw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:ff:c3:f5:b1:4c:81:6e:7e:31:d4:24:c7:e9:48:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6e65b82fe4007e82fd2db134cf42c6aec4e0bc
Validity
Not Before: Jul 24 12:00:40 2026 GMT
Not After : Jul 25 12:00:40 2026 GMT
Subject: CN=e30fa43eb6071fbc25f3084c1d3ffa420180f204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:dd:f6:89:47:93:7f:16:b3:c5:bd:f8:9f:80:
5d:9c:b8:fc:cc:dd:33:f1:0e:b8:56:b0:1c:08:7a:
ee:4a:62:b6:4f:cc:e2:b4:2e:d9:dc:06:9a:ba:f1:
95:f2:ce:cf:d1:73:27:b6:20:38:8f:f2:a6:50:df:
d5:98:0d:e4:f7:1e:45:8a:54:09:71:7d:a7:d5:bd:
37:84:82:9e:d6:fb:27:92:23:db:3d:ae:8b:75:0d:
88:26:bf:cd:06:0e:49:55:d7:4d:6d:ab:6a:cb:53:
a2:97:35:59:0a:eb:fe:0f:49:9f:2f:09:c0:fb:dc:
f1:8b:ae:99:e7:c7:28:96:f6:50:14:d8:8a:8e:20:
3c:fc:6e:b3:9a:ed:83:c1:ba:4a:84:66:4c:b7:e2:
70:99:a6:00:04:55:85:27:0c:6c:20:ea:d3:b3:27:
41:6e:1b:05:bf:18:4a:10:d2:69:4e:09:31:50:32:
4f:8b:fb:76:64:3f:58:e6:3b:fd:ce:50:78:04:56:
93:e7:f6:da:21:6f:06:87:37:dc:1d:d0:ff:a0:af:
49:07:96:e0:93:01:1e:9d:97:1e:db:4c:02:62:b9:
6c:68:53:2b:81:79:9e:2e:66:89:54:10:69:73:75:
5d:76:08:cb:a1:9a:ad:45:42:d9:7a:8b:81:19:3d:
54:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:0F:A4:3E:B6:07:1F:BC:25:F3:08:4C:1D:3F:FA:42:01:80:F2:04
X509v3 Authority Key Identifier:
keyid:8B:6E:65:B8:2F:E4:00:7E:82:FD:2D:B1:34:CF:42:C6:AE:C4:E0:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i25luC_kAH6C_S2xNM9Cxq7E4Lw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:34:fe:49:5c:a7:5d:0c:f6:bb:53:f2:19:18:eb:e0:20:e9:
b0:7e:c7:b8:d4:77:46:0d:5d:58:7a:91:2a:0e:f5:70:20:11:
6b:67:f7:99:a7:49:e3:ce:2c:eb:45:d6:85:4f:14:1d:da:66:
6e:10:73:c5:7a:5f:56:85:9d:cb:c9:24:b5:43:89:f3:c9:92:
54:25:48:a3:1f:6a:f3:00:dd:5b:9e:1b:75:2a:60:84:b4:45:
9a:01:4d:e9:a4:b6:e7:cb:17:9a:72:99:1c:df:98:f5:4f:18:
66:86:88:d9:b5:2c:d2:fd:e9:15:eb:f1:1a:e5:b0:3d:ea:b8:
a7:c5:67:c3:aa:eb:00:c5:0c:f0:40:a3:7f:c8:06:75:48:69:
0e:0b:11:e1:5f:b2:16:9a:06:20:4b:1d:34:3a:3a:53:3b:c9:
74:a8:63:0a:38:7a:62:2f:94:8c:c3:1f:d9:b6:da:52:5b:15:
19:9a:4a:0b:21:90:42:b0:64:4d:02:ae:db:22:5f:ab:1c:11:
94:2d:ce:d2:01:c0:d9:c4:7b:6b:71:98:0f:59:6f:48:91:c9:
ca:99:8d:00:dd:d0:af:fe:d1:4e:35:25:eb:05:8d:bc:06:a3:
e0:4e:7e:ad:df:9c:74:35:9b:07:87:e2:ea:9b:18:b4:08:57:
47:16:57:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:33:17 2026 by rpki-client