Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/I88dx_xD6BSDngDYBNPgRTEhqEI.mft
File: I88dx_xD6BSDngDYBNPgRTEhqEI.mft (raw, json)
Hash identifier: xKZJBt2npJ/iP0Wwx4+JW6xcoL1GrKtEwCpWgGawR/c=
Subject key identifier: 59:71:81:5B:DB:38:F5:E5:E6:8E:58:8E:6C:38:D6:FB:AC:5C:0E:CD
Authority key identifier: 23:CF:1D:C7:FC:43:E8:14:83:9E:00:D8:04:D3:E0:45:31:21:A8:42
Certificate issuer: /CN=23cf1dc7fc43e814839e00d804d3e0453121a842
Certificate serial: 019F8F7EBF4C75C06821525F29F5FC174E77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I88dx_xD6BSDngDYBNPgRTEhqEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/I88dx_xD6BSDngDYBNPgRTEhqEI.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:01:16 +0000
Manifest this update: Thu 23 Jul 2026 15:01:16 +0000
Manifest next update: Fri 24 Jul 2026 15:01:16 +0000
Files and hashes: 1: 7cEqHcHGRbaIho99m-rmegRIrYY.asa (hash: RaY2TmIELPjoBEn+00L520PCgl7eqLSDCcUK5vUU5bQ=)
2: I88dx_xD6BSDngDYBNPgRTEhqEI.crl (hash: yFJNcG69hu/AU+w1gccISvINx72GmCBc8kc+zauIv/8=)
3: I8vS97tvtkNgegC1NkyYJZ9EbQM.roa (hash: 65Bo/mCQt2n4+sp0dAv/y7zwG2eGPWv7JSdd7Q3lwQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/I88dx_xD6BSDngDYBNPgRTEhqEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/I88dx_xD6BSDngDYBNPgRTEhqEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/I88dx_xD6BSDngDYBNPgRTEhqEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:bf:4c:75:c0:68:21:52:5f:29:f5:fc:17:4e:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23cf1dc7fc43e814839e00d804d3e0453121a842
Validity
Not Before: Jul 23 15:01:16 2026 GMT
Not After : Jul 24 15:01:16 2026 GMT
Subject: CN=5971815bdb38f5e5e68e588e6c38d6fbac5c0ecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:d1:59:03:35:59:9f:77:5d:82:4c:7a:3e:5c:
d2:63:be:3d:5a:f2:ea:ae:55:ec:d6:23:13:8a:d4:
23:fa:b0:59:a0:ad:fa:0d:48:f2:81:d3:0c:90:a7:
bd:8d:c5:4d:95:9d:2c:4e:24:e2:a2:7a:9e:07:be:
b1:b3:bb:06:c7:97:ff:0e:8a:a2:5c:9c:d0:19:41:
cf:a5:10:c1:88:ba:e2:4c:7f:22:a8:16:1f:b9:b1:
2f:dd:1d:26:8b:cc:97:34:d1:e6:a4:70:f7:e7:ee:
02:03:42:b2:6a:78:e7:96:ab:1f:68:3b:67:93:6e:
1e:2e:94:35:58:89:30:bb:3f:42:ab:27:9f:04:b7:
fc:f5:56:2a:60:ac:f0:f7:34:61:2d:02:f8:d4:6b:
1f:11:50:b1:1c:7b:45:c1:4a:c0:dd:9f:74:b4:5b:
15:c2:69:62:6d:e5:3f:d4:d3:d3:cd:9a:f8:41:6e:
1a:9a:89:3a:7a:b4:3f:0e:5e:f1:ee:b5:13:df:72:
1a:67:7b:47:a1:d7:d0:7f:52:1c:df:81:a5:3d:a5:
9f:75:8f:20:eb:8e:88:5f:06:f2:59:c2:04:03:ac:
eb:c1:ff:e9:e8:dc:35:c1:03:63:25:62:f2:36:1c:
bd:4c:25:ed:97:8f:c1:25:eb:8a:47:8f:bc:58:2f:
71:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:71:81:5B:DB:38:F5:E5:E6:8E:58:8E:6C:38:D6:FB:AC:5C:0E:CD
X509v3 Authority Key Identifier:
keyid:23:CF:1D:C7:FC:43:E8:14:83:9E:00:D8:04:D3:E0:45:31:21:A8:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I88dx_xD6BSDngDYBNPgRTEhqEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/I88dx_xD6BSDngDYBNPgRTEhqEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/I88dx_xD6BSDngDYBNPgRTEhqEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:22:cf:ec:6b:03:30:a1:50:07:e3:77:61:5d:dc:2a:52:39:
0c:f9:ae:60:0b:64:d3:a1:43:47:b2:4d:4c:d2:43:87:b0:fd:
98:97:98:1d:5d:81:68:74:9e:e2:71:51:79:ec:38:39:6e:44:
ae:10:c3:7d:68:e4:4c:df:9a:15:c4:88:b1:eb:ae:1c:39:3a:
d8:f8:a5:2e:1e:ab:94:13:7d:bf:33:fa:2f:79:9d:08:7a:0f:
05:8e:bb:44:90:74:9c:13:b1:a9:c0:c8:ea:4a:24:72:10:de:
3a:f5:5b:10:08:67:ef:bb:81:d4:d4:6b:91:e3:fe:a5:a6:01:
c3:f8:a0:e8:f9:f0:87:34:3f:91:7d:be:82:63:97:c1:8c:b0:
dc:69:c6:a6:e2:5b:f1:91:56:23:de:f2:7a:78:b5:4c:ac:97:
a6:dc:5f:73:5b:39:57:90:8d:aa:31:89:7c:e3:64:e1:e2:4f:
56:0d:6e:53:ac:87:49:97:e1:4a:f8:0a:84:36:42:08:b0:c1:
1c:66:92:eb:a0:2e:46:b2:bf:9e:f7:21:a1:e7:b7:bf:95:22:
50:1c:98:ff:b5:07:e3:52:eb:fc:54:74:c3:48:fa:06:54:da:
10:ff:34:64:58:9e:7d:c4:53:57:be:ea:f3:2c:30:9d:fc:58:
25:cf:42:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Pfr9MdcBoIVJfKfX8F053MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzY2YxZGM3ZmM0M2U4MTQ4MzllMDBkODA0ZDNlMDQ1MzEy
MWE4NDIwHhcNMjYwNzIzMTUwMTE2WhcNMjYwNzI0MTUwMTE2WjAzMTEwLwYDVQQD
Eyg1OTcxODE1YmRiMzhmNWU1ZTY4ZTU4OGU2YzM4ZDZmYmFjNWMwZWNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7NFZAzVZn3ddgkx6PlzSY749WvLq
rlXs1iMTitQj+rBZoK36DUjygdMMkKe9jcVNlZ0sTiTionqeB76xs7sGx5f/Doqi
XJzQGUHPpRDBiLriTH8iqBYfubEv3R0mi8yXNNHmpHD35+4CA0KyanjnlqsfaDtn
k24eLpQ1WIkwuz9CqyefBLf89VYqYKzw9zRhLQL41GsfEVCxHHtFwUrA3Z90tFsV
wmlibeU/1NPTzZr4QW4amok6erQ/Dl7x7rUT33IaZ3tHodfQf1Ic34GlPaWfdY8g
646IXwbyWcIEA6zrwf/p6Nw1wQNjJWLyNhy9TCXtl4/BJeuKR4+8WC9x0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFlxgVvbOPXl5o5Yjmw41vusXA7NMB8GA1UdIwQY
MBaAFCPPHcf8Q+gUg54A2ATT4EUxIahCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTg4ZHhfeEQ2QlNEbmdEWUJOUGdSVEVocUVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi8wMDkwNzQtNjZmNi00ZDRkLTk3NGEt
ZGEyZWM4Y2ZiODg4LzEvSTg4ZHhfeEQ2QlNEbmdEWUJOUGdSVEVocUVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi8wMDkwNzQtNjZmNi00ZDRkLTk3NGEtZGEyZWM4Y2ZiODg4
LzEvSTg4ZHhfeEQ2QlNEbmdEWUJOUGdSVEVocUVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUCLP7GsD
MKFQB+N3YV3cKlI5DPmuYAtk06FDR7JNTNJDh7D9mJeYHV2BaHSe4nFReew4OW5E
rhDDfWjkTN+aFcSIseuuHDk62PilLh6rlBN9vzP6L3mdCHoPBY67RJB0nBOxqcDI
6kokchDeOvVbEAhn77uB1NRrkeP+paYBw/ig6PnwhzQ/kX2+gmOXwYyw3GnGpuJb
8ZFWI97yeni1TKyXptxfc1s5V5CNqjGJfONk4eJPVg1uU6yHSZfhSvgKhDZCCLDB
HGaS66AuRrK/nvchoee3v5UiUByY/7UH41Lr/FR0w0j6BlTaEP80ZFiefcRTV77q
8ywwnfxYJc9CRQ==
-----END CERTIFICATE-----
Generated at Thu Jul 23 20:05:34 2026 by rpki-client