Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.mft
File: ixJLEklCpdfq1rt9N6ZOWMfm2kE.mft (raw, json)
Hash identifier: f5kHuH17tcrZZPSd8/HHwa41NeOBhkyize5zOUmV70s=
Subject key identifier: 30:21:46:85:D1:F5:CB:68:B5:16:90:0F:F0:95:4A:8B:83:81:88:22
Authority key identifier: 8B:12:4B:12:49:42:A5:D7:EA:D6:BB:7D:37:A6:4E:58:C7:E6:DA:41
Certificate issuer: /CN=8b124b124942a5d7ead6bb7d37a64e58c7e6da41
Certificate serial: 019F9437721E527E41503ACFF17A6F7CE843
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ixJLEklCpdfq1rt9N6ZOWMfm2kE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.mft
Manifest number: 0A9B
Signing time: Fri 24 Jul 2026 13:01:29 +0000
Manifest this update: Fri 24 Jul 2026 13:01:29 +0000
Manifest next update: Sat 25 Jul 2026 13:01:29 +0000
Files and hashes: 1: 606JAzklsOqsRlrbcuzv28QnWpo.roa (hash: Ui6APTAkf1hdKOgIZctUG0CdW7HPm77LlztW2I8sf0k=)
2: ixJLEklCpdfq1rt9N6ZOWMfm2kE.crl (hash: 9lEZblAhrqJYEy/LwuWuETQJnSLF/2ERAd58fVezg2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ixJLEklCpdfq1rt9N6ZOWMfm2kE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 13:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:37:72:1e:52:7e:41:50:3a:cf:f1:7a:6f:7c:e8:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b124b124942a5d7ead6bb7d37a64e58c7e6da41
Validity
Not Before: Jul 24 13:01:29 2026 GMT
Not After : Jul 25 13:01:29 2026 GMT
Subject: CN=30214685d1f5cb68b516900ff0954a8b83818822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5e:66:93:84:49:c8:54:44:f7:d6:8a:82:58:
cb:72:d4:21:83:b7:c1:3c:db:1b:d8:68:17:24:64:
67:8c:ea:3c:d7:c3:10:79:34:f9:f8:d3:d5:79:29:
fa:d3:9d:f7:55:72:ce:8f:cb:e7:c4:2c:df:30:0f:
69:6f:9a:2b:e4:4c:92:db:5e:70:0c:1e:13:d2:70:
2a:48:75:1b:a4:00:13:bf:29:01:42:3f:24:74:25:
6f:9b:4f:ff:0a:ec:93:91:d3:db:e1:aa:b4:a2:5c:
ab:86:6c:08:93:d0:38:35:5e:d7:d3:c5:36:a2:4e:
bf:33:59:e7:0a:ca:e8:44:ed:2f:ee:2a:26:7e:82:
64:0c:87:ab:53:b4:89:4d:26:a3:35:73:0c:2f:1d:
09:0f:79:44:81:5f:9b:ef:4b:5b:b9:b7:c6:43:6d:
8b:4a:0d:d2:f7:8b:77:78:89:e8:e2:34:f2:55:b8:
e3:71:d8:b8:c2:e7:0e:07:8d:2d:c5:c7:95:aa:90:
dd:07:ef:74:7f:4c:db:54:78:27:95:77:d3:ed:50:
a9:2b:eb:ed:ad:63:3f:81:18:ca:61:e6:b6:1b:38:
cb:66:f9:06:65:c2:2d:72:f8:9b:7c:57:71:da:08:
0c:cf:31:ec:1a:41:01:b1:58:0a:56:9a:d4:5f:ca:
3a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:21:46:85:D1:F5:CB:68:B5:16:90:0F:F0:95:4A:8B:83:81:88:22
X509v3 Authority Key Identifier:
keyid:8B:12:4B:12:49:42:A5:D7:EA:D6:BB:7D:37:A6:4E:58:C7:E6:DA:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixJLEklCpdfq1rt9N6ZOWMfm2kE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:7b:38:68:bd:56:fa:f3:05:44:a1:7f:11:04:d4:28:40:25:
ba:95:af:65:07:04:a6:ac:a6:7b:76:cb:7c:d3:35:eb:a7:2b:
94:b7:c0:b9:81:1f:3c:f4:a0:51:33:8d:f4:84:1c:49:4e:25:
07:e5:4b:70:24:68:61:8b:f3:47:04:31:af:fd:c8:74:3a:2f:
1b:ba:2b:c5:86:31:52:73:32:72:df:99:47:24:8e:5a:c6:69:
9c:4d:3b:0b:42:50:6d:30:29:c0:77:1f:ef:b2:4f:b4:e9:e5:
b3:14:c1:06:46:60:b4:64:02:3b:74:ce:3d:b4:f8:10:72:2e:
40:9f:d1:d8:91:b5:ea:d0:52:b0:32:88:55:04:63:84:97:0c:
38:73:c3:91:37:2e:eb:ef:27:34:66:00:85:7c:7c:03:bd:76:
ab:e6:ef:1c:5b:f5:e0:98:d9:7a:d2:48:5f:7d:81:c7:91:74:
ad:6e:17:d8:88:f9:cd:23:50:ae:47:39:37:4f:1e:4a:80:85:
af:43:fb:a1:f4:dd:d8:32:69:33:a9:f4:89:70:af:17:ea:c8:
c6:8c:64:f4:3d:b1:03:7e:3d:fb:dc:91:e3:cf:da:30:9b:98:
fb:bc:ec:91:b8:e9:da:4f:82:c6:be:0b:ca:aa:2f:0f:80:aa:
e9:0d:22:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:25:32 2026 by rpki-client