Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9b7027-f324-4ecd-893a-d39cc317fdcd/1/I40fH8TD6PtHGzsd7jbF3zFfsjQ.mft
File: I40fH8TD6PtHGzsd7jbF3zFfsjQ.mft (raw, json)
Hash identifier: XrYx9Wg/Qpi2cV4Ji89n1y0jYxJrQuSlD2JuyIYdnTY=
Subject key identifier: 13:76:13:FC:19:FE:9F:2A:7C:96:1A:35:0E:18:14:28:70:C7:71:59
Authority key identifier: 23:8D:1F:1F:C4:C3:E8:FB:47:1B:3B:1D:EE:36:C5:DF:31:5F:B2:34
Certificate issuer: /CN=238d1f1fc4c3e8fb471b3b1dee36c5df315fb234
Certificate serial: 019F8F7F9BD31092EA42A1BFFC3E24731E00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I40fH8TD6PtHGzsd7jbF3zFfsjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9b7027-f324-4ecd-893a-d39cc317fdcd/1/I40fH8TD6PtHGzsd7jbF3zFfsjQ.mft
Manifest number: F6
Signing time: Thu 23 Jul 2026 15:02:12 +0000
Manifest this update: Thu 23 Jul 2026 15:02:12 +0000
Manifest next update: Fri 24 Jul 2026 15:02:12 +0000
Files and hashes: 1: I40fH8TD6PtHGzsd7jbF3zFfsjQ.crl (hash: 6khwS1+f5WE3q+dXCfoeeVpKtpRm25VL7AzOuzLL2IU=)
2: Z1FAr4NSj_9E4vgngoY4iZIbd6w.roa (hash: TNaTsbZBUY9cnfgT4Gqq06IHw66GAFg4ule0/lO0mw0=)
3: b89OtE1WAM5mSDz-HnqsCyirLw8.asa (hash: WwQIyDPTpparBL/aU3tgaOWtU26s+wxcO28wS+CM+5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9b7027-f324-4ecd-893a-d39cc317fdcd/1/I40fH8TD6PtHGzsd7jbF3zFfsjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/9b7027-f324-4ecd-893a-d39cc317fdcd/1/I40fH8TD6PtHGzsd7jbF3zFfsjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/I40fH8TD6PtHGzsd7jbF3zFfsjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:9b:d3:10:92:ea:42:a1:bf:fc:3e:24:73:1e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=238d1f1fc4c3e8fb471b3b1dee36c5df315fb234
Validity
Not Before: Jul 23 15:02:12 2026 GMT
Not After : Jul 24 15:02:12 2026 GMT
Subject: CN=137613fc19fe9f2a7c961a350e18142870c77159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3c:9e:dc:ba:8f:fd:a8:49:33:cf:d3:f4:09:
c8:69:73:1a:0d:c4:e2:70:46:76:ed:c7:ad:b2:18:
3e:01:78:5d:0e:2b:90:32:75:af:52:eb:13:bf:a8:
fa:2d:33:b5:9b:7b:4b:67:5a:c9:0a:0c:88:e6:ac:
de:a1:aa:0a:ee:a1:97:a8:61:cf:6f:a3:b3:f3:e0:
79:8e:4c:68:2f:fb:ed:96:01:4d:ac:c3:e9:3b:74:
1d:18:52:8c:6b:9a:3b:43:88:90:a0:5e:aa:52:1d:
e5:79:f4:b9:91:65:5e:74:f2:b1:ad:85:82:a4:89:
43:19:7d:75:3b:34:d2:28:86:7f:af:9c:2a:88:59:
b9:0c:00:cb:3c:fa:f4:46:45:d8:f4:c4:94:55:04:
59:9a:c0:09:9e:b1:d9:03:e1:f6:ff:b9:d5:b7:8f:
8b:5d:4c:6a:1b:c7:86:09:0c:60:84:e4:bc:ec:52:
9b:d3:99:ef:bc:ae:43:7c:61:be:35:1d:c6:8d:4b:
d1:99:7e:7a:ec:b5:b1:39:e4:0c:fa:25:dc:ca:ad:
d3:6b:79:e4:01:ae:f4:cc:d7:23:72:fb:da:7f:8a:
8a:2b:01:65:b6:05:88:b9:33:10:6e:79:a8:e0:2e:
91:5a:a5:31:cb:a3:75:3c:15:70:b4:2d:a6:0e:c1:
7f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:76:13:FC:19:FE:9F:2A:7C:96:1A:35:0E:18:14:28:70:C7:71:59
X509v3 Authority Key Identifier:
keyid:23:8D:1F:1F:C4:C3:E8:FB:47:1B:3B:1D:EE:36:C5:DF:31:5F:B2:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I40fH8TD6PtHGzsd7jbF3zFfsjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9b7027-f324-4ecd-893a-d39cc317fdcd/1/I40fH8TD6PtHGzsd7jbF3zFfsjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9b7027-f324-4ecd-893a-d39cc317fdcd/1/I40fH8TD6PtHGzsd7jbF3zFfsjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:15:aa:ab:e9:33:d2:86:17:23:3a:42:39:99:b9:88:ae:d9:
06:53:fa:69:86:d2:0c:dd:e9:93:36:48:94:da:2f:33:a5:de:
b5:96:ee:ca:56:6e:1a:8d:03:8e:5b:f0:2a:e6:d1:66:ff:bc:
80:54:c4:95:41:bd:3a:82:8f:b0:0c:44:6d:b1:2f:65:56:d3:
be:e7:80:1b:85:cb:e6:0d:3a:4c:2a:f0:6f:1b:71:77:10:50:
1e:a3:f1:82:ef:3d:11:af:1d:f7:60:95:c1:de:f2:1e:02:7b:
9a:6d:ab:68:e9:1d:be:f5:80:e4:c5:7d:11:82:6e:0a:74:64:
d8:f5:60:32:e1:17:55:46:6b:99:2c:65:3a:67:0c:e5:7b:a2:
82:a8:6d:e7:df:86:fa:a5:d5:fb:a3:75:db:99:cb:54:b5:e8:
ce:7e:fc:10:28:54:ed:d8:b4:49:af:d0:05:8f:5e:fd:1d:3c:
41:ac:21:26:4f:14:e8:c3:85:12:ef:f9:f7:a9:b8:20:3a:18:
fb:74:1d:45:89:64:44:18:b3:27:a7:80:63:96:49:c6:81:80:
f8:05:d2:c3:72:09:5b:94:e9:73:13:13:19:c1:b0:1d:f4:50:
97:5a:e0:e2:34:1c:e4:2b:0d:9e:66:10:b8:47:4a:a2:9b:3d:
a0:a1:6e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:10:21 2026 by rpki-client