Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.mft
File: i2ojov0aCVY3ijfU_OJZ3yvXlKc.mft (raw, json)
Hash identifier: WR7+MBRKEHWn5jkdANVE0Zy19yxmnhLtlAc2GpxajSs=
Subject key identifier: 70:E0:33:08:47:7C:7C:C1:EA:3A:F5:5D:A4:16:C4:84:1C:76:5D:3B
Authority key identifier: 8B:6A:23:A2:FD:1A:09:56:37:8A:37:D4:FC:E2:59:DF:2B:D7:94:A7
Certificate issuer: /CN=8b6a23a2fd1a0956378a37d4fce259df2bd794a7
Certificate serial: 019F9EBAD118D2D5F49996A40A57D7BCE361
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2ojov0aCVY3ijfU_OJZ3yvXlKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.mft
Manifest number: 19CE
Signing time: Sun 26 Jul 2026 14:01:11 +0000
Manifest this update: Sun 26 Jul 2026 14:01:11 +0000
Manifest next update: Mon 27 Jul 2026 14:01:11 +0000
Files and hashes: 1: BTEAuUNa_YsO4Msc4ADixEUAqHw.roa (hash: RPWke+z8J8p3T5a+cxL5wCmrsKLPXY/+WIucQz9R2x4=)
2: Fdb2MRiz20g2xgX0HTiyiVn6wdM.roa (hash: P7ndLT2N2wnmbFCzRdtX0zBZJo6QlqplqMU+f7R4Fys=)
3: i2ojov0aCVY3ijfU_OJZ3yvXlKc.crl (hash: A0TG3ItATbAh1FavV6UjhafilbvSE15abh4dgJW2yzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2ojov0aCVY3ijfU_OJZ3yvXlKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9e:ba:d1:18:d2:d5:f4:99:96:a4:0a:57:d7:bc:e3:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6a23a2fd1a0956378a37d4fce259df2bd794a7
Validity
Not Before: Jul 26 14:01:11 2026 GMT
Not After : Jul 27 14:01:11 2026 GMT
Subject: CN=70e03308477c7cc1ea3af55da416c4841c765d3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e4:3b:45:01:5a:0c:cf:73:bc:6c:fc:4b:4c:
db:cf:ed:99:48:71:91:be:2f:a0:39:61:ba:be:9a:
34:4a:c0:94:a0:a9:d8:b4:dd:1c:b1:fb:7d:e2:12:
d8:50:41:98:f4:9e:1c:b5:38:59:aa:54:55:f5:0a:
8a:4f:c8:80:c1:ed:d6:bf:bf:00:4e:78:40:af:62:
5c:6c:54:3d:43:31:6d:39:5c:53:93:b0:a3:2c:62:
e3:44:b8:fa:8e:39:ab:cd:77:d6:7f:1d:f5:5f:fe:
c5:7a:18:58:4b:a5:f8:56:ed:de:18:af:f0:6d:32:
d7:76:11:05:67:2e:86:4a:f5:64:9b:90:d1:00:09:
6e:89:a8:d9:0d:4a:79:32:6a:eb:35:ed:2f:1d:13:
16:a0:90:69:7b:03:58:1e:25:3c:94:ef:fd:e3:a0:
a4:d7:1c:27:ad:9d:14:4e:a8:a4:81:77:2c:e3:2c:
28:db:1a:ae:1d:48:20:59:5a:3f:10:3e:60:1f:84:
aa:fa:6e:7f:69:b8:9b:50:3a:27:e9:c1:d2:48:b9:
5e:71:5e:8f:f4:85:c9:60:ff:0d:e5:8e:60:a1:d8:
f3:8d:fb:69:e4:7b:d0:c8:3d:25:e2:ca:e9:b0:fd:
b0:8d:dc:6b:40:5f:fd:99:e4:05:04:7d:a7:78:2f:
4f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:E0:33:08:47:7C:7C:C1:EA:3A:F5:5D:A4:16:C4:84:1C:76:5D:3B
X509v3 Authority Key Identifier:
keyid:8B:6A:23:A2:FD:1A:09:56:37:8A:37:D4:FC:E2:59:DF:2B:D7:94:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2ojov0aCVY3ijfU_OJZ3yvXlKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:ef:67:56:5f:23:d0:b9:fc:bb:4d:17:be:f6:5b:25:a6:24:
d8:64:6c:4f:43:81:cd:eb:3b:68:82:a6:49:4b:6a:c6:69:83:
c7:5e:cb:c7:ff:f9:1c:2b:b3:b2:fd:b4:77:98:c1:7a:d2:7d:
ec:75:be:01:d2:25:92:fd:c1:65:ca:29:08:f8:41:3e:c4:db:
5c:16:f2:4e:cf:38:be:70:40:f7:a6:c7:be:08:90:b0:a9:1c:
70:50:ea:b3:28:c6:89:52:d0:cd:a3:7e:8f:37:5c:e4:48:9c:
ab:9d:12:27:9a:1e:a5:f0:9f:c7:8b:92:42:3e:79:8c:24:20:
87:0e:c1:d9:10:34:37:28:10:c5:1f:40:78:16:b7:3d:5a:a2:
1a:fa:e4:67:56:cb:52:5b:bb:a8:1b:9a:8e:e7:6f:fe:23:d5:
53:ba:d5:76:50:38:7a:e5:eb:33:c5:c8:d6:6a:64:68:30:c1:
58:5e:a0:1c:42:68:cc:03:eb:53:0d:bf:dd:ca:2c:5c:42:13:
05:5f:96:d4:02:15:13:04:09:ce:10:1e:5e:97:f7:54:cd:9a:
e7:38:68:6f:8f:72:65:28:ab:ea:ea:fd:56:7a:3f:cc:0a:32:
79:c7:a2:24:82:df:64:e0:26:6a:54:8a:52:7a:58:f7:fe:b2:
6b:29:0e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 21:35:37 2026 by rpki-client