Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.mft
File: Iv9bz3ObBzL7G823F-xxf28csOI.mft (raw, json)
Hash identifier: tUjd6ZygQdr/rTvsSuAv6HnngcSCIyXjDVjXRMhPBXc=
Subject key identifier: 10:66:69:57:D4:70:4E:07:9D:A9:47:48:D3:5F:7B:2C:67:17:DB:11
Authority key identifier: 22:FF:5B:CF:73:9B:07:32:FB:1B:CD:B7:17:EC:71:7F:6F:1C:B0:E2
Certificate issuer: /CN=22ff5bcf739b0732fb1bcdb717ec717f6f1cb0e2
Certificate serial: 019F84C3A685163DD01478BE237EB3430777
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iv9bz3ObBzL7G823F-xxf28csOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.mft
Manifest number: 17C1
Signing time: Tue 21 Jul 2026 13:00:42 +0000
Manifest this update: Tue 21 Jul 2026 13:00:42 +0000
Manifest next update: Wed 22 Jul 2026 13:00:42 +0000
Files and hashes: 1: Iv9bz3ObBzL7G823F-xxf28csOI.crl (hash: Ia1hDe0gYQwQY0+PkLq6S+AdJXeUralInTNV5zcSr3w=)
2: KGVSyU1wIj7N4iY-yGjJQ4nk1wo.roa (hash: JwvzeqlxWkg3az+woqZ5+VwCzs4K2YIxQ2yc7nZEKzM=)
3: _1spXT-fNgBWQ52DMUTuvrFr3B8.roa (hash: 0BaKLx6BfvTvlAXkJodDBjYBD7kri1g1ufdyiNOpYl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iv9bz3ObBzL7G823F-xxf28csOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 13:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:c3:a6:85:16:3d:d0:14:78:be:23:7e:b3:43:07:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22ff5bcf739b0732fb1bcdb717ec717f6f1cb0e2
Validity
Not Before: Jul 21 13:00:42 2026 GMT
Not After : Jul 22 13:00:42 2026 GMT
Subject: CN=10666957d4704e079da94748d35f7b2c6717db11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5c:35:94:38:25:93:6b:83:ec:03:eb:53:ca:
da:57:b7:ad:15:27:14:b6:b4:65:16:c7:44:7f:9e:
3a:4f:a9:ba:da:b4:cb:8a:ce:17:93:06:25:ce:6a:
aa:4f:96:1c:4d:67:8a:9a:9d:fa:28:9a:51:49:22:
d9:c5:4c:8e:a2:d3:84:38:5f:e9:b5:4f:24:59:6a:
5b:7c:f6:69:64:d6:a8:ac:73:c3:d0:f5:b4:74:d7:
6a:e6:7e:a1:ff:9f:bc:4a:36:ae:4e:0f:4b:34:89:
4e:db:4b:58:ea:99:0d:f7:4c:ae:b1:2a:86:59:b7:
be:f9:3b:5a:bb:3e:05:8e:a3:42:00:aa:80:02:01:
f3:99:63:96:09:19:ec:15:5d:8e:85:bc:20:62:b2:
da:72:48:0b:ec:07:d5:bc:3e:7d:90:c0:80:ff:12:
51:70:f3:ec:b8:d9:97:a5:8b:17:c1:d9:34:3f:dc:
8b:94:9f:f9:b2:8f:b7:e0:a0:e7:2b:a6:3e:32:a6:
d0:a2:9e:2f:46:d0:e8:ca:82:73:ae:74:38:72:43:
df:ff:54:e5:05:94:fe:1e:1f:b6:a5:22:81:7e:93:
ba:41:6c:0d:4f:93:39:8e:f0:2f:b6:c5:01:eb:d7:
51:46:76:90:56:6e:f2:87:47:f4:89:35:6b:8e:f3:
22:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:66:69:57:D4:70:4E:07:9D:A9:47:48:D3:5F:7B:2C:67:17:DB:11
X509v3 Authority Key Identifier:
keyid:22:FF:5B:CF:73:9B:07:32:FB:1B:CD:B7:17:EC:71:7F:6F:1C:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iv9bz3ObBzL7G823F-xxf28csOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:09:cd:9d:98:d8:0d:25:bb:d9:d0:ee:d9:8c:9b:b7:fe:77:
9a:7f:66:c3:6e:35:76:5f:eb:17:c4:af:ce:03:8b:75:4a:cb:
5f:21:ef:ed:26:07:c4:f9:7f:c4:d7:e2:91:fb:63:1d:30:6e:
88:05:66:7f:d2:b1:ef:d2:b8:55:fb:0b:ac:08:b8:a0:46:e2:
3f:75:9a:ab:ea:1b:c8:a8:24:97:10:a2:72:20:ac:a6:4f:2a:
6f:94:ae:84:39:e1:90:9f:77:8c:31:6f:9b:4c:a2:09:08:bb:
32:e7:f6:15:7d:ad:07:2e:70:16:bd:8e:31:a8:6c:3a:c4:1a:
84:b8:8b:de:c0:78:57:57:f3:c1:e3:e1:18:2e:ed:9f:ef:f8:
bd:9a:a3:bb:40:8f:a4:a2:00:9c:0e:29:62:6a:07:3b:94:1a:
42:4f:82:d6:bf:a2:a1:74:f0:66:99:15:4a:36:5f:71:e3:a6:
2c:32:e2:be:5f:de:7b:96:12:cf:23:f9:bf:3e:30:15:da:cd:
1e:7a:0d:24:b3:70:b0:be:ed:4d:81:34:64:da:a7:9b:c4:41:
17:ac:77:84:57:17:87:f9:a1:c0:cb:40:31:f2:2a:16:c3:11:
b2:ff:55:d5:69:8d:12:2f:c3:b9:9f:45:1f:41:69:de:d1:63:
d7:b6:5a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:26:42 2026 by rpki-client