Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.mft
File: I_Hgnw5u2JGtF9bOSjxzKNdZtMg.mft (raw, json)
Hash identifier: J/7OATqZoia2uP2GSRiAWIJgOlXJxMkxGPYVrZcp+0I=
Subject key identifier: E3:E9:CE:53:C5:CB:9C:04:C2:D3:B3:CD:14:09:FA:7F:0C:5A:BF:6F
Authority key identifier: 23:F1:E0:9F:0E:6E:D8:91:AD:17:D6:CE:4A:3C:73:28:D7:59:B4:C8
Certificate issuer: /CN=23f1e09f0e6ed891ad17d6ce4a3c7328d759b4c8
Certificate serial: 019FA07208E02D3813648419ED83CBE50184
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.mft
Manifest number: 19CF
Signing time: Sun 26 Jul 2026 22:00:55 +0000
Manifest this update: Sun 26 Jul 2026 22:00:55 +0000
Manifest next update: Mon 27 Jul 2026 22:00:55 +0000
Files and hashes: 1: I_Hgnw5u2JGtF9bOSjxzKNdZtMg.crl (hash: zxg9Mpq57LziXQY80gvjt6yKg8JpK2SXQxjP8fJNQgY=)
2: YH3qouyi9uf0Sjp7erwfbtdqIMY.roa (hash: XATxeFAkfU3QrOitUmq9zj3TBTO+Je2+3q8oJUZcsYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:72:08:e0:2d:38:13:64:84:19:ed:83:cb:e5:01:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23f1e09f0e6ed891ad17d6ce4a3c7328d759b4c8
Validity
Not Before: Jul 26 22:00:55 2026 GMT
Not After : Jul 27 22:00:55 2026 GMT
Subject: CN=e3e9ce53c5cb9c04c2d3b3cd1409fa7f0c5abf6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:7c:e9:84:f1:e9:d2:b3:50:48:b1:8a:32:6f:
39:94:25:60:d8:f3:17:c8:d6:25:9d:f3:c1:8c:7d:
c7:d9:4b:c7:b9:5a:c7:2e:74:25:e9:5d:88:29:b7:
55:66:31:65:19:9b:fc:bd:c5:13:c0:d4:13:52:c3:
ba:04:59:ef:79:cc:f7:be:66:dd:81:88:f2:c3:5e:
28:2f:63:88:e3:64:e9:08:a0:57:12:f4:d5:99:fc:
70:56:7b:06:9a:0d:67:09:0f:79:0a:e3:bd:dc:f0:
9f:ac:c0:0c:a8:19:92:b0:6c:6b:18:34:b8:cd:61:
0e:1c:d6:35:8c:b0:56:92:9a:4b:f5:7d:47:42:e6:
fb:b2:57:3a:04:66:87:c2:6b:42:11:f1:d2:58:ee:
50:9f:04:4a:7b:34:26:26:af:6a:76:1e:34:42:1d:
0d:a6:6b:91:16:1f:e4:83:02:a5:a9:8d:1b:a1:d0:
62:35:6a:07:66:09:cc:95:ca:72:7b:f6:d8:71:b3:
b1:8e:91:ff:76:63:72:8c:df:e3:d5:41:c1:74:41:
a8:6a:48:89:6a:a5:af:7c:85:ff:29:7d:c4:80:f5:
ec:90:06:a3:b8:dd:39:93:8c:8d:bd:ae:a8:e3:be:
55:fe:df:16:a1:f2:80:8f:35:5d:82:00:9f:41:ea:
e4:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:E9:CE:53:C5:CB:9C:04:C2:D3:B3:CD:14:09:FA:7F:0C:5A:BF:6F
X509v3 Authority Key Identifier:
keyid:23:F1:E0:9F:0E:6E:D8:91:AD:17:D6:CE:4A:3C:73:28:D7:59:B4:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:05:0d:10:53:83:18:58:36:40:48:91:3a:01:b7:21:25:77:
46:79:01:ab:3a:35:3e:c2:a9:a5:a2:b6:5e:7c:19:a5:81:22:
83:a2:50:56:66:9b:b2:84:80:a8:f8:da:b3:ef:aa:43:4a:71:
d8:49:b2:93:69:d3:e5:ca:e8:98:be:9d:cf:bc:ec:dc:15:1b:
7d:40:46:79:f2:9d:b9:d1:54:1e:48:b8:00:5d:4d:40:45:b8:
dc:70:78:53:23:5a:f8:87:49:cd:4e:a4:e6:61:47:1d:9c:e5:
ec:52:c4:28:55:f2:97:7e:5e:a2:13:c9:13:c7:e6:8f:15:0a:
28:96:c7:0f:ec:76:26:c5:29:aa:1a:7c:81:a0:3f:fc:f4:d4:
4e:e8:ff:aa:64:bd:f7:91:e1:34:57:30:e2:ea:6e:86:fa:62:
12:0e:13:67:9c:5f:54:48:0a:cd:3f:47:15:b2:a1:e3:44:a6:
43:f1:91:f8:2f:9b:5e:b0:de:5f:57:93:f2:2c:ab:33:ae:e9:
fa:4f:3c:1d:83:e5:ad:15:52:cf:5e:57:52:f1:4d:66:c9:ec:
33:58:03:57:8e:b4:87:bf:5e:91:6c:0b:18:41:46:07:2a:f6:
cc:6c:60:99:c7:9c:b3:2a:6d:18:34:76:d3:d8:1a:98:3e:3a:
c9:6d:5d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 00:06:54 2026 by rpki-client