Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft
File: iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft (raw, json)
Hash identifier: AW/KhlTeP1hxa7XuOjHCIYPGOMnvWk0FnK3kj0vFUjw=
Subject key identifier: 56:81:B7:C1:29:ED:EE:06:10:80:73:96:9D:12:65:CD:53:40:E1:EC
Authority key identifier: 88:44:FC:4A:E1:06:49:9E:05:75:FF:3C:A1:55:6D:BC:0D:9B:46:51
Certificate issuer: /CN=8844fc4ae106499e0575ff3ca1556dbc0d9b4651
Certificate serial: 019FA33C77453CE95081CA66D50C16557810
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iET8SuEGSZ4Fdf88oVVtvA2bRlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft
Manifest number: 1929
Signing time: Mon 27 Jul 2026 11:01:16 +0000
Manifest this update: Mon 27 Jul 2026 11:01:16 +0000
Manifest next update: Tue 28 Jul 2026 11:01:16 +0000
Files and hashes: 1: OEVAvwrSHNV-uvr55oxdFx7xxxQ.roa (hash: tRxB0SccSN5sh50OIxV7iRImD06pzo5OWnyES6cYcyc=)
2: aeU9_Yx1c9nw1y-4xtz44SqG1m0.roa (hash: 0t0fFg5NYuzbKW5UvLMqmaiFIgFM8FNQ8jsxvVeiMB0=)
3: iET8SuEGSZ4Fdf88oVVtvA2bRlE.crl (hash: NfbeNXGjWR4agUsvR0bctzChsSVjXR4Q3rMlD/5+L2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/iET8SuEGSZ4Fdf88oVVtvA2bRlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 11:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:3c:77:45:3c:e9:50:81:ca:66:d5:0c:16:55:78:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8844fc4ae106499e0575ff3ca1556dbc0d9b4651
Validity
Not Before: Jul 27 11:01:16 2026 GMT
Not After : Jul 28 11:01:16 2026 GMT
Subject: CN=5681b7c129edee06108073969d1265cd5340e1ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:19:6b:a2:9f:ea:ec:b9:4f:c0:fe:61:ac:28:
53:b2:bb:01:e7:14:21:e7:43:1a:35:82:62:74:a0:
14:6f:e4:6b:c5:2a:40:3a:91:ac:ba:7b:40:bd:23:
15:20:c0:64:b9:71:82:a3:62:5e:49:d2:5d:4c:bd:
8a:fa:d8:d8:a8:6d:41:70:0a:fb:80:30:3e:b3:96:
d1:b3:15:2e:ec:71:94:4d:b2:b8:f1:13:0c:71:c1:
a8:4c:1e:6d:a0:24:e9:ff:0e:c4:97:e4:e2:50:cf:
e7:e9:de:31:71:ae:78:e0:a5:38:ba:b1:80:87:38:
67:fd:f7:aa:ce:e5:fd:a7:53:11:ef:48:f9:0c:79:
f4:6e:ec:e7:62:81:36:de:29:f5:76:1b:1f:e1:f8:
dd:0b:2d:df:b6:b8:97:be:0c:07:f5:8d:ab:1c:90:
7c:fc:ef:65:05:72:71:fb:fd:9b:2d:15:de:8d:ab:
72:fc:78:8c:a5:17:08:0d:a2:2e:7a:16:c4:3b:b7:
59:44:29:05:45:61:05:85:4e:d6:55:80:f9:46:20:
d9:79:37:c9:d1:34:ba:1a:d9:4e:28:af:63:91:53:
be:60:6c:19:7d:e1:4d:08:36:fa:5a:ac:de:98:6a:
02:a4:3e:28:cc:df:81:2e:96:23:dc:9c:ca:11:5c:
11:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:81:B7:C1:29:ED:EE:06:10:80:73:96:9D:12:65:CD:53:40:E1:EC
X509v3 Authority Key Identifier:
keyid:88:44:FC:4A:E1:06:49:9E:05:75:FF:3C:A1:55:6D:BC:0D:9B:46:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iET8SuEGSZ4Fdf88oVVtvA2bRlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:d9:2c:7b:3a:31:16:82:2f:54:bd:a0:bf:e5:41:28:2a:51:
d5:fc:78:cc:0b:93:15:2e:c6:04:a8:21:09:b9:8f:f4:6a:f2:
2e:ab:71:f8:2d:e3:cc:dc:c2:43:19:58:d8:c1:e3:c6:63:c0:
ea:5f:88:6c:d6:eb:4a:3b:72:f0:99:b3:1f:95:68:87:d4:57:
db:e6:b7:8f:66:a5:af:68:c2:e3:63:a8:a9:06:20:59:18:c4:
b8:99:ea:d9:15:02:8e:87:3f:bd:6e:4e:8f:52:50:fb:67:4a:
ee:ed:c6:01:2c:36:fb:a7:1d:6e:43:36:11:4b:f3:74:bc:8c:
de:78:81:12:2d:4a:3c:8d:6d:c4:c8:52:28:18:1e:ab:26:aa:
6d:85:3d:04:be:5c:97:79:a0:8d:6c:da:47:0b:74:42:8b:59:
76:ca:b0:61:c1:a8:06:aa:52:14:34:ff:6e:b8:67:46:ab:c4:
4a:bc:6a:b3:30:a0:92:f3:8c:43:14:5e:91:f3:19:1e:aa:2b:
61:54:04:86:e2:85:6c:7c:ff:d3:d0:c2:ef:f1:23:66:eb:47:
14:3a:2b:e2:16:b7:03:ee:eb:81:d5:09:d4:f9:9f:e4:0f:07:
77:79:fb:35:60:f9:39:0c:58:b4:1f:c6:bb:e0:56:14:1d:d2:
9e:a9:c4:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 15:11:24 2026 by rpki-client