Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/idvHFWpO58Z9nmhHZ6L0uvijW6s.mft
File: idvHFWpO58Z9nmhHZ6L0uvijW6s.mft (raw, json)
Hash identifier: bSv/KTPsRJqmZGlc++hSQ3U5Z1Rfa/hq+J39fpPA4ag=
Subject key identifier: 68:C0:8F:09:D5:58:88:F8:24:72:21:C9:D7:B0:CA:D7:B1:C5:AE:25
Authority key identifier: 89:DB:C7:15:6A:4E:E7:C6:7D:9E:68:47:67:A2:F4:BA:F8:A3:5B:AB
Certificate issuer: /CN=89dbc7156a4ee7c67d9e684767a2f4baf8a35bab
Certificate serial: 019F41635C9E97A68090702A995CE62FE53A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/idvHFWpO58Z9nmhHZ6L0uvijW6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/idvHFWpO58Z9nmhHZ6L0uvijW6s.mft
Manifest number: 19A3
Signing time: Wed 08 Jul 2026 11:00:58 +0000
Manifest this update: Wed 08 Jul 2026 11:00:58 +0000
Manifest next update: Thu 09 Jul 2026 11:00:58 +0000
Files and hashes: 1: AMtRKXkFFUuu-FBFySOQZFh0CVc.asa (hash: m8zsToffrsGJPD49WuP8tnJc1KNywcrURjmTcAwvTds=)
2: GBd4rVL5dJN0-9cuwhBBwNEyoV0.roa (hash: iRjXs3gr4L7byQxpcKRUar4Pisuwylgwnacqi0QdLQQ=)
3: PLZ1UvYELfgIKPLrh6OHNKK9acc.roa (hash: Shni7jpvErA8s5MzWpDHouyJxJ3M6Tbya9IWgb+KMM8=)
4: idvHFWpO58Z9nmhHZ6L0uvijW6s.crl (hash: /Gq9kLY7dd8B7ednfCyYr0Axfofn2VgDvFrk8lOVlj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/idvHFWpO58Z9nmhHZ6L0uvijW6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/idvHFWpO58Z9nmhHZ6L0uvijW6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/idvHFWpO58Z9nmhHZ6L0uvijW6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 11:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:41:63:5c:9e:97:a6:80:90:70:2a:99:5c:e6:2f:e5:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89dbc7156a4ee7c67d9e684767a2f4baf8a35bab
Validity
Not Before: Jul 8 11:00:58 2026 GMT
Not After : Jul 9 11:00:58 2026 GMT
Subject: CN=68c08f09d55888f8247221c9d7b0cad7b1c5ae25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:67:c2:b0:71:98:80:12:38:55:19:ed:8a:22:
53:3a:ac:34:22:14:e4:cb:68:0c:29:4c:50:6e:93:
53:44:b3:32:29:a7:8d:48:4d:eb:05:4e:a9:1c:b2:
5b:59:b9:0a:85:e4:67:bc:00:07:dc:d6:15:b2:72:
2b:ad:c8:ba:d7:a6:89:7d:68:89:73:08:e9:36:1c:
03:10:06:1f:98:f6:36:b1:9b:1e:3b:ea:12:cf:44:
3a:04:d5:45:43:0b:9f:3b:ce:e5:6a:fb:f6:3d:37:
54:d1:89:2d:cf:24:82:b4:14:68:11:14:35:43:cf:
90:b8:33:8c:04:e4:c9:e5:68:07:1f:51:73:4a:68:
d1:d7:fd:6a:bf:7c:cf:a4:ab:8a:c4:5f:03:ec:1f:
72:77:8d:06:78:50:a4:8f:b3:23:e7:41:b2:56:bf:
eb:a4:f8:b8:7a:51:a7:db:ab:91:63:2f:98:76:a0:
6d:41:8e:43:58:06:67:40:4d:a1:86:dc:1c:fb:ad:
04:2d:c1:6e:e3:d1:6d:88:39:bd:da:5e:69:02:29:
6c:00:32:51:d6:59:d3:6b:c8:8c:6e:fb:28:1f:2c:
ac:0e:35:be:d3:f7:66:b9:76:8f:57:c1:c3:a6:71:
20:12:67:c5:a3:9b:2a:88:67:26:81:60:44:1c:af:
70:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:C0:8F:09:D5:58:88:F8:24:72:21:C9:D7:B0:CA:D7:B1:C5:AE:25
X509v3 Authority Key Identifier:
keyid:89:DB:C7:15:6A:4E:E7:C6:7D:9E:68:47:67:A2:F4:BA:F8:A3:5B:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idvHFWpO58Z9nmhHZ6L0uvijW6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/idvHFWpO58Z9nmhHZ6L0uvijW6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/idvHFWpO58Z9nmhHZ6L0uvijW6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:f1:f4:06:9d:2f:f6:9e:dd:2d:60:d6:08:49:70:ee:a8:8c:
ef:17:ed:19:58:91:d3:0d:13:20:c9:da:10:f1:89:96:6a:fe:
f7:40:bc:a1:02:07:fa:dd:61:fb:85:4d:1c:6b:00:35:11:6f:
de:75:36:48:4f:fc:10:1b:2a:15:43:96:c1:07:82:3e:1e:50:
b6:84:53:05:38:45:b7:7e:c8:f5:05:24:e5:e4:2b:0e:21:40:
90:a3:79:5b:43:7a:d5:94:8a:c6:ae:85:f2:ed:1b:16:d5:d0:
14:f8:72:02:61:dc:18:f3:03:96:a8:e7:6f:84:8e:53:e3:27:
18:aa:4e:80:f0:2a:5f:72:2f:ab:09:48:48:4b:cc:cf:7d:81:
1a:4d:51:1b:b9:58:a7:c4:86:df:7a:96:d2:7f:33:e4:04:cb:
fb:fc:84:f9:82:fe:5d:0a:72:ff:37:3e:44:c1:57:76:96:4c:
e4:39:52:1f:96:12:84:fb:82:66:17:9d:50:4a:59:f3:9b:b0:
b8:58:59:3e:38:63:3f:4f:40:86:42:83:ea:1a:53:7c:de:f1:
72:74:8b:03:2d:6a:61:ed:35:aa:c2:63:41:fb:33:9a:93:2f:
92:25:d6:e1:72:c8:a3:bf:87:24:29:bb:bf:d0:24:97:4f:ba:
41:5c:26:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:48:51 2026 by rpki-client