Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft
File: iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft (raw, json)
Hash identifier: bPYXNMf645RJxhOOhNP69Qw4ge5Cp9vhuM1nEHDyvcM=
Subject key identifier: A9:8D:03:59:AE:02:13:44:29:0D:A8:17:FC:9C:59:EA:AB:20:70:2C
Authority key identifier: 88:77:DA:3D:48:30:27:A0:1E:DD:CD:0E:43:5E:82:85:F1:B1:BB:9E
Certificate issuer: /CN=8877da3d483027a01eddcd0e435e8285f1b1bb9e
Certificate serial: 019F9FCCFCB9436BC1EA405623573314C94D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft
Manifest number: 19D0
Signing time: Sun 26 Jul 2026 19:00:39 +0000
Manifest this update: Sun 26 Jul 2026 19:00:39 +0000
Manifest next update: Mon 27 Jul 2026 19:00:39 +0000
Files and hashes: 1: _MjZeflusMJHZIBBhksr7jcA7vw.roa (hash: BrV6MzyjqOEJzPWdJnGrS0VIFNiT/BKP8d1n0zB4odM=)
2: iHfaPUgwJ6Ae3c0OQ16ChfGxu54.crl (hash: boHJ1GvLntZilu+4/OTj4Sj+8xgIL+Mv7+zuTxY92HE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft
rsync://rpki.ripe.net/repository/DEFAULT/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:cc:fc:b9:43:6b:c1:ea:40:56:23:57:33:14:c9:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8877da3d483027a01eddcd0e435e8285f1b1bb9e
Validity
Not Before: Jul 26 19:00:39 2026 GMT
Not After : Jul 27 19:00:39 2026 GMT
Subject: CN=a98d0359ae021344290da817fc9c59eaab20702c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:70:9d:8f:dc:c9:62:9a:36:ed:03:ee:8e:0d:
ee:69:2f:e7:45:38:7b:4e:89:ef:eb:00:c6:69:2d:
c9:8a:fa:11:63:15:f8:4d:a0:7b:ea:c5:1a:9c:6c:
4a:8d:d6:aa:99:c7:5a:75:d7:3a:18:36:dc:f3:74:
c5:7f:b8:24:1a:35:66:29:e6:fd:dd:0e:33:aa:95:
28:b8:d9:d8:31:21:df:a1:b1:bf:e7:f4:47:74:36:
f8:0f:b1:5b:26:10:ec:cd:a0:38:50:61:e7:99:b2:
62:21:e6:5d:63:c6:ed:a3:7f:6a:16:3d:a5:de:bc:
21:13:aa:a2:50:89:d7:3c:3a:cc:99:ad:3b:75:0b:
cf:cd:8d:59:00:b9:4c:29:aa:9d:c1:14:52:36:f6:
2b:dc:fc:83:e0:73:31:83:ce:53:42:30:13:8f:19:
4f:c6:e1:7f:c0:37:0e:9a:12:59:ff:3b:ca:40:6f:
d7:d0:6e:30:ee:be:40:8d:2a:5f:5a:20:c6:4c:04:
34:35:4a:e9:0b:a3:58:f7:1a:d3:e8:55:6a:7a:bb:
d7:02:31:fc:34:0b:1d:1d:4c:52:a9:a8:83:9b:a0:
28:33:a5:1d:e2:e5:20:f1:fc:68:e5:c0:08:1e:ae:
e7:94:06:36:42:44:a6:43:82:21:c8:af:5f:b0:61:
00:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:8D:03:59:AE:02:13:44:29:0D:A8:17:FC:9C:59:EA:AB:20:70:2C
X509v3 Authority Key Identifier:
keyid:88:77:DA:3D:48:30:27:A0:1E:DD:CD:0E:43:5E:82:85:F1:B1:BB:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:27:dd:d4:5e:8b:9f:3d:51:3a:db:f0:50:fb:1f:b4:e2:31:
93:b1:81:60:22:4d:85:f6:2a:9f:ab:d5:77:2d:5a:2d:06:1e:
35:77:87:cb:44:64:b5:b7:53:f6:c2:96:aa:de:b7:2f:26:9c:
41:a9:7b:e7:e3:76:c5:39:f1:60:ff:bb:33:18:87:3a:c7:07:
f4:6f:43:5f:ce:0f:b8:ea:e9:34:07:74:5e:ba:44:2a:15:34:
62:e0:2f:f2:f3:94:5e:e4:2a:6a:97:de:cb:5e:f0:60:5a:74:
d9:f4:0b:b2:04:3e:c3:f2:1e:38:56:c9:34:69:4b:45:46:43:
ba:eb:39:68:0b:da:aa:e0:c6:7f:ec:fa:37:58:28:ea:57:bd:
91:08:dc:cd:75:90:4b:10:f7:ef:d8:86:b2:f1:4d:f3:b3:f3:
8d:9b:c6:ee:1f:6b:b8:3f:6d:a8:56:8e:25:ea:28:f0:c4:d8:
1d:ac:67:c0:dd:2c:d0:37:c5:99:24:b9:89:13:d9:84:ed:5a:
c9:da:fb:94:72:97:19:20:68:23:a4:9d:5e:82:ac:48:53:35:
60:66:89:f5:5f:15:14:a2:00:fc:ba:79:c5:45:98:e8:2f:6c:
54:46:f9:6e:48:c6:43:57:12:c3:a0:33:85:f0:85:27:ff:e1:
16:a9:ec:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 20:32:56 2026 by rpki-client