Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/e5b14b-9d5b-4346-8e85-63729fe588a2/1/iQCNpBkicovFvtu9cIhwHFKbme0.mft
File: iQCNpBkicovFvtu9cIhwHFKbme0.mft (raw, json)
Hash identifier: 2bh0eEGHA1ATj9x5IcmkBd/w78On/v2cCL+X7X3X5fs=
Subject key identifier: F7:42:3F:C7:1A:21:EB:D9:04:66:5F:7A:EB:12:A7:CD:2F:3A:32:1B
Authority key identifier: 89:00:8D:A4:19:22:72:8B:C5:BE:DB:BD:70:88:70:1C:52:9B:99:ED
Certificate issuer: /CN=89008da41922728bc5bedbbd7088701c529b99ed
Certificate serial: 01A03CDF74FB6EEA986F04D0910819452350
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQCNpBkicovFvtu9cIhwHFKbme0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/e5b14b-9d5b-4346-8e85-63729fe588a2/1/iQCNpBkicovFvtu9cIhwHFKbme0.mft
Manifest number: 05C7
Signing time: Wed 26 Aug 2026 07:01:12 +0000
Manifest this update: Wed 26 Aug 2026 07:01:12 +0000
Manifest next update: Thu 27 Aug 2026 07:01:12 +0000
Files and hashes: 1: Bu84RhuemJnWYuQuYDWAPY6eUcM.roa (hash: HW6yRnsl3nokN3GyGFBi+j2pUsGdKkc/tn9uxXaGfzs=)
2: CJHjJvBxO_A1o29RU77bYDobb1Y.asa (hash: OiQ96AcIrfdWv9rYq7YRunMZUUkm1k1hxiflexmUSCE=)
3: iQCNpBkicovFvtu9cIhwHFKbme0.crl (hash: FVH/YRCS7F7aIODsn5EF0m41ccBM4XOBR1bdizJi2Ao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/e5b14b-9d5b-4346-8e85-63729fe588a2/1/iQCNpBkicovFvtu9cIhwHFKbme0.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/e5b14b-9d5b-4346-8e85-63729fe588a2/1/iQCNpBkicovFvtu9cIhwHFKbme0.mft
rsync://rpki.ripe.net/repository/DEFAULT/iQCNpBkicovFvtu9cIhwHFKbme0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 07:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3c:df:74:fb:6e:ea:98:6f:04:d0:91:08:19:45:23:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89008da41922728bc5bedbbd7088701c529b99ed
Validity
Not Before: Aug 26 07:01:12 2026 GMT
Not After : Aug 27 07:01:12 2026 GMT
Subject: CN=f7423fc71a21ebd904665f7aeb12a7cd2f3a321b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0c:6e:e6:b6:14:f6:67:c2:51:15:a0:9f:0e:
a9:3a:4d:2b:cf:f4:95:b2:4d:2d:ea:d2:3a:a0:30:
69:b2:33:c3:25:81:83:0a:78:e7:cb:1f:da:00:a3:
34:b1:21:c2:25:ef:e5:9d:d8:9b:f0:20:98:2d:e0:
33:8a:a0:40:e7:0a:36:b4:15:6a:e9:ab:52:90:3d:
70:2a:31:bf:a9:3a:36:98:cd:f4:54:14:03:81:49:
58:41:1c:78:c3:77:c3:0e:46:4b:91:bb:31:9a:62:
ad:fe:b0:33:ae:7c:cf:64:5a:0d:74:8c:57:8a:23:
94:5d:f1:3b:e0:24:66:be:29:7e:a7:34:f8:e1:e8:
86:d8:e8:52:fe:1a:2f:00:d5:e6:67:ed:5e:e2:b3:
47:98:5f:ef:14:a0:1c:90:d7:b6:df:c6:2c:5e:9c:
9f:35:97:22:ff:4c:72:a6:00:4f:d9:d7:6f:08:d7:
23:38:32:52:68:c3:a6:47:52:a8:c1:ad:ab:81:0f:
b2:b3:be:ee:a8:fd:be:ba:57:a1:f8:3d:b7:ee:af:
e1:a9:ab:c6:5a:91:aa:aa:e3:6e:8b:88:22:04:0e:
03:09:c1:f6:39:2c:e3:77:bd:7e:f4:2c:4d:3b:b2:
27:fd:4a:d6:36:6d:15:2a:ce:c2:96:00:b4:ce:09:
6a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:42:3F:C7:1A:21:EB:D9:04:66:5F:7A:EB:12:A7:CD:2F:3A:32:1B
X509v3 Authority Key Identifier:
keyid:89:00:8D:A4:19:22:72:8B:C5:BE:DB:BD:70:88:70:1C:52:9B:99:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQCNpBkicovFvtu9cIhwHFKbme0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/e5b14b-9d5b-4346-8e85-63729fe588a2/1/iQCNpBkicovFvtu9cIhwHFKbme0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/e5b14b-9d5b-4346-8e85-63729fe588a2/1/iQCNpBkicovFvtu9cIhwHFKbme0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:65:29:73:46:1d:c2:98:fd:eb:be:c0:7b:1e:20:a7:9e:81:
ca:84:36:f4:4a:4e:30:f7:54:b5:b4:3f:84:48:57:5a:7a:04:
2b:de:18:df:98:1f:60:c0:45:f0:b0:25:bc:61:ec:ea:b6:e1:
f6:d1:a0:6b:44:77:70:79:79:49:d6:ca:25:5f:8a:c5:4e:0b:
55:05:57:1f:1b:1f:19:9a:f5:d5:fc:ed:68:68:4e:68:70:b1:
13:79:08:51:55:c0:d1:1a:56:fb:ab:09:01:b5:04:78:2f:3e:
17:a9:20:9c:8c:eb:cb:e1:20:7c:56:46:7d:ed:e9:70:30:a5:
ee:8a:b3:46:3c:f5:c3:4e:d2:17:08:fd:28:c4:89:2b:8c:80:
2d:66:ae:c9:73:54:e7:f7:5f:61:20:1d:b3:c5:19:c0:15:12:
f3:a3:e4:74:67:eb:43:13:ae:57:3d:b3:b0:77:e3:55:ce:71:
48:14:1e:45:92:48:42:ba:22:86:17:14:e7:df:94:dc:f7:a7:
a3:d4:a8:f5:8a:37:32:12:7f:7f:2e:ba:22:61:8b:03:eb:e3:
33:39:fd:9b:7b:2b:cc:07:42:d7:5a:e1:2c:ac:7c:72:e2:6b:
be:35:2b:4d:43:f4:d0:3e:d3:ca:c6:83:ab:9b:2d:13:7a:c0:
13:83:88:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 12:17:12 2026 by rpki-client