Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.mft
File: iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.mft (raw, json)
Hash identifier: 8GEad+3v1iJGhF4YB+qT7KJEVCC8Ex2l/fx2pZE3z00=
Subject key identifier: AA:14:3C:D3:7B:B9:3E:49:69:D8:FF:63:7E:FB:EC:65:87:A3:DB:A4
Authority key identifier: 89:93:9F:F1:29:3B:7E:22:77:9F:C5:5B:4C:83:F1:3E:52:E9:44:28
Certificate issuer: /CN=89939ff1293b7e22779fc55b4c83f13e52e94428
Certificate serial: 019FA2296EFE5F7C20E6D71C1B256CD46143
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.mft
Manifest number: 19A6
Signing time: Mon 27 Jul 2026 06:00:52 +0000
Manifest this update: Mon 27 Jul 2026 06:00:52 +0000
Manifest next update: Tue 28 Jul 2026 06:00:52 +0000
Files and hashes: 1: bze-DpbDaFlTujNEYrBpzXK9-lM.roa (hash: ooe09J/1o8+6+gKFLqTffzTatPXG8lw2mIe4kZHRs+0=)
2: iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.crl (hash: 0VrYSTrAICIt2zyHXNHPC5WcHzQ/s7KcoQoED418u9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 06:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:29:6e:fe:5f:7c:20:e6:d7:1c:1b:25:6c:d4:61:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89939ff1293b7e22779fc55b4c83f13e52e94428
Validity
Not Before: Jul 27 06:00:52 2026 GMT
Not After : Jul 28 06:00:52 2026 GMT
Subject: CN=aa143cd37bb93e4969d8ff637efbec6587a3dba4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:f4:0d:76:bd:82:db:1d:a8:00:58:03:19:9d:
94:b4:5d:10:53:7a:28:76:58:fa:c7:8f:ed:58:7d:
73:3b:bf:7e:89:49:16:20:fe:30:3f:97:ee:2e:a1:
73:f7:ba:0b:7a:0e:d2:34:0a:e0:f1:15:4d:ae:6e:
44:e3:d2:5e:9a:9d:6a:f5:51:2b:47:95:0e:12:bf:
fa:9c:c7:7a:4c:53:d1:ea:a3:1c:e6:da:1e:db:71:
6e:86:67:56:ce:38:0d:61:31:84:4f:de:7d:15:cb:
e7:59:1e:a4:da:20:06:0c:5b:8e:11:7e:39:bd:bb:
59:d2:a9:63:7c:63:88:16:0b:b3:46:7d:ed:72:cb:
e8:99:d4:70:7d:15:61:a8:95:49:1f:70:3d:f3:53:
3e:4e:79:6e:63:83:17:5c:63:62:45:11:d0:00:07:
bd:b1:1a:b0:a7:e6:56:f8:c6:e2:18:53:54:52:25:
54:4e:cc:6a:fc:7e:af:d3:ad:60:4c:f7:cb:16:ab:
34:56:b2:5e:a4:99:f6:a9:11:21:77:72:b4:b0:dd:
70:a7:63:f3:ab:99:da:fc:44:19:9d:d7:d6:d0:d9:
59:27:6e:c4:39:da:57:1f:5d:1b:be:ff:42:73:aa:
b5:80:01:58:f9:18:48:de:d8:69:7c:87:63:2e:82:
f7:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:14:3C:D3:7B:B9:3E:49:69:D8:FF:63:7E:FB:EC:65:87:A3:DB:A4
X509v3 Authority Key Identifier:
keyid:89:93:9F:F1:29:3B:7E:22:77:9F:C5:5B:4C:83:F1:3E:52:E9:44:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:a5:ce:87:37:14:9f:b6:71:3a:fb:fa:d7:a2:7f:c1:7b:5c:
b4:15:a6:c6:13:d4:43:7d:b0:c1:66:f0:e6:46:dc:d7:c1:3d:
2d:67:22:61:1b:87:31:2d:f1:60:ad:f7:5c:a9:bc:4e:29:ab:
3f:13:6e:d1:0d:0f:e2:d4:0a:79:12:e5:34:6e:5b:ae:3f:fe:
64:27:93:bb:ad:8f:7a:43:50:cd:91:9e:1c:9b:c5:8c:b0:c6:
5a:63:3d:ca:ae:d9:c4:1e:a4:66:0f:a7:a0:40:10:bf:bd:ae:
2f:dc:a2:30:63:57:bf:8f:c1:c8:02:c9:ef:d3:20:5b:c4:a0:
83:f4:13:e8:73:d3:4b:6c:25:57:ca:2d:53:8d:19:06:ec:c2:
46:cb:a7:88:9b:c9:2c:cb:5e:0c:05:9e:49:2c:ec:3f:34:86:
34:a3:8d:13:8e:33:7f:53:f0:a7:fd:79:2b:65:4d:1b:ae:48:
45:e5:6a:b5:d8:33:45:bc:9c:49:72:62:dc:e7:ae:9a:ea:4f:
f7:4a:cf:f8:89:c9:87:bd:1b:a0:2f:70:fa:3e:94:9d:6e:23:
ec:e7:74:a4:48:66:92:8c:1b:61:2a:5f:ee:91:d1:9e:d2:c7:
e7:6a:7b:6b:d2:aa:ce:93:1b:0c:c7:f6:7a:92:ee:a7:c8:bc:
76:bc:2e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:01:14 2026 by rpki-client