Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.mft
File: RIFOp-g7QBm_1Xl-upidoG3ZDjM.mft (raw, json)
Hash identifier: d+2fxgqIXwZ7JlI4BM39kN+TndZx619gHqETcLmUr98=
Subject key identifier: F2:05:CA:67:2E:E9:56:17:AD:9A:6C:15:77:4F:C8:C3:69:3F:49:4C
Authority key identifier: 44:81:4E:A7:E8:3B:40:19:BF:D5:79:7E:BA:98:9D:A0:6D:D9:0E:33
Certificate issuer: /CN=44814ea7e83b4019bfd5797eba989da06dd90e33
Certificate serial: 019F86442FCEB1963D3B70D82B826DAFA2E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RIFOp-g7QBm_1Xl-upidoG3ZDjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.mft
Manifest number: 1188
Signing time: Tue 21 Jul 2026 20:00:43 +0000
Manifest this update: Tue 21 Jul 2026 20:00:43 +0000
Manifest next update: Wed 22 Jul 2026 20:00:43 +0000
Files and hashes: 1: RIFOp-g7QBm_1Xl-upidoG3ZDjM.crl (hash: MdKTV7KWQOY9SJURy0s+KNfU/HexQecizTAwrrpaTo8=)
2: c4pt8vUVaeXjMXnofvH8CstQg9I.roa (hash: JquKoOYBsn6huX/IMn7g4cc/ok8BfYvy/bpSr/C0iVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RIFOp-g7QBm_1Xl-upidoG3ZDjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:44:2f:ce:b1:96:3d:3b:70:d8:2b:82:6d:af:a2:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44814ea7e83b4019bfd5797eba989da06dd90e33
Validity
Not Before: Jul 21 20:00:43 2026 GMT
Not After : Jul 22 20:00:43 2026 GMT
Subject: CN=f205ca672ee95617ad9a6c15774fc8c3693f494c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:26:9a:c5:0a:4d:ac:38:85:21:24:3e:17:84:
f0:83:91:c8:c5:c6:e7:9c:0b:3b:6f:41:31:1f:dc:
d8:30:5a:b4:74:6e:f9:83:98:a5:2d:27:89:ae:5d:
44:a5:1d:6f:fb:82:18:dd:48:6c:19:cc:b1:50:9f:
cd:a9:aa:b3:73:ce:75:73:2b:da:ae:25:6f:f6:c3:
50:f7:93:d0:80:20:4a:23:d9:24:ca:5a:d2:36:b3:
f4:ef:43:76:4e:d5:b7:7d:2c:d7:af:08:5b:9d:74:
5a:3a:17:ac:ad:bb:e5:62:a3:85:36:ab:3f:80:14:
dc:bf:f6:d0:b0:45:b2:71:34:01:d7:f4:f1:8d:b4:
f2:b3:5e:e7:3f:5c:e9:a7:29:22:b8:c8:e7:b1:9d:
35:03:4c:bd:ee:ba:a4:0a:35:c2:c0:d0:80:8c:13:
a6:64:90:bb:31:d4:fe:80:b8:5f:a7:f0:5a:47:74:
1c:90:13:99:0f:26:0e:bc:18:c1:73:44:6d:5b:59:
02:2b:ae:c5:f5:30:8e:08:2f:2f:83:0e:e3:c6:91:
6d:8a:f9:be:42:16:ea:d4:05:bf:cb:ad:31:95:23:
0b:24:35:e4:b4:32:bf:ae:5a:8b:bd:de:8e:43:88:
d0:3c:08:5d:09:72:87:10:ab:78:21:7c:35:c0:9d:
16:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:05:CA:67:2E:E9:56:17:AD:9A:6C:15:77:4F:C8:C3:69:3F:49:4C
X509v3 Authority Key Identifier:
keyid:44:81:4E:A7:E8:3B:40:19:BF:D5:79:7E:BA:98:9D:A0:6D:D9:0E:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RIFOp-g7QBm_1Xl-upidoG3ZDjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:07:5c:06:6c:a8:ec:74:76:a2:d7:9c:72:e9:eb:29:e1:54:
e9:29:f2:8e:1c:48:b6:2d:1f:02:55:ca:0d:4c:b4:81:87:98:
52:96:67:bf:9a:1f:68:72:09:a6:d8:5a:c5:79:b9:80:71:a3:
e4:6b:51:5b:ce:ef:69:bc:0b:b8:33:77:52:fc:d8:9a:4c:78:
05:6a:e6:c4:c5:62:9f:5e:03:11:3b:0d:12:e3:fd:a7:1c:c1:
10:17:3b:45:b9:a1:ea:e6:4e:d1:ae:65:b0:d2:9a:b5:ab:73:
5a:09:a6:42:20:ff:38:d1:c9:ab:cf:b8:de:08:98:d4:0a:75:
1c:a4:5d:49:01:cb:27:97:8c:1f:bc:c7:12:f2:79:12:0e:b4:
e9:b3:bf:0e:ec:cf:69:26:a9:a1:84:e2:c4:20:2d:70:04:b8:
df:c8:85:a5:f3:ed:b5:50:41:68:2e:d5:94:d8:8c:45:1b:43:
b2:27:ef:cf:03:dc:7e:10:aa:f3:68:56:e5:c2:8b:6b:05:36:
a9:a2:a9:6f:da:a4:f6:bb:e9:f4:7c:7c:a8:7c:de:57:06:cf:
cf:a5:f4:f0:0d:be:50:d2:f7:40:d4:8d:dc:78:68:b4:2e:4d:
b7:92:45:4b:87:e9:4d:96:06:f7:3e:94:19:5e:26:db:37:06:
f8:47:1d:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:04:57 2026 by rpki-client