Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/iS0hVmzPw7sHnsWFSwRKuAmAQVc.mft
File: iS0hVmzPw7sHnsWFSwRKuAmAQVc.mft (raw, json)
Hash identifier: LKKr7oGSQJtMau5YhHbKZWEifbbmL41/30jGf8uuMZg=
Subject key identifier: 74:D3:A2:91:8D:A5:B8:1A:C0:C6:9B:85:0D:4B:2F:70:19:11:A0:1F
Authority key identifier: 89:2D:21:56:6C:CF:C3:BB:07:9E:C5:85:4B:04:4A:B8:09:80:41:57
Certificate issuer: /CN=892d21566ccfc3bb079ec5854b044ab809804157
Certificate serial: 019F1B9FA0018E2D29DF5869346F592EB8A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iS0hVmzPw7sHnsWFSwRKuAmAQVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/iS0hVmzPw7sHnsWFSwRKuAmAQVc.mft
Manifest number: 1989
Signing time: Wed 01 Jul 2026 03:01:13 +0000
Manifest this update: Wed 01 Jul 2026 03:01:13 +0000
Manifest next update: Thu 02 Jul 2026 03:01:13 +0000
Files and hashes: 1: WJZilYaZAHsOAmj637C-MdulMxc.roa (hash: wLuopCEozLlg7zWAHBk3a03yzRSeylXpXNn0hBm9JS0=)
2: iS0hVmzPw7sHnsWFSwRKuAmAQVc.crl (hash: oxW9Ah7BAJpBGtX/yAa6nOiosI/eaeqLU9XnKNTgroI=)
3: xLQnpa48oKWxD9K2HQGCUx5nny4.roa (hash: kd5ch0DHjDYuKsI2CZ8kmx/a6Kg1r4mH4pB1J7u5AVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/iS0hVmzPw7sHnsWFSwRKuAmAQVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/iS0hVmzPw7sHnsWFSwRKuAmAQVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iS0hVmzPw7sHnsWFSwRKuAmAQVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 23:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1b:9f:a0:01:8e:2d:29:df:58:69:34:6f:59:2e:b8:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=892d21566ccfc3bb079ec5854b044ab809804157
Validity
Not Before: Jul 1 03:01:13 2026 GMT
Not After : Jul 2 03:01:13 2026 GMT
Subject: CN=74d3a2918da5b81ac0c69b850d4b2f701911a01f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:79:4f:81:c4:ca:55:e4:c7:71:31:37:29:a3:
55:31:04:44:b7:38:d6:98:f6:c3:e1:3c:4a:93:98:
82:64:d0:5e:93:53:b2:b8:2b:21:2e:b2:86:34:f0:
99:1a:ef:0e:79:aa:37:71:a1:3a:6e:19:15:c5:2c:
be:c6:15:0c:4f:96:ed:59:42:e6:db:81:5c:36:6b:
62:60:96:9d:bb:99:b0:02:57:58:f6:e4:93:1c:81:
59:db:5e:c4:5f:1e:99:42:7e:83:74:fe:ca:b3:30:
b6:82:1a:a7:f6:bc:2c:ae:e2:29:03:8f:a9:5c:29:
6b:bd:c7:55:46:03:01:9b:54:ba:83:84:dd:f6:13:
40:33:de:ac:e2:d6:e1:1c:f8:a7:52:57:70:d9:81:
5c:a7:d3:bb:c4:bf:18:1b:de:34:09:2c:c2:dc:9a:
e4:e6:fb:b8:f6:a1:1c:93:ff:eb:69:cb:88:81:13:
59:9e:32:b5:9f:ae:01:fd:92:4a:b0:30:44:19:b2:
66:20:f6:6d:1f:6f:15:6c:7f:dd:bb:46:e7:c9:b4:
eb:52:94:86:85:99:d5:57:81:3c:c7:1a:03:11:29:
64:65:3b:48:e8:25:f7:7a:51:c6:bf:aa:5a:59:da:
55:e0:f1:6b:80:74:49:ad:c8:f0:f0:b9:b1:d9:0a:
9a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:D3:A2:91:8D:A5:B8:1A:C0:C6:9B:85:0D:4B:2F:70:19:11:A0:1F
X509v3 Authority Key Identifier:
keyid:89:2D:21:56:6C:CF:C3:BB:07:9E:C5:85:4B:04:4A:B8:09:80:41:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iS0hVmzPw7sHnsWFSwRKuAmAQVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/iS0hVmzPw7sHnsWFSwRKuAmAQVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/iS0hVmzPw7sHnsWFSwRKuAmAQVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:64:a3:bc:fa:b7:e1:cd:09:f0:b7:f8:c0:0e:ae:49:52:50:
00:94:d7:ab:8b:13:46:98:89:12:a7:0a:26:fe:6a:4d:d8:eb:
94:87:c1:8e:dd:29:b4:d2:ec:3d:e2:55:81:53:49:10:19:8d:
f0:44:0f:d6:57:1b:8e:22:e2:99:78:f9:1c:7d:c9:68:0b:10:
93:65:c3:50:64:1b:be:64:0d:91:90:09:f8:4c:af:89:77:32:
96:ae:dd:b7:8d:3c:80:e2:93:a2:02:01:62:28:b0:7d:9b:a4:
50:96:05:1f:e5:b4:23:08:93:a4:70:01:4a:fe:4a:3e:ac:6b:
dc:9b:6a:37:41:2f:0e:44:ee:5f:03:bc:58:c2:98:60:6d:3f:
a0:06:97:15:a5:7a:6e:d2:36:fb:31:9f:ea:40:4c:84:96:cf:
6e:95:8e:15:b2:43:1a:bd:ab:7a:0f:5d:ff:94:cc:85:9f:a2:
e5:b4:33:48:cf:b8:7c:75:a4:5d:06:7e:09:e3:9c:4c:ed:29:
f6:33:e8:0f:e5:e7:bf:ea:fa:a2:40:2e:30:3a:84:b7:24:06:
a8:9f:ee:03:2b:0b:6d:5a:d6:5c:ea:b9:9b:99:b9:86:6f:ea:
22:3d:a1:40:90:af:52:1a:d7:da:70:b7:34:d8:4e:a6:67:db:
27:0a:c7:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 06:28:26 2026 by rpki-client