Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.mft
File: iBD8MZigq5lkeHfb5XJeBc7gE_A.mft (raw, json)
Hash identifier: MqTnFSC/gNollGG9eS9Vm+4mbjv1iQZXf8LMDg1K9HI=
Subject key identifier: 96:A7:39:BF:B6:CF:FB:FD:82:42:3F:0A:79:B9:86:58:C8:1A:41:C2
Authority key identifier: 88:10:FC:31:98:A0:AB:99:64:78:77:DB:E5:72:5E:05:CE:E0:13:F0
Certificate issuer: /CN=8810fc3198a0ab99647877dbe5725e05cee013f0
Certificate serial: 019F122EB8BAA4F62DCE9A501799EFD092C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBD8MZigq5lkeHfb5XJeBc7gE_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.mft
Manifest number: 11F7
Signing time: Mon 29 Jun 2026 07:01:19 +0000
Manifest this update: Mon 29 Jun 2026 07:01:19 +0000
Manifest next update: Tue 30 Jun 2026 07:01:19 +0000
Files and hashes: 1: iBD8MZigq5lkeHfb5XJeBc7gE_A.crl (hash: L9SB0frzJXktNFP6c0Y+9wZnkxpxhmLiRfeBZCqjKrM=)
2: xtriZj0E7B6zsRP9XIkIcFpnrqU.roa (hash: sr6Ahzw03XTlsg1PwbjbJZ0ftk/dptqXUly+PXrigJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/iBD8MZigq5lkeHfb5XJeBc7gE_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 07:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:2e:b8:ba:a4:f6:2d:ce:9a:50:17:99:ef:d0:92:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8810fc3198a0ab99647877dbe5725e05cee013f0
Validity
Not Before: Jun 29 07:01:19 2026 GMT
Not After : Jun 30 07:01:19 2026 GMT
Subject: CN=96a739bfb6cffbfd82423f0a79b98658c81a41c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c3:80:c9:02:7e:f5:7b:7c:13:ac:2f:1b:33:
a7:d1:66:a6:6a:f8:16:53:29:8f:48:31:82:c8:94:
0b:fd:da:03:0a:b0:bd:00:eb:37:d4:0e:92:3c:c1:
9f:43:34:93:83:43:9c:9a:49:f8:8e:7c:47:83:6a:
ea:6b:74:8d:79:ce:90:83:6d:4f:f4:d1:ad:15:e6:
57:d3:e4:63:06:81:03:06:a9:5d:4e:1d:f5:7e:10:
46:09:a4:07:9a:72:5e:36:b4:39:f7:98:f8:8a:d3:
a6:41:37:33:ad:e0:5e:83:69:ad:1d:64:7c:36:45:
1f:71:43:e3:fd:0c:43:d5:17:6e:a4:0c:78:fb:ae:
61:70:fd:38:3e:fc:2d:50:2e:45:3c:2c:77:6b:bc:
31:b5:46:1c:f9:a5:f7:a7:75:3f:02:7e:3c:94:61:
54:9d:72:85:ff:5d:57:5b:98:24:97:a0:2f:99:68:
79:42:da:b7:5a:b8:f8:51:2b:d9:83:73:29:11:6c:
94:4a:0d:b3:94:66:99:e6:5f:58:59:97:e6:83:b2:
32:c0:ce:8b:02:45:07:a3:f4:a7:0d:ee:2f:8a:44:
ea:1e:06:71:3b:0a:b0:b7:00:4d:e8:48:6c:16:6c:
23:45:0a:1b:2c:6c:4c:33:4a:0b:a9:cb:23:b1:98:
f5:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:A7:39:BF:B6:CF:FB:FD:82:42:3F:0A:79:B9:86:58:C8:1A:41:C2
X509v3 Authority Key Identifier:
keyid:88:10:FC:31:98:A0:AB:99:64:78:77:DB:E5:72:5E:05:CE:E0:13:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBD8MZigq5lkeHfb5XJeBc7gE_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:2d:eb:fb:81:fa:3d:cc:de:b2:f7:87:89:4d:6e:bf:fb:32:
96:80:9b:5d:6d:30:d9:6c:66:8a:05:f0:a3:d7:ea:73:1a:21:
54:f2:2d:51:06:cb:18:41:2d:49:75:7e:09:5d:85:54:ca:e5:
2d:a0:e5:56:9a:cb:f9:ff:c0:3c:07:17:a6:1a:5d:14:d5:60:
c7:b0:f8:27:fa:88:bd:94:c2:ea:0e:de:4e:cb:30:e0:d8:ab:
62:e3:8c:be:b3:92:85:82:1a:0d:bf:17:e9:a5:e9:ba:5d:ec:
71:ce:1e:52:11:3b:f8:dc:05:02:37:c9:4b:30:62:8a:f6:99:
d9:f4:15:33:f6:1e:c9:04:fa:e1:0c:65:6c:e7:37:01:cb:25:
40:33:36:a2:a4:23:97:8c:33:d4:46:51:22:07:a6:7d:64:15:
b4:06:63:1d:74:d0:08:c5:fc:df:34:08:28:ea:7a:1e:3d:bc:
99:99:6e:c3:95:c8:04:09:5a:66:45:53:96:18:ca:e0:03:6e:
73:03:c3:24:48:01:4b:7c:4d:70:e1:9c:63:92:f9:cd:ac:a7:
31:74:1c:b5:6c:15:a9:75:16:54:02:71:16:13:f0:2b:1c:c7:
1f:c3:fd:69:26:62:e5:81:20:c3:c7:d9:7d:85:61:69:62:96:
0c:fa:40:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 12:41:01 2026 by rpki-client