Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/iC-gGQL06MNH8hFuRkXaGmtOCWI.mft
File: iC-gGQL06MNH8hFuRkXaGmtOCWI.mft (raw, json)
Hash identifier: 0xYcLJNCohDbR5CbTIYh8mXS7Ofw9Nc1AUDhtS4L/4c=
Subject key identifier: 9A:F7:B3:C3:37:4D:F8:67:43:01:F9:86:BD:7B:1E:DA:0B:E1:DD:F1
Authority key identifier: 88:2F:A0:19:02:F4:E8:C3:47:F2:11:6E:46:45:DA:1A:6B:4E:09:62
Certificate issuer: /CN=882fa01902f4e8c347f2116e4645da1a6b4e0962
Certificate serial: 019FA071FA60D3FAD8F4230FE86E1EF4CA31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iC-gGQL06MNH8hFuRkXaGmtOCWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/iC-gGQL06MNH8hFuRkXaGmtOCWI.mft
Manifest number: 178F
Signing time: Sun 26 Jul 2026 22:00:51 +0000
Manifest this update: Sun 26 Jul 2026 22:00:51 +0000
Manifest next update: Mon 27 Jul 2026 22:00:51 +0000
Files and hashes: 1: AUEKTW7dpfCyY0l-Yj0HVMTL-KY.roa (hash: V51b9cPnu3jOodKc2fR+o5Zo3IAU5wstih+aBJw2hf4=)
2: Nmm0wQ31BITD2tnmMqSugE8jni8.roa (hash: MBXWfJMMkKif3mZN2luokBtXQW1CjWwle34mvCaFiDo=)
3: SnVfUjSdhXy0ACcSIFHVlQJsS-g.roa (hash: 6PfYLGXYvREp7dIVRY1rgo9qMH5/efzBwsOvXM3p0hU=)
4: iC-gGQL06MNH8hFuRkXaGmtOCWI.crl (hash: IeLVDPyIH9aCAsCiWd8+XviwqiffQ4D55Lgd52kRzDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/iC-gGQL06MNH8hFuRkXaGmtOCWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/iC-gGQL06MNH8hFuRkXaGmtOCWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/iC-gGQL06MNH8hFuRkXaGmtOCWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 22:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:71:fa:60:d3:fa:d8:f4:23:0f:e8:6e:1e:f4:ca:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=882fa01902f4e8c347f2116e4645da1a6b4e0962
Validity
Not Before: Jul 26 22:00:51 2026 GMT
Not After : Jul 27 22:00:51 2026 GMT
Subject: CN=9af7b3c3374df8674301f986bd7b1eda0be1ddf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:86:d4:bc:40:f2:a7:1e:46:35:66:ec:fb:14:
d3:6b:9c:07:22:18:39:fd:a6:2e:13:c5:79:aa:5a:
68:5f:87:ac:78:3e:ad:dc:3a:98:d0:17:18:87:c5:
a3:55:b2:62:82:df:fc:9b:1f:84:0e:c1:49:81:34:
a5:3b:9f:fd:3e:c2:14:79:2c:ca:94:7d:38:94:b4:
b1:95:9b:d0:f8:b5:96:6b:d3:41:cb:1e:30:c9:39:
56:6e:d3:a5:58:c7:44:da:f6:5d:e0:ac:ef:8f:1a:
c3:e4:fe:08:60:22:19:55:be:95:aa:24:47:84:69:
5f:9d:b5:56:81:53:b3:d3:b6:85:ba:c3:c1:54:ab:
86:71:88:f4:8a:fd:60:ba:d3:08:14:fc:87:71:55:
94:77:e8:52:27:d1:96:23:70:c7:c8:a0:75:08:76:
93:20:b7:fe:92:8d:8d:16:a7:97:2b:21:59:66:91:
10:18:f9:53:e1:02:72:94:34:16:9e:bc:fe:de:0a:
ea:17:45:e1:2b:aa:1a:00:63:eb:20:c8:60:be:42:
12:7a:58:ca:5f:4f:a8:9f:b8:2b:b6:bf:88:82:e1:
e5:54:30:9c:05:9d:85:17:15:02:d6:00:50:5d:11:
20:4e:5e:e3:41:e1:e0:1f:4a:7b:96:c2:24:7e:e2:
70:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:F7:B3:C3:37:4D:F8:67:43:01:F9:86:BD:7B:1E:DA:0B:E1:DD:F1
X509v3 Authority Key Identifier:
keyid:88:2F:A0:19:02:F4:E8:C3:47:F2:11:6E:46:45:DA:1A:6B:4E:09:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iC-gGQL06MNH8hFuRkXaGmtOCWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/iC-gGQL06MNH8hFuRkXaGmtOCWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/iC-gGQL06MNH8hFuRkXaGmtOCWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:77:e0:3d:f5:7c:2d:da:03:c7:07:5f:f0:7e:d2:d9:05:df:
12:00:61:33:f2:1c:d7:bd:be:ad:74:94:e1:6f:25:41:b4:36:
e0:bd:2d:6e:e0:d3:01:81:1a:9d:59:68:b1:a4:47:53:2c:d2:
a3:d0:05:64:e4:ca:9a:ea:df:36:cc:cc:fc:d5:1f:cf:70:c1:
95:b8:b4:e0:e0:78:25:15:c2:d9:77:8c:09:7a:74:0e:3e:13:
01:65:cc:03:01:4e:ba:e1:fc:3e:5f:57:e2:99:74:ee:87:3c:
2c:5f:59:76:37:28:ac:ea:2e:c5:71:44:b3:20:e4:56:2a:4f:
5d:60:5f:ad:81:c4:22:ad:f6:2c:e8:df:48:6e:62:70:1b:16:
b8:55:68:b3:5d:18:a2:49:32:ea:a5:e8:10:5d:4c:5b:4e:0e:
a9:55:e7:73:51:7f:6c:c4:38:e6:3f:d0:59:c5:51:41:b9:85:
0b:7d:e0:96:4c:ba:21:b6:fe:19:54:b5:ed:4e:ed:c4:3a:73:
3b:3c:d9:8f:fd:ec:ee:56:5f:3e:59:0c:cd:b1:88:89:3d:55:
39:4e:2e:52:69:1f:cd:4d:3c:79:24:96:8f:3e:7e:2b:06:74:
23:06:ec:dd:77:1c:09:e3:07:54:e2:73:f8:4c:3e:f0:ab:a3:
1c:3c:a8:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:24:49 2026 by rpki-client