Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/I67pTQ__bGx1KmlC_6lirjfH5rY.mft
File: I67pTQ__bGx1KmlC_6lirjfH5rY.mft (raw, json)
Hash identifier: Yh3jdUrvanNbkq/Hc/W/C/DCA4nUHOfN0jXMPqEk75c=
Subject key identifier: F9:41:ED:CA:52:4B:E8:DD:63:AE:06:0F:B9:76:0C:2D:F2:EC:AF:72
Authority key identifier: 23:AE:E9:4D:0F:FF:6C:6C:75:2A:69:42:FF:A9:62:AE:37:C7:E6:B6
Certificate issuer: /CN=23aee94d0fff6c6c752a6942ffa962ae37c7e6b6
Certificate serial: 019FA14DDB1DCDAD59DC4D99A47930502F3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I67pTQ__bGx1KmlC_6lirjfH5rY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/I67pTQ__bGx1KmlC_6lirjfH5rY.mft
Manifest number: 19D1
Signing time: Mon 27 Jul 2026 02:01:01 +0000
Manifest this update: Mon 27 Jul 2026 02:01:01 +0000
Manifest next update: Tue 28 Jul 2026 02:01:01 +0000
Files and hashes: 1: I67pTQ__bGx1KmlC_6lirjfH5rY.crl (hash: 5Kc1iA85psZz63vEErEL93emBS5WmibD56xPj6Rdv1c=)
2: Yf6ZWqUXXhcxyz3yHShQ-wPMSrs.roa (hash: Mgnv3OuUKOPzy7mBsU09wit3ti136EdMHMxaYU6rvTU=)
3: wP20WFZup3bISfc_Az9m_KnK__k.roa (hash: 8g/UdUihVktN9azZ2xN449i/gKlFKKRPLjoY2fK8Miw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/I67pTQ__bGx1KmlC_6lirjfH5rY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/I67pTQ__bGx1KmlC_6lirjfH5rY.mft
rsync://rpki.ripe.net/repository/DEFAULT/I67pTQ__bGx1KmlC_6lirjfH5rY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:4d:db:1d:cd:ad:59:dc:4d:99:a4:79:30:50:2f:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23aee94d0fff6c6c752a6942ffa962ae37c7e6b6
Validity
Not Before: Jul 27 02:01:01 2026 GMT
Not After : Jul 28 02:01:01 2026 GMT
Subject: CN=f941edca524be8dd63ae060fb9760c2df2ecaf72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:44:bc:b5:4c:97:02:5e:f1:0d:98:9c:3c:32:
a2:6c:e2:33:db:fd:8e:28:ef:9d:65:ca:86:7a:e6:
35:00:7b:84:99:19:dc:30:e3:9e:e3:b9:46:80:6e:
b2:45:aa:12:8e:0c:96:c2:8f:67:65:37:67:16:e7:
29:ca:d5:09:4c:20:c6:b9:33:cb:e0:85:6a:e6:18:
57:74:76:64:ee:eb:cd:2a:66:a3:df:61:f1:2d:be:
db:8e:f7:ba:7a:fb:12:f6:d5:58:22:f5:3b:41:f6:
e5:8c:eb:9d:e7:2f:e8:d6:eb:a6:07:75:ff:6f:1d:
8d:12:45:e2:c4:59:1d:72:55:37:7c:6f:56:9e:c5:
e2:ae:6d:5f:e9:7f:d7:f1:39:1f:6e:56:43:a6:38:
07:e8:65:cf:fe:a5:e8:95:99:f8:3f:da:28:e1:59:
bc:b7:ad:db:40:c5:bf:60:c6:53:9e:5f:e0:eb:07:
eb:97:43:9e:1c:9d:b6:b9:4b:df:fa:e1:11:be:4a:
09:8b:42:5c:11:f2:32:f6:94:d8:d3:d2:17:49:16:
1f:6c:22:5e:0f:16:c1:8f:1f:8e:40:3f:09:82:67:
ca:25:b4:4c:eb:f8:23:87:63:e6:f5:f0:2e:9a:b7:
ad:a1:e9:5a:c7:29:2b:8a:55:f1:f2:95:d7:c1:f4:
13:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:41:ED:CA:52:4B:E8:DD:63:AE:06:0F:B9:76:0C:2D:F2:EC:AF:72
X509v3 Authority Key Identifier:
keyid:23:AE:E9:4D:0F:FF:6C:6C:75:2A:69:42:FF:A9:62:AE:37:C7:E6:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I67pTQ__bGx1KmlC_6lirjfH5rY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/I67pTQ__bGx1KmlC_6lirjfH5rY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/I67pTQ__bGx1KmlC_6lirjfH5rY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:a3:4c:66:5d:10:18:77:98:73:f9:17:13:9f:10:ff:ba:b4:
5e:e6:2d:18:76:29:d6:05:9b:ac:99:4c:4c:95:b6:07:e6:71:
eb:14:4b:89:b3:ee:74:0e:97:09:39:03:e2:f1:b3:01:2f:29:
83:c7:a4:f5:d3:4f:9b:3c:39:80:5c:2e:91:4d:e5:98:f1:57:
2f:24:c1:7a:ef:23:46:03:d5:3b:bc:83:72:df:6b:3d:20:fd:
12:ea:10:10:59:b3:2a:5c:cb:d9:d6:a8:66:82:d4:9a:dd:d9:
30:cc:60:1b:d3:b1:9d:c8:ac:40:f3:46:48:91:8a:38:f9:e7:
bc:93:2d:1a:7a:96:4e:bb:69:66:8f:d5:51:3d:c7:56:52:a0:
40:59:83:4e:52:ef:f4:2b:72:11:68:cc:86:b2:7a:12:ab:ec:
19:50:92:cb:e3:eb:05:93:c0:e0:4c:7d:ba:20:34:26:bf:05:
db:b4:ba:e4:af:ef:55:93:61:42:94:98:56:bc:50:fe:cf:a7:
e0:48:0e:ca:a1:9d:b7:43:2c:bc:ed:83:c4:8a:2d:10:e4:3b:
3c:2a:b1:d4:0d:49:a5:a6:6a:93:10:c7:bb:4f:83:da:7f:a0:
97:b5:90:c6:7b:7e:ae:14:3f:02:d7:02:72:9f:94:4c:0b:a2:
4f:34:ad:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:08:49 2026 by rpki-client