Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/b41519-46fc-44da-a9af-e3f4bbcbbbd7/1/IDG8f3G7DRqFZv1GBCFFB8DUcRs.mft
File: IDG8f3G7DRqFZv1GBCFFB8DUcRs.mft (raw, json)
Hash identifier: OqXYUubmhz4UBaowFKacM5WMPmIZ8m8a63UKFzkKlok=
Subject key identifier: FF:AF:75:1E:F1:52:D8:79:AB:82:7A:3F:3C:D4:37:8F:34:40:F0:AC
Authority key identifier: 20:31:BC:7F:71:BB:0D:1A:85:66:FD:46:04:21:45:07:C0:D4:71:1B
Certificate issuer: /CN=2031bc7f71bb0d1a8566fd4604214507c0d4711b
Certificate serial: 019FA3AA599180CD55892907534D628C21A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IDG8f3G7DRqFZv1GBCFFB8DUcRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/b41519-46fc-44da-a9af-e3f4bbcbbbd7/1/IDG8f3G7DRqFZv1GBCFFB8DUcRs.mft
Manifest number: 19CF
Signing time: Mon 27 Jul 2026 13:01:17 +0000
Manifest this update: Mon 27 Jul 2026 13:01:17 +0000
Manifest next update: Tue 28 Jul 2026 13:01:17 +0000
Files and hashes: 1: IDG8f3G7DRqFZv1GBCFFB8DUcRs.crl (hash: m1v0MnHULrlkNuhyY9OGGaGVhh2GjH2tibXMEvJC8z0=)
2: vlgEFLVkNwRtCEx7sTNLVkmYtlg.roa (hash: +zusmP86eI1NBAkkNvI1Gm9fd+tKP132pkvvT3BYBhc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/b41519-46fc-44da-a9af-e3f4bbcbbbd7/1/IDG8f3G7DRqFZv1GBCFFB8DUcRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/b41519-46fc-44da-a9af-e3f4bbcbbbd7/1/IDG8f3G7DRqFZv1GBCFFB8DUcRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/IDG8f3G7DRqFZv1GBCFFB8DUcRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:aa:59:91:80:cd:55:89:29:07:53:4d:62:8c:21:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2031bc7f71bb0d1a8566fd4604214507c0d4711b
Validity
Not Before: Jul 27 13:01:17 2026 GMT
Not After : Jul 28 13:01:17 2026 GMT
Subject: CN=ffaf751ef152d879ab827a3f3cd4378f3440f0ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:1b:40:18:cd:90:89:c3:a4:3c:2a:37:c0:5f:
48:4b:87:b9:97:4c:72:24:d3:13:7b:f7:58:07:c4:
27:4c:54:10:dd:a2:18:ff:b1:b5:0a:ee:bd:78:b6:
c6:23:cb:7b:af:88:67:07:f0:18:31:29:91:63:15:
8e:a8:77:4a:74:54:ef:26:c9:f7:99:0f:e7:bc:8f:
ef:7e:c6:b0:d1:f0:9e:01:d6:e4:d9:04:99:c4:ab:
3b:1c:54:95:3f:57:27:2b:01:5e:fe:79:5b:c2:7f:
35:77:08:82:50:fb:e3:5d:da:d3:7f:ff:be:59:ac:
fb:62:64:78:e6:c9:5f:a0:55:53:1c:05:eb:b8:e7:
b2:e8:c5:9e:e2:1a:94:84:56:bc:48:0b:83:2f:cd:
e5:b2:ae:48:67:a3:38:a3:1a:2d:3d:55:55:4f:21:
a3:18:f0:a5:a9:cd:c5:53:63:e3:48:74:6f:b3:b3:
2c:92:0b:78:6a:09:2e:71:84:d2:12:42:76:25:2d:
6f:a3:1d:f9:25:05:9b:f7:7a:de:15:7b:d7:04:03:
33:fc:dc:e2:fa:e4:c5:39:a5:92:d5:31:c3:ea:40:
6b:8f:f6:8e:d5:98:a1:85:9c:f4:eb:81:e0:08:80:
52:59:fb:6e:1b:f7:70:44:15:bc:83:bd:33:6d:12:
67:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:AF:75:1E:F1:52:D8:79:AB:82:7A:3F:3C:D4:37:8F:34:40:F0:AC
X509v3 Authority Key Identifier:
keyid:20:31:BC:7F:71:BB:0D:1A:85:66:FD:46:04:21:45:07:C0:D4:71:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IDG8f3G7DRqFZv1GBCFFB8DUcRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b41519-46fc-44da-a9af-e3f4bbcbbbd7/1/IDG8f3G7DRqFZv1GBCFFB8DUcRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b41519-46fc-44da-a9af-e3f4bbcbbbd7/1/IDG8f3G7DRqFZv1GBCFFB8DUcRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:72:d5:2f:a0:25:e8:6e:0e:68:4a:37:37:90:b8:67:6a:c6:
bf:55:9e:f8:b1:5b:a5:4d:6a:2e:74:82:78:59:34:45:e6:32:
e5:b5:d1:cc:e9:3a:cf:af:93:6a:7d:82:73:75:8f:3e:c9:5a:
70:2b:cd:f5:8a:88:a2:80:38:29:16:4d:cb:74:01:f6:1f:f0:
ca:07:4b:11:4d:c8:b2:ea:5b:e8:46:62:2c:85:06:5c:8f:53:
0f:ad:a8:5e:b6:a1:c2:12:6f:4d:99:55:12:30:e3:f0:1c:4c:
e5:51:91:b1:c3:29:17:cb:64:4d:e8:da:cd:3b:98:6c:28:ce:
93:62:fa:80:aa:93:b3:72:13:ca:c7:b9:83:f5:22:e6:13:5b:
65:55:29:57:ed:6a:14:a2:41:db:be:30:70:ce:06:f1:12:15:
4c:6e:16:0a:64:60:27:c6:b4:39:c2:c5:0b:43:05:23:c6:de:
f6:dc:54:76:02:9f:40:db:04:2e:17:89:cd:53:13:a8:91:ce:
f5:b5:64:db:35:90:f6:8c:59:2f:0d:fe:e9:b8:59:9a:1a:88:
ad:d4:94:be:ee:3c:78:70:ac:49:75:70:56:9b:85:d2:37:21:
c5:d6:1b:d9:e4:31:7e:08:0a:5e:4e:46:11:a2:94:35:6e:9f:
f9:23:df:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 14:56:43 2026 by rpki-client