Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/6efb44-012b-415f-8220-c6220e185694/1/IQdBCPDRRZtitsetsn1pNLoL56U.mft
File: IQdBCPDRRZtitsetsn1pNLoL56U.mft (raw, json)
Hash identifier: G0r0OuBwl5MFToYiJjEqAOth66B9p+NJnv5e21sU9dk=
Subject key identifier: 97:9E:66:7C:E6:D4:AD:CD:DF:31:9A:85:71:4D:33:0F:F9:55:67:14
Authority key identifier: 21:07:41:08:F0:D1:45:9B:62:B6:C7:AD:B2:7D:69:34:BA:0B:E7:A5
Certificate issuer: /CN=21074108f0d1459b62b6c7adb27d6934ba0be7a5
Certificate serial: 019FA0E06281964A8A1D478DE3A73499285D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQdBCPDRRZtitsetsn1pNLoL56U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/6efb44-012b-415f-8220-c6220e185694/1/IQdBCPDRRZtitsetsn1pNLoL56U.mft
Manifest number: 195C
Signing time: Mon 27 Jul 2026 00:01:27 +0000
Manifest this update: Mon 27 Jul 2026 00:01:27 +0000
Manifest next update: Tue 28 Jul 2026 00:01:27 +0000
Files and hashes: 1: 0EXx2Q4UxWWqfIXnYyjiTloPwI4.roa (hash: o/5NVwkVc5lQsd3OaM7KmbK/KOiJsouMCSYK61SrFmU=)
2: 4M3uPZpCb2lVRqxTc92AvFWW_fI.roa (hash: 4ESs/eZU99YDEDkrCtDsyLfNUsB2CSDDLwG2CV+Efqc=)
3: IQdBCPDRRZtitsetsn1pNLoL56U.crl (hash: EDyGDbhK/9FnEHjayhY0463cPHmQhBYDYF0OqCJoatQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/6efb44-012b-415f-8220-c6220e185694/1/IQdBCPDRRZtitsetsn1pNLoL56U.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/6efb44-012b-415f-8220-c6220e185694/1/IQdBCPDRRZtitsetsn1pNLoL56U.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQdBCPDRRZtitsetsn1pNLoL56U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 00:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:e0:62:81:96:4a:8a:1d:47:8d:e3:a7:34:99:28:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21074108f0d1459b62b6c7adb27d6934ba0be7a5
Validity
Not Before: Jul 27 00:01:27 2026 GMT
Not After : Jul 28 00:01:27 2026 GMT
Subject: CN=979e667ce6d4adcddf319a85714d330ff9556714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d7:88:e8:fb:2a:00:fe:0e:a5:98:8a:36:dc:
e3:fa:bf:93:96:f8:e9:cf:ce:c4:b2:46:b8:10:ca:
7a:c3:22:3c:6c:48:66:17:9d:c8:93:49:c8:56:0f:
8e:b6:5d:d0:7f:e7:ab:42:00:de:d8:41:fb:75:71:
b5:22:26:2b:40:5b:3f:a2:3d:da:21:6d:ac:79:a2:
c9:4d:54:bf:9b:70:c7:22:bb:a7:39:ac:21:5f:36:
98:09:36:67:4b:0b:53:2e:b7:2e:e1:99:60:7e:a2:
db:3c:b7:94:5f:52:a1:d8:cc:7f:24:a8:38:0b:c8:
33:44:f6:9d:03:9e:72:22:44:44:af:70:66:61:51:
d2:fa:76:8d:bf:33:7b:5d:13:30:81:4d:79:85:74:
66:b8:75:ca:a8:2f:b9:6f:74:24:15:21:21:a5:1c:
a2:04:dc:d0:1e:55:60:59:df:34:a8:40:a1:06:ab:
8c:8b:ea:49:aa:88:ee:15:99:94:87:74:0d:f5:ef:
01:74:13:9a:c3:c2:c9:c8:a3:be:99:3c:d9:eb:4a:
62:57:57:e2:76:87:97:6e:ad:66:8c:8a:f2:dd:c6:
1e:e5:cb:f0:08:8f:ec:68:81:ec:83:50:43:2d:e1:
14:75:89:55:be:8b:3a:ed:9b:76:e4:9f:86:f0:c7:
22:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:9E:66:7C:E6:D4:AD:CD:DF:31:9A:85:71:4D:33:0F:F9:55:67:14
X509v3 Authority Key Identifier:
keyid:21:07:41:08:F0:D1:45:9B:62:B6:C7:AD:B2:7D:69:34:BA:0B:E7:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQdBCPDRRZtitsetsn1pNLoL56U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/6efb44-012b-415f-8220-c6220e185694/1/IQdBCPDRRZtitsetsn1pNLoL56U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/6efb44-012b-415f-8220-c6220e185694/1/IQdBCPDRRZtitsetsn1pNLoL56U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:ef:6d:ea:d4:67:79:0a:2f:6c:67:8a:26:20:76:3c:40:6f:
fd:68:e5:ef:ba:03:76:f9:44:58:8d:c0:0d:bc:4b:f0:7d:b4:
f4:08:b0:90:6e:c0:fd:6e:b2:3a:e4:b7:11:e7:e0:7f:5f:d3:
0c:c7:63:77:e4:a9:3c:c9:a2:d6:26:9d:28:06:85:3e:47:d1:
c8:83:90:2f:27:0e:3a:90:a4:ae:ed:3c:ca:a2:ac:fd:bf:86:
ad:59:1c:2f:ba:99:c8:bc:ab:0d:4c:2b:51:45:0f:19:82:58:
04:b6:62:d2:ce:62:62:ac:ba:ac:ff:3f:ef:d8:b9:6e:67:da:
06:bc:ee:f3:58:6b:3b:8c:b2:f7:37:d2:6d:28:50:7b:83:ca:
5f:86:15:1d:12:31:e2:96:ed:50:fc:76:bc:b7:73:dd:e9:d7:
a7:14:c6:fe:81:c1:74:f7:11:be:fe:52:dd:ad:8f:8e:fa:13:
5e:3f:98:d0:61:a8:cf:7b:37:88:42:80:44:b7:e0:48:b0:1e:
09:d2:e5:76:4b:04:03:3c:f6:d6:c8:68:4c:ba:2f:7a:bc:e2:
11:fd:10:75:3b:c2:c7:f5:a6:76:61:10:ed:4f:59:f4:af:39:
51:fc:d6:1e:de:97:73:32:2d:9c:ca:8a:c0:0b:f0:39:df:3c:
5d:c3:0d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:07:36 2026 by rpki-client