Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/54af6c-dc5a-4316-9056-35e39964dfdc/1/iDg0C7z4K84GXO6zeMuqR7mjLN0.mft
File: iDg0C7z4K84GXO6zeMuqR7mjLN0.mft (raw, json)
Hash identifier: oxnWmQ7OMY2k8ijVfKosJBBgNhdnCP77FIXVZ0ygosU=
Subject key identifier: F8:AD:5E:3A:90:AF:C8:7F:E8:28:F2:FA:81:24:45:D2:A5:A4:74:5E
Authority key identifier: 88:38:34:0B:BC:F8:2B:CE:06:5C:EE:B3:78:CB:AA:47:B9:A3:2C:DD
Certificate issuer: /CN=8838340bbcf82bce065ceeb378cbaa47b9a32cdd
Certificate serial: 019FA3A9F69BE27448D7D5D92063CDD85DEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iDg0C7z4K84GXO6zeMuqR7mjLN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/54af6c-dc5a-4316-9056-35e39964dfdc/1/iDg0C7z4K84GXO6zeMuqR7mjLN0.mft
Manifest number: 021C
Signing time: Mon 27 Jul 2026 13:00:52 +0000
Manifest this update: Mon 27 Jul 2026 13:00:52 +0000
Manifest next update: Tue 28 Jul 2026 13:00:52 +0000
Files and hashes: 1: 82yqy0aGJzKzR4R_K7jhO-MXZ48.asa (hash: QLpjtYyVJWNod7Hjm1qgZ6D0o3OhLnBCKHSjT6fQXEI=)
2: iDg0C7z4K84GXO6zeMuqR7mjLN0.crl (hash: 5UHJ6tCSi4/o4sW8pKo/Gr4tLWpJLQ7jG+BIQBy/sj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/54af6c-dc5a-4316-9056-35e39964dfdc/1/iDg0C7z4K84GXO6zeMuqR7mjLN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/54af6c-dc5a-4316-9056-35e39964dfdc/1/iDg0C7z4K84GXO6zeMuqR7mjLN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/iDg0C7z4K84GXO6zeMuqR7mjLN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 13:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:a9:f6:9b:e2:74:48:d7:d5:d9:20:63:cd:d8:5d:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8838340bbcf82bce065ceeb378cbaa47b9a32cdd
Validity
Not Before: Jul 27 13:00:52 2026 GMT
Not After : Jul 28 13:00:52 2026 GMT
Subject: CN=f8ad5e3a90afc87fe828f2fa812445d2a5a4745e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:41:81:31:43:02:7e:57:81:35:db:6a:0c:f6:
74:a8:6d:39:a9:82:60:34:6b:46:a4:19:59:ec:79:
bb:c1:c5:fc:fa:5e:51:0e:cc:91:18:0d:ee:c0:04:
20:a9:35:13:64:b9:e1:7b:49:53:e5:c9:10:3a:7f:
7e:39:2e:8f:d1:a3:9a:9c:a9:ee:a8:15:5c:50:aa:
af:65:e2:84:7b:9f:62:63:47:bb:44:2f:b9:ea:68:
ce:11:f0:d1:6a:d5:12:b3:1e:76:af:75:22:ef:de:
b6:5f:ea:86:de:91:51:54:84:3f:69:d1:99:db:55:
12:13:11:43:b1:7c:8a:1a:e3:ff:63:15:06:93:a4:
c4:09:f3:6f:83:1a:f1:f4:44:83:39:80:9b:25:b6:
ac:57:92:1f:d6:f3:41:13:47:1f:fe:99:d6:b0:07:
ff:2d:09:45:f8:38:e6:16:12:69:1e:f6:27:5c:29:
a5:8e:f3:45:bf:2a:dc:80:30:6e:2f:a8:ce:05:9e:
a9:ee:57:46:2c:b7:78:77:4a:fe:1d:2f:94:7f:c7:
be:42:d7:48:d1:ac:54:d2:0b:97:81:34:82:de:8f:
1a:a4:93:a9:44:72:5d:d8:2f:11:ae:9a:96:4f:f8:
81:d6:8e:48:57:ab:f3:00:fa:e3:e3:a9:dc:ee:5b:
34:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:AD:5E:3A:90:AF:C8:7F:E8:28:F2:FA:81:24:45:D2:A5:A4:74:5E
X509v3 Authority Key Identifier:
keyid:88:38:34:0B:BC:F8:2B:CE:06:5C:EE:B3:78:CB:AA:47:B9:A3:2C:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iDg0C7z4K84GXO6zeMuqR7mjLN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/54af6c-dc5a-4316-9056-35e39964dfdc/1/iDg0C7z4K84GXO6zeMuqR7mjLN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/54af6c-dc5a-4316-9056-35e39964dfdc/1/iDg0C7z4K84GXO6zeMuqR7mjLN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:78:43:ab:99:eb:8f:30:c0:02:07:e9:25:ca:37:12:4d:40:
67:db:96:a5:4a:6e:56:ab:3b:eb:15:6f:27:65:49:e4:12:a8:
e3:c1:61:6f:5e:d7:84:95:75:8b:f0:52:2e:db:4e:bb:8e:5a:
36:fb:c0:84:26:89:7f:0c:a3:06:d7:35:cc:d9:98:65:1c:bd:
e7:b2:b9:e4:fa:ae:3d:db:b4:75:f8:09:40:d9:cc:8c:ce:56:
ea:7d:4c:1b:47:81:09:ca:ac:a6:48:0b:a9:6a:6b:f2:9d:90:
97:f6:40:53:e8:cc:e6:b5:21:cc:bb:7c:89:60:50:24:bf:cc:
9c:9b:57:64:e9:f2:1a:d8:a8:03:f8:2b:b4:0d:8e:a8:a8:a1:
89:ab:d7:1e:d8:e3:c1:1c:68:48:f6:5a:29:7e:d6:53:38:52:
c9:db:b2:04:12:61:74:dc:82:26:75:99:cd:7b:25:82:e1:8b:
af:7e:ca:03:37:39:e8:43:b4:5d:7a:49:be:05:46:ee:a0:98:
72:bc:2d:b4:b6:15:76:00:34:39:fe:1d:f9:3c:6a:dd:af:1d:
72:92:7a:ce:00:99:55:b6:27:60:a3:43:e2:b3:e8:d8:44:58:
72:bf:78:96:6c:61:14:66:7c:90:f8:63:d7:a5:fd:19:65:35:
26:ff:5f:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 20:43:32 2026 by rpki-client