Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/feb15e-de7c-40a7-86d4-969d2539d0ca/1/IK7ciyobvW03BV7ADo5g9FiOEwU.mft
File: IK7ciyobvW03BV7ADo5g9FiOEwU.mft (raw, json)
Hash identifier: CoSo8AhLRXsaJJlcxDQz42efrzqM5T6ShjKEQMWkdFQ=
Subject key identifier: F2:83:05:13:23:2A:C3:CE:8D:8A:58:29:70:C4:04:D6:E5:77:9D:F3
Authority key identifier: 20:AE:DC:8B:2A:1B:BD:6D:37:05:5E:C0:0E:8E:60:F4:58:8E:13:05
Certificate issuer: /CN=20aedc8b2a1bbd6d37055ec00e8e60f4588e1305
Certificate serial: 019F0F2E16C730BD97BE53438CC96121878F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IK7ciyobvW03BV7ADo5g9FiOEwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/feb15e-de7c-40a7-86d4-969d2539d0ca/1/IK7ciyobvW03BV7ADo5g9FiOEwU.mft
Manifest number: 1984
Signing time: Sun 28 Jun 2026 17:01:46 +0000
Manifest this update: Sun 28 Jun 2026 17:01:46 +0000
Manifest next update: Mon 29 Jun 2026 17:01:46 +0000
Files and hashes: 1: IK7ciyobvW03BV7ADo5g9FiOEwU.crl (hash: gtH47ZFWB44ArawPS+Z+l6aKVqjBIB++M0odOpeepD8=)
2: mIJkdI_D_OLqojcSa_oOxsMYHXI.roa (hash: /rw37thuWBvovhA/vpu0eqLvxv8XNv0W36vkyYoUMlU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/feb15e-de7c-40a7-86d4-969d2539d0ca/1/IK7ciyobvW03BV7ADo5g9FiOEwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/feb15e-de7c-40a7-86d4-969d2539d0ca/1/IK7ciyobvW03BV7ADo5g9FiOEwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IK7ciyobvW03BV7ADo5g9FiOEwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Jun 2026 12:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:0f:2e:16:c7:30:bd:97:be:53:43:8c:c9:61:21:87:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20aedc8b2a1bbd6d37055ec00e8e60f4588e1305
Validity
Not Before: Jun 28 17:01:46 2026 GMT
Not After : Jun 29 17:01:46 2026 GMT
Subject: CN=f2830513232ac3ce8d8a582970c404d6e5779df3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:dc:ca:9a:6c:33:2d:8e:e1:af:48:6e:81:0a:
6b:24:53:15:43:d7:2f:3c:50:38:8f:9f:95:e4:2e:
4c:0d:28:73:12:0b:4b:02:2a:7d:b8:37:fa:6c:64:
b8:a3:ce:56:fc:2a:86:8c:63:3d:2b:8f:76:a4:a9:
f7:56:9c:e0:c3:f6:e1:76:d8:4b:f9:9d:ce:00:b3:
7b:c7:0b:57:c0:ac:e0:17:84:06:0c:4f:d6:8a:5a:
a2:13:53:7d:33:5e:55:bc:9f:00:97:04:f7:33:e7:
c1:db:a0:dd:bd:4b:40:93:78:41:8b:d0:07:a1:07:
77:00:3b:cb:92:af:23:df:78:a2:5d:64:a5:5d:dc:
67:52:17:1a:14:67:f5:fd:c3:84:71:72:2a:1e:89:
76:56:5f:2e:93:d7:e0:20:5a:d7:62:79:e9:c3:09:
cb:64:af:a6:95:19:51:a3:ae:fd:70:90:63:59:1f:
7d:c7:65:dc:14:49:05:7a:d5:7d:af:f5:61:bf:d7:
c5:19:12:01:7a:4c:0c:b1:fc:63:b3:30:a7:e0:fb:
8f:78:84:eb:7c:fa:a0:0a:97:54:3b:32:5a:cc:77:
78:e2:d1:3d:85:20:d5:39:0d:ac:43:30:73:5e:f2:
c9:7b:67:ba:88:50:2e:4a:96:b6:8a:6e:aa:8b:17:
f9:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:83:05:13:23:2A:C3:CE:8D:8A:58:29:70:C4:04:D6:E5:77:9D:F3
X509v3 Authority Key Identifier:
keyid:20:AE:DC:8B:2A:1B:BD:6D:37:05:5E:C0:0E:8E:60:F4:58:8E:13:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IK7ciyobvW03BV7ADo5g9FiOEwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/feb15e-de7c-40a7-86d4-969d2539d0ca/1/IK7ciyobvW03BV7ADo5g9FiOEwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/feb15e-de7c-40a7-86d4-969d2539d0ca/1/IK7ciyobvW03BV7ADo5g9FiOEwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:10:bb:f5:9f:31:0b:76:12:6b:47:d1:bc:0c:cd:60:02:fb:
e0:4a:63:fc:cd:22:06:d0:32:3e:b4:cb:a7:fb:be:ad:d3:91:
e9:81:e2:17:60:8b:26:da:76:b4:ad:45:86:ed:38:82:66:3c:
66:d4:a5:16:81:a4:78:35:2e:25:14:de:9c:49:0f:db:50:b4:
fc:bf:e8:7c:7e:f1:a4:ac:3c:bd:2d:12:e7:41:1d:92:12:4b:
65:9a:c3:de:1b:23:3d:b6:dc:57:a0:7d:0f:37:48:a5:41:c0:
c6:af:46:f4:0f:91:ef:57:34:be:b8:0d:71:67:d8:09:03:b4:
40:a4:ca:e5:ff:c1:05:f6:9e:4f:1a:1c:62:5e:62:14:72:bb:
46:f3:74:eb:09:50:3b:22:28:d9:ba:4f:e6:8d:08:40:9d:6d:
5e:8b:2c:b4:f5:61:41:64:2b:ff:f5:af:e0:34:a3:a4:a3:77:
c7:be:3d:72:d1:f6:a1:6d:19:0c:ed:3f:c0:a8:68:2f:0f:7c:
7d:a6:d0:80:87:ed:a1:32:d9:de:2a:b7:97:7f:b4:70:f6:ba:
84:8d:77:d4:ae:70:44:2e:17:90:4f:94:5a:6e:4e:91:e4:ae:
3e:13:4d:5f:e3:75:40:32:82:75:d5:1c:e2:7d:93:ab:cb:f1:
4c:ed:53:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 19:59:05 2026 by rpki-client