
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.mft
File: INyR5mZJTQ3FaiuB0imr1u41-Ew.mft (raw, json)
Hash identifier: GYQun24wrWv6A/Q3EGwp7fmWGuXffJozmfqnGg9kaSs=
Subject key identifier: BB:91:ED:78:58:B2:92:25:E8:19:1F:CB:2C:CD:DD:9F:22:47:72:8D
Authority key identifier: 20:DC:91:E6:66:49:4D:0D:C5:6A:2B:81:D2:29:AB:D6:EE:35:F8:4C
Certificate issuer: /CN=20dc91e666494d0dc56a2b81d229abd6ee35f84c
Certificate serial: 019F10E554B9380375F1D6991B4A71C9E7EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/INyR5mZJTQ3FaiuB0imr1u41-Ew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.mft
Manifest number: 1980
Signing time: Mon 29 Jun 2026 01:01:32 +0000
Manifest this update: Mon 29 Jun 2026 01:01:32 +0000
Manifest next update: Tue 30 Jun 2026 01:01:32 +0000
Files and hashes: 1: INyR5mZJTQ3FaiuB0imr1u41-Ew.crl (hash: PUNS7KFrUkzuawbw9K2IpLZ9cYQgJwSZ4f08rYQVUqU=)
2: V8NlnKjUgS7bj4rUkCz5LctnTTY.roa (hash: 2V4IKo8nS+06Kfv+fwmatbojuyWYf1XN4kaAl/BcTuo=)
3: oEH5CL4Krryfh-iShKBtkq07VfQ.asa (hash: GkycII0/qjAz0UiuBL6s5szZ1IchdfI3Luf3s69wkYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.mft
rsync://rpki.ripe.net/repository/DEFAULT/INyR5mZJTQ3FaiuB0imr1u41-Ew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 01:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:10:e5:54:b9:38:03:75:f1:d6:99:1b:4a:71:c9:e7:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20dc91e666494d0dc56a2b81d229abd6ee35f84c
Validity
Not Before: Jun 29 01:01:32 2026 GMT
Not After : Jun 30 01:01:32 2026 GMT
Subject: CN=bb91ed7858b29225e8191fcb2ccddd9f2247728d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:61:91:20:97:00:01:e9:35:6c:dc:e1:80:3e:
a3:f1:67:ce:0c:e0:b9:00:8b:f0:75:14:8a:9b:57:
79:f0:a5:a4:08:86:8c:d8:3e:1f:3f:cc:ef:f8:94:
42:b0:b3:a0:bf:ad:37:0d:a3:6f:a0:50:88:f4:21:
23:99:9f:e5:14:74:f6:77:05:79:24:91:a9:1e:77:
a1:62:e5:06:45:e7:a7:24:f1:64:66:12:52:20:6d:
36:59:49:74:ee:39:2a:ee:be:b8:de:3a:ec:a6:31:
08:16:11:5f:91:85:1b:e5:28:9e:c1:ac:8f:86:b4:
d6:33:c8:28:93:44:83:a9:b6:43:d4:08:f0:4b:df:
97:13:df:ce:2c:45:5f:ec:89:14:50:fe:19:9c:2c:
8f:f6:3c:f2:7e:7d:30:66:72:e6:bb:1a:9a:97:87:
c3:f6:42:ee:78:2e:22:ac:43:29:22:73:66:64:9a:
b8:1b:28:61:89:5d:44:82:c3:77:c5:28:63:b6:f4:
fb:8b:c7:67:a5:80:bd:4a:0a:09:93:6e:09:6a:eb:
60:26:aa:ab:f9:85:69:8e:cc:45:a1:9a:fa:af:6c:
7c:e5:2c:27:ab:a9:8f:4a:24:99:d5:8a:b8:ac:a7:
d2:c1:a8:5c:a2:5d:5e:d8:3f:b7:d9:03:54:7e:d7:
de:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:91:ED:78:58:B2:92:25:E8:19:1F:CB:2C:CD:DD:9F:22:47:72:8D
X509v3 Authority Key Identifier:
keyid:20:DC:91:E6:66:49:4D:0D:C5:6A:2B:81:D2:29:AB:D6:EE:35:F8:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INyR5mZJTQ3FaiuB0imr1u41-Ew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:0f:4c:56:a2:e1:05:c5:49:e9:99:47:b2:99:0a:69:23:06:
01:73:11:96:83:3c:96:75:0a:7c:ef:00:07:4d:9a:2a:ab:6a:
7b:d9:7a:8f:74:78:60:8d:1a:d5:94:ba:0c:14:bf:b5:4c:b4:
94:2b:63:d2:b4:0f:b0:ed:87:fc:6f:03:9b:f1:21:0c:1e:48:
13:f5:84:92:dc:bd:01:d8:65:01:e7:37:81:9e:7f:f6:d1:50:
ac:e9:11:5f:67:00:81:60:21:2d:a9:77:ea:4b:66:a2:05:72:
c5:31:a6:6e:4a:f6:de:1f:bf:63:18:c0:56:f1:14:29:04:98:
fa:16:37:43:84:ee:f9:05:e6:b9:f7:58:cd:0d:37:e7:8a:e5:
71:a4:b1:a7:db:4a:ff:d6:4d:82:73:43:4a:14:71:a3:34:ab:
c4:3a:45:88:c6:b5:35:1f:22:dc:7c:8e:39:09:9f:5f:82:6e:
ef:74:b7:12:77:e4:7c:24:ec:5c:3d:41:93:03:dd:45:a0:e1:
33:71:73:88:88:e3:fd:08:54:85:8e:8f:ca:f0:2f:07:94:33:
59:3f:6d:c8:af:85:c9:90:f2:cc:44:4e:27:7d:a4:71:74:1d:
f4:56:3c:7f:5f:08:81:79:38:2a:bb:b8:4d:f5:4e:b1:7b:32:
16:a9:a9:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:38:03 2026 by rpki-client