Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/7abdf1-252e-4b36-9270-a96102c83641/1/i7nJXujwyzU8HemSB5KjTTAkRhc.mft
File: i7nJXujwyzU8HemSB5KjTTAkRhc.mft (raw, json)
Hash identifier: zUHnf/pz4ouyJLooh6IveR4jo4SaTNJ1MwydIibfdVg=
Subject key identifier: DB:73:26:04:89:11:AC:BD:0B:08:87:E2:19:0C:63:09:FC:87:EF:8A
Authority key identifier: 8B:B9:C9:5E:E8:F0:CB:35:3C:1D:E9:92:07:92:A3:4D:30:24:46:17
Certificate issuer: /CN=8bb9c95ee8f0cb353c1de9920792a34d30244617
Certificate serial: 019FA0E0A39780BECD2A2BB72CBD85B495F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i7nJXujwyzU8HemSB5KjTTAkRhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/7abdf1-252e-4b36-9270-a96102c83641/1/i7nJXujwyzU8HemSB5KjTTAkRhc.mft
Manifest number: 48
Signing time: Mon 27 Jul 2026 00:01:44 +0000
Manifest this update: Mon 27 Jul 2026 00:01:44 +0000
Manifest next update: Tue 28 Jul 2026 00:01:44 +0000
Files and hashes: 1: 1vRpnwT5aWEFUf7idoYyMgEId1A.roa (hash: n5E9zBhbTEAOt3MyaXx4rOi5mO2COvIRgHqBDBLt80c=)
2: RTei5mA4S96lbi42Q3vTGKXxacg.asa (hash: ZSqSBARSF1NeaRnky6OQdESjN9MCG3xVCSNU88xKLhE=)
3: i7nJXujwyzU8HemSB5KjTTAkRhc.crl (hash: C5ASbJS1ndJy2PZYD3nyCdIzAXuwqshhTTX6dWU3pjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/7abdf1-252e-4b36-9270-a96102c83641/1/i7nJXujwyzU8HemSB5KjTTAkRhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/7abdf1-252e-4b36-9270-a96102c83641/1/i7nJXujwyzU8HemSB5KjTTAkRhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/i7nJXujwyzU8HemSB5KjTTAkRhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:e0:a3:97:80:be:cd:2a:2b:b7:2c:bd:85:b4:95:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bb9c95ee8f0cb353c1de9920792a34d30244617
Validity
Not Before: Jul 27 00:01:44 2026 GMT
Not After : Jul 28 00:01:44 2026 GMT
Subject: CN=db7326048911acbd0b0887e2190c6309fc87ef8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e3:29:11:47:9b:85:be:b3:7d:7c:8b:8d:f2:
51:e1:2f:a2:6d:82:44:6c:a3:35:f5:b6:4d:be:d2:
88:53:d7:0f:a5:16:3a:57:91:e7:8f:d4:c8:9d:7a:
f9:bd:55:e8:6b:86:8a:87:bb:54:7e:67:2a:4f:03:
ee:95:19:38:61:9b:71:c3:ef:8e:6a:63:e5:3a:44:
10:68:90:d6:e0:25:14:7f:1a:4b:87:6d:e9:88:f0:
77:4f:bc:35:60:dd:36:61:7b:02:5f:cb:66:94:0d:
12:ed:04:a2:c0:3c:2d:48:af:1e:4d:f5:e3:e7:1e:
b8:a6:6f:fa:81:36:7c:93:28:8e:0f:f0:dc:01:41:
f4:18:5f:0c:e6:66:22:fe:01:9e:71:2e:38:d7:e7:
d0:5c:da:b9:23:af:d6:03:de:a1:99:2b:15:39:c1:
1a:36:02:84:ab:84:73:36:0d:f9:bc:86:1c:82:20:
56:f9:72:a6:c4:3a:2b:63:c7:71:c6:1d:36:60:9f:
78:d5:ec:54:f0:c0:05:de:d7:07:e8:e9:7f:b5:c2:
7d:31:db:58:4d:0c:54:29:53:69:32:f7:fc:92:83:
f1:7b:ca:aa:c2:54:a0:ab:2f:ad:74:b0:ef:f9:6e:
51:0f:93:0f:8a:f4:da:1a:12:34:06:da:4d:9a:b6:
d5:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:73:26:04:89:11:AC:BD:0B:08:87:E2:19:0C:63:09:FC:87:EF:8A
X509v3 Authority Key Identifier:
keyid:8B:B9:C9:5E:E8:F0:CB:35:3C:1D:E9:92:07:92:A3:4D:30:24:46:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7nJXujwyzU8HemSB5KjTTAkRhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7abdf1-252e-4b36-9270-a96102c83641/1/i7nJXujwyzU8HemSB5KjTTAkRhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7abdf1-252e-4b36-9270-a96102c83641/1/i7nJXujwyzU8HemSB5KjTTAkRhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:42:21:36:49:f1:87:08:1c:5b:0c:22:46:67:53:a5:68:32:
86:9a:84:27:93:c3:23:31:f7:c7:af:c9:8b:b2:ef:1a:09:e3:
54:f3:38:f2:b3:68:98:10:f4:a6:5d:a8:0e:e9:27:5f:3e:fe:
0d:ab:b8:9d:f9:5a:08:57:54:45:1e:c2:24:3d:51:bb:81:15:
51:8e:5d:8a:d6:0b:fb:32:03:2d:e1:c1:e2:61:79:61:68:98:
fd:3e:96:fd:16:0d:c0:1b:25:09:f2:e9:d1:73:ea:0d:c4:53:
34:d6:62:80:0e:c3:22:0d:26:9e:94:b4:18:16:d3:7f:3c:ce:
fc:3f:f3:69:37:3d:ff:7d:d9:93:27:48:35:97:b9:4e:87:70:
13:58:af:77:6c:1a:bb:ef:19:3f:3a:49:45:d9:ec:82:e7:96:
86:e3:62:81:3c:bf:f6:52:c7:75:28:8d:f0:c0:32:c5:3a:f3:
f2:dc:09:b5:a3:d9:6b:6d:bb:b9:ba:2e:9a:c0:f6:db:ee:f9:
40:af:90:01:9c:d5:0b:15:1b:52:ff:db:0a:4e:4e:05:14:d2:
53:08:f0:5c:26:54:6a:91:6f:e4:f2:46:52:ec:6f:b9:68:dd:
4b:05:a9:b7:86:50:57:1a:96:8e:36:f5:ee:86:8a:90:0c:56:
b5:b1:8e:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+g4KOXgL7NKiu3LL2FtJXyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiYjljOTVlZThmMGNiMzUzYzFkZTk5MjA3OTJhMzRkMzAy
NDQ2MTcwHhcNMjYwNzI3MDAwMTQ0WhcNMjYwNzI4MDAwMTQ0WjAzMTEwLwYDVQQD
EyhkYjczMjYwNDg5MTFhY2JkMGIwODg3ZTIxOTBjNjMwOWZjODdlZjhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuMpEUebhb6zfXyLjfJR4S+ibYJE
bKM19bZNvtKIU9cPpRY6V5Hnj9TInXr5vVXoa4aKh7tUfmcqTwPulRk4YZtxw++O
amPlOkQQaJDW4CUUfxpLh23piPB3T7w1YN02YXsCX8tmlA0S7QSiwDwtSK8eTfXj
5x64pm/6gTZ8kyiOD/DcAUH0GF8M5mYi/gGecS441+fQXNq5I6/WA96hmSsVOcEa
NgKEq4RzNg35vIYcgiBW+XKmxDorY8dxxh02YJ941exU8MAF3tcH6Ol/tcJ9MdtY
TQxUKVNpMvf8koPxe8qqwlSgqy+tdLDv+W5RD5MPivTaGhI0BtpNmrbV5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNtzJgSJEay9CwiH4hkMYwn8h++KMB8GA1UdIwQY
MBaAFIu5yV7o8Ms1PB3pkgeSo00wJEYXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTduSlh1and5elU4SGVtU0I1S2pUVEFrUmhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC83YWJkZjEtMjUyZS00YjM2LTkyNzAt
YTk2MTAyYzgzNjQxLzEvaTduSlh1and5elU4SGVtU0I1S2pUVEFrUmhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC83YWJkZjEtMjUyZS00YjM2LTkyNzAtYTk2MTAyYzgzNjQx
LzEvaTduSlh1and5elU4SGVtU0I1S2pUVEFrUmhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN0IhNknx
hwgcWwwiRmdTpWgyhpqEJ5PDIzH3x6/Ji7LvGgnjVPM48rNomBD0pl2oDuknXz7+
Dau4nflaCFdURR7CJD1Ru4EVUY5ditYL+zIDLeHB4mF5YWiY/T6W/RYNwBslCfLp
0XPqDcRTNNZigA7DIg0mnpS0GBbTfzzO/D/zaTc9/33ZkydINZe5TodwE1ivd2wa
u+8ZPzpJRdnsgueWhuNigTy/9lLHdSiN8MAyxTrz8twJtaPZa227uboumsD22+75
QK+QAZzVCxUbUv/bCk5OBRTSUwjwXCZUapFv5PJGUuxvuWjdSwWpt4ZQVxqWjjb1
7oaKkAxWtbGOLw==
-----END CERTIFICATE-----
Generated at Mon Jul 27 08:22:26 2026 by rpki-client