Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/8878d9-4f1c-426b-8a40-658120ae68e1/1/ICZNUaES0LwizqcxTLBs9aGuM-k.mft
File: ICZNUaES0LwizqcxTLBs9aGuM-k.mft (raw, json)
Hash identifier: lC/5SjxC6Eyf4Mcu/gykGNgMnx/zGOhhhmRik3P2HYE=
Subject key identifier: B6:2E:47:DE:B3:04:F9:5F:F1:D9:FC:91:A0:2A:EB:E1:6B:43:00:88
Authority key identifier: 20:26:4D:51:A1:12:D0:BC:22:CE:A7:31:4C:B0:6C:F5:A1:AE:33:E9
Certificate issuer: /CN=20264d51a112d0bc22cea7314cb06cf5a1ae33e9
Certificate serial: 019F9FCDC294C2BD6E68215D02CB71BED779
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ICZNUaES0LwizqcxTLBs9aGuM-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/8878d9-4f1c-426b-8a40-658120ae68e1/1/ICZNUaES0LwizqcxTLBs9aGuM-k.mft
Manifest number: 1961
Signing time: Sun 26 Jul 2026 19:01:29 +0000
Manifest this update: Sun 26 Jul 2026 19:01:29 +0000
Manifest next update: Mon 27 Jul 2026 19:01:29 +0000
Files and hashes: 1: ICZNUaES0LwizqcxTLBs9aGuM-k.crl (hash: MuCw/vcAQ4HHYNZrGqb9EbwXsIVWKq1+vSmYX/kleJw=)
2: TlCjshw48MI80zaCqZRdp10HXmU.roa (hash: IUaeg0F1EJZvlebFMhAdUjihSrKer72rVZfI7a/WmYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/8878d9-4f1c-426b-8a40-658120ae68e1/1/ICZNUaES0LwizqcxTLBs9aGuM-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/8878d9-4f1c-426b-8a40-658120ae68e1/1/ICZNUaES0LwizqcxTLBs9aGuM-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/ICZNUaES0LwizqcxTLBs9aGuM-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:cd:c2:94:c2:bd:6e:68:21:5d:02:cb:71:be:d7:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20264d51a112d0bc22cea7314cb06cf5a1ae33e9
Validity
Not Before: Jul 26 19:01:29 2026 GMT
Not After : Jul 27 19:01:29 2026 GMT
Subject: CN=b62e47deb304f95ff1d9fc91a02aebe16b430088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a0:ac:4a:a0:a1:52:66:d3:9a:94:86:3c:94:
42:0f:13:db:f7:65:c6:fc:30:dc:5d:34:58:f7:cc:
4a:75:b6:2c:c7:f3:b0:29:a4:a6:39:c5:c1:03:33:
ac:d2:8e:61:32:75:72:84:cd:3f:1e:10:9e:2c:9a:
b0:87:e9:e4:d1:03:92:28:44:80:83:fa:fc:c5:39:
ac:77:78:91:59:9e:f5:8b:db:07:2d:e1:7a:47:9a:
13:4f:3b:e5:61:3a:9c:94:78:14:96:03:82:c2:0f:
61:b0:02:59:96:5c:6b:0f:fa:26:c1:0f:61:2d:85:
e7:08:55:6a:cf:c4:e3:72:8d:8c:ff:9c:72:31:23:
07:e4:28:2a:fb:be:af:be:16:7e:7f:ef:b5:5a:71:
0e:cb:d3:05:4d:8e:36:f5:8d:a9:6b:10:1a:c1:53:
f0:93:46:0c:49:96:70:6b:7b:e0:d8:83:50:84:64:
21:15:8b:96:56:0f:31:66:12:aa:22:47:41:40:f4:
96:97:41:fd:52:67:db:40:44:d5:b5:fa:81:8f:e2:
4f:cc:70:ad:95:0c:a0:c5:ea:03:c1:3f:f4:47:c0:
47:81:97:4e:03:79:74:5d:60:dc:25:84:05:ce:5e:
0b:6e:ef:de:6a:4c:5d:8d:d6:63:52:7a:6f:12:6c:
d2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:2E:47:DE:B3:04:F9:5F:F1:D9:FC:91:A0:2A:EB:E1:6B:43:00:88
X509v3 Authority Key Identifier:
keyid:20:26:4D:51:A1:12:D0:BC:22:CE:A7:31:4C:B0:6C:F5:A1:AE:33:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ICZNUaES0LwizqcxTLBs9aGuM-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/8878d9-4f1c-426b-8a40-658120ae68e1/1/ICZNUaES0LwizqcxTLBs9aGuM-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/8878d9-4f1c-426b-8a40-658120ae68e1/1/ICZNUaES0LwizqcxTLBs9aGuM-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:e9:bd:d5:4f:5e:dd:3f:2c:9d:77:b7:11:b8:6f:85:0a:ed:
44:5e:21:f6:1c:3c:ba:23:56:ad:7c:69:43:fd:67:98:fe:2a:
0a:3d:c8:72:6f:e7:ae:d4:d3:3b:44:dd:d7:b2:d0:c7:c7:91:
00:50:37:fb:d4:76:ba:52:e6:c9:03:67:d2:2a:ca:b1:db:60:
f3:16:74:15:d8:57:5f:3f:e9:a7:47:0c:b4:62:98:9a:95:38:
99:f8:04:c6:9f:59:57:6e:fd:6e:e5:25:d3:97:6c:96:89:f3:
c0:a5:8d:c3:55:e2:10:42:3e:00:ce:5c:b6:93:a8:66:85:8f:
66:51:f7:a5:70:32:2d:18:c9:48:c7:b1:4a:f6:f7:3b:e9:85:
5b:ee:5c:ca:5e:6c:db:9c:78:43:7a:21:b1:08:6d:37:2f:00:
35:47:1c:3c:fd:83:e0:14:25:d1:e4:12:ce:b7:5a:3e:ee:14:
a0:da:dc:9b:62:37:12:ef:96:5a:e1:fc:c8:ae:4e:8a:be:1d:
51:20:f2:ad:71:b0:9e:ea:60:4d:73:a4:d4:ed:48:83:b4:d4:
81:61:0b:5b:cc:c9:77:ed:51:da:af:d2:11:fc:6b:a8:de:26:
7d:74:88:b8:46:cb:8d:1a:92:eb:9b:d0:2a:e1:ef:86:99:04:
d1:56:02:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 00:08:26 2026 by rpki-client