Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.mft
File: IwNA0n5LJPkSSXcyLts2lC4tFgw.mft (raw, json)
Hash identifier: p9B/5s+EeNJLoPc1MjHa5OZOu6SRmkXEvjFmEoE9+rk=
Subject key identifier: AF:A7:73:41:F4:0C:C4:F7:43:4D:12:A9:17:3F:93:E1:F8:2E:2F:BB
Authority key identifier: 23:03:40:D2:7E:4B:24:F9:12:49:77:32:2E:DB:36:94:2E:2D:16:0C
Certificate issuer: /CN=230340d27e4b24f9124977322edb36942e2d160c
Certificate serial: 019FA1BB6E15D3C2854AED75C19D26C18F08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.mft
Manifest number: 19D3
Signing time: Mon 27 Jul 2026 04:00:42 +0000
Manifest this update: Mon 27 Jul 2026 04:00:42 +0000
Manifest next update: Tue 28 Jul 2026 04:00:42 +0000
Files and hashes: 1: 4Yk_IaIMOFlSvQlmWzU3D7V9Ww0.roa (hash: 95l63lLqTUI0fetfFavGHFZZGMfnTIwSEKulFFxrxpc=)
2: IwNA0n5LJPkSSXcyLts2lC4tFgw.crl (hash: nzs6oDwkOx17q2tECVH3pBRQ6lw4oZfpB5DpmBUMVhA=)
3: XuKWpFnXaJB0gtal7fqUS1fMEg8.roa (hash: fZ0gDaNy7iCopngCMQx3WGFJao02SoThGdAJ/JuVVp4=)
4: YkLn8tz3hbcMIIBgz23I2SUwFt0.roa (hash: 7e3Ahg7cLmv6KRLYOyXJchFQCZ5bapXqbWjili8cMRY=)
5: i2ip3ClaBDk8K-xOqpebdwt1qZk.roa (hash: n9wEOC6qCVKNONqpdVLm6uWq7MOOkRaDBcCMVsbbO38=)
6: ogEjhX2zW6tgVtz_pOmSPCqvyBk.roa (hash: dF9i4unUQNdYa+sgOQav50pelR9XCvdYshIMM/dzsiM=)
7: sD8yyKxgqD60hgzKcX-gPGQxeh4.roa (hash: //5uDqVbcxyKWzTpZS8757S/2Ry/Wbbw/UQbM8VY0LM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:bb:6e:15:d3:c2:85:4a:ed:75:c1:9d:26:c1:8f:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=230340d27e4b24f9124977322edb36942e2d160c
Validity
Not Before: Jul 27 04:00:42 2026 GMT
Not After : Jul 28 04:00:42 2026 GMT
Subject: CN=afa77341f40cc4f7434d12a9173f93e1f82e2fbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:82:21:4d:0f:73:43:10:2f:c2:fc:ce:9c:68:
05:74:68:4a:b1:dc:76:29:7e:d2:d5:a4:61:ef:d0:
d5:a3:a6:b6:fe:55:f6:6a:69:0a:e6:52:1c:9d:0d:
48:46:0b:e7:c3:2a:29:b2:db:4a:f8:54:9c:07:1b:
06:ff:45:d5:03:3c:be:ef:0e:ae:ab:6f:2e:51:9e:
c3:1a:30:f9:0e:8b:ce:c4:72:f1:e7:dc:fa:6e:b0:
e0:dc:b4:18:2c:c4:85:2b:37:1c:32:7e:27:dc:a5:
77:40:e3:44:23:a4:02:d0:4c:e3:b9:d5:db:cc:16:
7b:a7:9a:3d:1c:cc:e0:19:2b:7b:2b:0d:d2:9f:04:
2b:79:56:d7:15:a1:4d:aa:5a:d9:cf:5e:86:b1:66:
2c:42:64:58:0e:2b:94:35:f7:c2:c0:7a:03:de:a0:
46:96:8b:e1:2c:2d:59:f1:56:74:dd:c9:f4:b1:47:
7a:62:65:0c:11:c3:08:cf:46:25:bf:cd:99:79:1e:
59:a5:42:38:b4:14:13:05:5f:a7:a1:9c:41:eb:73:
2d:b7:c6:2b:e1:8a:e5:2c:3a:62:57:b7:6f:1d:c4:
4a:aa:da:0a:9c:b3:df:ed:db:e6:3d:11:13:b2:98:
86:8a:39:5a:2f:27:9f:ed:2e:f3:f3:1e:69:e1:eb:
2a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:A7:73:41:F4:0C:C4:F7:43:4D:12:A9:17:3F:93:E1:F8:2E:2F:BB
X509v3 Authority Key Identifier:
keyid:23:03:40:D2:7E:4B:24:F9:12:49:77:32:2E:DB:36:94:2E:2D:16:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:41:36:5c:bb:7e:1b:c0:ee:29:4b:ee:68:eb:88:4b:26:42:
f5:3b:74:a8:75:a0:c1:e8:4e:1f:88:c1:63:69:a3:31:bc:d9:
55:f4:f6:1b:dd:d0:9b:03:82:ed:5d:2e:8a:61:b3:36:52:c8:
1a:4c:aa:82:06:c8:a1:c5:53:d3:ae:20:c1:55:e3:07:23:cb:
de:fb:c4:d1:52:1a:23:37:b8:88:9d:fa:52:cb:fb:e6:70:f0:
67:ac:5a:79:5c:eb:5e:47:a8:26:d7:f3:f6:47:f3:58:d3:88:
69:3d:66:21:96:6c:5c:f6:68:b9:46:9a:67:67:92:52:7d:b7:
9a:d2:38:5a:2e:ef:b7:87:88:50:99:d3:c7:7e:e8:0f:a8:bc:
b8:4c:11:a5:51:3b:16:ab:f1:95:7f:53:0b:16:9a:65:27:1a:
4e:35:30:3c:22:aa:bc:be:65:e6:ad:22:01:18:9f:8a:9d:8b:
44:94:64:d2:2f:fe:6d:08:34:01:bc:51:8d:b1:4e:dc:ff:92:
bf:7f:45:1e:14:dc:ab:78:3c:7e:93:d2:16:5b:0e:5e:5b:db:
8a:a9:3c:c2:0d:66:3f:2e:27:11:20:01:6a:a6:5b:9d:03:fe:
2c:99:3f:7e:d4:ce:13:36:fd:66:68:28:d8:3e:b2:1a:89:eb:
f0:91:1a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:25:52 2026 by rpki-client