Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/281dfb-3293-4bab-ba22-1becb5dcd7aa/1/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.mft
File: Iw0xH8GUY_3TCt7MkXtfAph0G0Q.mft (raw, json)
Hash identifier: fwDg1J9nEHko1wIPUWYpFaWn+aRFtTyNP5MP0TbuXb4=
Subject key identifier: C0:30:3F:C4:48:E0:7E:17:66:70:25:CB:C7:88:B3:76:09:87:67:BF
Authority key identifier: 23:0D:31:1F:C1:94:63:FD:D3:0A:DE:CC:91:7B:5F:02:98:74:1B:44
Certificate issuer: /CN=230d311fc19463fdd30adecc917b5f0298741b44
Certificate serial: 019F85D72E5C8594EBE1EC2EA2089DD44FCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/281dfb-3293-4bab-ba22-1becb5dcd7aa/1/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.mft
Manifest number: 13DD
Signing time: Tue 21 Jul 2026 18:01:39 +0000
Manifest this update: Tue 21 Jul 2026 18:01:39 +0000
Manifest next update: Wed 22 Jul 2026 18:01:39 +0000
Files and hashes: 1: 3kj2IZUmhg4c3fn_vDNshjS1bYM.roa (hash: F1j+Rw7AK0w/RfaxR+vC5zwL/WwgyQ05RgO+QAvekpY=)
2: Iw0xH8GUY_3TCt7MkXtfAph0G0Q.crl (hash: aBjJko8j9CWKsDUxtlGvtltf12TxW+Wq+dIrkawgzts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/281dfb-3293-4bab-ba22-1becb5dcd7aa/1/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/281dfb-3293-4bab-ba22-1becb5dcd7aa/1/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:d7:2e:5c:85:94:eb:e1:ec:2e:a2:08:9d:d4:4f:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=230d311fc19463fdd30adecc917b5f0298741b44
Validity
Not Before: Jul 21 18:01:39 2026 GMT
Not After : Jul 22 18:01:39 2026 GMT
Subject: CN=c0303fc448e07e17667025cbc788b376098767bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:42:05:46:8a:f2:2a:94:ae:3c:a8:3c:cc:da:
75:37:c2:1c:86:d4:83:56:04:8c:fa:f0:d6:bd:82:
70:9d:2c:b5:db:84:f3:d2:8b:12:d2:c9:da:5e:72:
7b:5f:ed:cb:91:0d:de:1d:5e:67:1e:df:39:1a:1e:
c4:3b:73:60:12:53:a5:69:4b:0f:7b:4f:a7:97:2a:
76:74:ad:79:01:24:62:df:4f:15:f3:e2:5c:15:46:
e3:7d:72:96:49:15:95:cc:b5:8a:eb:cd:33:9c:ae:
51:37:93:32:cb:cc:51:e8:88:83:0b:fc:32:8e:ee:
e1:29:2a:15:98:a2:79:60:e3:e8:cb:43:2f:3d:99:
a8:72:98:6c:ac:51:b8:d8:9e:0d:c6:dd:e6:5c:71:
54:ff:3c:bf:e3:a8:2b:10:f2:a7:7b:55:16:2d:6b:
7e:9d:97:33:57:72:81:b4:cd:86:a1:d5:4c:2f:da:
44:59:cf:3f:9a:45:8d:9d:00:7f:4c:c8:bf:3e:16:
be:a6:41:6d:4b:3a:f5:4c:a7:e9:ea:34:66:f3:25:
f9:6b:ca:f8:27:d0:27:f7:dd:a1:98:d8:03:2b:70:
6d:91:47:82:a6:a0:0c:1f:32:bd:63:e1:9f:d0:67:
af:c8:cf:f7:1b:79:46:09:40:34:9f:eb:91:d0:f1:
e5:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:30:3F:C4:48:E0:7E:17:66:70:25:CB:C7:88:B3:76:09:87:67:BF
X509v3 Authority Key Identifier:
keyid:23:0D:31:1F:C1:94:63:FD:D3:0A:DE:CC:91:7B:5F:02:98:74:1B:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/281dfb-3293-4bab-ba22-1becb5dcd7aa/1/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/281dfb-3293-4bab-ba22-1becb5dcd7aa/1/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:d5:8c:62:be:0a:4c:34:dc:8d:8e:f5:88:84:65:0f:9e:26:
73:c3:59:5b:0a:a7:00:99:82:22:ba:8e:db:fc:13:18:04:6e:
2e:3d:20:a0:14:bd:9d:26:73:92:65:60:2f:f5:ae:36:ba:02:
c8:31:04:8a:86:0d:b9:d5:6a:f3:c3:5d:d8:76:50:ef:8d:d7:
04:ca:fc:44:29:f0:68:86:71:e9:29:82:99:da:9a:90:d2:c1:
c8:01:6f:32:4e:6b:7f:c0:90:ff:40:38:31:0d:5c:c8:c8:e5:
64:5a:8a:0d:7a:fb:94:e5:17:a0:24:21:a5:c2:ad:25:06:72:
73:3f:cc:7e:61:06:18:9c:10:f1:ab:d3:c5:18:01:d1:98:3f:
eb:da:4c:b8:ae:5d:13:76:21:0e:93:dc:a2:29:95:92:f1:ea:
8d:ad:b0:dd:fd:72:a9:f6:11:3d:b9:29:16:c7:67:aa:a6:02:
c8:a9:13:f5:ba:84:63:8b:aa:3b:15:b0:25:b4:78:42:86:07:
a9:16:4c:0c:15:b6:b1:0a:00:48:1b:10:4c:1e:c4:14:06:6b:
19:eb:c2:1d:76:5d:57:2c:62:92:7b:f8:af:a9:46:d2:9b:c2:
e5:a9:17:2d:76:8a:8d:a2:92:eb:b6:c4:f6:92:d5:f8:83:25:
1d:5f:36:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:05:16 2026 by rpki-client