Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/dcd15e-eb12-4631-b220-0226d45a7532/1/IYHFs8t-6x5JWCFVoZGOxhL5WsY.mft
File: IYHFs8t-6x5JWCFVoZGOxhL5WsY.mft (raw, json)
Hash identifier: MYvD0OYGi34YCtYtohdPH7U0J7xRtzGjXcdLaDsSWBQ=
Subject key identifier: 34:74:D3:74:6D:CA:DB:45:B2:89:E0:82:25:1D:EC:1E:97:97:89:22
Authority key identifier: 21:81:C5:B3:CB:7E:EB:1E:49:58:21:55:A1:91:8E:C6:12:F9:5A:C6
Certificate issuer: /CN=2181c5b3cb7eeb1e49582155a1918ec612f95ac6
Certificate serial: 019F9F5F8DDE0DE8C2BE633434E561991065
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYHFs8t-6x5JWCFVoZGOxhL5WsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/dcd15e-eb12-4631-b220-0226d45a7532/1/IYHFs8t-6x5JWCFVoZGOxhL5WsY.mft
Manifest number: 035B
Signing time: Sun 26 Jul 2026 17:01:07 +0000
Manifest this update: Sun 26 Jul 2026 17:01:07 +0000
Manifest next update: Mon 27 Jul 2026 17:01:07 +0000
Files and hashes: 1: IYHFs8t-6x5JWCFVoZGOxhL5WsY.crl (hash: QzdNCty9wkkcQrnGw1Z9gG/nYDroPOwl28BKMnLEA5U=)
2: TJBNoqDJuDXadUHCaSsBuATOWto.roa (hash: gJS3wY/oZsaAW7+2UEGNOUq9JEb/eTtIedw6FlGOizU=)
3: l8MRszfSe4qexC-9JyLTk4XoVgk.roa (hash: 9EV7cJFTRMkileOYn43dLtuQWD4NKNC4K7WAWUwzDvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/dcd15e-eb12-4631-b220-0226d45a7532/1/IYHFs8t-6x5JWCFVoZGOxhL5WsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/dcd15e-eb12-4631-b220-0226d45a7532/1/IYHFs8t-6x5JWCFVoZGOxhL5WsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYHFs8t-6x5JWCFVoZGOxhL5WsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:5f:8d:de:0d:e8:c2:be:63:34:34:e5:61:99:10:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2181c5b3cb7eeb1e49582155a1918ec612f95ac6
Validity
Not Before: Jul 26 17:01:07 2026 GMT
Not After : Jul 27 17:01:07 2026 GMT
Subject: CN=3474d3746dcadb45b289e082251dec1e97978922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:0f:8a:d2:a2:51:cb:76:55:67:12:02:67:64:
36:42:f6:47:77:a6:a3:13:d5:47:88:5f:03:e7:3a:
a1:e6:56:76:d9:c6:ea:8d:0b:62:8b:74:57:72:39:
aa:07:19:7e:b0:46:91:da:09:86:c4:6e:f8:20:77:
63:8e:bd:96:16:ae:be:88:7a:b0:8b:a8:b6:7e:a7:
69:e5:0b:0d:6e:d7:b5:5a:e9:61:6a:59:d2:4a:55:
2e:57:86:ac:3e:33:fb:50:71:62:f0:87:db:5e:6d:
b2:0f:b7:95:ab:9e:8c:b7:d6:2c:6e:fc:02:c9:9f:
f5:a3:5b:3c:45:cf:7d:79:a0:a5:ce:44:1a:cb:bc:
ae:14:83:47:d1:fa:b9:1d:8c:45:fb:1b:62:0b:b7:
47:ab:f2:ec:b3:16:30:ab:44:af:49:46:a2:db:35:
30:2e:b7:8b:d9:c5:37:47:8f:83:e9:72:b3:59:d5:
42:43:13:ef:d4:5e:1d:f4:f5:f9:0a:b0:6d:f4:00:
ed:df:c2:5a:cc:77:80:1b:08:d6:e8:4d:b9:30:e1:
0c:fb:7e:f4:b3:17:29:d6:de:00:a3:f1:99:f5:42:
f1:3f:44:34:7e:e1:cf:61:01:c3:08:1a:a9:89:f6:
ad:50:ef:4c:cb:44:92:76:0d:84:bc:ec:88:a0:26:
e9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:74:D3:74:6D:CA:DB:45:B2:89:E0:82:25:1D:EC:1E:97:97:89:22
X509v3 Authority Key Identifier:
keyid:21:81:C5:B3:CB:7E:EB:1E:49:58:21:55:A1:91:8E:C6:12:F9:5A:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYHFs8t-6x5JWCFVoZGOxhL5WsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dcd15e-eb12-4631-b220-0226d45a7532/1/IYHFs8t-6x5JWCFVoZGOxhL5WsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dcd15e-eb12-4631-b220-0226d45a7532/1/IYHFs8t-6x5JWCFVoZGOxhL5WsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:2a:8a:66:8f:39:90:bc:0c:72:72:8f:ec:d1:95:fb:94:ee:
8f:e2:9c:58:a7:d5:da:31:bf:6e:f5:43:17:31:61:ad:2d:37:
81:23:fd:d3:4a:7d:3b:36:38:a7:6c:60:8b:2d:92:31:dd:1a:
d7:f5:4e:a1:95:c5:d4:90:dc:69:52:0a:50:4c:e6:64:7b:52:
f0:a7:75:43:1c:5f:15:63:2f:82:1d:ce:a9:83:35:5b:c9:f7:
be:04:6e:92:07:14:b6:23:ff:f0:82:c6:85:21:c1:72:9e:f3:
e8:09:d9:69:ea:1d:f1:b5:d9:38:23:eb:aa:ed:61:78:17:57:
6b:7a:cb:1a:12:fd:3d:0b:9e:bb:30:40:cc:f3:c0:a0:ce:cf:
e4:78:2d:5b:4b:5c:9f:69:81:ef:43:d4:dc:47:f4:b5:e2:d3:
04:7e:84:41:87:6c:f3:d6:a7:6d:96:2b:13:c5:0a:fc:83:bc:
35:5d:7f:64:61:cd:04:32:cc:ea:1c:95:76:98:ff:5e:3e:71:
33:9f:be:fe:8e:ce:70:83:86:72:3b:e5:f3:30:42:0f:4b:e3:
03:95:ec:35:14:a0:25:e8:16:26:3a:e3:39:3c:00:53:fe:d7:
4c:1c:66:47:b2:ac:06:fc:0e:dd:34:5b:4e:3a:1d:9f:7a:f8:
d2:3d:61:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 20:33:16 2026 by rpki-client