Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.mft
File: ifnCFo0tgt39inBjfUQBivMLH5c.mft (raw, json)
Hash identifier: flzmJj/3K4YKyPIomQYiWJndcfd5zJe3GMvE7osZXdE=
Subject key identifier: 1A:66:7D:3E:BE:18:47:C0:4E:A8:51:BB:77:32:25:24:AD:21:66:2E
Authority key identifier: 89:F9:C2:16:8D:2D:82:DD:FD:8A:70:63:7D:44:01:8A:F3:0B:1F:97
Certificate issuer: /CN=89f9c2168d2d82ddfd8a70637d44018af30b1f97
Certificate serial: 019F9F283D4F238E6B48ECD23D09B3A6768B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ifnCFo0tgt39inBjfUQBivMLH5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.mft
Manifest number: 0506
Signing time: Sun 26 Jul 2026 16:00:42 +0000
Manifest this update: Sun 26 Jul 2026 16:00:42 +0000
Manifest next update: Mon 27 Jul 2026 16:00:42 +0000
Files and hashes: 1: gBJFcoYbkBHMY5TM8IY4zHwd7l8.roa (hash: N41NaFkXMzlFGahMYjKRbrB7l7KmQbIsQ/36YmVvgpQ=)
2: ifnCFo0tgt39inBjfUQBivMLH5c.crl (hash: 6mZdwCsKY8ngydU/CJV48qJqWlSeb9ICSj1bjKSxpIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/ifnCFo0tgt39inBjfUQBivMLH5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:28:3d:4f:23:8e:6b:48:ec:d2:3d:09:b3:a6:76:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89f9c2168d2d82ddfd8a70637d44018af30b1f97
Validity
Not Before: Jul 26 16:00:42 2026 GMT
Not After : Jul 27 16:00:42 2026 GMT
Subject: CN=1a667d3ebe1847c04ea851bb77322524ad21662e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:db:50:69:3a:77:8b:71:c3:75:ce:c2:87:17:
23:23:81:4f:76:f3:dc:5c:cb:32:bc:98:af:b2:a7:
fd:e4:fc:66:33:9c:2c:b4:bd:f0:f5:86:9c:25:4a:
be:09:78:1a:4f:9a:3d:73:2d:16:36:44:7a:09:9f:
9e:24:9b:63:f1:d4:49:58:b2:f2:6b:19:dd:0e:51:
60:bc:c8:17:4b:3f:0e:1f:84:9b:ce:3a:59:8b:c9:
ac:65:07:cf:c4:f4:01:56:1c:2f:45:ed:f4:53:d5:
cf:dd:21:e3:1f:f2:fb:fd:8a:91:52:da:66:26:ae:
33:d2:4b:80:eb:e9:f1:f8:5e:b7:3d:35:04:5c:da:
ce:6b:68:e1:25:d4:bd:57:2f:68:9f:d6:f0:52:46:
3f:5a:4d:87:48:4c:26:9a:3d:c9:19:13:d8:89:3e:
7b:b0:bd:13:15:b2:2e:00:6b:21:b6:3d:93:22:1d:
82:43:7b:75:ae:47:f9:ee:7f:71:f4:8e:bb:51:f3:
da:0d:fa:70:18:67:c6:31:14:d1:df:b8:fd:2e:75:
93:db:35:73:6a:ec:cf:3f:33:f4:42:f2:6b:aa:cb:
ed:38:06:6f:11:8b:2a:99:4d:cf:c6:1e:57:a4:d7:
0b:06:3a:85:bc:2b:88:b2:fe:60:47:db:b0:5d:ec:
5d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:66:7D:3E:BE:18:47:C0:4E:A8:51:BB:77:32:25:24:AD:21:66:2E
X509v3 Authority Key Identifier:
keyid:89:F9:C2:16:8D:2D:82:DD:FD:8A:70:63:7D:44:01:8A:F3:0B:1F:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ifnCFo0tgt39inBjfUQBivMLH5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:06:96:c7:e4:6e:ee:5d:02:a1:d8:53:0e:ef:bf:4b:e6:83:
e4:3c:fd:c7:fa:06:cf:bb:f9:bf:61:97:75:01:c2:d9:b6:19:
8b:c0:27:e6:55:73:38:55:fc:65:d9:ad:3f:20:9d:9c:c0:55:
3b:fd:d6:d6:ba:3f:81:b6:fc:17:1f:4f:de:b5:d2:20:41:de:
e0:38:5f:34:d8:69:79:61:75:47:e5:52:3f:2e:15:a2:fe:81:
82:36:4a:00:26:9b:76:5a:e1:01:32:c6:16:bb:97:5f:c7:52:
eb:bd:53:69:b0:15:e9:c4:b1:f2:78:0e:e5:e6:00:42:ca:4f:
21:a5:31:02:ba:9e:53:49:30:30:d9:63:c4:a4:e4:86:9b:ca:
30:5f:65:99:16:6d:a1:b7:f4:fb:4f:3d:2e:99:c9:a5:49:0f:
43:9a:b1:c2:ba:b1:c5:4b:8c:9e:05:f3:3f:21:60:8d:ee:d1:
6b:8c:b3:53:03:bf:f1:97:09:d8:fb:93:05:25:c1:9b:29:b2:
6b:b6:d8:db:d1:d8:17:b5:3f:68:49:58:b1:1d:6c:ad:4b:68:
41:e7:a8:94:0c:07:52:f0:3a:a0:c6:fa:c6:dc:7b:34:25:9d:
52:a5:b6:83:8e:c4:10:49:f8:1f:34:17:3f:59:63:53:94:b5:
b1:56:34:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 00:00:44 2026 by rpki-client