Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.mft
File: ihZhi3H_yA4cP0HtDfyJq16WP9I.mft (raw, json)
Hash identifier: zFcXBxaMtDTcU4AQDR6yXY9jRk45to6e1QxwbG0UpUw=
Subject key identifier: 97:40:A1:33:93:BD:E1:AC:CB:D4:C3:34:BC:34:CA:5A:2A:65:70:34
Authority key identifier: 8A:16:61:8B:71:FF:C8:0E:1C:3F:41:ED:0D:FC:89:AB:5E:96:3F:D2
Certificate issuer: /CN=8a16618b71ffc80e1c3f41ed0dfc89ab5e963fd2
Certificate serial: 019F860D475DE167704286636318B1C0FF36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ihZhi3H_yA4cP0HtDfyJq16WP9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.mft
Manifest number: 19C7
Signing time: Tue 21 Jul 2026 19:00:44 +0000
Manifest this update: Tue 21 Jul 2026 19:00:44 +0000
Manifest next update: Wed 22 Jul 2026 19:00:44 +0000
Files and hashes: 1: SheiKMejj2UlfePnEJK4YM6UYGQ.roa (hash: Ll9jhdHvmhGlynW15LRcU3rlqzasSbGuWZW11z3vQs0=)
2: auDg02aDw-Ng4UMnzRMAZPV_78A.roa (hash: A2MCkRQZ/VKnTqKHBJZ1hnIKYJGRR8Cd5N45/0b9lic=)
3: ihZhi3H_yA4cP0HtDfyJq16WP9I.crl (hash: P/z9LZNJDTzoHtDUA9dWIWMFnLNS5nlt4Jx5d0rlsvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ihZhi3H_yA4cP0HtDfyJq16WP9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:0d:47:5d:e1:67:70:42:86:63:63:18:b1:c0:ff:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a16618b71ffc80e1c3f41ed0dfc89ab5e963fd2
Validity
Not Before: Jul 21 19:00:44 2026 GMT
Not After : Jul 22 19:00:44 2026 GMT
Subject: CN=9740a13393bde1accbd4c334bc34ca5a2a657034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:dd:61:85:a7:78:8b:0f:6c:9d:60:db:a4:0c:
e1:aa:05:c8:60:f7:d2:df:26:f6:2d:3d:a7:10:8e:
1d:1f:f8:2c:da:6f:7a:39:85:11:7f:4f:c8:cd:b8:
3a:3d:09:71:6f:da:9a:01:77:2e:ac:f2:3f:15:02:
93:03:9a:9c:09:30:6a:df:3d:32:68:0c:c4:b2:64:
ed:42:68:1c:57:04:f6:8c:6e:b9:7f:f0:c2:13:b9:
cc:8c:0d:54:77:06:80:37:07:b1:a2:50:52:e9:68:
ad:89:94:83:29:76:8b:d9:d9:01:6b:cc:49:52:42:
7e:2f:42:72:09:84:cb:93:ff:77:9b:56:89:02:46:
8e:c2:b6:bc:a9:c7:3b:ec:50:b9:62:3f:30:cb:7b:
a8:48:4e:8d:3a:02:54:04:9e:98:a8:18:11:b6:4b:
7f:a1:55:c9:8f:9e:ed:df:08:bc:df:d5:a3:7c:35:
ec:5c:db:a5:4e:bf:bc:9a:af:c9:f5:6f:ac:ae:11:
f2:d2:b9:40:ab:96:33:b7:e6:72:74:3b:0d:e5:8d:
97:a5:83:28:df:94:47:bd:b9:f2:21:e4:ca:c5:6a:
f1:f9:86:e8:83:6b:04:1c:f1:5d:ac:9c:f8:86:ba:
a7:c9:86:9d:c4:10:2c:3d:de:ba:38:c1:54:80:f4:
90:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:40:A1:33:93:BD:E1:AC:CB:D4:C3:34:BC:34:CA:5A:2A:65:70:34
X509v3 Authority Key Identifier:
keyid:8A:16:61:8B:71:FF:C8:0E:1C:3F:41:ED:0D:FC:89:AB:5E:96:3F:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ihZhi3H_yA4cP0HtDfyJq16WP9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:d0:6b:fb:87:5e:8c:a3:1e:e2:7d:d2:f1:81:8c:84:06:20:
ec:91:71:fc:07:49:44:ec:b0:af:d4:8b:da:6f:82:3e:4e:34:
82:f5:c0:f9:9b:ad:54:13:32:6a:bc:9f:56:ae:35:a7:4e:42:
a6:40:3e:58:cc:af:91:62:d0:46:67:4e:76:f2:81:70:fa:6d:
b5:59:f3:0a:4c:ce:87:11:60:a4:47:33:fb:04:0d:f8:5f:89:
a3:b0:6a:01:04:e6:8a:ef:2d:e2:56:af:08:1e:8f:41:a0:87:
24:cc:25:50:91:5a:ac:dd:4c:03:17:f2:5a:e1:5b:26:83:a6:
a5:cc:9e:76:19:df:f9:92:40:a9:25:18:8a:d2:06:70:30:05:
2a:94:48:5b:a8:71:7c:e5:2b:c1:af:e7:2d:0c:74:e5:f5:fc:
af:00:e4:43:6a:c2:08:e7:2e:de:0e:37:89:97:65:b4:31:6d:
48:e3:b4:0f:56:b0:43:03:2b:8c:de:e4:c2:ea:6b:c6:c0:18:
b6:88:6d:b6:7f:97:c8:8d:8b:d2:5d:53:de:57:d4:a0:b6:d4:
a2:0e:59:ee:80:97:2e:2f:71:27:7f:9a:d2:66:2c:e3:db:84:
5b:b0:33:de:6f:34:b3:2c:99:7f:8c:53:43:9b:55:b3:5c:49:
5c:74:67:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:13:47 2026 by rpki-client