Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft
File: iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft (raw, json)
Hash identifier: p8Ph+2ifzhOZrT/ACovGpgCG1YrBHjzp6ZR8jck2ZC0=
Subject key identifier: FD:10:F6:C4:79:F1:02:79:62:67:12:5A:55:DD:29:35:31:76:B4:5D
Authority key identifier: 88:FF:4E:E6:23:D8:FA:B7:3C:90:1D:0C:BD:C9:3A:32:1E:9C:CF:B7
Certificate issuer: /CN=88ff4ee623d8fab73c901d0cbdc93a321e9ccfb7
Certificate serial: 019F126593EE0DFF5ACE09E2E058AA8FD9C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft
Manifest number: 0D1F
Signing time: Mon 29 Jun 2026 08:01:14 +0000
Manifest this update: Mon 29 Jun 2026 08:01:14 +0000
Manifest next update: Tue 30 Jun 2026 08:01:14 +0000
Files and hashes: 1: WDCEfBOgZu0IS0tXVscqDchFouE.roa (hash: M77yLF1D375mORfB1s9NJJsYDZZdRI/2B/Q2R1Rr0oU=)
2: eHFFve7oB3P4jI8nEd4tmbXombs.roa (hash: 2jkRmBwjqx2G1TPqQBkiFukmoNh6yKO3uMYlkbOFlyk=)
3: iP9O5iPY-rc8kB0Mvck6Mh6cz7c.crl (hash: jOAo57pGoP4AXg1goIW+UWlUwHYnaNqxSB1jBOn7HZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:65:93:ee:0d:ff:5a:ce:09:e2:e0:58:aa:8f:d9:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88ff4ee623d8fab73c901d0cbdc93a321e9ccfb7
Validity
Not Before: Jun 29 08:01:14 2026 GMT
Not After : Jun 30 08:01:14 2026 GMT
Subject: CN=fd10f6c479f102796267125a55dd29353176b45d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:46:a0:ec:ac:37:d4:81:54:42:c1:54:a3:6e:
ca:57:52:f4:9d:36:44:48:0f:49:3e:a9:65:d3:c3:
f4:54:2a:5d:80:04:9f:c0:e7:a2:03:f9:25:59:1f:
3c:00:a0:b2:02:f1:ab:e8:88:04:07:d1:96:ff:88:
4e:e5:94:19:68:89:6c:42:87:71:7f:ba:6a:5b:15:
75:6f:0e:17:74:5b:96:d2:a0:bb:83:d4:65:81:6a:
40:68:d8:3b:40:59:39:d4:ab:8a:fc:42:ba:de:41:
20:6c:ee:5e:2c:3d:ad:08:8e:37:ad:06:f1:13:ca:
3c:b4:f7:eb:e0:be:3c:17:f2:95:b7:1f:a5:74:54:
d3:55:a8:aa:d3:73:56:2c:89:c0:58:c4:fb:ae:6f:
7d:65:fb:ec:43:93:c6:45:40:db:a0:95:4c:8d:c3:
65:63:6e:13:d7:1c:30:0f:d7:58:e2:6b:47:c0:85:
c5:54:33:55:a7:10:1b:3a:8d:63:20:66:c3:ea:ae:
1a:5d:f0:44:19:19:bf:d2:c3:3d:84:1c:b0:b7:85:
64:51:f7:32:03:61:ca:b2:b4:e7:eb:a8:41:b9:81:
dd:2d:56:3b:8d:63:bd:b7:9a:b9:ba:6e:44:16:2d:
27:c2:2f:52:5d:6b:87:16:a3:c7:f6:18:e7:6e:1a:
1f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:10:F6:C4:79:F1:02:79:62:67:12:5A:55:DD:29:35:31:76:B4:5D
X509v3 Authority Key Identifier:
keyid:88:FF:4E:E6:23:D8:FA:B7:3C:90:1D:0C:BD:C9:3A:32:1E:9C:CF:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:76:92:57:41:43:42:35:3b:6c:e3:74:33:84:ae:59:b8:49:
70:9c:36:82:6a:43:14:bd:2e:5d:4e:16:10:59:33:63:bb:c0:
f3:92:ac:23:49:17:d1:e7:b2:6f:c6:ed:78:d2:a5:ee:cd:65:
c4:d3:a7:f1:63:46:c3:75:0e:aa:af:ea:30:4c:4b:f9:5a:57:
09:5b:13:53:8a:06:88:c4:79:db:4c:c0:a7:45:7e:f5:6f:7d:
19:4b:70:34:18:1c:46:ab:7d:aa:f0:97:89:36:d7:93:ca:67:
72:26:4c:48:9e:d9:24:02:48:7d:40:af:1d:56:32:1c:d4:97:
0d:c4:6e:36:59:3c:ad:a8:8c:ad:bd:e6:1a:49:3a:92:9b:e7:
2d:1c:b4:5a:08:48:5a:7b:46:f5:2c:3e:96:a5:f0:84:be:cc:
3f:67:97:2e:b6:f1:bc:1c:34:de:46:c2:5f:83:74:38:02:e4:
af:a0:9e:15:3b:72:86:ad:05:01:b0:17:4f:0d:cf:ba:c0:97:
83:5f:3e:ff:02:49:d0:c9:43:99:cf:d9:f6:b4:84:9f:ae:0a:
6b:7f:bc:1f:7a:89:dd:af:d8:07:39:33:ec:d9:34:64:20:27:
46:75:ea:a2:27:2f:77:9a:ed:d1:20:eb:47:c5:74:8a:ac:f0:
93:b6:3d:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:36:06 2026 by rpki-client