Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.mft
File: iVVHgNslskPAotNhl5sTCn8Txg0.mft (raw, json)
Hash identifier: N5RfHrX5LAzOL7toWNoujycm1fm/Lce8BLgXog3iTig=
Subject key identifier: F4:89:9E:81:C6:14:49:64:F9:4A:9A:2A:EB:97:D7:A3:1D:2F:22:8C
Authority key identifier: 89:55:47:80:DB:25:B2:43:C0:A2:D3:61:97:9B:13:0A:7F:13:C6:0D
Certificate issuer: /CN=89554780db25b243c0a2d361979b130a7f13c60d
Certificate serial: 019FA33BC6C2DA8DBF1B32661C30C3820CF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iVVHgNslskPAotNhl5sTCn8Txg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.mft
Manifest number: 0EF9
Signing time: Mon 27 Jul 2026 11:00:31 +0000
Manifest this update: Mon 27 Jul 2026 11:00:31 +0000
Manifest next update: Tue 28 Jul 2026 11:00:31 +0000
Files and hashes: 1: 04FKSiNEBSVxxBYiPtE8VcsRvqM.roa (hash: iIsFB+u1yXou/MBTJQN92523XOZ49HIi4J+JzBjc0Vk=)
2: iVVHgNslskPAotNhl5sTCn8Txg0.crl (hash: FiPYyUZ4g9gnx28yhCPbizhmD8bVr9569R87DCSqzkM=)
3: yUZd6eY1ILFj_NVgWnntQzVJiGs.roa (hash: aYbs72JfiEw4WjwVxwNiVwxvegvGGWCTaf1wWunmceE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/iVVHgNslskPAotNhl5sTCn8Txg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 11:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:3b:c6:c2:da:8d:bf:1b:32:66:1c:30:c3:82:0c:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89554780db25b243c0a2d361979b130a7f13c60d
Validity
Not Before: Jul 27 11:00:31 2026 GMT
Not After : Jul 28 11:00:31 2026 GMT
Subject: CN=f4899e81c6144964f94a9a2aeb97d7a31d2f228c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d5:e3:ca:81:71:fd:26:cf:90:4c:42:d4:ea:
b8:8a:b0:1c:a3:74:2d:1f:73:be:58:10:aa:58:ea:
6b:30:f5:c5:4d:a1:01:94:52:50:65:69:4d:88:c9:
e5:12:d7:c9:a5:af:7f:c9:a9:58:94:de:f8:f2:39:
5e:44:ed:81:e2:46:69:26:a5:0a:09:af:8f:e2:c3:
79:4b:7d:de:95:d5:7d:02:2a:5a:89:bb:6c:83:c9:
26:ed:c0:6b:b1:47:f7:64:9d:d7:3a:9a:db:e4:8d:
60:61:a5:a3:bb:19:1b:8a:6b:01:c3:cc:0b:91:0e:
44:1a:f0:69:d8:02:d6:ae:97:76:5c:e5:e6:6a:da:
c9:e1:c5:29:35:a0:e3:57:87:fc:95:b8:13:c4:2c:
14:ae:fe:50:ff:38:d5:6f:59:bd:c8:0a:f0:32:ba:
a3:84:d5:72:4f:69:df:34:d1:ff:28:98:f1:79:09:
b7:de:76:53:ca:a8:1e:e6:83:f8:ed:23:fc:05:4d:
4a:87:f7:d2:eb:40:12:e8:80:8c:ae:e8:b1:2c:e1:
ec:04:21:1a:83:b1:11:45:16:3d:c5:84:78:4c:22:
5f:df:da:50:c6:b9:2b:97:0f:5a:f1:73:61:f9:77:
eb:88:91:bf:e1:f8:69:72:e3:60:c9:ba:37:57:ba:
74:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:89:9E:81:C6:14:49:64:F9:4A:9A:2A:EB:97:D7:A3:1D:2F:22:8C
X509v3 Authority Key Identifier:
keyid:89:55:47:80:DB:25:B2:43:C0:A2:D3:61:97:9B:13:0A:7F:13:C6:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iVVHgNslskPAotNhl5sTCn8Txg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:e2:16:e7:df:14:75:b0:2a:a9:a2:98:99:07:e9:24:f1:d9:
ec:cc:1c:c1:62:48:30:89:f1:c8:bf:ca:e0:5f:40:23:55:a3:
b1:fe:9b:6c:3a:9b:7f:6c:c0:78:b3:21:03:89:7d:b5:9f:f8:
e8:82:76:fb:00:fa:0e:11:70:2b:f9:ef:fa:a1:56:25:af:7e:
3b:80:10:b2:c3:9a:22:53:93:76:b0:8b:fc:68:a3:75:ed:bf:
41:31:72:40:27:55:e0:06:78:24:2b:4c:4a:eb:7c:c2:33:7e:
45:4b:0c:a4:22:c8:47:a7:24:59:e6:d1:8b:8f:9b:9f:60:b7:
9e:b6:f6:95:47:6f:a2:da:86:fe:e4:8f:66:62:20:af:6b:a8:
c2:aa:38:d7:7f:bd:4b:3e:35:2c:1c:0c:20:b4:ee:a5:4a:89:
28:52:33:d1:89:ea:7b:51:4f:fd:5f:72:c4:96:98:64:fd:e6:
d7:44:69:5c:c5:f8:17:ab:8a:ad:58:41:52:6e:cd:f1:ee:5f:
3f:e7:39:70:0b:a4:68:9b:c9:7d:01:a2:e7:18:f2:8b:e0:6d:
df:a1:8a:20:97:67:d8:f7:85:8f:f6:d1:c8:c1:09:a9:db:79:
47:b5:a0:23:f0:ee:b9:71:4b:35:f1:d5:33:bd:c5:e2:66:b8:
19:d4:f7:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 17:51:33 2026 by rpki-client