Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/c16717-855d-4391-b79f-b888a3124454/1/IOI90FhJzIEyVauNG4U_ucRdhpQ.mft
File: IOI90FhJzIEyVauNG4U_ucRdhpQ.mft (raw, json)
Hash identifier: 6u4gnduATQ3h/Lhc0zLWVXx0lSKeqlgylm782xnASjI=
Subject key identifier: 6B:14:B6:13:C6:8C:A2:94:A6:AF:5D:C7:23:C6:19:FC:BD:B7:2E:D4
Authority key identifier: 20:E2:3D:D0:58:49:CC:81:32:55:AB:8D:1B:85:3F:B9:C4:5D:86:94
Certificate issuer: /CN=20e23dd05849cc813255ab8d1b853fb9c45d8694
Certificate serial: 019FA116488862ADBDDDAB9E5369647B114F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOI90FhJzIEyVauNG4U_ucRdhpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/c16717-855d-4391-b79f-b888a3124454/1/IOI90FhJzIEyVauNG4U_ucRdhpQ.mft
Manifest number: 03D1
Signing time: Mon 27 Jul 2026 01:00:19 +0000
Manifest this update: Mon 27 Jul 2026 01:00:19 +0000
Manifest next update: Tue 28 Jul 2026 01:00:19 +0000
Files and hashes: 1: IOI90FhJzIEyVauNG4U_ucRdhpQ.crl (hash: Nco63ksFKBtlAEcKup0v2ea0F7K42OIn5+7++ebJwz4=)
2: ZVUh7y26ToxL-oq8YITOKQgfF08.roa (hash: mGiVKv+1/ai9DnwEadL7YecZ7TPX9VgOuJDaNOyNIA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/c16717-855d-4391-b79f-b888a3124454/1/IOI90FhJzIEyVauNG4U_ucRdhpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/c16717-855d-4391-b79f-b888a3124454/1/IOI90FhJzIEyVauNG4U_ucRdhpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IOI90FhJzIEyVauNG4U_ucRdhpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 01:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:16:48:88:62:ad:bd:dd:ab:9e:53:69:64:7b:11:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20e23dd05849cc813255ab8d1b853fb9c45d8694
Validity
Not Before: Jul 27 01:00:19 2026 GMT
Not After : Jul 28 01:00:19 2026 GMT
Subject: CN=6b14b613c68ca294a6af5dc723c619fcbdb72ed4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6e:e5:3d:1c:d2:b9:1b:a4:4f:d3:a1:04:c0:
06:7f:2c:2f:09:53:d5:2d:90:fe:a1:56:e1:c2:5b:
00:d9:cc:eb:bb:3d:92:4f:4c:ee:ed:d5:3a:59:e3:
50:f6:6c:6a:6e:21:1a:0c:fe:19:ea:ee:03:6a:80:
71:67:27:30:28:52:58:86:a6:8b:14:6e:48:64:95:
ae:a9:bf:2a:64:11:44:16:82:e8:2b:a4:10:21:6a:
ab:57:35:26:b7:46:17:68:d5:43:98:1a:5d:de:c3:
1a:07:7f:4c:a8:5e:4a:71:9f:18:20:79:ad:81:ef:
70:58:dd:80:f8:b7:78:08:63:5a:63:54:87:07:8c:
a9:d4:e7:97:88:e2:78:2f:e5:f3:01:20:ca:0e:5f:
bf:0f:e5:d7:28:ec:42:b3:9f:58:8d:26:d8:54:aa:
56:9a:1a:8d:20:92:57:99:ad:79:cc:16:50:fe:98:
e9:b5:34:dc:94:31:9d:5f:13:44:d2:b0:1b:58:b5:
9d:82:bf:5d:d0:61:7c:3c:03:51:a6:30:d5:30:2c:
1c:fa:4b:6c:de:30:c6:c8:9e:9b:77:6c:d2:66:fc:
94:4f:48:d7:08:24:ac:53:44:8b:61:06:0c:b9:1d:
07:df:ce:ff:3e:1a:8f:cc:94:61:2d:24:16:60:bc:
80:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:14:B6:13:C6:8C:A2:94:A6:AF:5D:C7:23:C6:19:FC:BD:B7:2E:D4
X509v3 Authority Key Identifier:
keyid:20:E2:3D:D0:58:49:CC:81:32:55:AB:8D:1B:85:3F:B9:C4:5D:86:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOI90FhJzIEyVauNG4U_ucRdhpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c16717-855d-4391-b79f-b888a3124454/1/IOI90FhJzIEyVauNG4U_ucRdhpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c16717-855d-4391-b79f-b888a3124454/1/IOI90FhJzIEyVauNG4U_ucRdhpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:f5:0b:f9:93:f8:a6:59:18:68:65:27:c0:6e:5a:dd:2c:f7:
0b:4e:45:45:10:7f:60:c5:0a:62:7a:87:e3:d7:fb:3a:99:d7:
e5:fa:95:8f:49:08:f2:6a:05:48:34:3d:b7:02:9e:7f:a2:ac:
59:2b:76:3c:ad:ba:36:69:f9:d9:b0:23:6e:8b:71:e0:d5:43:
c1:8c:19:55:f2:7a:0a:c6:c5:18:fc:65:48:65:d0:0f:68:35:
44:51:97:ef:d0:19:e8:4a:7f:45:a1:d3:70:02:83:16:2f:31:
a3:16:ba:5d:ef:ce:ef:40:b8:b6:85:3f:92:23:ba:d5:27:b8:
4d:c5:06:3b:1d:2f:28:21:b7:cd:f1:27:67:c4:3e:ec:ed:69:
77:72:16:b9:07:6a:e1:ad:c1:40:0a:5e:70:39:2b:2a:db:30:
d8:54:09:fa:d7:d9:34:60:cd:a8:78:78:95:75:7a:c4:80:33:
0d:7f:07:c2:61:5d:e3:1a:e8:8e:b2:a4:98:5c:7d:64:62:dd:
eb:47:52:9f:b7:4b:8b:f6:28:23:06:82:62:aa:32:e6:c7:d1:
63:76:32:2d:0a:84:e1:94:ea:63:a0:a7:29:9e:98:59:d0:b7:
80:ac:5b:0d:88:d6:13:9f:a5:c6:1c:98:92:ce:60:cc:8f:97:
f6:d2:50:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:29:08 2026 by rpki-client