Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/c84cd3-672b-44b2-8ce0-40289479ac05/1/iA2KtqoscvB5dV92zwEgql3dx98.mft
File: iA2KtqoscvB5dV92zwEgql3dx98.mft (raw, json)
Hash identifier: UD0y7n1RPQUTLbpucJ2z7nofBu4nDRjj+3mN2w7jUIE=
Subject key identifier: F1:3B:A9:E5:34:8E:9C:E9:11:1B:27:48:DE:ED:54:DE:2D:BD:C5:20
Authority key identifier: 88:0D:8A:B6:AA:2C:72:F0:79:75:5F:76:CF:01:20:AA:5D:DD:C7:DF
Certificate issuer: /CN=880d8ab6aa2c72f079755f76cf0120aa5dddc7df
Certificate serial: 019FA1BB3378CC12C9350C284CB60AF47285
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iA2KtqoscvB5dV92zwEgql3dx98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/c84cd3-672b-44b2-8ce0-40289479ac05/1/iA2KtqoscvB5dV92zwEgql3dx98.mft
Manifest number: 11B1
Signing time: Mon 27 Jul 2026 04:00:27 +0000
Manifest this update: Mon 27 Jul 2026 04:00:27 +0000
Manifest next update: Tue 28 Jul 2026 04:00:27 +0000
Files and hashes: 1: iA2KtqoscvB5dV92zwEgql3dx98.crl (hash: pMni9h4D+cj7QyC96+oF1ogdNWECNumMzv6d8uROKkQ=)
2: tl9JmYqZuc8rnWm5B3tF-CPUxEg.roa (hash: ti/VYS4hognsUWtb/PVfBo1Uhz2rYc5vy7DleprVf/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/c84cd3-672b-44b2-8ce0-40289479ac05/1/iA2KtqoscvB5dV92zwEgql3dx98.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/c84cd3-672b-44b2-8ce0-40289479ac05/1/iA2KtqoscvB5dV92zwEgql3dx98.mft
rsync://rpki.ripe.net/repository/DEFAULT/iA2KtqoscvB5dV92zwEgql3dx98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:bb:33:78:cc:12:c9:35:0c:28:4c:b6:0a:f4:72:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=880d8ab6aa2c72f079755f76cf0120aa5dddc7df
Validity
Not Before: Jul 27 04:00:27 2026 GMT
Not After : Jul 28 04:00:27 2026 GMT
Subject: CN=f13ba9e5348e9ce9111b2748deed54de2dbdc520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:72:bb:25:c2:b3:a3:80:6e:68:55:bc:af:d0:
15:1e:74:92:2c:71:71:9c:da:f0:ae:e9:8c:66:9e:
21:09:13:cb:51:19:86:4d:0d:20:fa:db:4a:f3:60:
f8:54:b4:92:f4:ff:10:2a:5c:39:77:e7:95:57:e9:
c7:10:56:e5:83:1d:2c:dc:8e:2f:9c:49:60:b2:42:
e3:53:35:f1:40:47:cc:57:cc:6d:b9:aa:e4:5a:4e:
9a:47:6b:54:eb:88:cb:d2:6c:11:15:aa:0a:1f:bb:
98:5d:ac:92:fb:ab:11:09:a0:a9:1c:3a:af:d1:2c:
62:a7:d8:79:d6:a5:b6:f0:b9:0f:49:f4:fa:5d:08:
5e:42:61:11:68:a1:67:81:7d:9d:43:e4:5d:3a:a5:
e3:44:e6:4f:ba:63:a9:50:80:3a:ce:6a:b3:2a:ab:
62:21:0b:ad:a4:8c:e4:14:a2:b7:80:35:a1:ad:98:
58:1b:87:24:d4:7b:3d:6c:ab:7d:09:e4:4a:b2:04:
75:c5:69:05:9e:75:fb:4a:c2:db:41:fa:5a:08:c8:
1f:95:39:66:5f:3b:9c:9c:65:3a:8f:60:8b:e1:04:
ea:57:55:83:be:93:9d:d7:e4:e7:dd:01:52:32:e7:
cc:c1:a8:4a:d5:c4:de:a4:8d:69:67:a2:97:95:a7:
65:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:3B:A9:E5:34:8E:9C:E9:11:1B:27:48:DE:ED:54:DE:2D:BD:C5:20
X509v3 Authority Key Identifier:
keyid:88:0D:8A:B6:AA:2C:72:F0:79:75:5F:76:CF:01:20:AA:5D:DD:C7:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iA2KtqoscvB5dV92zwEgql3dx98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c84cd3-672b-44b2-8ce0-40289479ac05/1/iA2KtqoscvB5dV92zwEgql3dx98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c84cd3-672b-44b2-8ce0-40289479ac05/1/iA2KtqoscvB5dV92zwEgql3dx98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:b6:2a:e1:d0:38:88:18:65:f2:04:4c:cd:aa:02:25:fb:72:
5c:6f:22:0c:2f:82:b0:62:9b:1e:5f:13:36:07:81:39:90:be:
13:6e:f4:cb:55:b3:b9:9f:e3:d3:22:c3:73:b9:9c:49:f2:38:
42:d4:46:c5:f1:eb:ca:ab:78:62:bc:2a:3a:b6:32:74:f2:2e:
3f:74:27:72:67:5f:28:98:db:f4:17:29:96:fd:19:6f:a6:df:
52:90:ec:35:51:3a:5a:87:9e:58:8c:47:fe:cc:ad:b4:e9:02:
4a:12:30:ed:63:9d:22:50:c0:8b:9a:f7:11:e2:65:04:c1:86:
99:a1:bc:eb:dd:c2:b1:29:44:a2:bb:69:f3:40:39:c9:a2:cc:
c6:be:ec:e4:a9:1d:e1:26:ed:de:8d:b2:2d:71:57:0a:f1:2b:
b0:6d:7c:fe:cc:e8:e7:9b:43:3b:d9:ea:77:49:32:51:47:d3:
80:7c:0d:1c:1f:1b:35:cf:3c:e7:e3:10:09:8b:40:e5:dc:eb:
0a:d7:1f:cd:e9:db:db:95:84:db:3e:9a:42:22:b4:85:a2:9e:
6f:8d:b0:48:af:19:1c:dd:2f:0d:e2:5e:1f:ea:b7:34:80:d8:
aa:40:e6:80:02:22:a9:7c:4a:fc:a0:d5:8b:fa:af:cd:29:df:
ff:3a:7b:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 05:43:41 2026 by rpki-client