Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.mft
File: iEteFkkLmmjQn7y0VXQ1AAAUmvo.mft (raw, json)
Hash identifier: 6JhSz4rdfrhT27Y5FllmLBVqBQeZO1/AQxkeAXwimt0=
Subject key identifier: 56:2F:D1:50:9E:31:AF:60:55:2E:37:70:8B:D6:37:DD:FD:8B:48:48
Authority key identifier: 88:4B:5E:16:49:0B:9A:68:D0:9F:BC:B4:55:74:35:00:00:14:9A:FA
Certificate issuer: /CN=884b5e16490b9a68d09fbcb45574350000149afa
Certificate serial: 019FA7BDAA23399BAB32FCB396BE51F61BD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iEteFkkLmmjQn7y0VXQ1AAAUmvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.mft
Manifest number: 19D1
Signing time: Tue 28 Jul 2026 08:00:52 +0000
Manifest this update: Tue 28 Jul 2026 08:00:52 +0000
Manifest next update: Wed 29 Jul 2026 08:00:52 +0000
Files and hashes: 1: C-j7DHdcPeX_wLaiQQCXx01sXKk.roa (hash: lDDZElowGuCMiUnBVx2Enp74tiPB1NbesCh32sGC/h0=)
2: iEteFkkLmmjQn7y0VXQ1AAAUmvo.crl (hash: 27IBFV/ag3EKJ0wG5V3GhHheFJGHBvHEwJ8Vnwzq+CM=)
3: js6Pq6wBoWvKTyUwxz0skM29Qco.roa (hash: Y4NrXbk6igcwSNPM65V1DQWV2gXoGtbHhjuHToI9XM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.mft
rsync://rpki.ripe.net/repository/DEFAULT/iEteFkkLmmjQn7y0VXQ1AAAUmvo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:bd:aa:23:39:9b:ab:32:fc:b3:96:be:51:f6:1b:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=884b5e16490b9a68d09fbcb45574350000149afa
Validity
Not Before: Jul 28 08:00:52 2026 GMT
Not After : Jul 29 08:00:52 2026 GMT
Subject: CN=562fd1509e31af60552e37708bd637ddfd8b4848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:83:5e:d9:93:3a:5b:53:56:55:d4:21:be:16:
fc:99:91:33:09:7d:cb:d6:19:3d:05:3f:10:b9:6e:
29:98:af:7e:b7:72:46:e0:0b:17:c8:6f:23:0f:f7:
29:1f:7c:f2:09:97:40:df:d1:0d:60:12:c9:41:e6:
32:40:78:9e:60:dc:b3:28:b3:43:cc:df:29:e3:44:
36:ba:9b:73:0b:df:64:fe:89:13:f3:27:be:a8:d4:
0e:f0:5d:e0:91:f8:7e:f7:fc:08:16:3d:17:fa:c2:
76:c0:13:1a:da:6e:60:6e:fc:fe:c4:bc:dc:f8:fe:
8a:40:9a:ee:0a:5f:22:c2:8a:5a:75:7e:11:a8:cc:
4d:a0:b1:f1:53:9a:4b:88:94:af:72:43:af:90:4b:
cc:bc:40:37:bc:fa:ab:33:ad:e2:4a:95:e0:23:ae:
57:a1:9d:82:22:44:46:60:9e:e8:15:7a:60:35:82:
b0:39:b7:4c:5a:76:dd:62:20:0f:e0:26:bd:36:87:
bd:6a:f7:09:57:1b:03:92:7a:2a:a0:7e:90:d0:63:
37:98:32:67:de:a5:6c:89:53:22:29:39:58:b7:f5:
ca:74:d1:95:f0:5d:5f:5a:26:9a:40:d7:40:ef:87:
4b:ac:52:5b:68:6e:bd:02:9b:9d:3b:9a:2d:0d:a2:
17:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:2F:D1:50:9E:31:AF:60:55:2E:37:70:8B:D6:37:DD:FD:8B:48:48
X509v3 Authority Key Identifier:
keyid:88:4B:5E:16:49:0B:9A:68:D0:9F:BC:B4:55:74:35:00:00:14:9A:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iEteFkkLmmjQn7y0VXQ1AAAUmvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:fc:a3:24:33:10:9d:81:ce:eb:1c:8d:7c:d9:55:8d:d4:fe:
95:04:3f:e2:d6:e3:55:17:eb:f8:fd:8f:5c:33:b3:33:71:15:
85:26:a6:e0:99:bd:16:69:a9:4a:ec:3a:2b:a7:e3:e1:04:39:
2a:f7:8b:86:77:cd:7b:43:05:79:f1:00:24:3c:de:58:d6:62:
3d:ea:e0:b0:c5:59:b9:c7:1b:4b:f0:ba:22:67:40:2b:81:d0:
2f:64:52:5e:25:8a:7e:60:c5:9d:7e:7d:f3:9c:13:b0:1a:30:
12:9c:7b:43:c3:c2:d7:3b:a1:f8:d1:ea:06:68:48:4f:5c:1b:
64:6a:e6:de:30:87:51:c4:2b:95:eb:05:78:7a:de:ed:9e:f1:
39:c9:93:3a:7a:a9:7e:9f:0a:18:68:1c:8a:a5:f6:c7:78:b3:
4d:57:d8:48:95:53:c8:07:c9:7a:57:89:cc:51:29:97:d2:95:
d1:58:c6:de:9d:2f:70:48:b5:44:6d:53:c2:28:8f:2f:8d:cd:
1d:86:e9:e2:33:99:bb:d4:40:bb:f4:57:12:e5:1e:6f:1a:11:
45:b5:0e:c0:a8:87:7f:66:8c:c1:bd:06:01:aa:63:b0:81:e0:
df:60:5b:50:17:46:c5:1d:3a:f5:fa:f1:ac:97:81:f3:7a:3e:
68:cb:d8:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 13:46:10 2026 by rpki-client