Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/bb05ac-4b92-4fde-9260-d2fb0a3201b8/1/iuqCkaUdU780Tc2HYs22gp0eS8A.mft
File: iuqCkaUdU780Tc2HYs22gp0eS8A.mft (raw, json)
Hash identifier: oMn6BKVMMXwxMQmwvxvovpX31HAwdl+uX3zmXMe+/Ag=
Subject key identifier: 99:AB:F6:7C:84:61:67:E0:5A:D3:6D:A2:32:B8:B4:6E:BA:51:4F:B9
Authority key identifier: 8A:EA:82:91:A5:1D:53:BF:34:4D:CD:87:62:CD:B6:82:9D:1E:4B:C0
Certificate issuer: /CN=8aea8291a51d53bf344dcd8762cdb6829d1e4bc0
Certificate serial: 019FACE3F9157B15D78AA8F268818AE2DF70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iuqCkaUdU780Tc2HYs22gp0eS8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/bb05ac-4b92-4fde-9260-d2fb0a3201b8/1/iuqCkaUdU780Tc2HYs22gp0eS8A.mft
Manifest number: FA
Signing time: Wed 29 Jul 2026 08:00:49 +0000
Manifest this update: Wed 29 Jul 2026 08:00:49 +0000
Manifest next update: Thu 30 Jul 2026 08:00:49 +0000
Files and hashes: 1: 1-HnWZOSfYzfMpkdHQKgKNZ13rPI.roa (hash: PKBAPXzgnWazEIllaNoOetp38i7rE9un2IC2xSXTZlQ=)
2: FvTUXze2cP2KDGx2hRq_w_Z-9N0.roa (hash: Gp1g8k1CPQjLn91bFZfvO5ChcN4hmVKIBnTLXnXZ2/M=)
3: iuqCkaUdU780Tc2HYs22gp0eS8A.crl (hash: cd23S71eMgpOUro88chZCpEtUE4AOJ+BUZS3afItOd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/bb05ac-4b92-4fde-9260-d2fb0a3201b8/1/iuqCkaUdU780Tc2HYs22gp0eS8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/bb05ac-4b92-4fde-9260-d2fb0a3201b8/1/iuqCkaUdU780Tc2HYs22gp0eS8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/iuqCkaUdU780Tc2HYs22gp0eS8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:e3:f9:15:7b:15:d7:8a:a8:f2:68:81:8a:e2:df:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8aea8291a51d53bf344dcd8762cdb6829d1e4bc0
Validity
Not Before: Jul 29 08:00:49 2026 GMT
Not After : Jul 30 08:00:49 2026 GMT
Subject: CN=99abf67c846167e05ad36da232b8b46eba514fb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9e:6e:36:e6:14:6b:c1:61:87:47:97:b9:09:
cb:4b:96:ba:bb:09:5e:e9:1d:45:ae:9c:a0:fb:bf:
e5:c0:77:c7:cd:44:7a:58:ad:a7:e0:a3:f4:dd:c4:
47:63:fb:8a:fd:72:63:e7:81:f1:cd:04:14:f0:5c:
35:ad:6b:06:54:f5:89:8c:08:4a:94:ec:ff:0a:59:
22:53:ec:b0:7f:b1:c2:a7:2a:b3:cb:48:65:ec:2e:
12:5c:ca:fd:72:37:6a:23:f1:84:e2:6a:e6:94:6e:
79:24:80:42:40:df:db:04:ff:a0:fa:ed:43:9d:87:
9f:8a:8b:e9:6d:8f:0c:0d:0f:75:cc:7d:54:ea:dd:
1a:3c:c9:ef:43:b4:88:40:63:f0:d0:0c:8f:74:83:
68:c5:44:0f:64:5c:28:e2:11:03:0c:12:18:df:21:
70:5f:2b:9c:6c:f5:8c:d0:b0:5d:82:ca:5e:24:33:
bd:fe:00:31:d2:62:ba:81:28:7b:1f:e7:d7:b7:a9:
69:aa:f4:fd:15:06:4e:fd:35:50:3e:b9:d6:67:82:
80:b5:b7:be:1e:83:fd:76:ca:6b:f1:6e:f4:c3:56:
c0:cf:8e:41:3e:37:5e:72:29:71:d2:b2:df:ab:07:
75:4f:90:f9:14:4f:e0:0f:2b:a4:a8:57:3b:65:f8:
43:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:AB:F6:7C:84:61:67:E0:5A:D3:6D:A2:32:B8:B4:6E:BA:51:4F:B9
X509v3 Authority Key Identifier:
keyid:8A:EA:82:91:A5:1D:53:BF:34:4D:CD:87:62:CD:B6:82:9D:1E:4B:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iuqCkaUdU780Tc2HYs22gp0eS8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/bb05ac-4b92-4fde-9260-d2fb0a3201b8/1/iuqCkaUdU780Tc2HYs22gp0eS8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/bb05ac-4b92-4fde-9260-d2fb0a3201b8/1/iuqCkaUdU780Tc2HYs22gp0eS8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:8b:f1:46:19:d0:0d:1c:99:84:dc:ef:0a:a0:69:ae:fe:1d:
46:8c:63:c1:72:87:cf:26:ac:2c:b6:46:e0:9f:85:b6:ec:c1:
f9:e9:62:67:2c:e4:86:d9:33:48:6f:7e:db:35:95:a1:e4:ee:
cc:d4:ee:6f:c9:1a:3c:e8:dc:cb:1d:01:f3:b3:2f:72:b9:90:
d2:75:e1:57:f1:cc:23:ea:2d:ad:ef:61:32:ed:34:50:e9:c7:
8b:9e:3f:64:b8:55:3b:c4:70:5a:b5:1e:4d:0b:64:5f:76:85:
12:c5:00:b2:08:03:87:5a:ff:04:d9:71:e0:d5:42:76:a0:99:
af:a2:9f:ec:3b:c3:1d:f1:87:a2:27:3f:ad:fb:84:fe:71:6c:
8c:d1:39:6f:99:8a:33:13:eb:24:da:a2:a7:fe:2b:1a:a9:27:
6d:6f:cb:e0:dc:3e:ac:84:cc:7e:62:76:0a:d6:4b:32:4b:88:
7c:41:97:8f:af:00:e7:37:94:dd:a7:57:bf:ff:17:6a:ab:96:
58:5c:c4:17:48:9f:a3:47:d4:f2:62:2c:23:b2:69:b4:3a:97:
52:5d:13:62:53:37:7c:14:12:4d:dd:8d:fb:32:73:34:c0:bf:
b5:5c:8b:cc:d2:ad:24:df:41:5b:3c:98:df:5a:5c:75:2f:20:
c4:e5:85:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:22:01 2026 by rpki-client