Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.mft
File: iRaqpdJS_ZAUX-2saDdi1uIHQVU.mft (raw, json)
Hash identifier: OI1NuXJTZKccrIC67sVW7mUZTjAmyS/OhLUrTVJOmzM=
Subject key identifier: 2F:9A:59:4B:A5:B5:8F:B6:94:94:91:E0:11:4F:25:9D:81:7E:5A:76
Authority key identifier: 89:16:AA:A5:D2:52:FD:90:14:5F:ED:AC:68:37:62:D6:E2:07:41:55
Certificate issuer: /CN=8916aaa5d252fd90145fedac683762d6e2074155
Certificate serial: 019FACACA4CD1DBE25E7B9EB6060989D5D51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iRaqpdJS_ZAUX-2saDdi1uIHQVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.mft
Manifest number: 19D5
Signing time: Wed 29 Jul 2026 07:00:23 +0000
Manifest this update: Wed 29 Jul 2026 07:00:23 +0000
Manifest next update: Thu 30 Jul 2026 07:00:23 +0000
Files and hashes: 1: FjK0gZzIRFGA1r0HMqyZjh1eSaU.roa (hash: 5jTPa/LgCeRZQvqoHjBqfoQDZ2FKgfEuFxlRAqDizkI=)
2: iRaqpdJS_ZAUX-2saDdi1uIHQVU.crl (hash: 4etb9NKIWq7aNImIu+u1bpAzHd65Uv7mqIeJghncd4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iRaqpdJS_ZAUX-2saDdi1uIHQVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:ac:a4:cd:1d:be:25:e7:b9:eb:60:60:98:9d:5d:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8916aaa5d252fd90145fedac683762d6e2074155
Validity
Not Before: Jul 29 07:00:23 2026 GMT
Not After : Jul 30 07:00:23 2026 GMT
Subject: CN=2f9a594ba5b58fb6949491e0114f259d817e5a76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:79:bf:fd:9d:56:ca:4d:74:e8:4e:83:19:9c:
19:8c:bb:e6:43:40:4d:51:f0:17:de:83:5d:a8:92:
09:03:1f:12:7d:cc:0b:22:c1:3b:1f:08:28:29:31:
38:28:fe:c9:3d:4f:95:f8:46:9e:51:01:b6:6e:f7:
14:84:79:c0:96:38:2c:3d:1f:9d:07:2e:d0:eb:82:
82:a7:de:50:c8:08:f0:0b:2c:4d:7f:36:a2:74:26:
16:9e:e4:fe:2c:92:4b:6b:62:1b:24:b1:8e:a7:80:
24:3f:00:eb:4d:c8:76:4c:8c:3a:03:86:b8:0f:81:
fe:e3:a4:c5:f9:6f:17:87:1f:07:76:66:65:1c:c6:
18:33:2f:2d:dd:b8:fe:db:33:90:72:58:30:5d:d2:
d9:a0:bb:2e:c0:44:c2:01:95:f3:7d:98:aa:c4:5d:
0f:b0:f0:27:6e:bf:aa:40:16:ef:02:e6:fc:a3:50:
ea:81:92:7b:92:62:09:f4:41:2c:42:42:00:ba:45:
89:43:12:92:43:f8:91:b2:4b:1c:30:5e:ba:23:05:
0f:e4:6e:a5:c0:38:03:33:47:be:91:80:24:b7:af:
cb:48:cf:1f:03:d5:6b:7d:ef:61:df:4b:0d:d4:fb:
07:79:68:d6:dd:19:44:58:4b:36:4f:c3:91:5f:de:
c7:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:9A:59:4B:A5:B5:8F:B6:94:94:91:E0:11:4F:25:9D:81:7E:5A:76
X509v3 Authority Key Identifier:
keyid:89:16:AA:A5:D2:52:FD:90:14:5F:ED:AC:68:37:62:D6:E2:07:41:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iRaqpdJS_ZAUX-2saDdi1uIHQVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:55:ec:f0:4c:8a:1e:f7:29:61:6f:0c:16:65:06:2d:b5:a3:
e6:92:51:69:1d:e1:16:a7:33:cb:e6:fd:c7:67:4f:0f:21:56:
66:af:ce:86:15:2a:51:18:b2:c5:73:e5:8e:6f:4b:a3:1c:83:
91:37:81:b3:4d:da:65:28:53:ad:53:cc:5e:49:09:8e:37:bd:
4c:02:31:b0:3b:25:f3:2d:e8:1e:23:7c:03:80:35:64:01:e4:
e7:6e:6b:ef:4b:64:ef:20:e4:75:0d:91:fe:2f:52:53:ac:07:
f4:47:66:99:47:28:88:c7:53:85:c5:7f:aa:03:a6:93:ef:0c:
97:ed:77:85:06:68:a3:72:1f:49:2f:12:7f:9b:91:f6:90:ac:
bb:48:63:f5:48:02:35:77:91:4e:1d:2b:53:91:47:df:98:30:
a4:9d:2d:2b:a3:e1:75:c2:b6:67:ef:3b:91:53:22:28:f9:1a:
4f:cd:10:10:31:33:c5:23:95:0c:bb:c9:97:a3:c1:f5:fe:42:
9a:62:6b:e2:a8:d8:f4:c5:6c:33:07:d8:29:e2:5a:b7:7d:fb:
31:17:4b:8c:13:87:e4:83:f9:00:37:8b:b1:3d:f9:b1:92:c5:
b4:55:28:be:0b:e9:01:de:49:bf:ec:68:cb:2e:a3:72:ad:bb:
e1:f6:f5:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:38:53 2026 by rpki-client