
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft
File: iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft (raw, json)
Hash identifier: tKJ7kM3mVWdBa0fQIKAXTHCBh7tQXmw/oIUiPv4vA8U=
Subject key identifier: 80:2B:56:CA:19:5E:52:73:49:6E:A4:5B:7B:A8:E0:15:03:5D:32:BA
Authority key identifier: 8B:0C:8D:35:DD:66:65:7B:FF:C9:0B:6A:C4:16:00:FF:A6:23:D5:B8
Certificate issuer: /CN=8b0c8d35dd66657bffc90b6ac41600ffa623d5b8
Certificate serial: 019FAAF5B2D411808B7376BF7248ECB26187
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft
Manifest number: 19DE
Signing time: Tue 28 Jul 2026 23:00:56 +0000
Manifest this update: Tue 28 Jul 2026 23:00:56 +0000
Manifest next update: Wed 29 Jul 2026 23:00:56 +0000
Files and hashes: 1: iwyNNd1mZXv_yQtqxBYA_6Yj1bg.crl (hash: AOSrumAWKGLlTSMxexcSkr4avoBYqtf7PKXvSbnJnN4=)
2: sviolDtkALX237AgHdJy3qGm9E8.roa (hash: UBbw3ecAl6K7Vc8agYWaL992jebVFcU3FnvRCH5/x3w=)
3: zCmHEUDwxreVgjHT33MieHTkvHo.roa (hash: GOn7Ax5ilTDC4mIkf7WnEWeisHxiQ0BYABkeo+vnpp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:b2:d4:11:80:8b:73:76:bf:72:48:ec:b2:61:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b0c8d35dd66657bffc90b6ac41600ffa623d5b8
Validity
Not Before: Jul 28 23:00:56 2026 GMT
Not After : Jul 29 23:00:56 2026 GMT
Subject: CN=802b56ca195e5273496ea45b7ba8e015035d32ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4d:ab:55:6d:61:35:a5:7b:eb:62:13:8c:9c:
e5:d1:61:3d:42:7c:44:a8:e0:4b:6b:01:70:93:a7:
b9:85:a1:00:3d:a0:9d:b3:d5:26:5e:67:d9:18:e9:
c9:67:ad:88:ec:5d:88:e7:35:12:a1:39:23:e1:aa:
a1:e3:92:e5:bb:e2:cc:2c:eb:1f:78:8a:1a:1b:1d:
39:0d:2c:82:41:de:e8:40:24:fa:8c:c2:c0:f1:33:
d7:cd:d4:d9:fe:1a:2b:d9:6b:0b:a9:9b:9b:ed:cb:
cc:81:d3:bd:3f:7f:18:62:08:f0:4e:40:2f:df:26:
8e:dd:21:1f:4d:42:0f:47:17:ca:30:39:2e:19:e8:
d2:ed:83:66:13:0e:c5:50:c1:f2:4d:59:af:f3:93:
8d:6e:27:3f:d2:2a:15:b5:f1:d3:75:5e:6b:3a:de:
32:02:2f:eb:5d:4e:d3:02:b6:35:29:89:80:f6:ab:
99:ec:b2:a3:41:ca:9d:8c:ca:6f:6b:a1:7e:96:8f:
b2:20:4e:53:b2:a1:3e:8c:29:49:88:99:03:d5:f0:
9e:80:ba:b6:22:90:56:44:17:43:aa:b0:19:6a:0f:
1b:76:8a:56:b2:90:2f:12:1d:f7:36:7e:bb:86:77:
13:72:ec:79:82:e8:65:81:5a:ad:ea:8f:12:aa:bb:
be:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:2B:56:CA:19:5E:52:73:49:6E:A4:5B:7B:A8:E0:15:03:5D:32:BA
X509v3 Authority Key Identifier:
keyid:8B:0C:8D:35:DD:66:65:7B:FF:C9:0B:6A:C4:16:00:FF:A6:23:D5:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:27:d7:c4:2e:10:37:d9:81:ae:98:26:0b:a2:fb:a0:c5:2a:
18:e3:02:81:89:b4:be:98:fc:74:e6:3f:4b:7a:81:ad:de:8f:
83:a1:10:56:2f:46:fd:45:8b:2e:81:eb:40:b8:53:a6:18:09:
76:45:ce:1a:be:2d:4e:c6:48:bc:1a:54:4a:37:d8:7a:e4:21:
46:5d:3d:f1:4f:9a:33:0f:54:cd:1f:6e:62:d4:7f:83:66:a4:
44:f6:4e:31:42:3b:08:e1:a0:d3:48:c5:6b:16:ce:05:6f:ff:
ab:c7:1d:2a:25:ac:f1:02:56:62:eb:54:b4:96:64:b8:d2:d6:
ba:9f:34:6e:e5:cd:2d:92:67:3e:d4:1a:af:a1:81:6f:8b:72:
51:30:3a:08:98:3a:8f:36:55:c5:60:18:5a:06:0b:ea:b0:6c:
de:77:bc:99:2f:96:37:99:29:8f:ea:ba:5e:d1:0a:d4:ef:31:
85:36:73:d8:19:66:6d:e5:e5:57:d4:6a:3f:b2:2b:ed:71:9c:
32:da:a4:3b:0a:a0:0d:2e:7d:7a:08:3b:23:62:f0:a1:ef:4d:
f1:cc:4c:ae:3d:d3:a1:0e:a5:87:1a:71:7e:2b:e7:46:4a:a9:
e4:6b:cc:2e:a7:32:c5:43:5e:4e:5b:94:39:15:86:c5:2c:c3:
d3:2e:4b:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:50:33 2026 by rpki-client