Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/I1OA88jQvU73nc_B8qNk738QDTE.mft
File: I1OA88jQvU73nc_B8qNk738QDTE.mft (raw, json)
Hash identifier: ZDa+QWPccFdmOPqHnXQrORNK1Y5OQdhumQRmf0RoMZc=
Subject key identifier: 3D:0D:A6:05:13:9B:DD:E9:6C:67:42:FA:F4:63:47:00:B5:5B:E7:DA
Authority key identifier: 23:53:80:F3:C8:D0:BD:4E:F7:9D:CF:C1:F2:A3:64:EF:7F:10:0D:31
Certificate issuer: /CN=235380f3c8d0bd4ef79dcfc1f2a364ef7f100d31
Certificate serial: 019FAA8740F806611F4F755DD0C583404991
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I1OA88jQvU73nc_B8qNk738QDTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/I1OA88jQvU73nc_B8qNk738QDTE.mft
Manifest number: 4D
Signing time: Tue 28 Jul 2026 21:00:18 +0000
Manifest this update: Tue 28 Jul 2026 21:00:18 +0000
Manifest next update: Wed 29 Jul 2026 21:00:18 +0000
Files and hashes: 1: 2nvjaO-9QgHUIDo_0O1ylwBW6vQ.roa (hash: oiGKpPGm6qpApMCxU6UFVXeU7Do4Gkz7nDJJxifitKA=)
2: I1OA88jQvU73nc_B8qNk738QDTE.crl (hash: UT8bdOv0erytxEyEb95Wa33J93PzV4hX13uooAaQBPA=)
3: L3EC22kCSbgO1zCyaBa1frjR2pE.roa (hash: w8QsFoIi60jEHJ7Xofqwu1zr9PxRQqzEho5zefrGjYg=)
4: pxlXr9sUSjIqFgXbd9sR-GcE580.roa (hash: QivBnRPkhkpLbexDZpsfTuH4eBEzkCeooTxQJXFlmDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/I1OA88jQvU73nc_B8qNk738QDTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/I1OA88jQvU73nc_B8qNk738QDTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/I1OA88jQvU73nc_B8qNk738QDTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:40:f8:06:61:1f:4f:75:5d:d0:c5:83:40:49:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=235380f3c8d0bd4ef79dcfc1f2a364ef7f100d31
Validity
Not Before: Jul 28 21:00:18 2026 GMT
Not After : Jul 29 21:00:18 2026 GMT
Subject: CN=3d0da605139bdde96c6742faf4634700b55be7da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b7:1b:8f:75:fd:0f:9c:28:ea:fa:87:16:df:
2c:90:d6:61:c7:ea:b3:e7:c0:35:c1:66:c0:b6:ed:
23:62:c2:2e:b0:ed:6c:e1:03:4e:5f:c5:76:d6:30:
dd:d2:5a:76:f2:25:8b:71:a1:b2:67:2a:01:b0:f2:
77:86:0a:49:5e:27:b1:8f:c6:71:dc:68:f6:44:2a:
aa:37:50:5a:03:5d:6e:ee:eb:ee:c1:28:14:c7:dd:
40:89:ca:14:63:2c:53:80:42:3e:44:2f:5d:f0:6f:
6c:7c:c2:bd:54:74:06:60:f8:a2:c6:ca:4f:02:d9:
17:a9:4a:d0:70:11:87:1f:01:0a:f2:12:56:d8:d9:
5c:76:f8:d2:dc:09:12:14:4d:cb:ee:45:03:44:8a:
b1:a2:e9:44:8c:28:9f:d8:05:23:9b:ca:5a:cd:b4:
af:9d:3a:03:45:55:7b:30:c9:97:99:52:74:7c:74:
80:30:83:a6:6f:3d:a6:4c:06:fe:a4:58:f6:b8:91:
44:e8:a3:52:92:a4:f6:e5:fe:a4:7f:67:4e:b4:72:
89:22:ee:5b:29:8a:53:db:09:2b:79:53:da:d9:3e:
9e:51:59:73:5d:cf:2d:81:2f:1d:b2:3d:89:95:88:
7e:df:76:3d:1a:02:a9:ef:93:a4:5b:5c:c7:62:51:
d3:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:0D:A6:05:13:9B:DD:E9:6C:67:42:FA:F4:63:47:00:B5:5B:E7:DA
X509v3 Authority Key Identifier:
keyid:23:53:80:F3:C8:D0:BD:4E:F7:9D:CF:C1:F2:A3:64:EF:7F:10:0D:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I1OA88jQvU73nc_B8qNk738QDTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/I1OA88jQvU73nc_B8qNk738QDTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/I1OA88jQvU73nc_B8qNk738QDTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:f4:bc:3e:9e:aa:01:29:34:06:37:54:eb:66:86:97:20:a1:
64:89:07:c0:de:86:72:e7:88:18:f9:3c:9b:ec:9b:66:50:d4:
fc:94:f7:5e:20:ff:57:5d:04:d8:73:e2:2e:e2:0b:77:b7:b9:
5d:cb:a7:64:c1:a2:5f:64:44:35:75:45:99:4b:3f:46:c7:2b:
8e:e2:6c:ef:d2:93:62:4e:a3:07:f0:23:c8:27:ca:bb:83:74:
66:db:7a:b8:af:61:be:b3:1a:0e:db:c1:e2:13:82:85:19:33:
9d:02:aa:f5:0d:6c:74:23:b6:c1:43:83:4e:f3:46:da:9e:be:
77:7f:a2:aa:85:10:5d:b3:b1:a6:df:43:8e:52:e5:f3:4b:04:
7b:43:ef:9c:6e:38:cc:9c:dd:3d:fb:d3:4e:a5:97:13:c1:70:
81:bd:c9:fb:60:14:f8:9a:5a:f8:4b:72:66:26:30:20:dc:3b:
21:7d:16:e5:e7:13:f2:ec:9f:a4:a7:66:19:1b:cb:5a:69:3a:
9f:69:5d:e2:79:da:ad:f0:2d:ed:40:db:d7:47:70:22:1a:4c:
a5:b4:5d:ab:74:c2:93:25:00:ee:dc:49:57:3d:69:aa:c9:83:
ad:f7:36:df:9f:0f:1e:95:70:c1:3b:4a:3d:64:ec:31:90:a5:
64:12:cc:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:20:56 2026 by rpki-client