Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
File: Ib-nezzXgpM-XyVURdQorfvcoOE.mft (raw, json)
Hash identifier: J3sugsd5nZYkV2ljk/PhgIsmnPqOCVlrszjAoW4o6OU=
Subject key identifier: 86:01:8D:FE:BC:30:70:B3:CA:79:FB:1F:33:F1:63:3C:99:CD:81:C9
Authority key identifier: 21:BF:A7:7B:3C:D7:82:93:3E:5F:25:54:45:D4:28:AD:FB:DC:A0:E1
Certificate issuer: /CN=21bfa77b3cd782933e5f255445d428adfbdca0e1
Certificate serial: 019FACAD437B96DF799BC2224158E024FF68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ib-nezzXgpM-XyVURdQorfvcoOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
Manifest number: 19D6
Signing time: Wed 29 Jul 2026 07:01:03 +0000
Manifest this update: Wed 29 Jul 2026 07:01:03 +0000
Manifest next update: Thu 30 Jul 2026 07:01:03 +0000
Files and hashes: 1: Ib-nezzXgpM-XyVURdQorfvcoOE.crl (hash: Qw9m0XOIwQ6rqgDaek3fdKPsKYlLH5j6Zt33cLbZx+s=)
2: tVC2csu9UGG1-01gEwc1t4LJEVg.roa (hash: F7t5gXl+oY8MHELP0QCMp2iMpD0P8eAkfXVgIusmD4c=)
3: veTOQGnBK7iaYhGL3G7GNS69oDU.roa (hash: O4MK7Gc8l+4Xx+SJNgVyYVCnc4Eq4VWeh1FutcFXWtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ib-nezzXgpM-XyVURdQorfvcoOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:ad:43:7b:96:df:79:9b:c2:22:41:58:e0:24:ff:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21bfa77b3cd782933e5f255445d428adfbdca0e1
Validity
Not Before: Jul 29 07:01:03 2026 GMT
Not After : Jul 30 07:01:03 2026 GMT
Subject: CN=86018dfebc3070b3ca79fb1f33f1633c99cd81c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ce:46:38:7a:35:d3:a9:e9:b3:80:fe:1f:32:
f7:54:4a:b3:00:a5:ff:fd:cb:64:13:c7:12:63:50:
25:d7:2a:ee:b4:a2:a6:6c:f2:39:18:60:fa:9a:34:
0e:63:97:67:a6:3a:10:e9:30:b0:71:c7:d0:75:12:
53:ea:7d:16:22:17:f8:fc:6c:22:23:44:29:27:2b:
7f:31:2f:08:ce:3d:0a:c3:4d:4b:76:be:62:2b:60:
54:f6:fc:6e:57:c0:83:5d:d2:b3:f7:9e:2c:f7:fa:
63:1f:45:8d:cf:9a:93:d4:e3:f0:fa:83:dd:db:f5:
d8:d1:6a:7e:34:23:84:4b:48:e3:db:36:fa:e8:98:
6a:c4:3a:c9:af:d4:e4:3d:9e:22:0d:2d:3b:e7:74:
ed:19:44:0e:74:66:e6:34:a0:52:05:7a:10:cd:01:
96:28:79:f9:d7:04:bd:68:a2:51:0f:4f:bd:db:84:
f0:26:62:07:90:01:a5:a2:25:fe:69:7c:dd:a9:fb:
e0:5e:b9:de:e4:56:97:ba:d6:3b:f1:77:a6:1f:aa:
b4:77:dd:da:7b:4f:e5:ee:ad:8c:77:b1:59:c4:12:
52:13:04:ce:c0:ed:ab:94:ca:9b:29:04:bd:3c:1b:
7c:09:65:93:11:cd:6d:d4:e1:ec:8e:d6:a6:fa:13:
77:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:01:8D:FE:BC:30:70:B3:CA:79:FB:1F:33:F1:63:3C:99:CD:81:C9
X509v3 Authority Key Identifier:
keyid:21:BF:A7:7B:3C:D7:82:93:3E:5F:25:54:45:D4:28:AD:FB:DC:A0:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ib-nezzXgpM-XyVURdQorfvcoOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:02:fb:a4:2d:d3:d8:6c:2e:74:85:c5:3a:e7:34:ec:0c:ac:
3a:18:f3:42:7f:02:f2:ed:11:29:df:d7:3e:f3:c6:cb:54:c1:
65:1b:75:b1:b7:f9:86:d7:fa:bd:20:f3:e2:4f:66:59:1d:b8:
8c:50:3b:4c:2e:88:dc:fe:0f:7c:1b:56:73:72:45:92:9b:a9:
dd:09:5c:cc:9d:5d:d3:3c:11:6a:c7:c9:64:07:4b:56:66:ff:
73:3f:3d:93:65:27:6c:b4:b1:f1:36:f1:af:d2:d1:eb:02:09:
75:5c:ea:85:8b:1a:85:cd:c5:43:5f:55:52:c1:d8:f4:cc:c7:
0f:e2:a5:54:26:99:5e:34:44:d4:fe:50:33:1a:3a:6d:b5:81:
12:33:7a:d8:51:b6:24:b6:6b:33:cf:c7:df:66:ce:c2:fd:ba:
3c:ac:dc:5d:ac:fe:7f:a0:04:c9:cc:5e:0f:7d:4a:64:0a:5d:
4c:d0:ef:8f:5c:8e:a2:c9:2b:1e:49:42:34:2b:8d:73:e9:fc:
ea:b7:37:1e:48:57:78:f2:96:5e:45:89:96:8d:34:76:01:1b:
e8:31:94:c9:7d:4b:fd:b5:45:38:5a:dc:40:e4:3d:14:c0:66:
fd:2c:a9:01:cd:ed:24:2d:2a:77:32:d2:04:53:a1:0a:d1:46:
64:f9:80:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:58:59 2026 by rpki-client