Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.mft
File: i2ojov0aCVY3ijfU_OJZ3yvXlKc.mft (raw, json)
Hash identifier: 9wfSPGymeymJ8CIXZrO79NwjKZpLojeAkKVnHmonl1g=
Subject key identifier: 0F:6D:53:66:E1:6F:DB:FC:FF:D1:22:1D:93:12:E4:22:65:1B:2B:2F
Authority key identifier: 8B:6A:23:A2:FD:1A:09:56:37:8A:37:D4:FC:E2:59:DF:2B:D7:94:A7
Certificate issuer: /CN=8b6a23a2fd1a0956378a37d4fce259df2bd794a7
Certificate serial: 019FAC3F3669E78CE74816BC975A3F0A3628
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2ojov0aCVY3ijfU_OJZ3yvXlKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.mft
Manifest number: 19D5
Signing time: Wed 29 Jul 2026 05:00:51 +0000
Manifest this update: Wed 29 Jul 2026 05:00:51 +0000
Manifest next update: Thu 30 Jul 2026 05:00:51 +0000
Files and hashes: 1: BTEAuUNa_YsO4Msc4ADixEUAqHw.roa (hash: RPWke+z8J8p3T5a+cxL5wCmrsKLPXY/+WIucQz9R2x4=)
2: Fdb2MRiz20g2xgX0HTiyiVn6wdM.roa (hash: P7ndLT2N2wnmbFCzRdtX0zBZJo6QlqplqMU+f7R4Fys=)
3: i2ojov0aCVY3ijfU_OJZ3yvXlKc.crl (hash: OQZ6WYyvit6r0iQoOTS9qQPZrNTq5biwLord9GX7Tfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2ojov0aCVY3ijfU_OJZ3yvXlKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:3f:36:69:e7:8c:e7:48:16:bc:97:5a:3f:0a:36:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6a23a2fd1a0956378a37d4fce259df2bd794a7
Validity
Not Before: Jul 29 05:00:51 2026 GMT
Not After : Jul 30 05:00:51 2026 GMT
Subject: CN=0f6d5366e16fdbfcffd1221d9312e422651b2b2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:64:af:2c:eb:fb:98:68:42:18:2d:4d:02:d2:
0d:ab:71:41:67:f7:91:9f:6e:5f:bb:a5:4f:43:50:
17:26:d0:54:6c:74:cd:af:fa:0c:6f:31:03:51:6c:
11:86:22:db:b2:f7:a5:79:16:fc:46:f6:c8:5f:9b:
02:49:e9:e0:01:39:34:59:90:d4:25:68:ca:79:6f:
a7:73:6c:eb:f0:7b:48:5f:60:be:c0:b4:a1:69:e4:
6b:6d:91:8d:49:6b:52:8e:be:63:0a:e7:6b:26:1e:
20:9d:3a:b0:44:0b:53:61:0f:fd:1b:4f:6e:41:d7:
30:a3:a9:c0:21:d2:7e:b9:e1:74:fb:50:6f:05:cd:
1e:89:99:45:de:2d:9d:9b:b8:15:37:6c:69:b8:bb:
81:92:e9:e3:cb:4d:f9:9a:a6:92:0b:41:e8:86:e4:
df:22:e0:7d:42:d7:5f:ff:3f:7a:3e:e0:1b:70:ea:
fc:22:57:55:ca:28:52:96:cd:b7:a2:63:21:dc:06:
13:56:e7:f2:ff:e1:35:19:5a:84:a9:42:bf:da:f5:
4e:e4:ef:27:85:2c:0c:e3:f1:34:df:f4:da:73:98:
85:2a:f8:73:a2:e6:2d:71:c4:0f:05:45:6a:af:5c:
a1:94:a0:7e:d8:3d:a0:6f:f7:26:08:8d:d1:4b:0b:
c6:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:6D:53:66:E1:6F:DB:FC:FF:D1:22:1D:93:12:E4:22:65:1B:2B:2F
X509v3 Authority Key Identifier:
keyid:8B:6A:23:A2:FD:1A:09:56:37:8A:37:D4:FC:E2:59:DF:2B:D7:94:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2ojov0aCVY3ijfU_OJZ3yvXlKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:fd:1e:b4:34:75:71:c1:9e:23:c8:4e:61:9e:96:c9:63:bb:
49:7e:4f:d2:b0:99:35:90:88:14:0a:e9:00:94:5f:31:d9:4c:
7f:c9:a5:1b:bd:3a:ab:a0:9f:66:9c:cc:b2:6e:f5:4d:8a:4d:
ee:78:68:b1:bc:50:d7:be:4f:1c:17:2e:9f:4f:16:70:19:9b:
3e:5d:1a:32:9c:67:f4:6b:ee:d2:33:0c:16:f4:db:46:8e:d9:
78:cd:2f:77:bd:d5:52:67:7f:bb:1b:fa:ea:79:00:3a:0e:56:
12:61:d5:dd:00:be:e8:77:25:21:0f:1f:c0:65:3e:cf:b4:a7:
92:de:3b:79:18:a2:67:a1:6e:9d:58:45:a6:1e:7c:d3:60:1c:
ad:58:4c:68:b0:f8:6f:e5:cf:da:ee:fa:70:0a:1e:22:80:0a:
36:8f:3a:89:7b:3c:3c:67:58:c8:f6:b6:7a:38:fd:fe:65:f3:
21:6a:58:cd:59:c2:7b:b5:2e:93:8a:68:80:8a:3d:88:8a:9a:
b0:06:ea:db:95:d3:24:5e:c7:d8:91:93:7c:15:77:0d:77:f4:
12:49:77:d4:2b:4d:1a:c4:8e:23:1d:1d:07:16:b9:0b:50:43:
19:35:6e:1d:c1:e8:76:50:a3:67:4e:d8:8e:01:f4:74:d1:c9:
d2:de:b0:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:53:20 2026 by rpki-client