Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.mft
File: iKeAc4uFOs_7q9sjkUxQ42Qh93M.mft (raw, json)
Hash identifier: RfPMQr7doHRF8SclSaeeKnCPZWwIGR1VzM+k0s1ppn8=
Subject key identifier: 12:41:E3:63:4D:7D:36:6A:BF:10:C6:83:32:3C:CB:37:69:15:22:6F
Authority key identifier: 88:A7:80:73:8B:85:3A:CF:FB:AB:DB:23:91:4C:50:E3:64:21:F7:73
Certificate issuer: /CN=88a780738b853acffbabdb23914c50e36421f773
Certificate serial: 019FAB9A075E3767FD77998BCB253E5478D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iKeAc4uFOs_7q9sjkUxQ42Qh93M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.mft
Manifest number: 19D6
Signing time: Wed 29 Jul 2026 02:00:26 +0000
Manifest this update: Wed 29 Jul 2026 02:00:26 +0000
Manifest next update: Thu 30 Jul 2026 02:00:26 +0000
Files and hashes: 1: cqgfNLDExy7FaffRoXOKMQXtqL4.roa (hash: TWz48Wr5Z6qhNEoUkqeyNmR7SZVnU/2APhq7EOM+kUQ=)
2: iKeAc4uFOs_7q9sjkUxQ42Qh93M.crl (hash: sI3h3b+LZWaLgyIsTVixthdpsSAlRMe6E2GrHpXHPSw=)
3: wy6ybCdcWedAi4Mt3ixAA7PS5a0.roa (hash: G/CGlMinA8eb2TiqC5edW4JcIc15BJpfk+/kohiZa2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.mft
rsync://rpki.ripe.net/repository/DEFAULT/iKeAc4uFOs_7q9sjkUxQ42Qh93M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:9a:07:5e:37:67:fd:77:99:8b:cb:25:3e:54:78:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88a780738b853acffbabdb23914c50e36421f773
Validity
Not Before: Jul 29 02:00:26 2026 GMT
Not After : Jul 30 02:00:26 2026 GMT
Subject: CN=1241e3634d7d366abf10c683323ccb376915226f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:7d:36:55:39:9b:76:99:dd:c9:fd:a0:ba:e7:
b7:4d:54:50:fd:00:90:60:39:ba:59:14:06:65:22:
e5:9d:21:26:3e:ab:e6:17:8f:40:ba:ad:23:ce:08:
f4:7d:e4:4f:d1:b0:cc:20:23:4e:1e:d5:43:e6:90:
9d:b1:b7:35:48:a0:00:82:f0:63:7f:13:eb:b4:20:
a8:fc:d9:3b:e0:51:0c:ba:e5:05:73:6b:90:56:81:
72:c7:90:58:0b:e4:87:a3:4c:23:ff:46:42:3f:f4:
da:d3:81:a3:cf:e7:e7:bf:0f:cf:7f:b8:af:05:a8:
42:ff:9f:08:5d:ad:40:fe:a0:e9:7a:f1:af:a8:96:
df:aa:94:3c:3a:17:8d:48:fd:9b:5a:de:4c:1a:5b:
c6:3c:8d:0d:ea:b9:91:f9:75:9e:07:e6:64:be:0f:
d0:dd:e2:95:5b:b2:f4:66:22:32:91:7c:60:55:9a:
2e:07:c3:ee:43:ce:14:24:f4:38:b3:ed:0d:e3:c0:
69:ee:c5:f1:1b:eb:04:9a:6d:af:e4:3e:38:d8:ca:
ec:db:44:7f:df:a3:41:cb:39:e3:83:6d:a4:b3:68:
a7:b3:7b:ed:07:19:68:82:91:06:a2:58:b0:f0:29:
3d:48:0a:9d:29:40:f2:15:d9:c0:6e:43:c5:42:6d:
49:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:41:E3:63:4D:7D:36:6A:BF:10:C6:83:32:3C:CB:37:69:15:22:6F
X509v3 Authority Key Identifier:
keyid:88:A7:80:73:8B:85:3A:CF:FB:AB:DB:23:91:4C:50:E3:64:21:F7:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKeAc4uFOs_7q9sjkUxQ42Qh93M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:66:90:6b:f6:c8:03:fc:e3:c7:7a:7c:e3:30:0e:4b:8f:a9:
34:25:2f:83:8f:60:f2:b4:54:2c:19:34:ff:99:53:f5:3d:ab:
f5:80:3c:dc:3a:ce:22:79:1a:15:0e:7c:67:97:37:6d:83:ba:
a6:81:58:fe:93:9f:41:b5:d2:0c:b7:31:0d:a2:38:46:5d:bb:
96:66:8e:9a:bf:b0:95:c1:ea:43:bd:90:68:16:26:06:16:4a:
f7:31:16:4e:38:bb:c6:4d:6c:76:b0:9f:50:46:37:64:f1:87:
6d:fa:dd:f4:4b:cf:4f:df:8f:34:dd:f5:4a:08:66:e4:56:a4:
04:eb:1c:ac:0f:43:a5:8a:8b:35:29:90:77:78:33:d1:76:c4:
be:27:7b:8c:40:73:13:f6:50:00:c3:82:28:88:19:1a:e0:12:
61:1f:36:f8:da:e3:36:a0:8e:5e:d3:61:d3:2e:26:cd:c2:b6:
4a:28:e3:9c:d8:4c:92:1b:a7:6e:73:16:f4:93:d9:b6:c2:5e:
6e:41:7a:a2:11:06:42:22:0c:28:a4:3c:ad:33:3b:a8:cc:1f:
f1:8c:f5:52:9a:9b:9a:a8:ef:1b:10:0e:e2:08:94:c7:88:94:
40:e2:23:9b:d2:52:be:48:b3:a1:24:77:d6:cd:ea:d7:22:2c:
25:f7:bf:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:15:43 2026 by rpki-client