Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.mft
File: izGWcRDKvuxKZreAN-Uqh7K8j10.mft (raw, json)
Hash identifier: 6+ph6NARt1BCBhz19fBv9weySDOy7JqZ0i+Nna5X3HU=
Subject key identifier: 34:63:00:58:54:AD:DA:04:B8:EE:43:AB:C9:DD:1F:7A:53:84:15:B8
Authority key identifier: 8B:31:96:71:10:CA:BE:EC:4A:66:B7:80:37:E5:2A:87:B2:BC:8F:5D
Certificate issuer: /CN=8b31967110cabeec4a66b78037e52a87b2bc8f5d
Certificate serial: 019FAA8842FC97557E3EC5443F9327DA8CA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izGWcRDKvuxKZreAN-Uqh7K8j10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.mft
Manifest number: 16CF
Signing time: Tue 28 Jul 2026 21:01:24 +0000
Manifest this update: Tue 28 Jul 2026 21:01:24 +0000
Manifest next update: Wed 29 Jul 2026 21:01:24 +0000
Files and hashes: 1: 96n2FzRjkBX11HWVM9i_vNB-31E.roa (hash: 9OIDnPnlJZEwGjTFAXCdBpYg5ywi9zAXI41Z4fWCG4k=)
2: izGWcRDKvuxKZreAN-Uqh7K8j10.crl (hash: IiWDiqrlOb2vMbbR035rgKf/GYp/redgkglyC9cV9MA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.mft
rsync://rpki.ripe.net/repository/DEFAULT/izGWcRDKvuxKZreAN-Uqh7K8j10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:42:fc:97:55:7e:3e:c5:44:3f:93:27:da:8c:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b31967110cabeec4a66b78037e52a87b2bc8f5d
Validity
Not Before: Jul 28 21:01:24 2026 GMT
Not After : Jul 29 21:01:24 2026 GMT
Subject: CN=3463005854adda04b8ee43abc9dd1f7a538415b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b9:a2:29:fe:9d:c2:ff:2f:a4:93:7f:2a:f4:
86:4a:61:fb:69:51:8b:92:01:60:46:d9:19:1f:81:
7a:f8:0d:7e:75:fd:05:a9:3a:e2:6c:78:7b:19:2b:
57:f8:9b:da:00:c9:f3:ae:d3:08:f3:12:38:b6:73:
1d:d9:ba:2f:84:11:1f:13:ad:c3:ba:77:da:7c:23:
40:de:91:5d:fd:08:4b:1d:95:8b:ae:73:a4:68:27:
94:32:15:2b:8b:d1:5a:b6:8c:3b:0d:36:2c:eb:19:
fc:fc:74:f3:a2:cf:dd:18:bf:47:35:d9:c1:fd:d5:
ef:d5:81:d9:0c:99:e0:c0:14:1b:11:e3:08:62:13:
f1:42:7d:b8:a9:17:2a:db:ab:f9:89:08:3d:d7:19:
b1:42:e1:0e:94:cb:f3:aa:7f:db:e0:c0:b5:d6:29:
5a:c1:14:37:de:c1:f0:20:2e:db:a2:35:0f:82:6d:
ba:cf:89:8a:de:4f:4c:d3:f3:d8:ab:a9:6b:14:8d:
a6:df:00:d4:ae:a9:a5:ee:dc:3a:ff:97:7c:6a:f1:
b5:eb:5c:7e:cc:fd:ec:72:48:57:45:18:f0:63:58:
0c:b1:00:31:05:ce:fc:45:76:b1:4a:bf:aa:03:ff:
07:a6:f4:6d:40:86:a7:5b:4b:38:7d:6a:ba:f4:3f:
ec:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:63:00:58:54:AD:DA:04:B8:EE:43:AB:C9:DD:1F:7A:53:84:15:B8
X509v3 Authority Key Identifier:
keyid:8B:31:96:71:10:CA:BE:EC:4A:66:B7:80:37:E5:2A:87:B2:BC:8F:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izGWcRDKvuxKZreAN-Uqh7K8j10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:cf:53:99:06:81:2b:09:4b:6b:ee:03:98:dc:c7:e2:be:11:
42:c5:36:44:d6:95:08:d3:a9:1b:b9:a5:2e:fd:5b:43:ad:7b:
13:9a:c4:21:dd:6a:2c:86:31:d4:27:42:4b:32:55:44:70:b2:
5c:9d:54:d6:1f:7a:af:2c:20:d5:be:19:65:11:b8:07:68:5e:
77:ca:35:14:19:0a:7c:80:dc:26:0e:06:f5:04:5d:21:31:49:
98:5d:36:92:54:e1:1d:20:d2:5a:21:e9:87:b3:43:f5:c1:14:
ad:b3:79:95:35:fc:61:7f:05:a9:30:d9:e1:ce:56:88:3c:9c:
14:ab:c0:2f:95:8a:0b:dc:4a:98:82:8a:81:59:09:0e:ac:ac:
1f:03:46:53:e7:2a:32:16:9b:9f:2d:4d:7d:29:3a:3e:fa:13:
d3:c7:5f:d1:b5:94:a9:02:63:e4:8e:d1:86:c5:8f:88:dc:68:
b3:16:0b:fa:1c:c0:8f:b0:9a:cb:45:a0:92:b4:e0:f9:93:0e:
70:1f:0c:e3:a7:dc:af:c8:f7:a2:84:8c:50:69:e7:d7:79:22:
68:27:86:9c:f1:1c:e9:df:25:75:ce:54:cd:22:c5:04:4d:1a:
a5:9f:4d:f5:1a:78:d5:9e:c3:35:0a:74:b1:bd:ec:89:ff:03:
41:d1:bf:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:42:28 2026 by rpki-client