Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.mft
File: IoNxG9erE9o9EfJbtXpPSDwfmaw.mft (raw, json)
Hash identifier: IIhNAAZht2B8dxN/iaHeGHTdt9G6CZNRgVXNZ+yxCOI=
Subject key identifier: AA:B1:FF:07:F1:CD:3B:57:18:CB:3E:E8:46:BE:CC:6C:F4:B6:0B:F1
Authority key identifier: 22:83:71:1B:D7:AB:13:DA:3D:11:F2:5B:B5:7A:4F:48:3C:1F:99:AC
Certificate issuer: /CN=2283711bd7ab13da3d11f25bb57a4f483c1f99ac
Certificate serial: 019FAD51606664852B3DD068719A66657F1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IoNxG9erE9o9EfJbtXpPSDwfmaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.mft
Manifest number: 19D6
Signing time: Wed 29 Jul 2026 10:00:19 +0000
Manifest this update: Wed 29 Jul 2026 10:00:19 +0000
Manifest next update: Thu 30 Jul 2026 10:00:19 +0000
Files and hashes: 1: IoNxG9erE9o9EfJbtXpPSDwfmaw.crl (hash: Dk9TqyO8ybPyxUCO0DsEO5zHvTp9Z3yqsoRjRqfp/cQ=)
2: M7U-ppZwsd4Y0hqrg3uFvL3fNF0.roa (hash: V5ZqVNY/FzC23usoRi5oNuuG/BK57r9pMG9x1bcd1BQ=)
3: ZD6ajEH0bv8mrB6nbh6DLa6EVFo.roa (hash: mzlpti+1V/oTEeIRtH/QUHo9IeJTt/iu7YBQ2fE92aA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/IoNxG9erE9o9EfJbtXpPSDwfmaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:51:60:66:64:85:2b:3d:d0:68:71:9a:66:65:7f:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2283711bd7ab13da3d11f25bb57a4f483c1f99ac
Validity
Not Before: Jul 29 10:00:19 2026 GMT
Not After : Jul 30 10:00:19 2026 GMT
Subject: CN=aab1ff07f1cd3b5718cb3ee846becc6cf4b60bf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:90:8d:26:f6:ad:7b:1d:dc:e7:5b:c9:96:fa:
d0:84:44:1f:82:3a:c7:db:e9:c3:c9:2e:db:85:12:
c3:39:03:36:7d:59:da:3a:1f:ee:2a:fb:22:11:ac:
b1:96:48:e4:78:c7:5c:7c:7f:63:34:41:71:29:21:
a5:25:24:1b:9e:4b:02:3d:90:c2:3b:6b:c8:82:50:
75:07:4b:c1:dc:31:87:2a:e5:6b:6c:88:9a:a5:7f:
bb:4f:08:eb:d6:6b:56:8e:e8:0f:bf:97:1a:6c:f6:
0d:f9:c1:ef:dc:b4:dd:ca:66:2d:1e:fc:b5:37:7a:
b7:09:5d:43:e3:29:21:2d:1e:cb:11:87:c0:9c:4a:
67:5f:9c:e3:1a:5a:db:4f:7d:fc:ba:b5:1d:ec:84:
4d:d8:67:5b:77:df:14:1a:16:d9:79:57:4a:4b:ad:
80:f1:71:95:b7:26:b5:5f:9f:0f:f9:31:7a:72:7c:
7b:1d:65:2d:6f:9a:b2:97:cc:7f:a3:da:99:d1:b6:
a5:83:6d:b6:9b:ee:86:9b:c4:cc:06:a6:23:f9:1d:
c4:ef:62:86:95:cf:f6:15:ee:17:17:f3:73:be:cc:
e7:62:82:dc:ad:3f:b5:47:43:09:d7:d7:2f:ab:38:
e4:72:17:42:0d:16:c8:2a:ab:6a:05:73:a7:b5:04:
db:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:B1:FF:07:F1:CD:3B:57:18:CB:3E:E8:46:BE:CC:6C:F4:B6:0B:F1
X509v3 Authority Key Identifier:
keyid:22:83:71:1B:D7:AB:13:DA:3D:11:F2:5B:B5:7A:4F:48:3C:1F:99:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IoNxG9erE9o9EfJbtXpPSDwfmaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:6e:69:5f:f7:a9:0e:9f:7e:8c:bb:9b:41:71:fc:68:fe:56:
81:66:a1:d1:eb:b7:80:16:ca:73:1e:ca:9e:2e:47:b9:4d:ce:
4b:e5:e0:ed:a3:fd:ef:cd:ef:6c:56:37:c1:85:66:77:b6:2b:
59:b3:37:6a:06:a3:16:c3:d5:0c:71:7f:d9:9c:f1:aa:80:d8:
d0:9c:32:c7:b1:90:a6:75:4e:e0:6a:80:fa:8b:45:7d:eb:5c:
ed:0b:78:21:18:ef:f4:b1:12:f4:34:39:43:bb:70:21:ec:93:
31:46:d9:01:91:98:6c:c9:14:cf:a2:6e:20:3d:44:d4:73:f8:
b2:51:b3:27:57:00:b6:9e:24:64:13:2c:85:91:8b:4b:75:24:
25:55:6f:93:d6:60:a0:e3:ba:c9:e4:1e:85:47:7e:7b:8a:62:
f0:c1:73:c5:3e:91:64:19:47:fc:5f:56:4e:a9:55:74:50:2f:
30:b5:a9:e8:cb:5b:f7:ce:c9:3c:ce:05:7b:14:c5:68:75:4c:
91:e2:6c:87:0e:fd:1e:9d:3c:e4:7c:a7:c9:ab:79:5b:91:37:
b5:6a:b5:dd:2f:31:3a:b2:45:a7:06:e5:95:80:b8:f5:2b:b8:
7f:e4:f8:54:d0:51:6a:fb:04:cf:07:df:b2:63:d3:ce:47:04:
e2:a0:92:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:04:33 2026 by rpki-client