Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.mft
File: IQH0Od66_1iAOV148Lv62Mp2CL8.mft (raw, json)
Hash identifier: rJ/eLUBZLpj38f9swaIxni/gZg6wcVRtHYo0Xc4iPSk=
Subject key identifier: 0B:58:E8:38:58:64:15:E1:8A:F8:96:30:7E:C5:82:55:46:A1:7C:84
Authority key identifier: 21:01:F4:39:DE:BA:FF:58:80:39:5D:78:F0:BB:FA:D8:CA:76:08:BF
Certificate issuer: /CN=2101f439debaff5880395d78f0bbfad8ca7608bf
Certificate serial: 019FAC770E7CEB5CD7F138F1579E4D04EFF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQH0Od66_1iAOV148Lv62Mp2CL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.mft
Manifest number: 1091
Signing time: Wed 29 Jul 2026 06:01:51 +0000
Manifest this update: Wed 29 Jul 2026 06:01:51 +0000
Manifest next update: Thu 30 Jul 2026 06:01:51 +0000
Files and hashes: 1: IQH0Od66_1iAOV148Lv62Mp2CL8.crl (hash: oe5iPWFwGGbzUGUyAyJPzbKQ0PQZVWQzdEhShE0fTsU=)
2: LIiML1O5GYrYT2OXv04_3crEOSo.roa (hash: GEv40+sowJMzMWvtaNBUTp1Lf4CV4ySJkJ0S9aCKf/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQH0Od66_1iAOV148Lv62Mp2CL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:77:0e:7c:eb:5c:d7:f1:38:f1:57:9e:4d:04:ef:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2101f439debaff5880395d78f0bbfad8ca7608bf
Validity
Not Before: Jul 29 06:01:51 2026 GMT
Not After : Jul 30 06:01:51 2026 GMT
Subject: CN=0b58e838586415e18af896307ec5825546a17c84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2c:b4:38:6b:c2:16:08:56:50:23:7a:c0:d7:
81:77:11:bd:1b:33:b3:ab:f7:5c:34:60:40:33:db:
45:8c:45:ef:d1:6e:18:2d:e5:87:31:75:aa:81:12:
a7:33:d2:b9:5c:29:34:57:33:1d:78:88:e3:d8:68:
ec:22:4e:ac:7f:42:85:0d:85:53:fa:6a:bb:08:c0:
d4:8c:ee:91:b0:d1:15:2a:06:94:2e:3d:bc:e6:8f:
6b:5b:42:7e:79:2b:14:91:1a:c3:32:4f:e9:9b:3f:
ac:f4:c0:a7:9e:48:9a:0c:32:b9:52:50:24:47:8e:
73:17:d3:25:f8:dc:2f:ae:83:1d:28:b6:eb:2f:37:
96:87:ff:a3:27:74:4b:36:f3:c1:d1:68:ff:b9:a5:
7b:8d:72:22:7c:16:26:46:1c:c5:27:05:ee:12:1b:
d4:80:d9:11:ca:ee:ee:b5:bd:fa:9b:61:74:13:14:
0d:a3:92:7b:e3:4d:34:c6:1e:d5:69:86:e0:c1:96:
0d:ff:a0:71:0c:e6:bd:ef:33:ef:d9:bd:69:bc:64:
11:93:29:86:2c:8c:ff:30:05:5c:22:8e:0f:f2:d9:
81:fd:29:d5:b7:17:c8:74:8b:d8:f0:53:93:f4:53:
dc:ee:c3:e8:4a:19:0f:eb:ef:3c:a9:e9:9a:d2:ec:
ef:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:58:E8:38:58:64:15:E1:8A:F8:96:30:7E:C5:82:55:46:A1:7C:84
X509v3 Authority Key Identifier:
keyid:21:01:F4:39:DE:BA:FF:58:80:39:5D:78:F0:BB:FA:D8:CA:76:08:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQH0Od66_1iAOV148Lv62Mp2CL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:d8:ef:f4:87:b3:31:ef:95:b1:d6:bc:a6:64:ae:4f:53:00:
0e:71:43:cd:bb:9b:2d:c3:11:f6:81:30:90:1e:fa:d4:f5:6a:
15:68:7a:db:d9:9c:67:ea:ea:07:7e:1e:1a:0b:ce:57:27:d8:
51:00:97:bd:45:21:f1:08:ae:13:b1:4d:83:55:18:6d:39:84:
5e:bb:be:d3:3b:7f:67:80:9f:d7:a2:ce:31:21:f6:ea:ff:b5:
3b:88:57:19:d8:38:93:7f:d5:16:e4:44:32:18:75:75:33:68:
09:43:1e:6b:9e:e5:2f:79:5a:12:2a:23:e6:61:c9:84:4b:aa:
38:98:f2:aa:32:41:e5:6d:3f:c5:3f:b1:77:c8:39:a6:11:68:
4d:a2:9a:82:bc:8c:25:27:d0:4d:37:8a:d8:2f:f7:06:81:21:
b6:a7:fe:16:f1:9a:7b:68:8f:72:f9:d3:19:90:a0:7f:3e:9a:
a8:62:e2:e4:dd:40:a7:c2:3f:f0:94:d9:72:24:6e:a0:17:07:
27:3a:38:6c:4e:ee:c5:15:22:da:70:52:49:59:e8:bc:58:88:
82:42:15:4c:24:7a:50:8e:b0:63:7b:fc:51:ea:21:08:54:1d:
7f:84:ac:85:8c:d2:a1:ca:05:60:8b:4a:60:51:9b:a7:87:e1:
3b:e9:ab:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:06:06 2026 by rpki-client