Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft
File: iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft (raw, json)
Hash identifier: zuCs1DtDXha50spoGuHXR7xg+AW2gr5FwW0L/i40h1k=
Subject key identifier: 45:B6:F8:25:C3:3F:20:1A:34:D7:26:BA:D0:3A:A4:72:D8:73:B1:7B
Authority key identifier: 88:44:FC:4A:E1:06:49:9E:05:75:FF:3C:A1:55:6D:BC:0D:9B:46:51
Certificate issuer: /CN=8844fc4ae106499e0575ff3ca1556dbc0d9b4651
Certificate serial: 019FACE49E58827FB1A639D2CFBACBC1B25B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iET8SuEGSZ4Fdf88oVVtvA2bRlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft
Manifest number: 192E
Signing time: Wed 29 Jul 2026 08:01:31 +0000
Manifest this update: Wed 29 Jul 2026 08:01:31 +0000
Manifest next update: Thu 30 Jul 2026 08:01:31 +0000
Files and hashes: 1: OEVAvwrSHNV-uvr55oxdFx7xxxQ.roa (hash: tRxB0SccSN5sh50OIxV7iRImD06pzo5OWnyES6cYcyc=)
2: aeU9_Yx1c9nw1y-4xtz44SqG1m0.roa (hash: 0t0fFg5NYuzbKW5UvLMqmaiFIgFM8FNQ8jsxvVeiMB0=)
3: iET8SuEGSZ4Fdf88oVVtvA2bRlE.crl (hash: Xwas/zgQMJ+Tb/xBk5VXOZL/SqdSxHDfpnvv8KHhV8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/iET8SuEGSZ4Fdf88oVVtvA2bRlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:e4:9e:58:82:7f:b1:a6:39:d2:cf:ba:cb:c1:b2:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8844fc4ae106499e0575ff3ca1556dbc0d9b4651
Validity
Not Before: Jul 29 08:01:31 2026 GMT
Not After : Jul 30 08:01:31 2026 GMT
Subject: CN=45b6f825c33f201a34d726bad03aa472d873b17b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:03:44:19:4b:47:36:ef:1b:a5:35:ae:59:dc:
a6:67:ca:e7:26:ce:2d:4c:e5:08:ae:35:d7:72:8a:
e2:da:a4:29:f0:a4:96:67:c7:07:34:14:c5:31:82:
78:5c:4c:b3:9d:cd:d8:1d:4e:ab:63:18:a3:df:fd:
82:be:08:8f:51:da:23:8b:6b:a8:92:fc:c4:25:f6:
8b:a2:97:b9:98:04:39:e1:e5:57:f4:4f:a3:ce:bc:
d2:20:c1:67:34:32:d4:d7:df:b1:55:b5:cd:8b:66:
25:ab:dc:8b:ad:c5:b7:46:f0:57:7c:5f:d8:1c:59:
07:18:e5:02:d1:0a:86:cf:7d:53:b7:21:45:d1:cd:
bc:6a:95:54:5f:7e:e1:bb:1a:93:95:04:ea:4f:1b:
2e:7b:11:8a:47:42:39:97:ea:ae:2e:e2:68:09:35:
60:5c:dd:b8:2d:b3:0f:cb:73:ad:12:15:64:cd:3d:
f8:9e:cd:b7:8d:bf:9b:7f:20:4c:fa:bc:d4:cb:c5:
97:5a:1a:a4:da:82:3c:d2:a5:71:78:a4:72:9c:d9:
c6:ae:46:5e:48:f9:06:2f:6d:30:43:a0:b3:07:ea:
06:d0:83:f8:7f:37:07:c9:93:37:a2:26:c2:6e:b2:
09:c4:07:9f:c8:34:3a:67:71:f9:11:b2:43:88:83:
98:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:B6:F8:25:C3:3F:20:1A:34:D7:26:BA:D0:3A:A4:72:D8:73:B1:7B
X509v3 Authority Key Identifier:
keyid:88:44:FC:4A:E1:06:49:9E:05:75:FF:3C:A1:55:6D:BC:0D:9B:46:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iET8SuEGSZ4Fdf88oVVtvA2bRlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:a7:fa:e7:d2:a0:75:bb:f2:d6:33:78:8d:b8:86:1d:1f:e5:
ec:c5:64:5c:30:f3:37:4c:a5:42:28:cd:9e:70:14:7c:cb:6c:
b6:c2:79:90:6b:0f:10:5e:e2:74:4d:3f:42:43:4b:83:9c:64:
b6:d4:87:d9:ea:06:67:05:1c:84:82:4d:a6:de:47:bd:62:0a:
d7:73:6a:c0:c1:5c:00:4f:1e:f4:b9:7f:64:87:d3:f2:e2:4d:
ce:6f:a5:0a:ac:5b:5b:d2:b6:a0:24:6f:e9:8e:21:55:54:f1:
ed:1b:45:c6:95:4d:3b:ed:b3:9d:c2:8c:d4:7f:a3:de:75:89:
70:c4:ff:08:c2:91:a4:1b:bb:4e:ce:5d:02:7f:65:a2:e4:70:
83:19:a9:94:2a:49:2b:91:73:3f:9b:e8:da:a1:65:fb:9b:10:
f8:74:3e:0e:f3:00:b6:b9:b2:2a:31:2b:71:77:ac:6c:17:1b:
0f:be:4f:24:78:40:2b:46:8f:8d:9b:38:54:c0:d3:17:c9:19:
fe:44:75:06:a0:af:f0:c8:48:c9:07:07:8f:9f:ec:30:5f:f3:
f6:7f:ef:55:2c:42:61:4b:38:a9:52:00:fe:d1:5a:c1:f9:38:
88:6e:b0:dc:c1:2c:4e:0e:9f:f5:b3:bd:9f:e9:d3:ad:5d:34:
aa:df:35:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:09:43 2026 by rpki-client