Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.mft
File: I_XCWFOCCEeS8TrRlyBe_dJ1LfI.mft (raw, json)
Hash identifier: 2EIUeUfwqXv2Wp5NgfrrbQFqnt7uD7iZeMfB4q/uX1Y=
Subject key identifier: FF:39:7C:8F:50:0F:5E:BC:80:42:96:CC:21:E1:A9:4A:EA:59:04:48
Authority key identifier: 23:F5:C2:58:53:82:08:47:92:F1:3A:D1:97:20:5E:FD:D2:75:2D:F2
Certificate issuer: /CN=23f5c2585382084792f13ad197205efdd2752df2
Certificate serial: 019FABD125599B4B1A13B6024E35E95249BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.mft
Manifest number: 0382
Signing time: Wed 29 Jul 2026 03:00:38 +0000
Manifest this update: Wed 29 Jul 2026 03:00:38 +0000
Manifest next update: Thu 30 Jul 2026 03:00:38 +0000
Files and hashes: 1: I_XCWFOCCEeS8TrRlyBe_dJ1LfI.crl (hash: DSpyVDsEPupIUS+VY+WpGSCDckOn+NF9OvacISjEcA0=)
2: ayEAcT6oCdclXkVG2FkLRzZ9mOw.roa (hash: 7P+K2VYLnbm0w74/RJLkFBdqeqXQaGd7I3w+dIasZpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:d1:25:59:9b:4b:1a:13:b6:02:4e:35:e9:52:49:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23f5c2585382084792f13ad197205efdd2752df2
Validity
Not Before: Jul 29 03:00:38 2026 GMT
Not After : Jul 30 03:00:38 2026 GMT
Subject: CN=ff397c8f500f5ebc804296cc21e1a94aea590448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7e:c6:bb:63:44:2d:8f:16:2a:b4:d3:94:a2:
b3:60:c2:13:5c:83:e5:c6:f8:1d:0f:1a:73:65:a8:
4b:7a:10:4e:7e:0f:46:6e:5f:cd:38:b8:53:83:c4:
df:87:e8:5e:ed:31:b4:32:c9:d2:89:ce:53:c0:80:
f0:88:58:96:db:d8:50:be:dc:1f:c9:91:af:c0:ae:
61:f7:cf:34:42:57:33:cc:2a:d2:e0:0d:1f:db:13:
a1:e2:b9:17:6e:c7:29:64:49:14:ee:6f:55:a5:c1:
d8:51:88:9f:d8:08:bd:20:f7:da:c9:06:99:58:c1:
6e:f6:da:42:d6:f2:87:5f:0c:28:03:ab:2f:dc:13:
03:11:b8:87:42:46:bf:b1:0f:67:30:e7:aa:1f:63:
7e:f6:ef:f3:e4:c0:a2:b9:ad:42:3c:fe:f4:72:2a:
90:eb:cf:e7:93:8c:83:d4:43:12:c2:2c:0a:c5:80:
56:0e:f9:89:f6:35:7c:84:74:ef:ad:ab:47:98:87:
4a:1e:a7:4e:33:39:ff:77:56:44:e2:44:16:e5:81:
d1:58:e5:7e:2f:ed:07:b0:87:54:a8:15:44:32:95:
1e:45:16:14:37:b0:72:3e:97:98:b3:68:11:bc:a2:
ed:d4:e2:1b:a8:6a:06:44:11:71:9b:31:f3:3c:f0:
0c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:39:7C:8F:50:0F:5E:BC:80:42:96:CC:21:E1:A9:4A:EA:59:04:48
X509v3 Authority Key Identifier:
keyid:23:F5:C2:58:53:82:08:47:92:F1:3A:D1:97:20:5E:FD:D2:75:2D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:68:61:a7:d2:88:15:bc:58:26:fb:d8:3a:70:d9:39:4f:70:
01:a9:b3:19:52:d0:dc:6f:84:70:3c:b3:09:88:1c:45:88:19:
63:3c:2d:84:b8:db:28:d7:62:2c:49:81:27:b3:d7:8a:51:8b:
94:01:26:de:c7:d4:09:f5:4d:a2:73:e4:7b:c6:38:bb:6f:f7:
fa:19:46:f6:d8:41:fa:d5:42:f3:5b:9c:f1:10:16:5b:cf:0d:
db:2c:de:0d:4b:b0:c3:97:fd:31:78:18:79:28:69:ac:d2:64:
c9:de:bf:eb:84:ae:19:dc:7d:7d:6d:b1:be:50:eb:d9:cd:b6:
46:47:eb:42:2a:d5:7e:87:2a:e3:14:16:96:2a:cc:29:3d:71:
70:44:14:07:25:bc:80:87:92:71:d5:fc:b9:32:23:29:1c:a0:
09:8c:3c:1b:61:b0:61:47:98:6b:f4:9e:34:4b:dc:21:d1:73:
ce:9f:36:a7:8b:1a:b3:bb:5e:ed:56:2c:29:a7:f5:36:b6:e9:
f2:f7:c1:bb:1f:1b:af:ee:05:63:ce:d5:e7:88:8f:76:da:d6:
0c:29:08:86:02:ef:d4:2c:64:f4:3c:5a:27:2a:f6:36:81:65:
bd:ee:1f:68:08:1e:d0:79:78:db:50:80:7b:4e:f9:3d:4c:e8:
bf:23:bb:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:26:40 2026 by rpki-client