Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/0d57ff-5530-460d-8b53-b6656cc1bd59/1/IUoPQhkJRKxrReAKJK5Bo0X9yzU.mft
File: IUoPQhkJRKxrReAKJK5Bo0X9yzU.mft (raw, json)
Hash identifier: dbaiJoneNpzLMFFyzOoLk9AszZJgiyCXdeB7ibT6Jjw=
Subject key identifier: BB:E4:DC:93:EB:41:9C:9D:24:5A:52:93:FF:7C:20:C3:6E:EE:1F:52
Authority key identifier: 21:4A:0F:42:19:09:44:AC:6B:45:E0:0A:24:AE:41:A3:45:FD:CB:35
Certificate issuer: /CN=214a0f42190944ac6b45e00a24ae41a345fdcb35
Certificate serial: 019FAAF5C6D53C6DFBA362D3C76B14EA52FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IUoPQhkJRKxrReAKJK5Bo0X9yzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/0d57ff-5530-460d-8b53-b6656cc1bd59/1/IUoPQhkJRKxrReAKJK5Bo0X9yzU.mft
Manifest number: 19D4
Signing time: Tue 28 Jul 2026 23:01:01 +0000
Manifest this update: Tue 28 Jul 2026 23:01:01 +0000
Manifest next update: Wed 29 Jul 2026 23:01:01 +0000
Files and hashes: 1: IUoPQhkJRKxrReAKJK5Bo0X9yzU.crl (hash: fUkeSXLgypuBtIjbHCcVSjDLp1Q0eewx1XV+zM0QhUk=)
2: ToOm_DRG8L881LK0bTvQrJEi9zE.roa (hash: DCNqoXRqfdwODxjtc8J2/AVxGOKRF24UDLD2fHtc4vM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/0d57ff-5530-460d-8b53-b6656cc1bd59/1/IUoPQhkJRKxrReAKJK5Bo0X9yzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/0d57ff-5530-460d-8b53-b6656cc1bd59/1/IUoPQhkJRKxrReAKJK5Bo0X9yzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IUoPQhkJRKxrReAKJK5Bo0X9yzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:c6:d5:3c:6d:fb:a3:62:d3:c7:6b:14:ea:52:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=214a0f42190944ac6b45e00a24ae41a345fdcb35
Validity
Not Before: Jul 28 23:01:01 2026 GMT
Not After : Jul 29 23:01:01 2026 GMT
Subject: CN=bbe4dc93eb419c9d245a5293ff7c20c36eee1f52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a5:cd:a2:d9:fa:9c:d2:2b:c6:f8:b2:61:52:
3e:15:e1:83:d6:96:e0:1d:b7:d4:23:0d:e1:73:75:
ee:50:63:ca:3d:d9:a8:cb:a7:a5:74:6e:63:d5:a4:
8d:b2:5c:97:8d:c5:55:91:da:19:32:8b:03:e1:14:
04:d9:8f:e4:29:11:2d:5f:16:d2:9e:25:33:1e:51:
b1:e3:04:ba:60:4f:64:3a:65:ce:ca:23:7d:f6:80:
b0:c1:67:d2:1a:c7:c1:fe:0f:15:1e:57:97:39:ad:
39:03:79:bd:03:e1:62:51:2e:12:e5:13:4d:f2:1e:
4c:a9:36:26:94:e5:59:4e:b8:2b:91:7f:25:19:3f:
09:8a:1e:f3:1f:9a:4b:a9:d3:1d:f4:78:14:60:30:
a1:f4:a4:fe:84:41:47:de:8a:cb:2a:e4:14:d0:70:
48:d6:52:0f:58:07:f3:31:eb:b2:52:62:86:f1:07:
4f:c9:76:f0:c4:ea:52:27:a5:e7:ca:c6:20:b7:8d:
30:40:25:eb:d1:54:81:b8:2d:0b:93:8c:c2:d0:d8:
34:aa:21:1d:0f:45:2b:4e:dd:aa:af:cf:f6:96:e7:
c0:01:0d:ac:da:cf:33:4b:f0:ac:52:e0:8e:fc:b8:
0c:e0:3b:43:86:52:e8:2e:c9:7b:93:e4:c4:0c:88:
a6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:E4:DC:93:EB:41:9C:9D:24:5A:52:93:FF:7C:20:C3:6E:EE:1F:52
X509v3 Authority Key Identifier:
keyid:21:4A:0F:42:19:09:44:AC:6B:45:E0:0A:24:AE:41:A3:45:FD:CB:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IUoPQhkJRKxrReAKJK5Bo0X9yzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/0d57ff-5530-460d-8b53-b6656cc1bd59/1/IUoPQhkJRKxrReAKJK5Bo0X9yzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/0d57ff-5530-460d-8b53-b6656cc1bd59/1/IUoPQhkJRKxrReAKJK5Bo0X9yzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:d7:a8:f2:f1:e3:e7:f0:ee:4a:f7:ea:6b:28:9a:74:b3:0a:
25:87:4f:ac:f1:93:74:64:71:fd:0f:2c:fb:28:b6:0e:86:5b:
61:49:01:85:4f:cb:66:e4:7b:e7:c3:1c:1d:a5:31:a6:fc:26:
a6:6d:79:17:5f:d3:93:c7:3c:c2:8d:45:26:ae:de:cb:a0:22:
9f:4c:c3:a9:a4:21:00:c1:52:61:d0:f7:29:2c:71:a4:b4:d4:
a3:bd:a0:08:9c:2e:d2:69:b6:0e:93:48:1f:cd:bd:42:f8:9b:
3d:65:c6:b0:39:ab:0e:a1:19:77:4e:bf:3b:eb:fb:6f:44:87:
55:af:c7:e5:85:c2:1f:28:6e:ca:e0:91:75:b1:d3:cc:4e:91:
71:19:76:c4:f5:9d:87:d9:80:40:4f:96:85:4f:3b:3a:5a:d9:
08:cc:c2:09:a5:97:87:c0:8f:95:df:55:c4:a9:67:75:bc:f7:
0b:11:2f:5a:25:82:85:20:54:a4:0a:d8:f9:5c:d6:3d:ea:42:
e1:c4:98:4c:4b:2d:b9:d1:17:4d:b6:f8:d1:fe:80:9f:4e:1c:
e2:f3:b9:e2:2f:1b:ba:87:5e:37:3b:9c:56:d9:45:30:89:3d:
4d:6e:29:de:40:0c:d5:5b:99:c6:56:8c:de:39:c1:d1:38:0a:
b5:91:20:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:37:40 2026 by rpki-client