Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/IiiCdVNULJSfFKzFYZw4aimzL2g.mft
File: IiiCdVNULJSfFKzFYZw4aimzL2g.mft (raw, json)
Hash identifier: ibDHJD8NcN+03oD6Nfc/hJ+Q3ksZQNXxVpLuFXa7mhM=
Subject key identifier: 76:1A:3A:FF:4A:ED:CD:03:20:9A:ED:94:E3:91:5C:E8:57:2B:0A:2D
Authority key identifier: 22:28:82:75:53:54:2C:94:9F:14:AC:C5:61:9C:38:6A:29:B3:2F:68
Certificate issuer: /CN=2228827553542c949f14acc5619c386a29b32f68
Certificate serial: 019FA89937EA622F3AEBF8D4093BD291C74A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IiiCdVNULJSfFKzFYZw4aimzL2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/IiiCdVNULJSfFKzFYZw4aimzL2g.mft
Manifest number: 4C
Signing time: Tue 28 Jul 2026 12:00:41 +0000
Manifest this update: Tue 28 Jul 2026 12:00:41 +0000
Manifest next update: Wed 29 Jul 2026 12:00:41 +0000
Files and hashes: 1: 1-0P5V5UyueMNdvNd2DfvuSJDLmI.asa (hash: nyGQDkF0li5XOfPiwvvNf9NjNB6Be0Rtz+hzPp9tCT8=)
2: IiiCdVNULJSfFKzFYZw4aimzL2g.crl (hash: HXLJLmZKgfcAY3k4GNcrajVecAaz0EmbtsP+GDqmdmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/IiiCdVNULJSfFKzFYZw4aimzL2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/IiiCdVNULJSfFKzFYZw4aimzL2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/IiiCdVNULJSfFKzFYZw4aimzL2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:37:ea:62:2f:3a:eb:f8:d4:09:3b:d2:91:c7:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2228827553542c949f14acc5619c386a29b32f68
Validity
Not Before: Jul 28 12:00:41 2026 GMT
Not After : Jul 29 12:00:41 2026 GMT
Subject: CN=761a3aff4aedcd03209aed94e3915ce8572b0a2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:04:d0:36:8d:12:b3:87:60:b8:99:b0:4a:b6:
80:d3:44:1a:f9:88:10:a9:90:6c:17:04:6e:8b:a5:
c9:2f:bf:f2:12:ee:f8:02:a0:55:8f:54:52:4f:37:
9a:3b:03:fb:04:84:b5:a9:9d:3d:c2:8a:dd:a1:c7:
fc:bd:30:b8:6f:df:41:3e:fc:23:c9:ba:53:4a:82:
13:3d:50:5e:a1:ce:cf:31:15:47:f8:82:03:29:ec:
43:5b:69:b8:d8:1d:6c:0d:4f:ef:1a:c5:0f:79:18:
10:2d:4c:14:cb:f6:4d:5b:57:65:c0:1e:94:5f:93:
68:0e:00:51:ee:f8:01:ce:7a:60:8e:87:c6:52:e2:
43:2b:f1:a1:ae:c5:22:41:27:a0:19:12:71:e0:f7:
ae:fb:5e:dd:57:32:13:12:a8:45:64:94:b3:e9:6b:
67:ba:8f:75:b7:a5:23:1b:d0:6a:6c:92:b0:c1:a4:
68:7e:f2:c8:b5:0d:71:0f:96:39:63:68:26:c4:bf:
59:37:e8:3e:37:32:5f:28:36:ee:17:19:ab:1b:6f:
4c:d6:34:8d:13:19:04:10:63:06:35:f9:60:fa:f3:
14:2b:a1:d7:22:0d:b2:c1:76:40:e3:da:72:b1:8b:
f6:b0:f3:95:41:7c:61:06:9a:55:2b:3b:e1:8c:00:
93:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:1A:3A:FF:4A:ED:CD:03:20:9A:ED:94:E3:91:5C:E8:57:2B:0A:2D
X509v3 Authority Key Identifier:
keyid:22:28:82:75:53:54:2C:94:9F:14:AC:C5:61:9C:38:6A:29:B3:2F:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IiiCdVNULJSfFKzFYZw4aimzL2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/IiiCdVNULJSfFKzFYZw4aimzL2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/IiiCdVNULJSfFKzFYZw4aimzL2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:f1:c3:86:b0:38:f2:e5:3d:80:0c:58:9b:a6:f2:da:ca:92:
d3:76:a2:2d:9b:8b:06:49:2f:6e:14:df:06:59:71:6b:1a:4e:
58:a2:52:f9:c7:2e:89:db:32:8a:a1:43:ad:45:8d:ce:50:8d:
c1:28:50:67:a6:e1:46:0f:ea:c8:32:32:c4:94:9c:f4:c1:c9:
35:76:a9:34:61:e8:99:fe:a3:2b:2a:3b:71:90:b9:34:aa:4f:
ef:0f:b6:46:b5:ae:89:28:84:41:ab:f8:66:ff:90:af:5e:19:
5c:94:9c:b1:6b:8e:39:e7:ad:06:13:8e:f0:2a:65:9d:25:fe:
8b:41:b9:e7:b7:ff:c3:e5:19:a2:2f:61:6d:5a:f2:77:ba:29:
93:7f:c6:a6:a2:70:51:17:bc:dc:1b:aa:2f:d8:1a:96:1d:99:
9d:7a:7a:86:b2:1e:2d:09:52:e5:2d:9d:0c:c2:d4:e2:02:66:
5d:71:b5:3d:b1:c3:9e:aa:62:7f:8f:e0:b0:01:48:89:cd:ff:
f7:a2:b5:c9:60:0e:3e:df:88:d2:80:f5:2b:f1:fa:5a:55:00:
48:31:c6:1b:52:51:e8:ae:07:2f:e9:25:a9:7f:df:e8:4c:55:
12:41:55:fc:e8:ee:b1:61:4b:79:ad:f1:ac:eb:46:53:69:de:
be:ef:47:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:39:21 2026 by rpki-client