Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.mft
File: RIFOp-g7QBm_1Xl-upidoG3ZDjM.mft (raw, json)
Hash identifier: ABM6YUudlPFGO+U2F7hmQY9zPR0O9LEeFUaqhmJuq3M=
Subject key identifier: 21:14:EF:F7:A8:C4:E6:D9:F4:A0:A1:05:EC:10:E2:75:35:5F:26:E6
Authority key identifier: 44:81:4E:A7:E8:3B:40:19:BF:D5:79:7E:BA:98:9D:A0:6D:D9:0E:33
Certificate issuer: /CN=44814ea7e83b4019bfd5797eba989da06dd90e33
Certificate serial: 019FAAF62DAADF5B6515FFA4CCA7E71FC86F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RIFOp-g7QBm_1Xl-upidoG3ZDjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.mft
Manifest number: 119B
Signing time: Tue 28 Jul 2026 23:01:28 +0000
Manifest this update: Tue 28 Jul 2026 23:01:28 +0000
Manifest next update: Wed 29 Jul 2026 23:01:28 +0000
Files and hashes: 1: RIFOp-g7QBm_1Xl-upidoG3ZDjM.crl (hash: 79K0HJnZqpj7izlf33dUN25cXZpCRc8Uv3eKe1sacz8=)
2: c4pt8vUVaeXjMXnofvH8CstQg9I.roa (hash: JquKoOYBsn6huX/IMn7g4cc/ok8BfYvy/bpSr/C0iVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RIFOp-g7QBm_1Xl-upidoG3ZDjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f6:2d:aa:df:5b:65:15:ff:a4:cc:a7:e7:1f:c8:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44814ea7e83b4019bfd5797eba989da06dd90e33
Validity
Not Before: Jul 28 23:01:28 2026 GMT
Not After : Jul 29 23:01:28 2026 GMT
Subject: CN=2114eff7a8c4e6d9f4a0a105ec10e275355f26e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d4:23:71:ef:81:f1:f1:8f:f5:63:fb:72:3b:
7b:d3:e2:37:a7:61:22:29:90:a7:2b:df:7c:1b:b4:
f8:ba:51:0d:4e:4e:ea:fe:f2:1b:14:1b:57:d5:33:
3a:7a:48:95:ce:e4:8c:cc:38:9c:94:fb:c2:f7:47:
71:5e:c5:8e:94:93:87:20:43:21:44:df:e6:02:b7:
67:7b:29:ed:e0:63:22:6a:35:c3:5e:69:e4:2b:08:
a3:ff:73:24:96:3b:97:83:03:79:0c:d5:7e:ca:42:
ed:92:5b:6b:d9:de:e5:c8:8e:55:83:54:d9:39:3c:
56:82:6c:67:58:87:a1:db:21:80:89:67:ba:81:c6:
41:d1:14:91:fd:b6:4e:37:af:65:b3:0a:98:b9:77:
69:a5:52:77:c0:d8:2a:0a:3d:2b:0e:77:a5:35:9c:
7a:c1:ff:9a:28:51:47:c0:37:7d:64:04:f4:9f:a3:
7d:f6:76:7c:30:88:4d:fe:a7:b6:ef:92:76:68:e5:
6c:d7:51:c2:5a:18:11:16:b9:83:e0:a7:c0:90:46:
ca:b7:35:7e:82:b8:0a:1c:59:b8:1d:dc:ea:84:6a:
76:07:06:c4:ed:ba:93:cf:cf:12:96:20:96:db:8d:
48:04:44:ef:8b:8c:ff:67:90:3c:60:a7:c4:17:48:
17:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:14:EF:F7:A8:C4:E6:D9:F4:A0:A1:05:EC:10:E2:75:35:5F:26:E6
X509v3 Authority Key Identifier:
keyid:44:81:4E:A7:E8:3B:40:19:BF:D5:79:7E:BA:98:9D:A0:6D:D9:0E:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RIFOp-g7QBm_1Xl-upidoG3ZDjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:4a:4a:f2:3f:33:68:78:31:29:5f:94:fc:10:7d:cf:0b:4d:
39:ac:0e:67:14:4d:90:7c:b4:d4:94:1e:73:c6:26:b1:90:fe:
b0:93:2a:06:b8:ef:6f:a4:3d:e3:70:3c:5c:80:76:25:ab:24:
0f:ae:d7:3e:86:d6:b1:7f:f8:12:f8:29:4e:5c:f5:e0:b4:62:
c7:53:64:da:2f:5d:9d:82:f8:20:82:79:1d:58:a9:2f:4d:32:
1f:4d:5c:5b:ce:45:c8:68:5a:78:d5:92:c9:67:ec:73:bb:3d:
2e:03:29:c0:2c:34:5f:f3:5b:18:ae:f3:b5:ee:76:25:59:ae:
a4:55:8f:60:d4:f4:ed:80:89:5b:23:81:a9:ed:07:77:f8:74:
b6:03:d2:cf:25:04:cb:b7:5e:aa:5f:c8:a0:a7:c6:eb:d2:fd:
93:e2:61:b5:7b:bd:1b:c2:18:d6:df:cc:a8:c6:24:f8:3a:86:
9b:e3:72:ff:7b:30:5c:d4:ad:6e:95:62:d6:53:81:e0:56:4a:
a9:9b:d9:6a:80:6c:41:5a:52:3c:8f:0d:70:5f:26:50:d5:65:
cb:c2:c1:3f:a7:4b:fd:d9:fc:f5:58:58:7a:72:60:11:84:69:
9b:86:b1:74:a7:c5:4f:c5:4e:4c:c1:c8:9f:30:c2:f4:bc:22:
c5:79:94:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:58:29 2026 by rpki-client