Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/71015d-d0c7-4fa4-a56c-ced2e4128e85/1/ip9dwU9wdoEUkWKMoYghUL1fAQ8.mft
File: ip9dwU9wdoEUkWKMoYghUL1fAQ8.mft (raw, json)
Hash identifier: 8Nm0WEWtlJLridOcs6P9y3sckDcDvrUyKV2kjOXbu3Y=
Subject key identifier: 38:18:A7:65:EE:E2:55:4C:9C:2D:E7:34:FC:FC:3D:53:98:83:41:0C
Authority key identifier: 8A:9F:5D:C1:4F:70:76:81:14:91:62:8C:A1:88:21:50:BD:5F:01:0F
Certificate issuer: /CN=8a9f5dc14f7076811491628ca1882150bd5f010f
Certificate serial: 019FA7BDC0730AC0D8BEF83047528392C2FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ip9dwU9wdoEUkWKMoYghUL1fAQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/71015d-d0c7-4fa4-a56c-ced2e4128e85/1/ip9dwU9wdoEUkWKMoYghUL1fAQ8.mft
Manifest number: 0258
Signing time: Tue 28 Jul 2026 08:00:58 +0000
Manifest this update: Tue 28 Jul 2026 08:00:58 +0000
Manifest next update: Wed 29 Jul 2026 08:00:58 +0000
Files and hashes: 1: Sxkhw8Fa5pO8BhRGtQeTU8fdya8.roa (hash: l1dlDAqaaU0qfv4ZGVF35Fo37aw65NRWppLOtUVD5ug=)
2: ip9dwU9wdoEUkWKMoYghUL1fAQ8.crl (hash: PVNw3sQNTdJifsvQ4/X14TMY7Gw1yQMBRfUMbJ9EK/U=)
3: lziFHs2A2VUAzP4OBhEcFvF0OKo.asa (hash: UdHnnZIMARPO778i7Gu0UeetalCkGAD0yUjUjL33whg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/71015d-d0c7-4fa4-a56c-ced2e4128e85/1/ip9dwU9wdoEUkWKMoYghUL1fAQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/71015d-d0c7-4fa4-a56c-ced2e4128e85/1/ip9dwU9wdoEUkWKMoYghUL1fAQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ip9dwU9wdoEUkWKMoYghUL1fAQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:bd:c0:73:0a:c0:d8:be:f8:30:47:52:83:92:c2:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a9f5dc14f7076811491628ca1882150bd5f010f
Validity
Not Before: Jul 28 08:00:58 2026 GMT
Not After : Jul 29 08:00:58 2026 GMT
Subject: CN=3818a765eee2554c9c2de734fcfc3d539883410c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:81:e5:e8:6b:fc:b4:fc:90:20:3c:e6:f3:bd:
06:14:25:20:97:9d:42:02:33:e0:73:c6:64:dc:52:
47:3c:98:6d:f1:6e:4e:01:bc:e9:6b:cc:78:68:e4:
29:99:88:fe:04:2d:42:51:25:a3:a3:53:ea:db:cd:
57:2c:4d:c3:9b:fa:35:6c:0a:17:d1:a5:d2:25:57:
c9:d1:74:62:8c:d8:14:86:39:14:cf:44:dc:4a:d6:
61:95:7d:ef:30:f6:50:c9:ce:00:b4:2f:60:58:b0:
09:14:01:b2:ae:7a:ba:5f:da:f1:2a:01:ac:69:ba:
5e:2a:b5:bd:d0:bd:43:4a:c8:68:bb:10:a4:b3:43:
32:bf:da:0b:3c:bd:67:a3:21:bf:37:13:ca:e8:4d:
e4:aa:54:1b:7f:ea:d7:f0:cd:17:99:4a:98:e6:a1:
b5:34:1a:50:bf:1f:52:00:d6:ec:6c:f9:32:b9:d3:
fe:31:40:4b:ee:8a:88:a9:1a:aa:ec:d2:f4:6d:2c:
76:50:3d:48:29:c7:bc:a3:9d:eb:f4:27:e3:3b:c1:
dc:b2:89:9b:df:ec:ad:b8:88:ed:75:e8:eb:78:30:
7b:7f:fe:9f:4d:33:6d:21:bc:cc:71:4d:11:eb:e2:
49:a5:e9:fe:5f:40:5e:ac:54:c8:12:e5:35:da:5b:
ee:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:18:A7:65:EE:E2:55:4C:9C:2D:E7:34:FC:FC:3D:53:98:83:41:0C
X509v3 Authority Key Identifier:
keyid:8A:9F:5D:C1:4F:70:76:81:14:91:62:8C:A1:88:21:50:BD:5F:01:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ip9dwU9wdoEUkWKMoYghUL1fAQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/71015d-d0c7-4fa4-a56c-ced2e4128e85/1/ip9dwU9wdoEUkWKMoYghUL1fAQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/71015d-d0c7-4fa4-a56c-ced2e4128e85/1/ip9dwU9wdoEUkWKMoYghUL1fAQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:bc:6f:7c:7b:ee:e6:31:a7:e6:56:f3:1d:74:68:c8:38:f9:
2a:e0:d7:1a:68:8f:58:46:99:7c:27:8c:cf:d2:55:2f:d2:99:
58:3f:65:25:1d:9c:9b:ae:19:64:bc:4f:03:56:4a:39:6f:f4:
f0:34:1b:56:f7:af:69:5b:a4:40:b6:9b:55:57:bb:51:ea:10:
d1:e5:f8:2b:5e:dd:f6:49:b4:11:2a:9f:b3:d3:88:d5:57:f9:
a3:1c:02:bc:2d:e8:0c:ad:f3:cb:01:eb:a4:5b:32:f8:bd:e0:
91:19:99:56:44:0c:d5:21:44:bf:55:fa:a9:79:2d:d6:8b:0a:
0a:69:b6:08:3a:f2:d5:35:0b:92:d8:b3:6c:12:fe:99:aa:b7:
79:34:cc:16:6e:da:70:78:b7:62:9f:47:35:de:13:b4:e6:57:
d0:45:6a:83:fb:0b:ea:06:e4:74:fc:45:08:b2:f7:4d:a4:a7:
aa:93:bc:29:38:1e:73:5a:80:ac:b1:22:ab:b5:e0:b4:e7:75:
9b:42:75:84:b9:99:bc:ac:2d:0c:58:ff:f7:59:51:07:39:59:
b9:c5:e0:43:ed:a9:b5:d2:72:98:15:aa:3c:46:5d:a3:97:b1:
52:6d:64:2a:b8:e0:c7:71:f0:1a:4f:b8:f3:ee:31:e2:14:4c:
cb:85:67:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:47:03 2026 by rpki-client