Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.mft
File: iH0wEZNRUA8lmlfi_2hQeX0bTho.mft (raw, json)
Hash identifier: VKzBG6wdLqeb8VhqLH7aiWyqvN0twSgyvo4lMHfKPLk=
Subject key identifier: 10:A7:12:3C:6F:E1:F1:54:09:67:D8:1E:D4:44:2C:CF:8F:05:F9:29
Authority key identifier: 88:7D:30:11:93:51:50:0F:25:9A:57:E2:FF:68:50:79:7D:1B:4E:1A
Certificate issuer: /CN=887d30119351500f259a57e2ff6850797d1b4e1a
Certificate serial: 019FAB99F8371D4A5A804A5D8486E52790C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iH0wEZNRUA8lmlfi_2hQeX0bTho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.mft
Manifest number: 19D6
Signing time: Wed 29 Jul 2026 02:00:22 +0000
Manifest this update: Wed 29 Jul 2026 02:00:22 +0000
Manifest next update: Thu 30 Jul 2026 02:00:22 +0000
Files and hashes: 1: cFtA2whI-5eSAd_xz6FflVfrfcA.roa (hash: rjwPdM8tVlnPByunwjAWM9HihlVqQjzJw824S3HbwPc=)
2: iH0wEZNRUA8lmlfi_2hQeX0bTho.crl (hash: 6O9TL2RZTx5BX9OpSbWK7mJlF9EAdygXGY00C8F3Sm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.mft
rsync://rpki.ripe.net/repository/DEFAULT/iH0wEZNRUA8lmlfi_2hQeX0bTho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:99:f8:37:1d:4a:5a:80:4a:5d:84:86:e5:27:90:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=887d30119351500f259a57e2ff6850797d1b4e1a
Validity
Not Before: Jul 29 02:00:22 2026 GMT
Not After : Jul 30 02:00:22 2026 GMT
Subject: CN=10a7123c6fe1f1540967d81ed4442ccf8f05f929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:49:c5:82:c9:c2:85:5a:7d:c0:74:63:85:dc:
ac:7c:14:da:8a:b8:ae:07:2b:8e:ff:eb:2e:41:86:
10:e1:d7:86:dc:1b:3e:43:b0:ae:ed:46:ce:57:49:
54:fb:e6:4b:41:5d:b1:44:a7:b3:e4:3c:1f:74:23:
f9:ae:6f:96:9f:73:ab:fc:34:06:4b:07:dd:ab:f3:
00:7c:0f:12:9f:18:be:40:70:4f:09:b2:87:7f:3e:
47:ee:6e:89:01:74:61:59:ac:b7:8f:0a:ba:38:8d:
26:34:47:0f:a1:ed:5e:92:e2:f1:59:4c:db:8d:34:
93:91:47:f5:b6:12:a8:b7:22:62:a7:af:6b:6b:51:
ad:60:0d:8f:d9:97:02:c6:b8:02:db:9b:93:5d:75:
b4:3a:64:4c:70:b9:08:06:be:b8:0f:be:b4:ad:33:
36:9b:61:e1:f5:f8:27:1f:0e:9d:8a:fa:ab:2f:41:
e9:7a:8c:ac:32:06:3e:62:7a:51:11:1a:90:df:18:
c0:6a:e6:09:d5:1f:82:19:70:6b:57:4a:2e:89:13:
70:ee:f0:ab:a8:cd:86:96:42:95:73:9f:81:12:3d:
06:91:e0:c7:49:de:eb:84:28:ce:91:a5:b4:35:58:
fd:c2:97:fb:3b:57:68:8f:80:eb:f7:bd:db:47:25:
9e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:A7:12:3C:6F:E1:F1:54:09:67:D8:1E:D4:44:2C:CF:8F:05:F9:29
X509v3 Authority Key Identifier:
keyid:88:7D:30:11:93:51:50:0F:25:9A:57:E2:FF:68:50:79:7D:1B:4E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iH0wEZNRUA8lmlfi_2hQeX0bTho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:58:d9:19:ce:e1:db:21:5b:bf:c1:4a:ef:f9:66:73:f0:7f:
e0:31:39:e1:f1:1e:28:47:56:c1:da:12:7c:47:29:51:dd:1a:
ff:d7:04:9a:9e:4a:1c:de:f5:1e:c8:56:4a:25:09:0e:ef:ca:
31:1e:48:f9:40:78:ae:25:97:7a:c0:e5:ea:e8:d1:24:39:35:
5f:74:fe:8d:87:9a:82:45:03:e0:34:ee:24:c8:a6:ed:7d:99:
e7:12:39:fb:59:6c:97:a2:d5:47:98:84:08:23:45:f5:85:93:
89:6a:ba:e0:c0:57:a9:ed:68:11:ce:fc:5c:51:74:98:7a:55:
e7:19:5e:bd:8b:6b:8d:54:bc:51:a6:1e:12:3b:2b:20:f5:37:
b7:09:2b:8b:62:b7:ea:22:52:b1:4d:e3:1d:15:b2:1e:a9:f3:
41:e3:18:cb:30:48:b6:32:28:ac:85:0b:49:21:f7:28:60:4b:
93:9c:5f:01:f1:5a:d0:3d:24:e1:69:a6:f8:0e:b6:9e:de:89:
0e:eb:49:7c:a1:36:c6:59:c2:70:0d:ec:aa:1f:62:41:2d:08:
41:f8:e6:da:58:59:2f:62:eb:55:c5:57:6c:3e:57:77:9a:c7:
03:be:b3:a8:44:57:cf:5f:46:dd:27:27:00:c9:3c:8e:49:4c:
4c:77:65:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:28:47 2026 by rpki-client