Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/e99401-930b-4e69-ad62-5912c34bba96/1/iHX9AcLoxTbR1lDyWXd2AFSl70E.mft
File: iHX9AcLoxTbR1lDyWXd2AFSl70E.mft (raw, json)
Hash identifier: AivuNKewtTIwa400CTQpqdu5yzikVqmllA0EYR5AOrM=
Subject key identifier: 53:5F:F2:E1:F1:16:C2:08:34:52:B1:2A:5B:EC:34:BF:CD:42:E4:1A
Authority key identifier: 88:75:FD:01:C2:E8:C5:36:D1:D6:50:F2:59:77:76:00:54:A5:EF:41
Certificate issuer: /CN=8875fd01c2e8c536d1d650f25977760054a5ef41
Certificate serial: 019FA9ABEF7EDA0B0B585AC340B8056EB074
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHX9AcLoxTbR1lDyWXd2AFSl70E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/e99401-930b-4e69-ad62-5912c34bba96/1/iHX9AcLoxTbR1lDyWXd2AFSl70E.mft
Manifest number: 81
Signing time: Tue 28 Jul 2026 17:00:45 +0000
Manifest this update: Tue 28 Jul 2026 17:00:45 +0000
Manifest next update: Wed 29 Jul 2026 17:00:45 +0000
Files and hashes: 1: _bPoF2ZH4mhZ8Ri8aUb1EwwCjzM.asa (hash: FN6qeizQ7kr3SU7QJEODvtVTBtcF/dzMFYrvZ6+fXAw=)
2: iHX9AcLoxTbR1lDyWXd2AFSl70E.crl (hash: Eet/PkAGUPchBi0zlPYaOmOxtCMyRRNV7nIH0HyL7OI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/e99401-930b-4e69-ad62-5912c34bba96/1/iHX9AcLoxTbR1lDyWXd2AFSl70E.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/e99401-930b-4e69-ad62-5912c34bba96/1/iHX9AcLoxTbR1lDyWXd2AFSl70E.mft
rsync://rpki.ripe.net/repository/DEFAULT/iHX9AcLoxTbR1lDyWXd2AFSl70E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ab:ef:7e:da:0b:0b:58:5a:c3:40:b8:05:6e:b0:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8875fd01c2e8c536d1d650f25977760054a5ef41
Validity
Not Before: Jul 28 17:00:45 2026 GMT
Not After : Jul 29 17:00:45 2026 GMT
Subject: CN=535ff2e1f116c2083452b12a5bec34bfcd42e41a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:88:d1:4f:81:62:3a:a2:20:ee:04:7a:b3:2b:
f7:5f:28:6f:e9:01:98:c6:77:8c:7b:65:c9:60:0b:
12:97:08:c2:e0:a3:cc:5d:28:96:6c:c9:ee:a4:01:
c2:8b:d1:f5:4c:9f:ef:80:b2:99:a2:20:f0:0a:0b:
cb:0d:0f:0d:1c:0d:5a:8a:83:c1:63:3e:29:18:c9:
b1:0d:9f:66:63:d0:67:44:1b:c5:59:fd:d9:1a:e3:
90:ef:c5:60:62:08:6d:a2:2a:62:cf:03:07:0f:b9:
53:ce:35:37:d3:0f:b8:e9:ab:a3:04:fc:b1:da:fa:
2b:9d:a9:0c:5e:fa:ec:d8:3e:3b:9e:83:d8:0a:0e:
7c:77:18:0b:d0:e6:7e:cc:7a:44:fc:74:87:1b:55:
f7:4f:47:05:23:28:83:ce:09:be:4a:90:cb:ea:13:
0d:d1:80:fd:36:10:4c:90:ea:9f:ed:07:b0:a9:79:
bc:61:2f:41:9c:a4:48:68:5e:e9:2c:e2:65:f3:a5:
bf:85:4b:d0:ec:80:f1:17:fb:08:e4:94:70:8d:0e:
a3:04:9c:d4:da:a5:e2:50:0b:de:85:28:cd:3c:df:
01:7e:5a:d4:29:a8:59:6b:80:db:2b:ff:21:38:17:
07:53:68:b5:f7:f3:24:a9:2b:01:cc:a8:29:cf:75:
fe:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:5F:F2:E1:F1:16:C2:08:34:52:B1:2A:5B:EC:34:BF:CD:42:E4:1A
X509v3 Authority Key Identifier:
keyid:88:75:FD:01:C2:E8:C5:36:D1:D6:50:F2:59:77:76:00:54:A5:EF:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHX9AcLoxTbR1lDyWXd2AFSl70E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/e99401-930b-4e69-ad62-5912c34bba96/1/iHX9AcLoxTbR1lDyWXd2AFSl70E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/e99401-930b-4e69-ad62-5912c34bba96/1/iHX9AcLoxTbR1lDyWXd2AFSl70E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:b4:2e:9f:43:4d:bc:07:f1:96:95:95:f6:5b:79:82:f2:13:
00:c9:14:17:25:d9:36:37:6f:37:2c:55:e2:64:61:87:07:8e:
69:64:47:28:e4:fc:5c:95:01:3a:07:31:5b:98:06:82:5f:f0:
0f:7d:30:2c:e7:fd:00:42:96:b9:51:cc:79:b5:cb:36:56:6c:
48:96:83:5d:d1:ea:d1:f1:f5:e2:9a:eb:b1:e0:f1:3f:d2:e7:
b5:bf:9d:7a:8c:24:4b:04:7d:84:bb:8c:b1:56:d1:0f:f7:80:
79:59:20:9b:ac:6c:57:72:19:8b:8a:d2:ea:e8:dc:b3:d7:08:
7a:48:53:66:fc:2e:73:fc:7f:85:6d:8e:b5:50:7e:50:c3:d4:
24:a6:7f:71:50:f6:0a:11:04:28:00:65:71:a5:99:2e:32:7f:
72:20:1b:f7:d5:cb:19:21:19:ff:9a:4c:ca:32:ec:8b:ac:8a:
50:da:7f:dd:fb:e8:fe:e3:5f:fb:26:b0:af:bc:5b:e6:10:c6:
fc:87:af:1c:2d:98:34:15:19:eb:a4:01:c9:46:37:c5:2f:57:
ab:78:a6:bc:8e:71:45:29:f8:6c:0b:98:64:02:9d:9b:ae:31:
95:64:90:d6:5e:bd:a2:df:9b:46:4f:66:01:f9:40:f6:25:36:
4b:5d:96:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:54:25 2026 by rpki-client