Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.mft
File: Iv_HI9FXk0BDE0zu0DQkqUKFnYM.mft (raw, json)
Hash identifier: jbOxXpWYyoCodhL/agcKokJwvIbFZ1UxrAiMQ3S8nUs=
Subject key identifier: 82:CB:92:C8:EE:BF:5B:C7:ED:69:C5:B7:4D:ED:E1:A0:CC:A7:06:C0
Authority key identifier: 22:FF:C7:23:D1:57:93:40:43:13:4C:EE:D0:34:24:A9:42:85:9D:83
Certificate issuer: /CN=22ffc723d157934043134ceed03424a942859d83
Certificate serial: 019FAA888DE3C46F27E9DD23445791E172FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.mft
Manifest number: 4D
Signing time: Tue 28 Jul 2026 21:01:43 +0000
Manifest this update: Tue 28 Jul 2026 21:01:43 +0000
Manifest next update: Wed 29 Jul 2026 21:01:43 +0000
Files and hashes: 1: 1-ztMd_gBTxeC8uA2Q0YdYpsYMeo.roa (hash: WXcCQ4Yl4FGns7m2jmJSD78rirZ3yMRIuiQENmN/+zw=)
2: 2LF9uim0YdDpGegCa61UauWuWfA.roa (hash: EJUG4c12axqY7VnRB7LGjwYbiGZwDBmNfyhI3v0wbAg=)
3: Iv_HI9FXk0BDE0zu0DQkqUKFnYM.crl (hash: VUXODNq71nlkX0VRV8bhfLRJeG+I/A+PKZzP/XDlcmE=)
4: OWW7Tr0ddkzX8cpnriB4IyyEFmI.roa (hash: 65mD2shWItoOmc6tgeQNjaLe4tC+absIZWq2fClFhYk=)
5: _axzcFhLDGGR4sv8QLqgaVPeZLg.roa (hash: 0ELmAmWAy/TUmV7JbvaRF67zOVFNgHGzya+qArU3iX4=)
6: d9UMor1VyAKI95wbo0VML8JqXA0.roa (hash: Ue762QdnWxcT+gtVI8j0lIqvVnpOu+dK95cax6FcHFw=)
7: e5ECE1RgIH1_tNwoNA7WBLrErgk.roa (hash: YkBX43vtYMPV17x/YHA+YGWAAvLIc2O3OMYxK/YMeuw=)
8: jcSGVISkjZOB8Wm3cMTPdYzI6qg.roa (hash: cGm7WweVD+uApG+/ivyi4OOmekGxuRqlS+jllKuOX7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:8d:e3:c4:6f:27:e9:dd:23:44:57:91:e1:72:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22ffc723d157934043134ceed03424a942859d83
Validity
Not Before: Jul 28 21:01:43 2026 GMT
Not After : Jul 29 21:01:43 2026 GMT
Subject: CN=82cb92c8eebf5bc7ed69c5b74dede1a0cca706c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e1:9d:ac:06:9e:94:9d:b8:2e:4c:d6:4b:a5:
86:24:85:0f:39:d7:bd:00:e6:ea:56:ad:aa:29:97:
a5:1d:66:3b:84:90:25:f3:2f:7a:8e:b7:f7:40:54:
73:18:0d:62:20:2a:11:46:fd:61:69:a9:c8:6f:e2:
c5:74:5e:2e:c6:ec:04:01:3f:44:e9:f5:e5:13:50:
09:60:58:f6:b1:ce:73:c8:8a:20:d3:67:b9:ee:2c:
81:d7:21:40:2e:e6:fb:85:9d:62:13:e5:39:b8:15:
50:29:63:cf:14:2c:3a:ba:8c:dc:5e:1c:e2:de:94:
bd:bd:9c:44:0c:ed:5d:d2:b6:a6:e9:f2:24:1c:6f:
1b:e8:94:ac:48:3b:d3:a2:eb:a0:eb:77:31:e5:04:
ac:4c:31:3c:c0:20:c4:4e:4e:2f:b1:4b:42:03:2a:
2f:22:33:36:e0:f9:20:7e:97:61:74:1b:e0:24:ca:
a5:b8:25:10:a2:0d:bc:75:99:ba:f5:a8:a5:58:0c:
dd:e0:1f:29:0b:fe:80:82:be:a8:98:a8:74:b8:b9:
aa:ec:1c:66:8c:c7:ae:8b:3d:fb:06:44:78:5f:97:
2c:56:aa:08:d5:6d:7e:f2:d8:be:cf:88:e8:f0:bf:
2e:2e:cd:8f:8a:8d:7f:5e:2f:01:8b:40:97:ff:bc:
06:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:CB:92:C8:EE:BF:5B:C7:ED:69:C5:B7:4D:ED:E1:A0:CC:A7:06:C0
X509v3 Authority Key Identifier:
keyid:22:FF:C7:23:D1:57:93:40:43:13:4C:EE:D0:34:24:A9:42:85:9D:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:e7:f2:b3:af:1d:b0:7d:f8:31:57:97:68:3a:d2:4e:19:aa:
27:91:01:e6:a8:dd:45:b2:47:57:40:41:d4:a0:fa:00:36:1c:
09:bd:fa:fc:f1:1a:78:0e:6f:ba:e8:30:53:6e:aa:29:62:3e:
3c:e1:24:75:48:15:69:bf:a7:ba:a9:55:f7:67:45:95:10:f4:
b6:3f:eb:0a:e0:9b:c3:ff:c7:9f:15:c1:91:83:72:2f:80:64:
6b:3a:bf:29:f0:8e:df:51:dd:ca:26:6c:5e:ab:13:07:99:10:
8a:06:d9:f3:f7:f1:c5:17:ce:44:b9:db:1b:11:61:ae:2a:43:
95:e0:fb:c7:ed:c3:9f:90:0e:70:89:6b:9b:a8:e0:8c:be:11:
ed:a5:c0:fc:53:71:0b:6a:4b:cc:61:16:97:65:e3:ae:34:6c:
0e:2e:1c:13:6d:91:5c:8a:e1:a3:c6:34:5c:02:08:2d:07:38:
2d:2d:ce:b1:41:d6:9f:72:bc:65:3d:91:95:1a:ea:fa:f4:87:
83:43:67:b9:1b:27:58:9d:f7:51:70:0c:e9:7c:a7:92:7a:0d:
2a:9b:9a:22:b3:73:ff:c3:6c:41:33:c8:1a:b8:15:2f:bd:5b:
ee:27:c9:9d:a4:89:d5:2b:c0:6d:ad:d0:f1:27:2a:62:83:73:
9e:8b:ce:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:17:24 2026 by rpki-client