Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/ih8K1VcrribjnIdAxoqPu0buSGQ.mft
File: ih8K1VcrribjnIdAxoqPu0buSGQ.mft (raw, json)
Hash identifier: dVcHHfVRHKh2wiPKzp90rbgMJ9pF0j5KUraeImoSOhA=
Subject key identifier: 41:9D:3B:C5:73:4D:9E:2E:CF:79:4E:87:F9:7E:6B:64:60:FA:C9:66
Authority key identifier: 8A:1F:0A:D5:57:2B:AE:26:E3:9C:87:40:C6:8A:8F:BB:46:EE:48:64
Certificate issuer: /CN=8a1f0ad5572bae26e39c8740c68a8fbb46ee4864
Certificate serial: 019FAB631BA10120EA468B83593C0D9C4E72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ih8K1VcrribjnIdAxoqPu0buSGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/ih8K1VcrribjnIdAxoqPu0buSGQ.mft
Manifest number: 0D65
Signing time: Wed 29 Jul 2026 01:00:26 +0000
Manifest this update: Wed 29 Jul 2026 01:00:26 +0000
Manifest next update: Thu 30 Jul 2026 01:00:26 +0000
Files and hashes: 1: ih8K1VcrribjnIdAxoqPu0buSGQ.crl (hash: 8jmvUwarb+09035M965x2D/gmpBPv8WAgU5urxsYXr4=)
2: xMgS7QD9_G9EOx5x98EDuY-9yGs.roa (hash: hMlsCv6vl96geP53LLF12LxkGDU69mGZggpEWqFm3G4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/ih8K1VcrribjnIdAxoqPu0buSGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/ih8K1VcrribjnIdAxoqPu0buSGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ih8K1VcrribjnIdAxoqPu0buSGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:1b:a1:01:20:ea:46:8b:83:59:3c:0d:9c:4e:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a1f0ad5572bae26e39c8740c68a8fbb46ee4864
Validity
Not Before: Jul 29 01:00:26 2026 GMT
Not After : Jul 30 01:00:26 2026 GMT
Subject: CN=419d3bc5734d9e2ecf794e87f97e6b6460fac966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c3:4c:73:77:05:48:52:89:22:d5:f7:2a:84:
c5:7f:ec:a7:89:af:65:fe:02:2b:bb:c8:51:e7:e6:
ba:11:8b:55:af:3a:4a:d0:a9:67:72:6c:cb:ea:c6:
0f:48:2b:81:f9:32:b2:5f:79:e0:33:98:66:d3:0f:
ee:2e:ee:56:f7:19:2c:86:df:fc:25:35:b0:65:59:
8e:bf:ba:29:cd:cf:91:fd:cb:32:50:52:a0:b0:a1:
10:01:4d:f7:1a:8c:fd:76:84:46:95:fd:e0:ba:b4:
5e:0d:89:44:54:46:cd:0a:e5:cd:f7:14:73:e0:25:
9e:2e:3a:67:20:b2:57:10:b8:3f:19:02:44:65:d3:
0d:93:46:6e:8f:53:39:55:51:c0:0e:1b:a5:b1:47:
0a:87:bd:33:f8:cd:77:b7:c9:d9:c0:21:70:90:10:
c0:ce:40:22:7c:af:a8:2e:b4:ab:2d:b3:b3:14:b1:
30:b7:5b:95:95:27:83:86:f6:5b:a4:e9:90:3f:b0:
da:66:1a:eb:40:d3:03:51:5d:2a:62:5a:a2:17:ec:
12:01:dc:7b:df:85:e3:5f:6d:26:d6:f1:31:ea:cb:
7f:18:83:5d:30:15:71:44:6d:77:e3:35:ff:05:1c:
8a:eb:74:ab:7c:40:fe:db:ec:f4:4b:1d:b4:bb:f4:
6c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:9D:3B:C5:73:4D:9E:2E:CF:79:4E:87:F9:7E:6B:64:60:FA:C9:66
X509v3 Authority Key Identifier:
keyid:8A:1F:0A:D5:57:2B:AE:26:E3:9C:87:40:C6:8A:8F:BB:46:EE:48:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ih8K1VcrribjnIdAxoqPu0buSGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/ih8K1VcrribjnIdAxoqPu0buSGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/ih8K1VcrribjnIdAxoqPu0buSGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:99:b3:8c:92:d7:53:22:9a:75:38:60:d0:9a:27:ad:4b:0b:
cf:3f:9f:bd:81:e2:87:52:b3:7d:26:45:51:66:5a:20:c5:52:
78:45:69:03:f3:bd:74:44:d8:88:13:01:af:9c:df:35:fa:67:
e8:da:84:b8:54:10:54:85:10:53:a8:60:f7:17:2a:3c:83:0a:
15:fc:91:29:d8:3d:fb:5b:2a:59:58:47:f2:3a:e7:0f:0e:90:
de:22:ca:bb:18:a3:4b:20:a5:fe:37:6a:33:c7:3b:0e:f5:9f:
eb:32:2b:9c:d9:31:58:bd:30:18:ad:c5:a0:00:84:81:3f:01:
d2:e6:60:03:87:5c:c2:fb:70:01:ed:a7:63:e6:08:ba:5e:4b:
71:f6:4c:74:e1:f8:14:75:27:84:7e:3e:28:18:96:70:d2:1c:
e0:50:a2:c2:07:da:3c:89:3f:af:4c:18:d1:05:d5:5c:22:06:
fc:9a:17:69:dd:67:b2:56:93:2d:cd:79:f3:64:d6:29:e3:12:
34:81:56:30:91:0b:7a:c3:f7:1f:e1:ae:79:d6:e5:cb:96:af:
f0:b2:c1:35:d9:59:69:d4:c1:fd:e1:e4:ca:e1:86:7c:95:43:
53:f0:06:80:6a:1b:1b:88:d6:b4:ec:a1:52:9e:24:fa:4c:50:
dd:7a:98:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:36:36 2026 by rpki-client