Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.mft
File: INyR5mZJTQ3FaiuB0imr1u41-Ew.mft (raw, json)
Hash identifier: cNEFhgNjZKpfiPAV0KslC5ce0tl1CTpM1K9fkjkb8wU=
Subject key identifier: B4:29:32:2F:98:4D:6B:59:6C:79:B5:3B:C7:57:70:50:54:6E:83:AE
Authority key identifier: 20:DC:91:E6:66:49:4D:0D:C5:6A:2B:81:D2:29:AB:D6:EE:35:F8:4C
Certificate issuer: /CN=20dc91e666494d0dc56a2b81d229abd6ee35f84c
Certificate serial: 019FA9756EB666725B28C7318E3B282DE73B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/INyR5mZJTQ3FaiuB0imr1u41-Ew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.mft
Manifest number: 19CF
Signing time: Tue 28 Jul 2026 16:01:13 +0000
Manifest this update: Tue 28 Jul 2026 16:01:13 +0000
Manifest next update: Wed 29 Jul 2026 16:01:13 +0000
Files and hashes: 1: INyR5mZJTQ3FaiuB0imr1u41-Ew.crl (hash: AMsrHpAizJnq3H0AnFK6JMyH2RYjh02XrIzlJD/jMqk=)
2: V8NlnKjUgS7bj4rUkCz5LctnTTY.roa (hash: 2V4IKo8nS+06Kfv+fwmatbojuyWYf1XN4kaAl/BcTuo=)
3: oEH5CL4Krryfh-iShKBtkq07VfQ.asa (hash: GkycII0/qjAz0UiuBL6s5szZ1IchdfI3Luf3s69wkYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.mft
rsync://rpki.ripe.net/repository/DEFAULT/INyR5mZJTQ3FaiuB0imr1u41-Ew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:6e:b6:66:72:5b:28:c7:31:8e:3b:28:2d:e7:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20dc91e666494d0dc56a2b81d229abd6ee35f84c
Validity
Not Before: Jul 28 16:01:13 2026 GMT
Not After : Jul 29 16:01:13 2026 GMT
Subject: CN=b429322f984d6b596c79b53bc7577050546e83ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4b:81:9c:a0:54:7c:5f:3e:1f:c3:d8:d7:43:
c4:c9:65:1f:8c:b7:e9:48:5e:d1:70:52:1e:67:5e:
63:1a:33:19:01:f0:0e:67:4f:d4:8c:00:90:b7:6f:
b6:53:4e:5e:52:1b:c1:ba:fc:06:41:f5:12:1e:d9:
6f:02:a5:bb:1f:81:12:05:8f:b9:e7:cc:5b:10:4b:
5c:99:c7:5e:c2:c1:7c:36:a0:f3:8a:ce:31:e0:70:
fa:ad:4e:79:14:a7:ee:eb:6e:bb:26:3e:ce:49:76:
d2:5a:78:3d:d9:f2:3d:29:cb:6b:94:3c:ee:36:40:
89:22:74:40:de:b6:5b:d0:5e:4b:06:60:00:9e:91:
58:c6:08:cf:a2:81:23:10:00:43:b6:12:37:6e:7e:
da:39:ae:a0:23:58:6e:1e:bb:58:9c:ad:e3:f3:e4:
04:d1:7b:75:4f:c4:08:38:5a:b4:e0:d0:5d:0f:8c:
ce:bd:6f:f4:34:2a:ea:40:8a:a0:20:c4:3b:66:6e:
64:06:fe:00:32:a0:03:da:31:98:fb:f8:27:08:30:
55:57:ab:cb:79:b0:9a:86:66:6b:d6:0c:0b:ce:30:
cd:3b:8d:23:39:08:c7:45:3e:71:99:9b:64:5e:bd:
9a:a4:94:42:24:f6:8e:fd:08:8f:9c:75:3b:94:cd:
aa:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:29:32:2F:98:4D:6B:59:6C:79:B5:3B:C7:57:70:50:54:6E:83:AE
X509v3 Authority Key Identifier:
keyid:20:DC:91:E6:66:49:4D:0D:C5:6A:2B:81:D2:29:AB:D6:EE:35:F8:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INyR5mZJTQ3FaiuB0imr1u41-Ew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:04:2f:64:5c:df:65:4a:22:96:c7:f4:ff:31:00:30:7b:bd:
60:85:34:c8:a7:33:c1:75:c9:61:9f:a0:cb:ef:8e:34:3c:56:
7f:78:ba:f9:48:08:9c:87:1d:59:70:4b:dd:7c:d3:53:d4:ca:
c7:fa:93:c0:c9:34:21:13:64:be:cb:81:08:d7:22:f8:14:ce:
ec:15:60:c0:58:22:79:d9:8e:ff:b9:df:df:98:3b:c9:c6:52:
b5:05:a4:d3:bd:cf:86:a6:1c:e6:0c:35:65:ce:4f:a6:67:3d:
3b:07:be:10:2b:1f:2f:b4:4f:27:72:85:7f:89:1a:80:da:3d:
6b:ec:40:69:8e:5f:66:5a:b1:14:46:cd:dc:e3:c5:fc:f3:53:
fc:e4:06:67:28:77:12:43:af:a5:ab:71:6f:21:bc:f1:b1:c2:
12:00:c1:b8:9d:65:fb:92:4a:80:89:e5:0a:22:4d:88:2e:54:
06:db:f7:66:22:5a:0a:3a:dd:83:bc:fc:7f:4f:0e:e4:4c:fc:
99:b9:51:d1:e2:83:92:b2:4c:79:37:11:7c:2c:ed:d9:c1:be:
46:ee:07:39:96:c8:31:b5:10:37:74:6f:78:38:35:65:4b:ec:
b7:af:24:b0:34:8f:5a:f9:6b:3f:38:9a:48:74:72:af:b2:39:
5c:e5:b7:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:31:14 2026 by rpki-client