Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/8878d9-4f1c-426b-8a40-658120ae68e1/1/ICZNUaES0LwizqcxTLBs9aGuM-k.mft
File: ICZNUaES0LwizqcxTLBs9aGuM-k.mft (raw, json)
Hash identifier: FMgoATYyr9UC6ibs/CXjRqK7cJNWnVIsYA0Wr5O1TO0=
Subject key identifier: 35:A8:B3:73:09:59:4D:96:25:28:D9:91:26:9D:B1:DA:3F:56:CB:C8
Authority key identifier: 20:26:4D:51:A1:12:D0:BC:22:CE:A7:31:4C:B0:6C:F5:A1:AE:33:E9
Certificate issuer: /CN=20264d51a112d0bc22cea7314cb06cf5a1ae33e9
Certificate serial: 019FAB638F9C60705ED330869FCC4013BB3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ICZNUaES0LwizqcxTLBs9aGuM-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/8878d9-4f1c-426b-8a40-658120ae68e1/1/ICZNUaES0LwizqcxTLBs9aGuM-k.mft
Manifest number: 1967
Signing time: Wed 29 Jul 2026 01:00:56 +0000
Manifest this update: Wed 29 Jul 2026 01:00:56 +0000
Manifest next update: Thu 30 Jul 2026 01:00:56 +0000
Files and hashes: 1: ICZNUaES0LwizqcxTLBs9aGuM-k.crl (hash: f+G/G5ZUYA/MOssVrDlqJrt6hdDsD4XJPAguFPfqEZk=)
2: TlCjshw48MI80zaCqZRdp10HXmU.roa (hash: IUaeg0F1EJZvlebFMhAdUjihSrKer72rVZfI7a/WmYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/8878d9-4f1c-426b-8a40-658120ae68e1/1/ICZNUaES0LwizqcxTLBs9aGuM-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/8878d9-4f1c-426b-8a40-658120ae68e1/1/ICZNUaES0LwizqcxTLBs9aGuM-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/ICZNUaES0LwizqcxTLBs9aGuM-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 01:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:8f:9c:60:70:5e:d3:30:86:9f:cc:40:13:bb:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20264d51a112d0bc22cea7314cb06cf5a1ae33e9
Validity
Not Before: Jul 29 01:00:56 2026 GMT
Not After : Jul 30 01:00:56 2026 GMT
Subject: CN=35a8b37309594d962528d991269db1da3f56cbc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:49:cf:81:cb:19:3e:8c:2e:b6:4c:f6:45:77:
e9:9f:2d:0a:13:32:3e:09:72:4d:5e:ec:4f:8f:ae:
a7:00:d9:32:ad:08:04:bc:f5:26:e7:73:90:23:01:
82:4f:25:58:ea:af:66:1e:e3:b7:0f:1b:ad:75:48:
22:58:a1:8c:f1:1d:e4:3a:07:ae:10:7b:29:1e:b0:
11:bf:13:79:80:99:ff:76:dd:f0:6d:39:ac:1e:c9:
42:7b:11:cd:2f:c5:1a:e3:1f:32:96:8d:6b:39:2a:
87:5c:83:be:f9:b5:2e:9b:8f:37:7a:b8:60:d6:0f:
1b:1a:96:ca:d2:1a:60:63:1f:d4:2c:eb:36:4d:62:
a9:1b:90:36:f7:0e:48:29:16:64:bf:e1:95:40:77:
0f:a3:a9:5d:a8:48:55:db:db:53:3f:3b:80:e7:1d:
76:90:37:e2:9c:fd:f4:1f:bf:dd:53:11:bd:99:00:
c4:cb:cc:55:2e:23:ce:94:5d:52:e4:18:f7:58:37:
17:6b:10:89:60:3d:e2:8e:16:2a:5a:f5:48:fa:7b:
43:ec:56:e0:70:fa:b6:c4:2b:d8:50:be:cd:54:cf:
64:63:53:4e:90:d3:3d:16:70:d6:f6:a2:42:e0:c6:
1f:26:3d:82:5a:ea:a6:c1:03:ee:7c:1b:09:4b:f9:
19:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:A8:B3:73:09:59:4D:96:25:28:D9:91:26:9D:B1:DA:3F:56:CB:C8
X509v3 Authority Key Identifier:
keyid:20:26:4D:51:A1:12:D0:BC:22:CE:A7:31:4C:B0:6C:F5:A1:AE:33:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ICZNUaES0LwizqcxTLBs9aGuM-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/8878d9-4f1c-426b-8a40-658120ae68e1/1/ICZNUaES0LwizqcxTLBs9aGuM-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/8878d9-4f1c-426b-8a40-658120ae68e1/1/ICZNUaES0LwizqcxTLBs9aGuM-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:cc:fb:cb:3d:70:5a:b2:4b:8e:7d:36:40:56:0c:f5:5f:1c:
44:99:a4:fa:ac:73:39:d8:c6:58:23:e6:3e:8e:42:9d:e2:6c:
5f:f6:3c:a0:e6:e5:a0:76:bb:4f:7a:ce:0c:9f:0e:0a:e5:9c:
be:21:0b:2c:64:6f:1b:a2:04:cf:25:0a:b1:a3:85:1a:19:65:
5b:c9:34:68:8b:00:6d:c0:2c:4e:82:55:ac:32:63:cc:41:2f:
fc:41:07:72:70:97:90:dc:ad:64:5b:2e:d3:ed:ae:69:08:a1:
cb:28:4f:76:38:29:f0:24:23:ce:9a:07:ea:f2:ac:f1:77:d1:
20:66:86:6e:ce:39:69:0c:02:6e:ff:b2:fa:8a:b9:a5:3f:3d:
0e:8b:95:ce:29:10:83:03:79:db:2a:53:c0:b5:21:bb:86:d5:
64:bf:2b:3c:9b:ee:21:d0:f2:d4:d3:06:97:a6:c7:fc:d8:c0:
0a:9b:69:e4:8d:5e:4c:f6:d0:ff:89:4d:ee:9c:e3:70:f9:81:
19:f4:88:2c:d1:a4:e7:ab:e0:3b:b0:72:f5:e9:dd:69:e3:66:
96:e9:e1:1b:6c:68:d4:7b:ed:12:3b:6a:a2:55:8c:e7:2b:00:
5f:90:dd:2d:f0:21:bd:4d:1b:6f:40:b0:06:6f:83:4e:3b:4a:
04:23:e3:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:01:00 2026 by rpki-client