Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.mft
File: I32X8VCOekR4mfWaVfuKpiQe9RA.mft (raw, json)
Hash identifier: 6f+dHB7iRNXIt6tnaLivgWU21x0yABzIQgI5Y80mXfc=
Subject key identifier: C7:4B:89:06:95:C5:59:D9:07:9A:1E:7C:85:46:DD:26:D3:6C:96:62
Authority key identifier: 23:7D:97:F1:50:8E:7A:44:78:99:F5:9A:55:FB:8A:A6:24:1E:F5:10
Certificate issuer: /CN=237d97f1508e7a447899f59a55fb8aa6241ef510
Certificate serial: 019FACE457AC509512499C0D01743DD310C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I32X8VCOekR4mfWaVfuKpiQe9RA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.mft
Manifest number: 0861
Signing time: Wed 29 Jul 2026 08:01:13 +0000
Manifest this update: Wed 29 Jul 2026 08:01:13 +0000
Manifest next update: Thu 30 Jul 2026 08:01:13 +0000
Files and hashes: 1: 2MeX37cZHGHHuxJtj1E28ddzIsI.roa (hash: LZd2fssCxVZOERqVCoqkBsBn4xYtLG5cKZGv8FiTdNw=)
2: I32X8VCOekR4mfWaVfuKpiQe9RA.crl (hash: zN1UVRk7/rLe6tyvRMtCVaS3kjn3LD0Lv1VOYeX937A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.mft
rsync://rpki.ripe.net/repository/DEFAULT/I32X8VCOekR4mfWaVfuKpiQe9RA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:e4:57:ac:50:95:12:49:9c:0d:01:74:3d:d3:10:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237d97f1508e7a447899f59a55fb8aa6241ef510
Validity
Not Before: Jul 29 08:01:13 2026 GMT
Not After : Jul 30 08:01:13 2026 GMT
Subject: CN=c74b890695c559d9079a1e7c8546dd26d36c9662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:34:53:dd:aa:2d:80:8f:13:1b:aa:d4:b2:6a:
60:f6:ce:3e:3c:e0:8b:01:b7:2c:a1:9f:74:79:72:
bb:a4:6f:41:4c:0f:50:65:c2:fc:64:03:2d:40:ff:
b1:1b:f3:b0:6a:6d:62:91:0e:57:1b:48:4d:5b:80:
3b:c4:07:ae:8a:6c:4e:f4:f8:9f:b0:3c:3b:1f:b2:
93:be:4d:47:65:64:28:1c:ad:a4:c5:a0:59:a6:37:
a8:81:c6:d7:d6:1b:03:8e:79:87:42:7d:00:3a:38:
76:93:a1:9e:31:43:e2:c5:6b:cf:5c:db:8c:f6:1d:
f7:4e:c9:38:c1:4b:b8:36:91:99:92:5e:50:e7:07:
b0:bb:f9:f8:fe:a5:31:5d:ed:15:26:9d:e7:05:f7:
db:d3:0a:05:d8:a0:ea:89:ad:f1:83:89:c1:4c:b9:
f3:01:ed:4f:b9:5d:4a:33:aa:a3:0c:cc:40:b5:65:
71:d0:52:37:13:41:c9:ba:4d:18:6c:81:9a:4b:14:
e0:57:9f:90:ce:1e:61:e1:c7:4b:48:3c:5f:40:d1:
3f:3c:7a:27:eb:05:f5:aa:a1:41:63:00:6b:ae:60:
58:16:ac:85:48:75:85:7b:e9:54:77:43:9d:33:e0:
b3:47:07:54:56:ed:de:6d:4b:2a:d6:ea:30:3a:d5:
0d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:4B:89:06:95:C5:59:D9:07:9A:1E:7C:85:46:DD:26:D3:6C:96:62
X509v3 Authority Key Identifier:
keyid:23:7D:97:F1:50:8E:7A:44:78:99:F5:9A:55:FB:8A:A6:24:1E:F5:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I32X8VCOekR4mfWaVfuKpiQe9RA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:d0:4a:89:76:8a:cd:94:e6:37:17:79:f2:d9:ef:c5:89:cb:
44:b7:ca:ee:5e:87:70:74:17:fb:04:09:fb:fa:4e:6c:14:bc:
3d:6c:52:cb:2d:0a:ab:64:92:d9:7a:a3:0b:8d:18:2d:31:76:
06:c5:78:62:b9:98:d8:69:ea:fa:e9:02:6b:9f:40:35:a3:04:
76:a9:7d:d4:50:9a:b2:c4:6c:6b:ed:49:55:1f:7c:5e:57:ae:
b1:44:0f:92:24:ba:ef:d6:23:4a:82:6e:30:27:68:2b:d9:26:
64:b0:af:1e:04:b5:bb:6a:27:71:b1:4c:66:aa:eb:7b:cb:82:
d3:75:e0:7f:8c:68:0e:7b:17:00:31:64:0a:58:ac:c2:ad:78:
73:14:69:ef:a2:5a:b1:06:7f:b8:10:c9:94:61:8e:37:c7:4e:
c2:a6:34:61:4c:16:28:4f:90:6d:2f:10:6d:ef:17:82:dc:66:
38:4d:ab:9b:c4:22:d1:ba:c5:c4:f9:b3:c0:25:eb:0a:f4:67:
b5:9d:da:64:57:55:a6:8a:fd:80:c4:29:d8:1b:f9:ea:23:fc:
c0:f3:ad:a8:0b:3b:d7:be:fe:6c:30:b0:93:3d:3e:5e:f8:72:
d4:e6:db:37:7a:c5:f2:63:bf:53:6e:1e:0b:97:cc:37:55:ff:
37:7d:00:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:13:56 2026 by rpki-client