Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/ido1Hh4yCS63YfLI6ix1oZcALUs.mft
File: ido1Hh4yCS63YfLI6ix1oZcALUs.mft (raw, json)
Hash identifier: k8NLqeoUhKBPYuja4cIOcOAHAhqaZbyyYEB0of95BYA=
Subject key identifier: 85:CF:CB:BF:0F:08:9C:0D:5F:1C:95:5D:54:A6:A4:1F:5F:AE:BD:21
Authority key identifier: 89:DA:35:1E:1E:32:09:2E:B7:61:F2:C8:EA:2C:75:A1:97:00:2D:4B
Certificate issuer: /CN=89da351e1e32092eb761f2c8ea2c75a197002d4b
Certificate serial: 019FAC76CBFDB54FB2318BFE6AF778FC2D57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ido1Hh4yCS63YfLI6ix1oZcALUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/ido1Hh4yCS63YfLI6ix1oZcALUs.mft
Manifest number: 4E
Signing time: Wed 29 Jul 2026 06:01:34 +0000
Manifest this update: Wed 29 Jul 2026 06:01:34 +0000
Manifest next update: Thu 30 Jul 2026 06:01:34 +0000
Files and hashes: 1: TTj59N_k0baRYBbpMvwMER52UMA.roa (hash: Qb/eGpeDdebAZbVO1qCzlupreg9p5z6Eu1FINEUZOCw=)
2: ido1Hh4yCS63YfLI6ix1oZcALUs.crl (hash: nSPAZ7XIgR1PAbz68B94ENUlZz4Ue7glwM+XPeFcNZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/ido1Hh4yCS63YfLI6ix1oZcALUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/ido1Hh4yCS63YfLI6ix1oZcALUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ido1Hh4yCS63YfLI6ix1oZcALUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:cb:fd:b5:4f:b2:31:8b:fe:6a:f7:78:fc:2d:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89da351e1e32092eb761f2c8ea2c75a197002d4b
Validity
Not Before: Jul 29 06:01:34 2026 GMT
Not After : Jul 30 06:01:34 2026 GMT
Subject: CN=85cfcbbf0f089c0d5f1c955d54a6a41f5faebd21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:57:ce:86:fb:01:39:66:35:dc:36:b0:57:fb:
83:3c:ca:80:2c:9d:ae:94:f6:f1:06:59:18:97:ac:
20:e5:e9:bd:b0:7a:03:5c:14:2e:23:d3:c5:74:dd:
90:8b:8d:27:7d:db:7f:31:24:c6:43:51:ac:d7:35:
0d:16:d5:61:f9:07:16:83:bd:47:81:9b:f9:c7:c9:
7b:b3:42:da:91:cc:92:7a:33:07:16:90:12:4b:43:
da:aa:b8:39:89:91:01:e0:24:ea:20:87:dc:b0:ff:
9a:0e:96:a5:87:95:35:8d:35:24:e6:6e:f3:a7:b1:
d1:c8:23:71:bb:1d:d9:3b:fb:f4:fc:d7:d4:16:37:
6b:5b:de:96:08:4b:5d:f9:4a:c5:bf:d6:a1:4d:ce:
a8:2c:57:6d:98:59:bd:0c:86:24:12:14:8f:24:e0:
58:e9:8b:da:2c:c0:21:ef:89:2f:e2:ec:a7:72:95:
55:76:2f:24:02:9d:2a:6c:e6:7e:e3:18:cb:18:b2:
6a:19:3c:dd:86:d1:b0:b5:df:33:44:82:ad:ee:fb:
67:0a:ae:07:50:9d:8b:fb:62:ec:a4:53:ea:20:e1:
77:ed:99:16:07:a2:a4:70:ff:07:f1:5c:58:7e:e8:
36:3d:6f:82:3f:6f:a8:bc:71:92:56:e7:f1:61:7c:
1d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:CF:CB:BF:0F:08:9C:0D:5F:1C:95:5D:54:A6:A4:1F:5F:AE:BD:21
X509v3 Authority Key Identifier:
keyid:89:DA:35:1E:1E:32:09:2E:B7:61:F2:C8:EA:2C:75:A1:97:00:2D:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ido1Hh4yCS63YfLI6ix1oZcALUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/ido1Hh4yCS63YfLI6ix1oZcALUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/ido1Hh4yCS63YfLI6ix1oZcALUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:e7:f6:2b:f6:39:bf:3a:c9:91:e8:6d:e5:05:34:c6:13:7b:
20:83:cb:73:7c:7d:0f:13:06:f2:55:b7:bb:b1:df:5e:18:18:
e1:94:8b:3b:ac:1c:d6:73:af:21:92:c9:54:5a:ea:e2:b2:1a:
f5:3e:47:6b:5c:7f:91:53:e8:82:25:30:67:85:65:01:da:0a:
cc:6e:bb:b0:4f:9f:3c:0a:5d:74:a1:c9:91:ed:01:57:8d:8f:
3e:42:9c:92:b9:a4:5d:32:ba:17:ef:74:d7:95:63:69:57:d1:
03:25:78:94:17:aa:9d:93:06:ca:44:61:50:ee:ec:ce:b1:8c:
65:ae:0a:67:50:2a:21:e5:91:22:60:b3:73:aa:08:08:bc:ef:
68:69:c2:ba:6c:de:29:7a:8b:14:82:32:88:09:b4:89:58:5b:
56:40:bb:23:1e:2e:7c:aa:47:4d:cd:16:e2:79:50:e4:38:76:
0a:5f:c1:f1:7e:ad:cd:ca:c1:58:37:84:89:47:9f:7a:73:c5:
89:b7:9a:f2:2f:f3:b9:c1:e4:11:52:b8:df:56:a4:dc:ad:f3:
6a:3c:13:ce:f7:a1:76:93:8d:7a:d1:68:e6:0a:67:11:48:83:
21:01:9c:53:b6:c9:89:f8:29:96:eb:5c:bb:87:4c:2d:e8:ac:
93:5c:58:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:19:24 2026 by rpki-client