Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/64443e-03f8-4375-941c-e1d195ac35d2/1/1-iWi8osetikWERKHCUKl7RgbUZ8.mft
File: 1-iWi8osetikWERKHCUKl7RgbUZ8.mft (raw, json)
Hash identifier: kpKno7HFqXh6jSrGQqb+ese7BBAWXqV4S0At6BJtY3I=
Subject key identifier: 07:AE:F6:85:B0:E3:29:2E:31:4D:20:69:5D:CD:7F:24:55:52:C4:EB
Authority key identifier: FA:25:A2:F2:8B:1E:B6:29:16:11:12:87:09:42:A5:ED:18:1B:51:9F
Certificate issuer: /CN=fa25a2f28b1eb629161112870942a5ed181b519f
Certificate serial: 019FA9AC1375EE3836182013F6D4D6C5E8ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-iWi8osetikWERKHCUKl7RgbUZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/64443e-03f8-4375-941c-e1d195ac35d2/1/1-iWi8osetikWERKHCUKl7RgbUZ8.mft
Manifest number: 0223
Signing time: Tue 28 Jul 2026 17:00:54 +0000
Manifest this update: Tue 28 Jul 2026 17:00:54 +0000
Manifest next update: Wed 29 Jul 2026 17:00:54 +0000
Files and hashes: 1: 1-iWi8osetikWERKHCUKl7RgbUZ8.crl (hash: gvRWKyQ2bQRySTwphFL9XC8YwMWhvBK4ROvWd7aR19k=)
2: npTp4Du46e6L-gb7_xi1R_gV0tY.roa (hash: AYItR+eYoLuQ57cxd9qVNl7nClhJqimYPK8LL9esiTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/64443e-03f8-4375-941c-e1d195ac35d2/1/1-iWi8osetikWERKHCUKl7RgbUZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/64443e-03f8-4375-941c-e1d195ac35d2/1/1-iWi8osetikWERKHCUKl7RgbUZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-iWi8osetikWERKHCUKl7RgbUZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ac:13:75:ee:38:36:18:20:13:f6:d4:d6:c5:e8:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa25a2f28b1eb629161112870942a5ed181b519f
Validity
Not Before: Jul 28 17:00:54 2026 GMT
Not After : Jul 29 17:00:54 2026 GMT
Subject: CN=07aef685b0e3292e314d20695dcd7f245552c4eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:5f:1e:e4:ac:c2:22:54:bc:e8:09:f9:7b:69:
b9:5f:99:5c:bf:9f:a9:fb:52:17:9c:78:4e:6f:45:
08:5e:d4:21:a5:cb:1c:fa:2b:2f:cd:a2:0b:99:c3:
a3:9e:e7:b7:7a:9f:13:a0:87:07:bd:d7:6c:00:17:
48:9c:22:2c:01:bc:fe:3a:b0:26:af:96:ca:42:7e:
42:9f:8b:3c:53:11:0f:01:31:b2:b3:7c:ba:2d:82:
50:1d:7b:3a:e6:a4:41:55:3f:31:7c:87:08:52:5f:
54:da:ff:fd:4a:f6:49:e3:51:8a:f7:25:db:8d:f6:
83:be:03:b6:28:75:39:59:0d:52:17:cf:fb:ce:6c:
1d:e0:de:ee:df:1e:a6:ac:4d:84:64:06:e2:08:49:
70:21:e2:1f:26:c7:f4:da:31:64:ed:ec:c9:80:64:
f7:c6:b2:96:a0:45:b8:69:8e:20:e8:5c:da:7e:53:
76:84:a6:5d:26:70:d5:59:7a:2f:13:56:bc:af:69:
6c:97:07:49:ee:80:c2:4c:da:66:4f:ff:a0:b6:f6:
29:e4:fa:04:68:23:9b:0d:29:e7:aa:66:5d:d1:89:
e3:c5:6a:f5:5a:1e:e4:ad:1d:a4:ba:63:74:0d:8e:
3b:a3:fe:20:0a:68:36:c4:51:83:8b:9c:98:18:6f:
b4:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:AE:F6:85:B0:E3:29:2E:31:4D:20:69:5D:CD:7F:24:55:52:C4:EB
X509v3 Authority Key Identifier:
keyid:FA:25:A2:F2:8B:1E:B6:29:16:11:12:87:09:42:A5:ED:18:1B:51:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-iWi8osetikWERKHCUKl7RgbUZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/64443e-03f8-4375-941c-e1d195ac35d2/1/1-iWi8osetikWERKHCUKl7RgbUZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/64443e-03f8-4375-941c-e1d195ac35d2/1/1-iWi8osetikWERKHCUKl7RgbUZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:5d:60:cc:49:34:80:f9:30:7f:0b:bb:99:d8:75:a9:98:3e:
59:ad:01:06:e9:4c:c2:fc:c2:bd:63:e4:a3:13:42:8a:ff:e9:
31:fb:dd:f6:af:b4:52:61:55:f1:01:0e:81:e7:38:ea:2b:dd:
49:01:81:4e:92:f4:ab:d7:6f:eb:0a:51:51:18:d7:d6:20:fa:
48:ae:8d:05:7b:f1:f3:6f:9e:8a:f5:36:5a:72:a8:8b:71:dc:
f4:b8:8c:8a:d3:1b:09:9a:67:84:0f:bb:27:78:54:07:c2:c2:
00:79:f2:eb:af:b1:4d:ab:a5:aa:5a:b6:00:dc:7a:a6:7e:9c:
c1:db:de:17:2b:ec:5c:d8:b0:72:90:ba:62:c6:57:fb:4c:3e:
5c:b7:df:23:1b:49:45:39:b5:e9:69:07:51:52:e7:53:4d:7f:
71:9f:97:af:15:00:19:51:f6:3e:bb:2d:84:a0:46:9f:e2:ee:
cd:ba:a4:53:ac:80:9d:68:2f:d2:b5:be:4c:ff:d8:a5:0c:f8:
6a:2c:a9:11:65:f5:09:c3:01:8b:92:7a:68:f8:45:00:26:ee:
2a:c4:55:da:f2:6b:90:f4:04:d2:70:f7:6f:a1:d7:f5:b1:46:
d8:ba:75:26:60:b0:ca:34:ad:bf:fd:c8:11:9c:9c:46:c9:f5:
0a:89:f5:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:28:07 2026 by rpki-client