Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.mft
File: ifnCFo0tgt39inBjfUQBivMLH5c.mft (raw, json)
Hash identifier: gXRmMkXiF7gys3kHVna2mCC3u9gZYDxuaAicXvOGTXc=
Subject key identifier: 9C:F5:E9:C7:E0:9E:DB:77:8D:3D:FF:31:80:7A:2D:4C:C4:C8:D7:C1
Authority key identifier: 89:F9:C2:16:8D:2D:82:DD:FD:8A:70:63:7D:44:01:8A:F3:0B:1F:97
Certificate issuer: /CN=89f9c2168d2d82ddfd8a70637d44018af30b1f97
Certificate serial: 019FACAC88945DE6DB33BD9B670544E7C52B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ifnCFo0tgt39inBjfUQBivMLH5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.mft
Manifest number: 050D
Signing time: Wed 29 Jul 2026 07:00:15 +0000
Manifest this update: Wed 29 Jul 2026 07:00:15 +0000
Manifest next update: Thu 30 Jul 2026 07:00:15 +0000
Files and hashes: 1: gBJFcoYbkBHMY5TM8IY4zHwd7l8.roa (hash: N41NaFkXMzlFGahMYjKRbrB7l7KmQbIsQ/36YmVvgpQ=)
2: ifnCFo0tgt39inBjfUQBivMLH5c.crl (hash: IqzWOa/Zl0yDTMUlXBX56UIK0qiEDsx68hgrqM0wyIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/ifnCFo0tgt39inBjfUQBivMLH5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 07:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:ac:88:94:5d:e6:db:33:bd:9b:67:05:44:e7:c5:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89f9c2168d2d82ddfd8a70637d44018af30b1f97
Validity
Not Before: Jul 29 07:00:15 2026 GMT
Not After : Jul 30 07:00:15 2026 GMT
Subject: CN=9cf5e9c7e09edb778d3dff31807a2d4cc4c8d7c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1b:dd:33:49:cf:4f:a6:27:9b:7b:11:f0:2e:
78:37:94:63:d7:09:58:bd:68:16:96:9f:e3:c2:f7:
7c:be:32:1e:12:a9:b2:34:de:87:d3:31:50:fd:50:
30:7a:7a:74:54:4e:a2:46:46:6f:e4:cb:88:ae:35:
69:e6:f1:54:c9:af:99:2d:f2:f0:94:cb:ab:65:d8:
af:3e:6d:26:2d:76:f8:ae:2c:d6:0d:4d:f8:df:97:
c9:1d:e9:e7:2d:a6:e2:45:73:70:50:84:57:2a:7a:
75:64:d0:fd:82:a5:58:f5:48:4f:a8:bf:62:f5:e0:
80:70:1f:a6:c8:e6:d5:eb:c7:88:47:68:c2:a5:69:
83:b6:03:18:71:20:ff:3c:65:fa:ac:2a:cc:27:e7:
00:6d:55:82:5c:d2:44:8d:a8:ce:7a:85:6d:40:ee:
e9:4f:62:c1:9b:00:c8:0e:1a:dc:79:8c:7b:cb:80:
74:76:3f:c1:91:ed:7f:3e:d8:d9:c5:ac:35:bf:a3:
b2:57:63:ea:a8:35:9d:b6:c1:f0:35:97:0f:ea:10:
32:33:72:d8:0b:96:81:76:7a:33:a7:38:f8:b2:54:
ce:35:bf:9b:80:20:5f:10:6f:10:4b:72:e7:ce:83:
c2:2e:94:21:4b:b1:fa:ee:40:3c:7b:ef:e8:63:e6:
58:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:F5:E9:C7:E0:9E:DB:77:8D:3D:FF:31:80:7A:2D:4C:C4:C8:D7:C1
X509v3 Authority Key Identifier:
keyid:89:F9:C2:16:8D:2D:82:DD:FD:8A:70:63:7D:44:01:8A:F3:0B:1F:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ifnCFo0tgt39inBjfUQBivMLH5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:97:76:99:ff:a8:fa:6d:5d:c5:1b:b5:e9:a0:85:f5:c6:fa:
c7:0d:6a:17:ef:5d:1f:a8:a9:c2:4e:21:d7:a3:02:62:ad:f5:
80:87:a6:bf:0a:44:0b:2e:df:09:e5:b2:3d:e7:1a:7a:72:54:
7e:ce:43:87:a3:f4:df:91:c1:00:3e:e5:1b:da:60:09:16:97:
a5:be:57:ab:cf:bc:57:e0:d2:80:58:32:d4:68:f0:4f:61:b2:
9e:e5:a1:00:b2:1f:5c:ce:7b:8a:cf:c3:cb:4f:5b:7f:53:59:
6b:14:ca:bc:26:92:19:f5:b4:de:3a:db:ad:38:e0:89:53:47:
90:60:29:83:76:8c:36:9b:b4:bb:63:73:41:75:6c:87:dc:5d:
4b:4b:9d:c6:84:89:0d:c1:d2:0a:a5:c9:ee:27:1b:82:73:2a:
63:b8:ca:35:d9:66:c5:17:16:a7:8f:4a:e0:2a:aa:f6:ac:ef:
91:27:6b:39:77:67:3e:72:c9:4a:24:0e:5f:34:78:25:21:9a:
8e:88:2f:e5:76:2f:c5:92:1d:00:68:72:cd:50:67:e3:5c:56:
ea:27:6d:ea:14:05:75:9e:9f:7f:c1:42:39:0d:2a:6c:a0:e6:
69:01:b6:0d:5b:29:4c:35:82:f7:78:b7:48:20:0f:ce:e3:d3:
20:15:78:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:28:41 2026 by rpki-client