Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.mft
File: ihZhi3H_yA4cP0HtDfyJq16WP9I.mft (raw, json)
Hash identifier: ls2UccU/bdheZEFiWD4pTbboSZUugJjgRjDFmDbi2zw=
Subject key identifier: 0D:CB:FA:BF:5B:08:A5:A7:43:87:6D:A0:7D:36:1E:BA:46:12:AA:A2
Authority key identifier: 8A:16:61:8B:71:FF:C8:0E:1C:3F:41:ED:0D:FC:89:AB:5E:96:3F:D2
Certificate issuer: /CN=8a16618b71ffc80e1c3f41ed0dfc89ab5e963fd2
Certificate serial: 019FACAD0F7023719F037AB4718181AFF312
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ihZhi3H_yA4cP0HtDfyJq16WP9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.mft
Manifest number: 19DB
Signing time: Wed 29 Jul 2026 07:00:50 +0000
Manifest this update: Wed 29 Jul 2026 07:00:50 +0000
Manifest next update: Thu 30 Jul 2026 07:00:50 +0000
Files and hashes: 1: SheiKMejj2UlfePnEJK4YM6UYGQ.roa (hash: Ll9jhdHvmhGlynW15LRcU3rlqzasSbGuWZW11z3vQs0=)
2: auDg02aDw-Ng4UMnzRMAZPV_78A.roa (hash: A2MCkRQZ/VKnTqKHBJZ1hnIKYJGRR8Cd5N45/0b9lic=)
3: ihZhi3H_yA4cP0HtDfyJq16WP9I.crl (hash: +xrBQ6gtcxLKfSamY6egePvsy79J1rJqFTyXoSykAM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ihZhi3H_yA4cP0HtDfyJq16WP9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 07:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:ad:0f:70:23:71:9f:03:7a:b4:71:81:81:af:f3:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a16618b71ffc80e1c3f41ed0dfc89ab5e963fd2
Validity
Not Before: Jul 29 07:00:50 2026 GMT
Not After : Jul 30 07:00:50 2026 GMT
Subject: CN=0dcbfabf5b08a5a743876da07d361eba4612aaa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0e:08:6c:9a:1a:0c:7a:9d:eb:eb:81:96:14:
cf:19:8f:e5:8a:10:91:6e:fe:1d:f7:56:26:90:be:
09:f8:4b:7a:04:80:16:29:a7:c4:83:15:a5:a4:5a:
48:4c:7f:68:6b:d9:69:dd:a1:45:70:44:51:45:7f:
24:d6:85:89:44:fb:46:36:66:c4:f1:04:89:45:d3:
25:03:90:26:95:d7:31:50:6e:91:e8:58:5c:15:c4:
69:99:31:c7:78:db:95:02:ae:27:20:39:93:39:e2:
b1:35:36:b3:17:60:ba:3a:0b:80:da:08:e4:c6:d0:
2f:9c:db:e2:07:29:61:d7:b9:40:1b:22:05:18:54:
ea:7f:c1:3e:54:74:07:21:b7:e2:a4:25:97:ec:77:
79:a3:f8:4b:b2:cd:7d:58:c1:81:bd:8c:33:e4:ec:
0b:a1:5d:9b:0c:62:a5:25:70:8b:5c:17:51:2a:b3:
50:8f:98:3b:3c:25:08:ba:b8:16:9a:48:c2:54:ac:
29:09:47:52:9f:c4:1e:48:bd:65:5f:92:56:ee:94:
7e:d4:57:17:b1:53:b8:b2:24:c6:18:6d:85:41:77:
77:da:d8:00:e3:e2:9d:35:71:12:77:ab:8b:91:56:
d1:c0:d6:d5:5c:6d:93:a9:f6:33:ba:91:f4:d6:15:
93:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:CB:FA:BF:5B:08:A5:A7:43:87:6D:A0:7D:36:1E:BA:46:12:AA:A2
X509v3 Authority Key Identifier:
keyid:8A:16:61:8B:71:FF:C8:0E:1C:3F:41:ED:0D:FC:89:AB:5E:96:3F:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ihZhi3H_yA4cP0HtDfyJq16WP9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:a6:81:a9:44:59:03:28:8d:6b:06:1c:01:36:ac:b6:96:b4:
19:fb:97:43:25:84:44:65:cb:d9:55:8c:7b:2e:a1:f8:45:f5:
c5:82:6d:dd:4f:f6:dd:95:21:52:e8:95:81:ec:b0:fc:42:a9:
eb:03:28:06:2f:5d:ae:30:94:1a:1a:78:42:b6:f0:f3:4b:52:
81:8b:8f:89:ff:24:cb:ea:f6:1a:d8:cc:7f:cc:3a:84:32:da:
2e:be:f9:a0:b8:d2:86:47:e4:bb:36:2f:d6:14:44:ba:d2:e3:
05:d9:cb:b5:51:14:7e:bc:3b:2f:48:e4:3f:0f:69:ef:f2:c0:
24:46:e7:57:e3:ed:61:b6:8e:c1:a4:61:af:33:60:09:84:ad:
f4:a4:84:59:79:97:0b:a4:f2:a9:c2:f2:92:a2:72:56:a4:77:
23:56:3a:f3:08:b7:92:5b:39:3a:dd:8c:22:f9:37:5f:51:87:
fb:11:8b:8d:06:72:d2:d5:02:30:95:bb:4a:0c:65:19:41:e9:
97:1a:da:44:5a:c7:81:1b:08:8d:67:48:1e:06:a4:9f:75:b7:
0e:64:2b:bb:30:de:1e:91:31:fc:dd:aa:96:73:c1:e2:f8:7f:
bd:74:4c:84:97:26:af:26:3b:3a:63:48:51:77:96:6b:fd:c1:
a8:ff:19:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:12:58 2026 by rpki-client