Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/iwVEhe5ixvGTlhPLogZp7vRQT3k.mft
File: iwVEhe5ixvGTlhPLogZp7vRQT3k.mft (raw, json)
Hash identifier: LiuU45MQiAhqwk2lM4Yl18ZFFpFlhwLaV4MffGfl4FI=
Subject key identifier: FE:A8:76:8C:49:C9:D2:0E:60:A8:EA:FB:59:DA:7C:AD:3D:50:60:FB
Authority key identifier: 8B:05:44:85:EE:62:C6:F1:93:96:13:CB:A2:06:69:EE:F4:50:4F:79
Certificate issuer: /CN=8b054485ee62c6f1939613cba20669eef4504f79
Certificate serial: 019FAAF599255CD01C7391EA4BA0B929B7B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwVEhe5ixvGTlhPLogZp7vRQT3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/iwVEhe5ixvGTlhPLogZp7vRQT3k.mft
Manifest number: 0FC5
Signing time: Tue 28 Jul 2026 23:00:49 +0000
Manifest this update: Tue 28 Jul 2026 23:00:49 +0000
Manifest next update: Wed 29 Jul 2026 23:00:49 +0000
Files and hashes: 1: MPdIoBhSamsoceGH97ZrbeY-7Y4.roa (hash: xk+VO+lT2ZL0Nzt8GYWzkONFJ8wXFr2d45kNV/RsFNQ=)
2: iwVEhe5ixvGTlhPLogZp7vRQT3k.crl (hash: 5Q0R4dW0ZethkTwbksxhJhA72PIw6DISFFWTZkYRWAQ=)
3: lYJDRXWPAACOBIGtN5SoMpmELk8.roa (hash: +/i7PrD75ms6DLzi7NKAcmr/vu2swer4LejKpfAFxnA=)
4: uUrDuBilHzuoCgA80rJqPJxqSNQ.roa (hash: 77BWKMeC9pAnIWkDSdffjc6huYPIszzufpj7ouuEVAY=)
5: vl57Hdk_U8b9_Y2PxCQcURRvrQw.roa (hash: LDklYITUv8QycRGMLTw4zqVIBgqTAfoD6STDQphVOWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/iwVEhe5ixvGTlhPLogZp7vRQT3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/iwVEhe5ixvGTlhPLogZp7vRQT3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/iwVEhe5ixvGTlhPLogZp7vRQT3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:99:25:5c:d0:1c:73:91:ea:4b:a0:b9:29:b7:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b054485ee62c6f1939613cba20669eef4504f79
Validity
Not Before: Jul 28 23:00:49 2026 GMT
Not After : Jul 29 23:00:49 2026 GMT
Subject: CN=fea8768c49c9d20e60a8eafb59da7cad3d5060fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2d:b6:43:d8:c8:f7:5e:d5:e3:e7:05:eb:de:
4d:5b:fe:b9:c1:c9:fc:7d:2e:64:90:50:6e:91:2e:
78:e3:ab:73:68:d1:29:c2:c2:8f:66:15:06:2c:b1:
38:ca:50:2c:3b:63:69:5a:c0:16:1e:5f:73:3b:d5:
ec:1d:3c:16:a5:22:94:4e:bf:d2:0a:2d:24:17:44:
a3:59:43:5c:b5:90:80:93:95:f1:6d:64:c7:d7:cd:
76:ae:31:1f:69:af:69:36:10:45:7e:11:53:09:af:
97:4e:cd:6c:d8:0b:c6:a1:58:6d:c7:8d:0b:30:5f:
97:37:94:0c:bc:dd:5f:be:3d:f6:7e:68:c2:59:c3:
9c:28:29:85:0a:da:ca:d3:db:98:55:84:86:21:c0:
3b:2d:e6:08:40:e1:f7:1a:2d:64:78:93:52:9c:9d:
4a:73:cd:cd:09:e9:52:98:e9:03:1c:95:61:b1:7b:
6b:b0:73:d2:c8:f9:f4:9f:6a:0d:36:26:bc:30:17:
73:5f:f4:a9:29:c0:92:a2:cc:2a:92:ba:fa:e6:74:
b7:f0:3e:a2:7a:0a:74:82:cc:2a:71:73:58:94:d5:
23:f9:bc:e8:47:55:15:5a:e5:78:fe:38:ef:da:73:
9f:71:89:38:bf:9b:77:5b:32:1a:a2:3e:9b:a6:81:
bb:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:A8:76:8C:49:C9:D2:0E:60:A8:EA:FB:59:DA:7C:AD:3D:50:60:FB
X509v3 Authority Key Identifier:
keyid:8B:05:44:85:EE:62:C6:F1:93:96:13:CB:A2:06:69:EE:F4:50:4F:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwVEhe5ixvGTlhPLogZp7vRQT3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/iwVEhe5ixvGTlhPLogZp7vRQT3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/iwVEhe5ixvGTlhPLogZp7vRQT3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:28:b8:59:15:e9:c9:73:9a:7a:b8:cb:f0:46:8d:8f:93:35:
e2:81:87:c6:5c:4e:2d:26:a5:5b:7c:7f:c4:45:a0:ec:c8:cb:
dc:15:31:fe:89:56:5a:be:0a:4a:b9:39:e9:de:49:bc:56:7a:
8b:85:a6:8d:e6:4d:bd:e5:f9:5a:df:22:24:6f:a5:05:b3:c8:
28:d8:0b:32:d3:a0:f0:96:5c:04:f0:fd:7f:17:38:df:08:61:
e9:97:31:55:d8:06:e3:af:49:23:70:f8:63:31:d2:98:ea:d9:
f8:b6:f7:f9:c4:8f:7c:78:5c:f6:71:dd:fa:d5:b7:e1:82:8f:
f7:eb:3a:f1:b0:10:57:aa:c7:7f:db:68:dc:fe:d8:d3:90:41:
be:ae:d0:91:52:57:27:72:3a:b3:27:29:be:63:65:16:cf:bd:
95:d5:ef:b9:2b:4a:8c:e0:9d:78:3d:e4:eb:ce:f2:c5:b9:a2:
d6:ec:b6:d2:be:89:47:3d:d0:78:08:5f:83:7c:e4:0d:3c:80:
cc:14:b9:8b:96:bb:04:bc:af:42:f4:a5:2d:2c:c6:66:69:61:
22:12:8f:54:01:76:55:4c:81:d4:8a:5c:54:c3:41:09:d8:64:
2d:c6:21:99:8f:f6:cc:b5:20:4b:1d:6c:4b:f5:05:00:88:06:
56:0a:0a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:37:53 2026 by rpki-client