Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft
File: iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft (raw, json)
Hash identifier: DijvIK3QA0IcHTd/szVOqUj/QqnjB9GZDpg4rczKyuk=
Subject key identifier: 7F:03:87:97:BF:80:1E:33:7A:60:70:C8:D7:39:60:18:38:E7:60:C1
Authority key identifier: 88:77:50:03:F7:D9:E8:E6:E1:EF:48:DB:06:72:8E:66:8E:D1:87:BC
Certificate issuer: /CN=88775003f7d9e8e6e1ef48db06728e668ed187bc
Certificate serial: 019FAB6319655ADCD287578FE650F7744369
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft
Manifest number: 10A6
Signing time: Wed 29 Jul 2026 01:00:25 +0000
Manifest this update: Wed 29 Jul 2026 01:00:25 +0000
Manifest next update: Thu 30 Jul 2026 01:00:25 +0000
Files and hashes: 1: POpf16JTfJb3ZTTDt9B0oJ0533g.roa (hash: rQVzrT/0k1e9bsX7W+CGzINAzGb8c3B2wWbzfmIqa5o=)
2: cnQVXsjXrao1YqnaQ83x_ejyGco.roa (hash: +XOZIpswIk5KNwpxBMYpz+E9jZodoc2Jm7RIiTE+ZY8=)
3: iHdQA_fZ6Obh70jbBnKOZo7Rh7w.crl (hash: TMHK0fYSzOvTjEVwr30RXlB1BDQxiZX0AFIi/DwFv+k=)
4: x7X970YopYql2_ORGb5JC0O5FPc.roa (hash: 1D4r8OdwFq2JIgRIm8qX+PHxe35m1r8nAHe0FHGqqlU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:19:65:5a:dc:d2:87:57:8f:e6:50:f7:74:43:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88775003f7d9e8e6e1ef48db06728e668ed187bc
Validity
Not Before: Jul 29 01:00:25 2026 GMT
Not After : Jul 30 01:00:25 2026 GMT
Subject: CN=7f038797bf801e337a6070c8d739601838e760c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4a:1d:eb:86:82:64:c8:2d:6e:a4:d5:f1:c9:
a8:15:34:10:45:40:32:7d:d0:4c:d9:7f:69:67:fe:
20:a7:7f:75:2e:42:62:26:24:dc:38:57:6c:42:35:
bd:4e:d6:93:18:df:6a:17:c9:42:1e:c5:cf:d7:38:
48:c0:a0:15:e2:b9:2d:da:07:13:31:97:2e:ea:29:
1a:a9:81:16:8f:45:0f:50:b2:c9:d0:9d:97:32:1a:
4f:fa:da:d1:63:c1:f0:fe:33:30:66:cf:24:a0:3d:
fc:b5:d5:47:2c:a9:f7:ab:13:60:99:37:e0:c1:e4:
58:b3:22:53:39:e9:c9:75:77:2d:fa:b6:67:76:73:
fa:d6:fc:56:e4:47:cc:c5:f6:02:0d:8c:76:1b:ec:
95:e5:94:49:53:50:14:01:bc:40:a9:c1:1e:92:09:
f7:f8:6c:05:8d:69:4f:5f:72:ca:1f:ae:b7:05:f7:
0f:b2:df:8d:77:f6:bd:65:52:fa:bd:7b:63:b6:0d:
e6:fb:34:47:dc:2a:da:d1:06:df:25:29:14:93:4d:
22:fb:07:78:f3:33:0a:41:c4:5a:28:29:aa:84:dd:
0b:e4:64:81:ad:37:27:c4:e8:26:df:32:fd:41:d1:
a4:4d:ee:e4:88:2d:3e:10:97:17:de:e1:dd:17:79:
14:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:03:87:97:BF:80:1E:33:7A:60:70:C8:D7:39:60:18:38:E7:60:C1
X509v3 Authority Key Identifier:
keyid:88:77:50:03:F7:D9:E8:E6:E1:EF:48:DB:06:72:8E:66:8E:D1:87:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:34:64:ed:56:de:6e:87:3d:96:a9:48:0b:eb:fd:e3:67:0a:
cc:1e:bf:3e:e0:26:62:0b:68:a8:2f:4a:98:0f:da:05:94:3e:
a9:fd:a2:9b:d5:56:ac:92:af:40:70:26:e4:18:4f:88:e4:71:
9e:ea:7d:44:54:3a:02:c6:a1:49:ec:c3:e5:2c:73:ea:83:db:
00:0f:c4:ff:fc:a4:b5:f1:90:a6:4d:9d:ed:ff:13:25:34:de:
85:28:3a:55:69:ae:e5:66:33:60:ae:84:66:ce:85:de:2e:d0:
70:30:88:da:68:3a:ae:bd:06:92:ad:d8:ea:b0:c1:26:85:49:
63:a8:14:5e:81:62:1e:1f:e2:fd:1d:1b:af:ec:be:1d:b8:2c:
74:08:a9:49:53:15:92:dc:39:12:a4:6f:a6:57:a3:ab:bd:31:
a4:b6:81:18:c4:cb:bf:6e:16:0e:77:3a:3a:bf:e8:cb:cd:fe:
bc:ab:af:cc:fe:f5:8f:a2:39:a0:c6:f3:b1:c0:08:b0:cb:9d:
86:8f:cd:76:77:19:96:aa:14:db:53:96:b8:df:39:dc:44:5e:
fc:c6:51:19:88:ed:84:81:83:9c:12:18:24:37:65:0f:c2:6d:
d7:9b:87:11:e4:e3:64:86:04:71:39:27:0c:48:56:90:90:5f:
71:21:ab:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:30:50 2026 by rpki-client