Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft
File: iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft (raw, json)
Hash identifier: U2Kpgm+jsTJFD22VadBKoa8Rq1NFEy/m3xf3GypLt70=
Subject key identifier: 07:0C:C0:12:D1:E2:C1:30:C3:84:4B:27:9D:16:BD:28:86:73:1F:4C
Authority key identifier: 88:FF:4E:E6:23:D8:FA:B7:3C:90:1D:0C:BD:C9:3A:32:1E:9C:CF:B7
Certificate issuer: /CN=88ff4ee623d8fab73c901d0cbdc93a321e9ccfb7
Certificate serial: 019FA90734EA3C805C464D0497ABFC3982DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft
Manifest number: 0D6D
Signing time: Tue 28 Jul 2026 14:00:49 +0000
Manifest this update: Tue 28 Jul 2026 14:00:49 +0000
Manifest next update: Wed 29 Jul 2026 14:00:49 +0000
Files and hashes: 1: WDCEfBOgZu0IS0tXVscqDchFouE.roa (hash: M77yLF1D375mORfB1s9NJJsYDZZdRI/2B/Q2R1Rr0oU=)
2: eHFFve7oB3P4jI8nEd4tmbXombs.roa (hash: 2jkRmBwjqx2G1TPqQBkiFukmoNh6yKO3uMYlkbOFlyk=)
3: iP9O5iPY-rc8kB0Mvck6Mh6cz7c.crl (hash: gwZmR8k26q4KNHs2RAgtlB+c/s1xOsTTGjSv3ALnSQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:34:ea:3c:80:5c:46:4d:04:97:ab:fc:39:82:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88ff4ee623d8fab73c901d0cbdc93a321e9ccfb7
Validity
Not Before: Jul 28 14:00:49 2026 GMT
Not After : Jul 29 14:00:49 2026 GMT
Subject: CN=070cc012d1e2c130c3844b279d16bd2886731f4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:25:50:7a:47:88:57:49:2f:91:16:30:b0:28:
24:ac:48:cb:e3:30:0e:fc:03:f1:e1:99:4b:e6:62:
cf:bf:ea:ea:e7:61:ac:49:77:13:7c:5a:ab:3b:21:
aa:52:aa:77:f9:eb:fd:9e:8d:0f:c6:d2:ba:c3:07:
ba:ac:cd:b3:30:be:7e:cb:e2:6f:7b:2d:a1:c8:4d:
98:68:ad:07:1f:ee:db:ff:68:87:57:64:4a:05:bb:
86:11:95:d0:6a:23:c8:48:3b:85:b4:41:ee:03:c6:
d4:1d:53:8b:9e:1f:23:ee:c5:af:87:ca:25:88:a1:
19:62:a0:ba:16:c5:ac:4a:2e:e0:70:f7:de:c8:e4:
db:f7:d1:4d:1b:9d:ea:17:39:2c:4b:17:f8:ee:9b:
37:ca:d7:22:5f:54:cf:0c:d6:dc:81:70:1a:fe:6d:
e8:36:71:27:ac:ea:e8:c5:78:50:90:f7:1f:20:2f:
af:00:f9:7d:cb:71:fa:aa:6d:9e:66:07:68:2c:01:
70:d9:b2:21:4b:5f:83:20:d0:87:fe:a3:4d:7e:65:
ee:56:e0:63:69:4d:87:cf:cf:32:b6:e5:ea:c3:82:
45:e5:a9:f7:94:2e:9e:63:81:45:4c:0e:b3:7c:ef:
38:bb:7d:dc:80:32:cb:b7:10:48:d7:5b:cd:91:54:
d3:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:0C:C0:12:D1:E2:C1:30:C3:84:4B:27:9D:16:BD:28:86:73:1F:4C
X509v3 Authority Key Identifier:
keyid:88:FF:4E:E6:23:D8:FA:B7:3C:90:1D:0C:BD:C9:3A:32:1E:9C:CF:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:de:11:4c:73:5c:74:54:d3:f3:44:67:3c:f3:99:4a:1f:eb:
cf:14:42:68:a3:00:66:19:ef:a0:da:d7:63:e1:c8:d9:6b:1b:
fb:e4:fe:05:45:35:d7:6d:0f:c0:98:6a:32:25:f2:14:94:f6:
38:a0:06:91:cc:7c:14:00:50:a7:3c:bc:e8:7b:aa:5d:06:db:
8a:60:b8:56:14:df:ba:25:4c:d3:e9:c3:8f:03:b7:7c:02:70:
c2:d9:dc:08:3a:b5:7c:1b:c9:bf:d0:53:0a:56:77:00:fc:26:
dd:1b:03:16:88:bf:9a:8d:0e:59:c0:ec:cd:09:f9:e5:70:4c:
8d:9f:24:23:c2:df:40:10:4f:77:a8:55:25:13:a5:a9:be:82:
7f:ac:a9:59:8e:08:a4:59:22:e8:68:90:66:b7:cf:ac:30:13:
30:8a:55:96:f8:bf:e9:c4:32:b9:75:b1:d0:f6:a7:75:20:54:
58:60:96:36:f2:47:13:8d:df:0f:df:ce:dd:82:43:df:b6:40:
9d:45:cb:1f:c7:12:00:43:47:1b:2c:d6:08:5a:4b:56:bd:61:
9f:fd:30:4f:85:4c:4f:b1:a3:13:1b:5c:15:a5:b2:4d:bc:95:
98:5d:5d:4c:b7:a3:57:de:13:76:77:4d:52:74:9d:ff:1f:8e:
84:8d:3e:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:18:08 2026 by rpki-client