Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9b7027-f324-4ecd-893a-d39cc317fdcd/1/I40fH8TD6PtHGzsd7jbF3zFfsjQ.mft
File: I40fH8TD6PtHGzsd7jbF3zFfsjQ.mft (raw, json)
Hash identifier: kDZ6CxANHcTG2+bWk0TzIEyX7rgq4zd6WtJFqa5MYqo=
Subject key identifier: A1:98:87:BF:26:3F:13:9B:66:1E:FF:8E:7A:11:CD:A1:45:59:55:0E
Authority key identifier: 23:8D:1F:1F:C4:C3:E8:FB:47:1B:3B:1D:EE:36:C5:DF:31:5F:B2:34
Certificate issuer: /CN=238d1f1fc4c3e8fb471b3b1dee36c5df315fb234
Certificate serial: 019FA899BCBEC71246F0BB786DD3AD68BAC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I40fH8TD6PtHGzsd7jbF3zFfsjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9b7027-f324-4ecd-893a-d39cc317fdcd/1/I40fH8TD6PtHGzsd7jbF3zFfsjQ.mft
Manifest number: 0103
Signing time: Tue 28 Jul 2026 12:01:15 +0000
Manifest this update: Tue 28 Jul 2026 12:01:15 +0000
Manifest next update: Wed 29 Jul 2026 12:01:15 +0000
Files and hashes: 1: I40fH8TD6PtHGzsd7jbF3zFfsjQ.crl (hash: fn3ENKIi4Rz+k41mHMsLkZZGTENVH8fcN9hh0rB4pVY=)
2: Z1FAr4NSj_9E4vgngoY4iZIbd6w.roa (hash: TNaTsbZBUY9cnfgT4Gqq06IHw66GAFg4ule0/lO0mw0=)
3: b89OtE1WAM5mSDz-HnqsCyirLw8.asa (hash: WwQIyDPTpparBL/aU3tgaOWtU26s+wxcO28wS+CM+5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9b7027-f324-4ecd-893a-d39cc317fdcd/1/I40fH8TD6PtHGzsd7jbF3zFfsjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/9b7027-f324-4ecd-893a-d39cc317fdcd/1/I40fH8TD6PtHGzsd7jbF3zFfsjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/I40fH8TD6PtHGzsd7jbF3zFfsjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:bc:be:c7:12:46:f0:bb:78:6d:d3:ad:68:ba:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=238d1f1fc4c3e8fb471b3b1dee36c5df315fb234
Validity
Not Before: Jul 28 12:01:15 2026 GMT
Not After : Jul 29 12:01:15 2026 GMT
Subject: CN=a19887bf263f139b661eff8e7a11cda14559550e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:04:d0:3e:85:79:f3:d5:32:66:a2:2e:9a:17:
fa:82:42:c7:af:ac:06:f8:82:24:1b:c8:d6:47:1d:
6a:71:7d:32:6d:80:22:c6:13:a3:2d:ae:78:9e:e1:
33:c3:e9:c8:be:59:d7:79:52:47:8e:8a:88:f4:15:
cc:13:7b:78:3e:bb:7e:06:5b:ae:b7:26:ea:2b:e8:
2a:7f:fb:55:60:ac:82:6d:e9:70:3f:65:b6:44:a4:
87:dd:01:ec:09:89:70:0c:80:e5:93:ff:f4:6d:ec:
78:dd:d3:d0:aa:b5:75:42:2f:f3:c8:7f:b5:6a:71:
fb:8d:9e:d4:de:0d:6a:61:eb:cc:0f:24:19:5c:3b:
9d:84:9b:e6:cb:00:55:b3:c5:ea:38:e6:93:bd:87:
41:05:ba:39:2d:b9:be:67:4f:07:30:c5:a2:93:33:
ff:92:0b:54:58:b4:95:8b:18:0b:24:b8:bc:8a:87:
5b:80:f1:82:36:be:1a:1a:fb:42:e1:e2:18:a2:d4:
23:61:ff:7c:d1:24:fb:fd:48:b3:38:13:ae:64:8c:
87:61:28:08:fc:a6:f3:8c:5d:51:73:8d:4f:f0:b9:
7b:52:f6:99:74:55:3c:05:af:3d:4b:14:d3:1a:12:
ff:5b:70:6d:a7:b8:d1:71:6e:d8:f9:6a:73:29:4e:
af:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:98:87:BF:26:3F:13:9B:66:1E:FF:8E:7A:11:CD:A1:45:59:55:0E
X509v3 Authority Key Identifier:
keyid:23:8D:1F:1F:C4:C3:E8:FB:47:1B:3B:1D:EE:36:C5:DF:31:5F:B2:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I40fH8TD6PtHGzsd7jbF3zFfsjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9b7027-f324-4ecd-893a-d39cc317fdcd/1/I40fH8TD6PtHGzsd7jbF3zFfsjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9b7027-f324-4ecd-893a-d39cc317fdcd/1/I40fH8TD6PtHGzsd7jbF3zFfsjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:18:dc:cf:70:a5:de:47:5d:d2:02:eb:0b:1b:d2:50:d9:6b:
70:09:26:b8:b9:61:84:ae:03:e2:73:f2:fb:bb:80:5a:88:e3:
95:ee:2c:ef:65:62:64:73:5a:d1:81:8d:28:bc:3e:10:31:bb:
8e:77:74:6f:af:85:27:eb:1f:e2:16:ca:a6:c5:21:50:03:e2:
9f:db:f0:29:ba:92:54:71:93:c7:a4:ad:3f:b4:92:28:82:aa:
4a:bf:90:b2:de:b3:b9:71:16:ee:3f:0e:26:79:b4:bf:5c:4e:
49:c7:10:78:bc:33:03:e4:35:df:cd:8d:48:da:a1:12:ab:28:
61:fd:28:56:e4:18:f2:2d:64:ee:b2:e8:1c:37:4b:25:10:06:
6f:ba:93:c2:77:70:4d:d8:45:ea:17:50:9d:e7:af:6c:b2:4e:
02:4c:cd:f2:cf:d7:83:8b:77:e0:82:44:42:6d:37:e3:80:5a:
da:00:85:b0:03:b2:54:cf:b8:4a:2b:b3:c9:d2:29:2f:6a:c4:
97:60:37:d1:46:16:5f:b3:e4:63:41:b3:a7:36:f8:d2:f4:37:
1b:3b:15:0e:50:a9:3d:cd:fa:2c:6c:d2:56:8d:ab:f3:63:93:
3c:da:fc:4a:35:13:27:ed:b1:ef:08:0c:04:93:8b:05:ce:18:
aa:2d:e2:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:20:47 2026 by rpki-client