Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.mft
File: ia6mmISBzqS5W2UTHMSYhPPtDj8.mft (raw, json)
Hash identifier: APCj7Ounp2XQTv8AxK/RDkgdJG+LtbtBsQITsQ9U7IU=
Subject key identifier: 1F:7A:95:90:B1:5A:4C:05:F7:BB:19:90:50:C9:C3:94:5C:48:01:02
Authority key identifier: 89:AE:A6:98:84:81:CE:A4:B9:5B:65:13:1C:C4:98:84:F3:ED:0E:3F
Certificate issuer: /CN=89aea6988481cea4b95b65131cc49884f3ed0e3f
Certificate serial: 019FA9AC3DFDBCB6AB4B671C1089AB8D38FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ia6mmISBzqS5W2UTHMSYhPPtDj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.mft
Manifest number: 19D3
Signing time: Tue 28 Jul 2026 17:01:05 +0000
Manifest this update: Tue 28 Jul 2026 17:01:05 +0000
Manifest next update: Wed 29 Jul 2026 17:01:05 +0000
Files and hashes: 1: NoeQVsGRTiyXfh1eMtf_ayztjys.roa (hash: AI/YmWAsP7YbcuYJ9yAOU2XEXLr8wONVVB+AxIjcXdo=)
2: ia6mmISBzqS5W2UTHMSYhPPtDj8.crl (hash: auSgXNS3kqp0mcCadCiWUVpHx/pnAeyY79tdbv0TaoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ia6mmISBzqS5W2UTHMSYhPPtDj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 17:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ac:3d:fd:bc:b6:ab:4b:67:1c:10:89:ab:8d:38:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89aea6988481cea4b95b65131cc49884f3ed0e3f
Validity
Not Before: Jul 28 17:01:05 2026 GMT
Not After : Jul 29 17:01:05 2026 GMT
Subject: CN=1f7a9590b15a4c05f7bb199050c9c3945c480102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1a:84:86:9d:f5:4d:17:ef:be:a4:89:67:98:
60:e3:8e:2e:a2:b4:b3:62:c4:84:78:70:cf:5a:fb:
2f:9d:36:2a:25:63:00:c3:38:40:f7:ce:7c:a6:1c:
96:f5:50:fa:5a:fb:ec:b4:ae:cc:38:0d:dc:28:4f:
af:77:d4:24:40:18:b1:31:e7:9b:18:61:67:f5:d1:
ac:bb:ba:66:2f:52:2e:35:91:89:09:c2:31:8f:37:
c8:b1:6b:55:13:8b:37:76:7a:eb:54:62:2b:96:5b:
59:36:73:e2:e1:3c:71:fd:65:78:6c:fa:36:09:4a:
4d:aa:ba:50:64:7e:fe:79:da:c6:db:eb:77:fc:4a:
d1:78:ca:95:43:fa:32:66:cc:b2:c9:ee:98:b5:a9:
5c:be:4b:7e:44:09:96:4c:f0:51:2e:5f:a8:66:d2:
5c:32:f9:66:c5:1b:fc:ab:97:76:22:50:1e:0b:0c:
3e:f2:42:f1:9b:d5:4f:da:0b:cd:cb:04:1c:99:22:
79:1e:83:1b:8d:f1:71:e1:96:cd:18:39:85:43:2b:
cb:7c:49:42:38:ae:90:2d:49:c8:c0:c2:fd:68:60:
bd:b6:1f:7f:70:9a:e6:9d:ee:ab:2b:34:a0:03:d5:
01:a9:e7:1d:96:cd:21:18:b5:0e:8b:13:57:a2:5b:
5f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:7A:95:90:B1:5A:4C:05:F7:BB:19:90:50:C9:C3:94:5C:48:01:02
X509v3 Authority Key Identifier:
keyid:89:AE:A6:98:84:81:CE:A4:B9:5B:65:13:1C:C4:98:84:F3:ED:0E:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ia6mmISBzqS5W2UTHMSYhPPtDj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:90:29:d9:30:f9:6c:ea:4f:dc:73:44:ff:35:d6:f4:76:f7:
36:d5:4b:e8:56:bf:df:45:67:4c:ab:67:a9:b5:64:fb:95:f5:
35:84:37:29:be:8d:6d:d5:09:d0:da:99:51:6e:2e:be:e4:18:
9f:80:22:e4:12:3d:9a:53:fa:dc:63:c0:57:f8:d4:4c:e2:f0:
19:3f:a9:b9:f0:b0:09:13:0f:af:64:e3:d7:c2:13:1b:a9:85:
23:b3:4a:bb:1c:0c:fa:6f:70:b1:1d:fd:9c:ce:d7:f3:02:ef:
67:15:03:76:be:f6:ba:a2:9b:2e:4a:d2:61:35:64:30:9a:4c:
ab:bf:33:20:bc:e5:e9:c7:9a:86:e6:cf:6a:17:30:6f:a0:fd:
2a:c3:b7:16:13:bd:92:06:b7:8f:25:f1:0e:e9:2e:c9:31:17:
22:93:01:e6:98:a8:48:3d:07:65:41:6f:23:16:7c:6b:1c:35:
ce:bf:0d:ab:44:de:bf:ef:24:0c:bd:a8:34:92:59:36:23:e9:
9f:3b:3b:dd:5c:c1:8a:1f:c7:ec:9f:12:b4:96:77:8a:61:ef:
b1:4e:1c:51:66:8b:3f:1d:0b:f0:69:61:5d:f4:8c:48:17:c2:
2f:d5:29:ce:5f:07:65:03:44:db:fd:cf:ed:fc:79:37:73:76:
66:53:01:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:52:05 2026 by rpki-client