Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6b554b-e6df-41b4-a0d3-bd23ae1ed292/1/iSKxgxmji3UEi7etiaeLo303RcY.mft
File: iSKxgxmji3UEi7etiaeLo303RcY.mft (raw, json)
Hash identifier: hbXdiktCtdxvhcOLep6XcRVJSBYqApz+V5Mpw45ijxA=
Subject key identifier: 2D:36:C7:0F:7E:80:2D:8C:11:1C:3A:16:F1:04:81:52:FF:BE:06:71
Authority key identifier: 89:22:B1:83:19:A3:8B:75:04:8B:B7:AD:89:A7:8B:A3:7D:37:45:C6
Certificate issuer: /CN=8922b18319a38b75048bb7ad89a78ba37d3745c6
Certificate serial: 019FA906C44C79272EF271345203569C0CFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iSKxgxmji3UEi7etiaeLo303RcY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/6b554b-e6df-41b4-a0d3-bd23ae1ed292/1/iSKxgxmji3UEi7etiaeLo303RcY.mft
Manifest number: 01D3
Signing time: Tue 28 Jul 2026 14:00:20 +0000
Manifest this update: Tue 28 Jul 2026 14:00:20 +0000
Manifest next update: Wed 29 Jul 2026 14:00:20 +0000
Files and hashes: 1: UTmSNHW_h1OEtIHiOMz9m7RdXcQ.asa (hash: 2JMO3R8vQ9ztrTHPM06LK7EXviAp0gW+oBxKpsmJcSY=)
2: iSKxgxmji3UEi7etiaeLo303RcY.crl (hash: yeFSxNvwrLGoxbkjazx3Px5X6VhK3bYjN4iF4uaTsrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/6b554b-e6df-41b4-a0d3-bd23ae1ed292/1/iSKxgxmji3UEi7etiaeLo303RcY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/6b554b-e6df-41b4-a0d3-bd23ae1ed292/1/iSKxgxmji3UEi7etiaeLo303RcY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iSKxgxmji3UEi7etiaeLo303RcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:06:c4:4c:79:27:2e:f2:71:34:52:03:56:9c:0c:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8922b18319a38b75048bb7ad89a78ba37d3745c6
Validity
Not Before: Jul 28 14:00:20 2026 GMT
Not After : Jul 29 14:00:20 2026 GMT
Subject: CN=2d36c70f7e802d8c111c3a16f1048152ffbe0671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:af:b9:80:6e:96:7a:a3:03:ef:a4:09:70:4b:
73:7b:f2:19:f0:20:9e:9b:5e:59:2c:f5:57:5f:81:
6a:b9:d6:d2:a7:6a:de:9a:dc:97:5c:95:42:92:76:
3f:ab:65:3b:7d:a9:e8:f1:64:aa:92:27:e0:89:54:
47:06:3f:75:a1:f7:78:34:ca:be:3f:5e:ab:ac:41:
87:ab:d2:15:85:f1:cd:1f:18:ca:32:30:9d:de:1f:
7c:e3:c6:6f:e2:a7:a9:e0:02:88:d2:e6:c6:a1:82:
e6:db:e1:21:d1:30:77:03:ba:30:d2:ff:e5:20:bf:
fe:47:40:52:09:1d:fc:b0:6e:97:09:e9:dc:d6:21:
38:b3:54:cb:38:a9:2f:75:7b:b9:cb:21:33:f5:67:
46:dc:4c:62:8c:59:84:23:bb:50:25:89:3b:f3:89:
23:51:8c:eb:be:4e:fd:6d:f9:ed:2e:35:d4:a9:88:
c4:a5:1e:47:b7:2e:12:a7:95:57:ec:b6:1e:2f:74:
f5:f8:85:fe:0a:aa:a4:3b:69:7b:2e:de:14:9a:65:
a8:37:69:82:d2:5e:f5:a0:d1:5a:51:da:36:b6:f5:
b6:98:d1:81:b6:fa:5e:af:2f:1b:ad:3a:9d:99:34:
41:ac:96:e7:9d:08:b1:f4:98:19:38:40:ae:9d:17:
b7:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:36:C7:0F:7E:80:2D:8C:11:1C:3A:16:F1:04:81:52:FF:BE:06:71
X509v3 Authority Key Identifier:
keyid:89:22:B1:83:19:A3:8B:75:04:8B:B7:AD:89:A7:8B:A3:7D:37:45:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iSKxgxmji3UEi7etiaeLo303RcY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6b554b-e6df-41b4-a0d3-bd23ae1ed292/1/iSKxgxmji3UEi7etiaeLo303RcY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6b554b-e6df-41b4-a0d3-bd23ae1ed292/1/iSKxgxmji3UEi7etiaeLo303RcY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:18:20:d9:03:b0:46:0f:30:1c:37:b8:10:b0:ce:d2:7f:d5:
1b:8d:f0:1a:d5:04:45:1d:27:06:43:ba:fc:3c:b4:8c:f3:96:
18:6c:1f:d7:05:0d:16:c9:94:e0:bd:74:f7:3e:59:3f:96:76:
f4:e3:70:87:48:b2:2f:d7:a4:1f:50:85:c2:ef:6c:af:86:de:
87:76:cb:f8:c2:24:41:48:a4:8e:81:04:47:a8:6c:27:d3:64:
a5:60:bd:4b:ef:f5:80:cf:43:a9:bd:f0:62:f2:6a:b9:fe:2b:
e7:48:cc:2b:62:f3:30:25:52:3f:46:22:c5:b2:2d:04:04:41:
19:d1:56:6d:0a:23:f2:d1:94:18:a1:96:1c:7e:bb:2d:10:34:
a4:d0:0f:c7:a4:15:e8:36:9f:83:f4:38:40:ea:9e:47:95:6e:
eb:5b:37:58:0f:83:8f:33:37:62:76:f9:3f:b1:48:fc:75:ec:
84:8d:e0:99:0a:b2:4e:fb:a2:ff:bb:e1:6a:2f:6b:26:d6:a2:
ae:e2:90:c5:7a:29:2c:9c:3a:a4:d3:00:42:5c:6d:6b:6f:20:
a6:7f:c9:44:0b:f4:a1:30:c5:56:76:e2:f9:27:8f:4c:e6:75:
f1:b6:80:33:3c:4b:87:b1:a9:20:b1:9f:ec:cd:68:ad:ab:66:
56:1a:b0:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:53:58 2026 by rpki-client