Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/c16717-855d-4391-b79f-b888a3124454/1/IOI90FhJzIEyVauNG4U_ucRdhpQ.mft
File: IOI90FhJzIEyVauNG4U_ucRdhpQ.mft (raw, json)
Hash identifier: CduSdwFvRAXazbgMVJ+1zdFqcNwjZajy0c0dOWK3l0o=
Subject key identifier: 06:07:15:8C:81:37:A8:78:8A:0E:79:5D:D2:43:85:61:09:84:37:0D
Authority key identifier: 20:E2:3D:D0:58:49:CC:81:32:55:AB:8D:1B:85:3F:B9:C4:5D:86:94
Certificate issuer: /CN=20e23dd05849cc813255ab8d1b853fb9c45d8694
Certificate serial: 019FACAC9E64861CC6E2A7D0C2DA04B0DECF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOI90FhJzIEyVauNG4U_ucRdhpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/c16717-855d-4391-b79f-b888a3124454/1/IOI90FhJzIEyVauNG4U_ucRdhpQ.mft
Manifest number: 03D7
Signing time: Wed 29 Jul 2026 07:00:21 +0000
Manifest this update: Wed 29 Jul 2026 07:00:21 +0000
Manifest next update: Thu 30 Jul 2026 07:00:21 +0000
Files and hashes: 1: IOI90FhJzIEyVauNG4U_ucRdhpQ.crl (hash: wHsuONZKQnuLIGNSBcNBpGZgQlAzUbbGoewuhiUoS7M=)
2: ZVUh7y26ToxL-oq8YITOKQgfF08.roa (hash: mGiVKv+1/ai9DnwEadL7YecZ7TPX9VgOuJDaNOyNIA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/c16717-855d-4391-b79f-b888a3124454/1/IOI90FhJzIEyVauNG4U_ucRdhpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/c16717-855d-4391-b79f-b888a3124454/1/IOI90FhJzIEyVauNG4U_ucRdhpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IOI90FhJzIEyVauNG4U_ucRdhpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 07:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:ac:9e:64:86:1c:c6:e2:a7:d0:c2:da:04:b0:de:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20e23dd05849cc813255ab8d1b853fb9c45d8694
Validity
Not Before: Jul 29 07:00:21 2026 GMT
Not After : Jul 30 07:00:21 2026 GMT
Subject: CN=0607158c8137a8788a0e795dd24385610984370d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:0c:27:b1:c9:b9:0c:87:b3:49:7f:2e:37:20:
31:d5:5a:ce:88:14:c6:d1:7a:40:32:79:b2:93:00:
8f:93:ed:21:52:39:0b:67:19:10:41:d6:cf:64:8c:
eb:98:8e:01:ac:a6:2c:76:08:7f:01:c8:80:af:98:
07:0f:55:c6:86:1f:fd:99:f6:57:18:97:bf:fb:71:
35:e1:3f:f9:55:0e:9c:e5:b7:4f:0d:11:68:fd:bc:
ae:9f:93:ea:d3:0d:f8:66:09:af:32:bd:85:b3:ad:
9c:4e:c6:62:5f:64:a1:cf:dd:47:fb:2e:23:46:8c:
7c:b1:ba:28:a8:8e:1f:d9:9a:c2:0e:54:20:68:99:
4f:d0:f1:d3:c6:0a:5c:6c:33:ce:af:5a:dd:63:19:
cf:ac:ef:83:86:a8:2f:9a:15:49:29:09:d1:6f:16:
91:ce:8d:27:db:13:fa:81:5e:62:97:d2:45:ea:23:
d3:f1:90:ef:ed:72:99:a5:5d:be:9b:62:3a:85:be:
80:3e:3c:9b:bb:15:30:82:1e:58:fc:e9:19:55:19:
0f:d6:9f:f5:ac:be:5b:06:4f:06:99:64:e6:cc:93:
ae:8a:b0:e5:8d:d3:ed:0d:03:a1:b2:0a:5a:41:48:
8a:ef:05:2d:01:d2:6b:33:9d:00:5c:91:c7:27:4e:
20:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:07:15:8C:81:37:A8:78:8A:0E:79:5D:D2:43:85:61:09:84:37:0D
X509v3 Authority Key Identifier:
keyid:20:E2:3D:D0:58:49:CC:81:32:55:AB:8D:1B:85:3F:B9:C4:5D:86:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOI90FhJzIEyVauNG4U_ucRdhpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c16717-855d-4391-b79f-b888a3124454/1/IOI90FhJzIEyVauNG4U_ucRdhpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c16717-855d-4391-b79f-b888a3124454/1/IOI90FhJzIEyVauNG4U_ucRdhpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:67:e4:b5:ec:da:03:59:26:c8:bc:2a:a2:5c:4a:aa:ce:bf:
2b:c8:53:f0:84:79:83:d3:07:b0:9c:5f:91:b8:b2:43:aa:cf:
6f:e7:8a:c6:60:8e:ea:3f:92:26:01:cf:2a:53:72:ac:51:76:
90:12:f1:f6:b2:24:5a:5d:87:a5:b3:1f:33:f4:56:98:53:a6:
fe:86:c0:7d:4d:19:bb:ca:bc:0c:fa:c4:ad:6d:dc:67:e0:82:
85:43:ce:93:9c:8d:33:47:4e:e8:f1:21:ad:a3:9e:27:19:61:
01:4b:88:60:eb:a9:e1:da:6c:b5:74:25:e9:df:a6:5f:b5:df:
62:f9:0b:e6:38:ed:f4:7b:2b:90:1d:8f:59:9c:2f:91:b4:21:
2d:b6:7a:a2:f6:f3:46:55:5f:e7:f3:7c:01:24:5e:ca:0b:b6:
94:a7:c9:fb:57:f9:68:1f:80:68:aa:b5:2c:9a:2a:3f:34:46:
01:03:ed:2e:52:76:f7:c4:9d:d5:6a:1a:60:1a:40:f6:38:fa:
35:1c:11:bc:d7:80:e1:e1:0c:b8:3f:56:62:46:54:d9:4e:4f:
b7:44:83:d2:93:aa:df:91:4d:ce:c7:1f:29:6b:05:f2:18:b8:
1a:8a:35:74:a6:3e:30:ca:b3:73:d7:13:4e:4d:3d:e1:b8:ae:
26:98:06:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:34:07 2026 by rpki-client