Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.mft
File: IJejEXyhwdYpKuUpEbTwyk-OkBk.mft (raw, json)
Hash identifier: 7W3Oglq7RZ8wSLf9GZsmxExBZmdB4y1p7YbQwWCw3jc=
Subject key identifier: EA:B9:FE:5B:65:DD:62:B0:DC:2D:D5:60:EC:55:6F:80:28:C3:CE:49
Authority key identifier: 20:97:A3:11:7C:A1:C1:D6:29:2A:E5:29:11:B4:F0:CA:4F:8E:90:19
Certificate issuer: /CN=2097a3117ca1c1d6292ae52911b4f0ca4f8e9019
Certificate serial: 019FA9E2C91987C4497AD03CFB428A7C968E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IJejEXyhwdYpKuUpEbTwyk-OkBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.mft
Manifest number: 19D6
Signing time: Tue 28 Jul 2026 18:00:39 +0000
Manifest this update: Tue 28 Jul 2026 18:00:39 +0000
Manifest next update: Wed 29 Jul 2026 18:00:39 +0000
Files and hashes: 1: IJejEXyhwdYpKuUpEbTwyk-OkBk.crl (hash: PZKg2Ya240Gaj6rT/L2mJceA8vj3JxEk/V3kHTYHYVs=)
2: KA5g_HNHUEKe_cvpril1qZT7WME.roa (hash: h+IZFf9Go1iBnD4l0ji1OQ+Otog1vzczX/D4h1/qh78=)
3: d7CeX97gO-ipX3QBzFbXz8P0wTI.roa (hash: Qut1PV0++44yG4RR3eDPMqfYLiMgZvD3UqCPDmMsQWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IJejEXyhwdYpKuUpEbTwyk-OkBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 18:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:c9:19:87:c4:49:7a:d0:3c:fb:42:8a:7c:96:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2097a3117ca1c1d6292ae52911b4f0ca4f8e9019
Validity
Not Before: Jul 28 18:00:39 2026 GMT
Not After : Jul 29 18:00:39 2026 GMT
Subject: CN=eab9fe5b65dd62b0dc2dd560ec556f8028c3ce49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:91:ed:07:ba:b4:72:cd:c1:35:2b:3e:4c:95:
fd:3f:e7:30:66:0d:b5:b2:91:dc:3a:f3:75:eb:20:
59:0b:1c:df:74:fa:ba:f2:eb:f1:34:6b:5e:c8:3f:
5d:b1:1b:e1:cd:6d:fc:6a:d6:b5:1b:72:ec:5a:07:
fe:2d:ab:8a:cf:19:d4:59:c1:97:9c:c9:15:8a:d8:
40:60:ac:92:02:72:fc:45:81:29:f4:89:9c:99:90:
b6:b7:2d:70:2e:91:b5:e6:b9:36:30:77:42:3d:5e:
6b:14:c8:09:4f:3d:72:b1:69:14:6c:09:21:29:98:
14:ea:7c:bd:42:77:0f:3a:fe:2a:06:f8:2b:93:2b:
22:99:8a:2a:36:8e:71:bd:37:72:33:4c:70:bb:df:
a6:ad:8f:d2:47:40:8d:c1:fa:e8:6f:41:56:ef:fe:
7b:b4:36:97:23:6a:29:7b:9f:9f:64:c0:82:57:f9:
c0:16:fe:ab:8b:2a:58:a2:78:aa:ba:f1:a4:00:90:
5b:92:87:b7:fe:7c:34:20:2e:2a:5a:68:a8:d0:e9:
2a:8b:c4:87:91:bf:45:1f:9d:de:79:a7:47:a9:47:
71:c1:14:55:4a:30:cf:d5:ee:5d:ad:cf:31:8f:2e:
bc:5a:7a:9b:a8:14:9e:82:dd:31:15:cc:b8:9f:99:
10:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:B9:FE:5B:65:DD:62:B0:DC:2D:D5:60:EC:55:6F:80:28:C3:CE:49
X509v3 Authority Key Identifier:
keyid:20:97:A3:11:7C:A1:C1:D6:29:2A:E5:29:11:B4:F0:CA:4F:8E:90:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IJejEXyhwdYpKuUpEbTwyk-OkBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:54:e5:ca:88:01:44:5e:e7:93:9f:25:4c:0d:d6:95:f0:86:
28:20:73:9a:f4:82:5d:b6:e9:e4:6c:97:37:60:46:0a:97:f6:
94:e8:11:23:e3:b4:b6:6b:8a:54:26:8e:f6:60:ef:f0:01:83:
2c:e8:aa:89:cb:ef:9e:6f:75:0a:a1:c0:8b:be:fb:5d:82:d0:
cf:e5:2a:59:b9:47:d2:8c:73:6d:f5:d6:0d:0b:9b:95:d6:30:
79:17:67:4b:41:0a:8c:26:da:8a:fc:df:40:7f:1e:57:ee:10:
1f:a9:53:af:c1:1b:0f:bc:c5:0d:62:da:9b:e9:b6:cd:a9:9f:
46:ad:ce:87:15:63:3a:a4:13:d7:b6:41:d5:9e:b8:41:19:a3:
7d:a6:c3:6a:75:bc:ff:ed:e8:dd:2e:34:6e:39:72:10:d1:79:
0d:94:0b:02:22:b4:cc:a2:a7:15:3d:c8:d5:5e:3b:3b:ac:43:
8e:68:6e:de:52:19:af:ae:14:43:e8:84:b4:60:57:d8:de:6c:
78:7b:b5:1f:4e:3e:32:80:58:27:32:9f:b9:d9:66:a5:75:c1:
8a:5e:25:76:f3:e1:fe:26:d3:08:68:f6:70:21:7c:9d:cf:b9:
5e:8b:a0:03:3c:80:3a:3f:a2:be:19:8f:3d:87:69:95:6a:6d:
70:04:b3:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:35:17 2026 by rpki-client