Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.mft
File: IJejEXyhwdYpKuUpEbTwyk-OkBk.mft (raw, json)
Hash identifier: dsSyq8yStDG7hM6NogJboG550BG9hJyAAguCRMKKfx8=
Subject key identifier: 81:8F:91:6B:98:4F:D8:72:21:86:FE:C5:EE:CA:B3:3E:D1:07:5C:C2
Authority key identifier: 20:97:A3:11:7C:A1:C1:D6:29:2A:E5:29:11:B4:F0:CA:4F:8E:90:19
Certificate issuer: /CN=2097a3117ca1c1d6292ae52911b4f0ca4f8e9019
Certificate serial: 019FABD150588DFB4884A72A90F424127D2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IJejEXyhwdYpKuUpEbTwyk-OkBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.mft
Manifest number: 19D7
Signing time: Wed 29 Jul 2026 03:00:49 +0000
Manifest this update: Wed 29 Jul 2026 03:00:49 +0000
Manifest next update: Thu 30 Jul 2026 03:00:49 +0000
Files and hashes: 1: IJejEXyhwdYpKuUpEbTwyk-OkBk.crl (hash: vE3aXvT0SKz1ml37FGGcQ0kRyu9UUupOGcbjD27ubU8=)
2: KA5g_HNHUEKe_cvpril1qZT7WME.roa (hash: h+IZFf9Go1iBnD4l0ji1OQ+Otog1vzczX/D4h1/qh78=)
3: d7CeX97gO-ipX3QBzFbXz8P0wTI.roa (hash: Qut1PV0++44yG4RR3eDPMqfYLiMgZvD3UqCPDmMsQWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IJejEXyhwdYpKuUpEbTwyk-OkBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:d1:50:58:8d:fb:48:84:a7:2a:90:f4:24:12:7d:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2097a3117ca1c1d6292ae52911b4f0ca4f8e9019
Validity
Not Before: Jul 29 03:00:49 2026 GMT
Not After : Jul 30 03:00:49 2026 GMT
Subject: CN=818f916b984fd8722186fec5eecab33ed1075cc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2c:8b:48:1b:0e:58:c1:e4:48:10:b6:d8:0e:
78:2d:e6:81:99:c1:e0:ce:66:27:9b:46:26:d9:4b:
a7:70:bf:3d:1e:8f:50:fb:e7:41:9b:df:3f:ab:3e:
c1:3c:4e:7a:f3:90:5e:7a:3c:2f:d9:b9:71:ba:5f:
92:bb:e2:ee:d1:52:67:8c:ba:22:c6:af:58:48:82:
9e:3b:c9:d4:c6:c3:c3:19:55:f7:39:55:b8:72:b1:
69:78:b5:cf:99:81:51:e0:12:c3:f8:4f:87:21:1c:
c5:b0:9d:51:fc:5e:04:85:ea:f8:04:15:a8:fc:fa:
75:ee:ca:b0:6f:cc:a6:92:a7:61:ec:72:65:b4:f8:
28:87:fe:32:bd:ec:ba:2f:79:8d:f9:05:6f:82:1a:
55:64:1a:c1:fc:7f:42:08:c7:a3:7e:c5:96:a5:a9:
ad:4e:90:24:1c:8c:4f:25:c1:4c:67:53:f7:9f:fa:
3e:a6:4f:92:8e:12:90:03:db:a9:89:c5:fe:89:0f:
c4:88:d9:dd:b6:70:10:8b:66:68:1c:5f:81:8e:bb:
4a:b7:5a:77:d4:fd:b1:81:fc:72:9d:31:04:ab:ed:
d7:16:40:63:04:83:2a:11:ca:58:b6:f7:90:b0:54:
28:ab:d6:64:5b:5f:5b:11:10:b2:1f:d5:04:fd:73:
3d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:8F:91:6B:98:4F:D8:72:21:86:FE:C5:EE:CA:B3:3E:D1:07:5C:C2
X509v3 Authority Key Identifier:
keyid:20:97:A3:11:7C:A1:C1:D6:29:2A:E5:29:11:B4:F0:CA:4F:8E:90:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IJejEXyhwdYpKuUpEbTwyk-OkBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:6f:fe:5b:97:a7:be:af:64:cf:44:10:1f:ba:d4:7b:68:b9:
2b:87:e8:0f:79:30:70:88:39:e8:c3:08:c7:91:35:72:44:75:
5a:d3:3b:71:18:4e:ef:65:7b:25:fe:68:1c:7e:6c:53:9a:bd:
61:90:69:d2:9f:b6:ed:2d:83:7f:63:f1:43:74:ad:22:07:de:
27:32:fc:c3:fa:80:7e:c0:1d:ea:c4:b2:0d:22:6d:52:36:17:
e3:bd:07:6b:d7:5b:9e:71:e5:ad:dc:2e:33:8c:9d:22:13:e6:
60:a7:a8:6c:aa:a2:12:44:1d:47:92:ea:38:ba:6f:bf:67:5e:
8e:9f:6e:3e:ef:29:45:6a:03:89:1d:cd:5e:3b:b5:e8:0f:c4:
80:92:c3:39:92:31:c8:ae:eb:67:0c:79:59:e1:31:d1:64:6b:
28:41:9c:ed:06:a1:8f:a1:f6:93:34:37:5e:e9:7d:68:34:4f:
e3:dc:f5:f7:5e:b4:2c:71:6e:f6:a8:60:5d:9b:81:49:45:f5:
53:64:74:9d:3e:cb:ea:4d:7f:3c:1d:65:72:42:34:67:18:cf:
f9:cf:f5:1e:3b:d9:f2:d2:f2:ad:82:8f:77:aa:ec:57:a1:28:
e9:4e:6e:f2:14:a4:d8:2d:06:3e:ae:fd:89:4d:4a:d2:35:7d:
f0:a4:2b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:06:21 2026 by rpki-client