Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/c84cd3-672b-44b2-8ce0-40289479ac05/1/iA2KtqoscvB5dV92zwEgql3dx98.mft
File: iA2KtqoscvB5dV92zwEgql3dx98.mft (raw, json)
Hash identifier: wQUlIfs5XD/i9rSA+oGUEgHyRNQIFU8WC/ZgNMhs3dc=
Subject key identifier: 9F:7B:EA:07:E5:38:F3:D7:38:3F:62:F0:75:9B:81:57:F5:E0:3D:38
Authority key identifier: 88:0D:8A:B6:AA:2C:72:F0:79:75:5F:76:CF:01:20:AA:5D:DD:C7:DF
Certificate issuer: /CN=880d8ab6aa2c72f079755f76cf0120aa5dddc7df
Certificate serial: 019FAB634BE7EEDD420F007F03C2BEC70913
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iA2KtqoscvB5dV92zwEgql3dx98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/c84cd3-672b-44b2-8ce0-40289479ac05/1/iA2KtqoscvB5dV92zwEgql3dx98.mft
Manifest number: 11B6
Signing time: Wed 29 Jul 2026 01:00:39 +0000
Manifest this update: Wed 29 Jul 2026 01:00:39 +0000
Manifest next update: Thu 30 Jul 2026 01:00:39 +0000
Files and hashes: 1: iA2KtqoscvB5dV92zwEgql3dx98.crl (hash: +CzpGWE+C6uXWLl5XecKRmRdawhfoiJ4zyXpqRTnknc=)
2: tl9JmYqZuc8rnWm5B3tF-CPUxEg.roa (hash: ti/VYS4hognsUWtb/PVfBo1Uhz2rYc5vy7DleprVf/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/c84cd3-672b-44b2-8ce0-40289479ac05/1/iA2KtqoscvB5dV92zwEgql3dx98.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/c84cd3-672b-44b2-8ce0-40289479ac05/1/iA2KtqoscvB5dV92zwEgql3dx98.mft
rsync://rpki.ripe.net/repository/DEFAULT/iA2KtqoscvB5dV92zwEgql3dx98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:4b:e7:ee:dd:42:0f:00:7f:03:c2:be:c7:09:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=880d8ab6aa2c72f079755f76cf0120aa5dddc7df
Validity
Not Before: Jul 29 01:00:39 2026 GMT
Not After : Jul 30 01:00:39 2026 GMT
Subject: CN=9f7bea07e538f3d7383f62f0759b8157f5e03d38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:56:2d:64:c0:2c:81:b7:41:9e:04:91:a5:4e:
eb:ff:dc:f9:a4:12:84:01:89:8f:7f:cc:b7:5d:2d:
0d:b3:bb:cb:fb:ab:89:6a:d5:c8:2c:08:f5:fc:bf:
b6:9f:f9:08:74:7d:f1:ad:08:5c:97:8d:e2:28:64:
07:54:f5:ac:62:f9:ec:21:d7:2d:58:77:99:2e:34:
5e:7f:39:43:b9:b0:ca:92:cc:41:53:ce:91:2a:9f:
78:e7:e3:31:eb:d6:ae:6d:4e:e6:a8:87:6c:56:e4:
24:ce:ad:81:86:4b:eb:44:56:d2:4a:fe:be:4f:8a:
24:2b:23:4d:df:ea:e2:60:8c:b3:ed:1a:51:cc:3b:
51:0f:5b:d8:14:ca:5e:be:73:4b:f9:a6:29:b0:db:
11:c9:dd:0d:1f:ff:ff:0b:fe:ef:ae:72:f6:ab:37:
d1:e3:b0:ae:19:89:4d:cc:b8:07:c8:08:c3:b6:65:
02:7c:94:6b:7a:e0:13:77:44:77:2d:b0:e7:9e:cf:
91:43:74:05:88:6a:d7:a6:21:c1:4b:79:33:04:65:
15:b5:5b:dc:80:ec:66:82:d8:2b:4e:bb:cf:d4:1d:
b9:1c:89:f2:8c:7c:1c:21:6e:f2:49:c2:e8:33:1d:
6c:d7:41:9c:55:a1:ee:d9:50:b0:9f:d4:6e:92:2d:
e4:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:7B:EA:07:E5:38:F3:D7:38:3F:62:F0:75:9B:81:57:F5:E0:3D:38
X509v3 Authority Key Identifier:
keyid:88:0D:8A:B6:AA:2C:72:F0:79:75:5F:76:CF:01:20:AA:5D:DD:C7:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iA2KtqoscvB5dV92zwEgql3dx98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c84cd3-672b-44b2-8ce0-40289479ac05/1/iA2KtqoscvB5dV92zwEgql3dx98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c84cd3-672b-44b2-8ce0-40289479ac05/1/iA2KtqoscvB5dV92zwEgql3dx98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:5b:06:bc:fd:82:60:01:d4:90:7e:5b:b7:1f:e8:07:7e:90:
2c:92:c3:79:57:b3:8c:92:34:3c:f0:ce:b2:de:2a:e6:59:b8:
c9:bc:b4:d5:2c:c3:66:9b:44:ea:84:e1:d0:19:84:0a:cb:60:
c7:f9:58:f7:27:02:81:70:b7:b2:3d:62:69:6e:ce:b8:4f:ed:
a6:1b:91:73:e1:b8:da:b7:e9:2f:da:f4:5a:d8:61:f3:27:e0:
fc:54:e4:00:b9:b8:85:6b:05:90:a4:9a:f3:3d:57:87:b3:d5:
1e:f8:19:f6:c3:c6:b2:67:36:60:e2:6d:15:e0:3c:3e:09:0a:
df:09:f2:6e:a4:af:02:3c:0c:38:07:60:db:cb:44:d8:36:54:
2b:fe:17:ca:a5:11:f8:91:e6:ee:84:50:4e:1c:a6:bf:ac:cf:
24:03:41:00:7b:a4:38:71:ae:4e:b8:85:e6:f4:ae:67:b8:c0:
6d:74:0f:dc:0f:da:70:90:a6:a1:3c:89:b1:8e:fa:13:36:5f:
28:0f:7f:6d:e0:94:33:3e:5e:4d:1f:bc:95:09:3f:75:a7:3f:
15:ea:76:1a:82:71:5f:b9:9c:06:74:b7:4b:0c:c2:9f:d0:81:
eb:04:0f:71:9a:fb:66:81:a0:66:48:3d:1f:5c:0a:f8:ba:89:
ee:f5:74:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:43:25 2026 by rpki-client