Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/iP4ZBc16825jraY2bBR7Ydhcnys.mft
File: iP4ZBc16825jraY2bBR7Ydhcnys.mft (raw, json)
Hash identifier: Sbr7jV1vzO8aXypnUw5uw2Agiey3M4iCJctMrikvecU=
Subject key identifier: F5:71:DF:19:72:D6:74:5A:02:31:C2:53:77:C4:7D:F1:08:98:3D:80
Authority key identifier: 88:FE:19:05:CD:7A:F3:6E:63:AD:A6:36:6C:14:7B:61:D8:5C:9F:2B
Certificate issuer: /CN=88fe1905cd7af36e63ada6366c147b61d85c9f2b
Certificate serial: 019EBF23BEBEEC1BEA28FA4B07EC00588AD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iP4ZBc16825jraY2bBR7Ydhcnys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/iP4ZBc16825jraY2bBR7Ydhcnys.mft
Manifest number: 0A9C
Signing time: Sat 13 Jun 2026 04:00:51 +0000
Manifest this update: Sat 13 Jun 2026 04:00:51 +0000
Manifest next update: Sun 14 Jun 2026 04:00:51 +0000
Files and hashes: 1: 1-kKT9I5hXcGMY4BXtI91L6PWY5Q.roa (hash: hWaDKKuFN6+6e36Ikm8e0jjTVm6uyDQ92iqKklLnoi4=)
2: NEQkMGAJAfKugYCF_SBXZZt_zOA.roa (hash: 1zriG+EOUPPANFuX8FQR4exMMCMJ2lG+QMPasFhRCHE=)
3: iP4ZBc16825jraY2bBR7Ydhcnys.crl (hash: /0WMx8Z9jFfMwKUv5V9etJTCJoEf2uQxZGRt00mReeM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/iP4ZBc16825jraY2bBR7Ydhcnys.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/iP4ZBc16825jraY2bBR7Ydhcnys.mft
rsync://rpki.ripe.net/repository/DEFAULT/iP4ZBc16825jraY2bBR7Ydhcnys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:23:be:be:ec:1b:ea:28:fa:4b:07:ec:00:58:8a:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88fe1905cd7af36e63ada6366c147b61d85c9f2b
Validity
Not Before: Jun 13 04:00:51 2026 GMT
Not After : Jun 14 04:00:51 2026 GMT
Subject: CN=f571df1972d6745a0231c25377c47df108983d80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f4:c8:e7:4a:b8:e1:9f:9e:bc:02:cb:21:2d:
c8:1a:89:6c:d4:12:00:cf:ca:46:34:31:2f:56:72:
4b:ff:35:1c:1a:d1:3f:99:da:39:d5:0d:15:d9:bc:
74:52:80:3e:ed:5b:46:a9:9d:7e:db:08:f0:b1:80:
13:ca:9a:9b:55:c2:a0:7b:92:e4:c2:00:b2:19:10:
8d:7a:a4:9b:e9:63:b8:4e:7b:6d:46:b8:cc:4d:ec:
eb:ba:be:7c:bf:cb:4a:dd:3c:0d:68:ad:00:09:2f:
e6:a1:be:19:c3:26:4a:04:14:5e:08:90:2a:e0:b1:
b9:ae:73:46:b7:95:72:02:a9:d6:90:87:62:9e:09:
77:dd:6a:dc:37:28:67:b1:fa:35:7c:03:a6:e9:62:
d4:f3:fc:57:1c:d0:d5:ff:d4:ed:a0:02:0d:c8:a3:
ed:1a:b8:2a:3f:f8:8e:10:3e:e9:c9:d8:59:91:ad:
ea:61:01:95:ca:96:73:42:93:89:bb:72:d0:77:1b:
df:4b:ca:8b:0f:96:41:2e:a2:75:e3:61:34:7d:05:
f9:7b:e2:92:21:2b:2e:42:07:4e:b4:20:af:8a:c4:
91:63:2b:fa:71:a6:97:78:e4:dc:f7:0c:a4:40:5c:
cd:a6:67:f4:f2:ef:1b:d6:36:c5:1d:d5:6a:8a:ba:
c1:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:71:DF:19:72:D6:74:5A:02:31:C2:53:77:C4:7D:F1:08:98:3D:80
X509v3 Authority Key Identifier:
keyid:88:FE:19:05:CD:7A:F3:6E:63:AD:A6:36:6C:14:7B:61:D8:5C:9F:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iP4ZBc16825jraY2bBR7Ydhcnys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/iP4ZBc16825jraY2bBR7Ydhcnys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/iP4ZBc16825jraY2bBR7Ydhcnys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:9f:a3:3a:7b:91:7b:f4:4f:7b:17:02:24:e2:ce:65:d4:f9:
b4:59:b9:45:58:c7:31:62:19:cf:b5:7c:94:e0:44:c5:e1:bf:
4b:7e:eb:9f:fa:5e:a3:ae:3c:7f:e8:90:b5:d6:5b:db:d3:2e:
de:ef:73:55:c7:33:7a:93:26:b6:a1:33:0c:90:13:37:7c:03:
47:c2:d7:d8:61:ba:16:bc:eb:df:02:ce:fd:c2:90:19:07:25:
b3:75:cc:d3:8a:66:3a:d3:7a:5d:a1:b5:fe:cd:53:2e:5f:da:
0b:15:ed:05:a4:ae:ef:7a:98:a6:fc:9e:bc:6c:f6:0b:0b:4e:
29:ac:2d:4d:69:44:52:3f:90:15:7c:a7:ae:a1:61:ef:11:6a:
f0:25:01:12:bc:27:77:d5:aa:71:6e:90:19:4f:73:1b:4c:e1:
f7:04:ab:63:de:49:da:07:de:54:61:03:49:fa:e3:c1:76:ef:
8d:7f:6f:f5:a1:0f:09:19:4d:1e:90:79:db:9f:da:71:ee:eb:
1f:6a:b6:d2:89:be:78:91:4f:6e:60:d1:68:37:da:3f:b8:5f:
ba:f7:64:08:b2:ac:64:5d:bd:9e:19:91:07:e7:45:f4:cc:3b:
0c:88:ff:ef:c5:f4:89:a4:52:7b:0d:a5:60:eb:96:25:8e:1e:
0d:71:44:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:32:56 2026 by rpki-client