Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.mft
File: IuSOFh5JBZI_bUqirgohUw8t4gs.mft (raw, json)
Hash identifier: Re1DNC4MdaUZetXpyFllz16sjqqmuLfEGm5mdtDu6qA=
Subject key identifier: 35:FF:D2:BA:23:88:B4:85:BF:76:DA:8F:EB:36:06:61:30:63:FF:8D
Authority key identifier: 22:E4:8E:16:1E:49:05:92:3F:6D:4A:A2:AE:0A:21:53:0F:2D:E2:0B
Certificate issuer: /CN=22e48e161e4905923f6d4aa2ae0a21530f2de20b
Certificate serial: 019FAB63D2D8AEBDE82BB1A7C4C3C41810DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IuSOFh5JBZI_bUqirgohUw8t4gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.mft
Manifest number: 19D2
Signing time: Wed 29 Jul 2026 01:01:13 +0000
Manifest this update: Wed 29 Jul 2026 01:01:13 +0000
Manifest next update: Thu 30 Jul 2026 01:01:13 +0000
Files and hashes: 1: IuSOFh5JBZI_bUqirgohUw8t4gs.crl (hash: gko4UJggXqCTeMiDviSoo5dUv/qy3ozpUuC/nPA1RaM=)
2: WjnU7eVkPkVNVM9MOmgLUUUpMzM.roa (hash: +R4Zj+vw0Ft1e0nUhwZse4EmeZXGoZD55vZpzhImACo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.mft
rsync://rpki.ripe.net/repository/DEFAULT/IuSOFh5JBZI_bUqirgohUw8t4gs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:d2:d8:ae:bd:e8:2b:b1:a7:c4:c3:c4:18:10:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22e48e161e4905923f6d4aa2ae0a21530f2de20b
Validity
Not Before: Jul 29 01:01:13 2026 GMT
Not After : Jul 30 01:01:13 2026 GMT
Subject: CN=35ffd2ba2388b485bf76da8feb3606613063ff8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:09:d8:68:b9:1e:ff:c7:de:8f:15:b5:b2:f1:
48:da:ce:ac:1c:ba:c2:d1:67:43:bf:b8:41:2a:2b:
8a:4e:06:83:de:41:40:2e:5f:88:7b:49:12:be:d1:
40:ad:ff:34:86:1c:e2:8a:fe:11:08:80:78:a6:a4:
5f:6c:5f:08:0c:d7:52:36:a3:5b:c3:af:0b:eb:31:
f1:d9:f0:70:d8:3e:a7:5f:90:39:b4:52:3a:30:d3:
15:6c:27:ca:9f:13:66:d2:ab:4f:df:98:3a:ac:10:
f2:29:af:40:ea:5f:64:38:80:5b:59:b2:86:9c:3e:
ae:88:5e:af:01:06:c3:9b:2f:7a:23:9f:a9:b5:7b:
4e:0d:27:4e:f4:bf:98:98:ed:59:f9:fd:27:ef:50:
79:c5:72:ff:b1:78:d1:e7:f5:80:b8:e5:41:6f:d2:
8d:e0:3e:8c:bd:10:52:e8:14:42:ba:f1:28:c7:2a:
6a:b4:ef:a3:b7:e8:61:df:f1:c7:d6:bf:87:4f:7d:
e3:1e:67:41:ab:f4:77:bc:d6:8b:d7:d5:db:ea:b3:
b1:12:bb:f1:8e:74:ba:ec:5c:c5:a4:d1:4a:ad:48:
84:0d:49:cc:56:ae:49:ac:19:0e:7f:96:4e:e8:cf:
16:8e:fa:65:46:79:26:6b:ab:ae:31:0e:a5:2b:9a:
0b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:FF:D2:BA:23:88:B4:85:BF:76:DA:8F:EB:36:06:61:30:63:FF:8D
X509v3 Authority Key Identifier:
keyid:22:E4:8E:16:1E:49:05:92:3F:6D:4A:A2:AE:0A:21:53:0F:2D:E2:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IuSOFh5JBZI_bUqirgohUw8t4gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:d0:88:98:f9:3b:41:08:96:cf:db:e0:25:3c:c9:46:a8:d4:
f7:ac:3a:d2:0f:d6:ba:cd:3c:91:bc:08:0f:6f:c7:e7:03:9d:
38:ea:74:ad:da:51:34:ad:e2:01:e3:16:af:77:40:f5:9b:2f:
43:46:97:c5:e6:42:41:10:74:48:4d:f4:06:1b:b3:0e:7f:e8:
9a:13:0d:ee:b2:47:af:7d:08:0f:82:6c:74:f4:80:64:32:9d:
1b:64:ab:df:fb:2e:f7:15:5f:ae:40:b3:8c:94:c8:44:d2:d4:
db:59:b2:ad:df:41:85:17:45:63:93:2c:1f:0c:49:5b:34:06:
5d:34:27:a4:3c:88:0e:7e:2e:f0:80:0e:63:e6:74:d3:e6:8d:
26:f0:3d:a5:62:a5:14:ab:b0:a3:e9:af:75:f2:4d:96:e8:df:
eb:e9:c9:a5:e1:03:f0:63:63:ac:cf:b1:de:b8:a6:f5:c8:7b:
94:4a:d8:ac:ee:a7:3c:38:ad:ba:5f:6e:bb:fc:6a:80:9b:55:
9b:92:a0:8c:86:c5:14:5f:d3:78:71:26:78:b5:93:d2:5d:0f:
7f:1c:9e:7f:58:2e:cb:1a:38:75:ea:41:78:e2:03:e1:4e:a2:
01:62:9f:d9:e8:8d:17:08:c7:be:68:4b:f8:8a:d8:af:75:90:
87:37:03:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:08:49 2026 by rpki-client