Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft
File: IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft (raw, json)
Hash identifier: 4KApThjJ4Y6QNXDSdZAqLagskEppJ7X7TFMeM6t6OYk=
Subject key identifier: 10:95:96:AA:D5:CA:52:01:FA:F5:B4:F1:51:0E:04:73:90:57:FC:31
Authority key identifier: 20:78:BA:EE:6B:6E:C5:42:5A:16:B1:FC:00:C5:2C:30:ED:95:A3:F0
Certificate issuer: /CN=2078baee6b6ec5425a16b1fc00c52c30ed95a3f0
Certificate serial: 019FAD517614D1007DAA712BAEB3B73B9E15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IHi67mtuxUJaFrH8AMUsMO2Vo_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft
Manifest number: 1746
Signing time: Wed 29 Jul 2026 10:00:24 +0000
Manifest this update: Wed 29 Jul 2026 10:00:24 +0000
Manifest next update: Thu 30 Jul 2026 10:00:24 +0000
Files and hashes: 1: IHi67mtuxUJaFrH8AMUsMO2Vo_A.crl (hash: x5mMksUuotcLqWTgseC2DF+2/SJPdtrFp8bwh/9UNso=)
2: f2xHXHMuYDn0X5Hx_WOxhcp_OSM.roa (hash: jVp5NZgxrwcVz5kDb28HKubLbBcKUnHD4R0wpzd6ys4=)
3: r91CFPjHDqMCM8CKay9171ccjWQ.roa (hash: AV0sDOz9FjM9VKLkmExBZn+Rf8LRF9lZ+jWnF/AuE4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/IHi67mtuxUJaFrH8AMUsMO2Vo_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:51:76:14:d1:00:7d:aa:71:2b:ae:b3:b7:3b:9e:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2078baee6b6ec5425a16b1fc00c52c30ed95a3f0
Validity
Not Before: Jul 29 10:00:24 2026 GMT
Not After : Jul 30 10:00:24 2026 GMT
Subject: CN=109596aad5ca5201faf5b4f1510e04739057fc31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d4:aa:f7:38:a5:e0:ce:65:76:df:c0:be:aa:
75:7c:f0:6b:d5:39:06:36:8b:bf:ae:63:9e:d8:62:
71:e6:5b:ce:f2:07:ca:66:0d:8c:0f:a3:fa:f5:11:
da:46:d4:7a:fd:b0:84:12:c7:fe:9e:74:53:a9:79:
b6:9c:d8:ae:55:f3:1e:d2:76:8c:c3:b7:44:41:ea:
0a:6d:71:ab:0d:ea:76:b3:4a:ad:3e:1a:17:e4:96:
dc:61:4e:80:f7:50:48:60:d6:bd:0a:fc:bd:c1:90:
ce:e7:4b:18:02:a0:8b:a4:af:b4:a2:2c:c8:56:8d:
3f:84:c4:c3:a4:25:ed:22:0a:d6:ea:3c:c9:9e:7b:
a3:f1:ed:33:46:70:c2:0c:54:4e:6e:ac:6d:53:01:
56:b4:85:ec:f3:92:40:a7:34:79:a4:92:2c:8b:86:
fc:de:4c:18:78:8c:c4:0d:60:f1:de:75:61:7c:ef:
6a:14:c9:cc:d2:a2:f9:03:4d:3b:e0:69:de:0e:62:
ab:b9:fc:b2:31:37:70:db:77:ae:74:2f:b1:b6:ba:
a8:94:6a:4e:26:8e:0f:dc:40:c3:b6:a8:94:c1:f9:
23:42:04:a1:0b:87:3b:9e:1c:34:39:7c:cb:6f:39:
e4:38:9c:ac:8e:51:a0:1b:f7:73:ea:02:36:cb:f7:
6f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:95:96:AA:D5:CA:52:01:FA:F5:B4:F1:51:0E:04:73:90:57:FC:31
X509v3 Authority Key Identifier:
keyid:20:78:BA:EE:6B:6E:C5:42:5A:16:B1:FC:00:C5:2C:30:ED:95:A3:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IHi67mtuxUJaFrH8AMUsMO2Vo_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:24:15:55:c2:14:be:4d:e9:78:31:20:83:19:bc:18:ad:b5:
5a:a1:08:df:d4:ca:69:b2:ab:74:c7:50:51:dd:d8:a6:6c:7d:
03:6a:3c:28:bd:5b:30:05:04:1c:d4:eb:a1:20:01:b3:0f:e0:
8a:27:a9:96:4d:bd:be:f8:64:89:28:ea:3d:56:ea:df:d1:24:
d1:50:e4:99:83:3e:af:09:e0:73:5d:31:d0:e8:3a:36:94:85:
5a:44:99:7d:a7:1c:7b:88:bb:41:9a:5e:95:4a:d8:52:43:12:
c1:b2:68:dc:0b:95:2c:48:ed:2b:71:4d:90:89:14:2c:d8:c2:
58:f7:4b:47:4c:ff:16:9c:0e:7b:d1:fa:f1:9e:e7:6e:ea:99:
95:c1:73:0a:35:f5:61:89:fd:24:a4:c0:79:31:79:e6:d2:19:
46:f0:96:93:12:a0:a8:f2:03:90:d5:d9:71:d2:ec:12:e0:03:
54:7f:04:40:19:1e:68:2d:31:02:17:93:3e:f3:f3:17:64:e0:
83:a8:b5:40:08:2a:3a:d1:dc:a4:bc:97:29:42:88:d3:93:7d:
23:93:90:8f:8d:79:0d:16:87:a1:97:8f:b4:ef:b3:2d:36:be:
6f:90:82:d0:f6:6d:3e:ea:13:43:04:e0:3c:95:c4:15:10:76:
b6:a3:42:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:25:30 2026 by rpki-client