Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.mft
File: iRaqpdJS_ZAUX-2saDdi1uIHQVU.mft (raw, json)
Hash identifier: wtnQqVprmizvYero9R/vwZnLai4poSWKrMcx5kEN6TM=
Subject key identifier: AB:38:D0:43:D6:25:A9:B5:83:AE:C6:60:47:6F:72:BF:93:17:3E:C3
Authority key identifier: 89:16:AA:A5:D2:52:FD:90:14:5F:ED:AC:68:37:62:D6:E2:07:41:55
Certificate issuer: /CN=8916aaa5d252fd90145fedac683762d6e2074155
Certificate serial: 019F93919F009B1F27D5963AA150E0665DF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iRaqpdJS_ZAUX-2saDdi1uIHQVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 10:00:21 +0000
Manifest this update: Fri 24 Jul 2026 10:00:21 +0000
Manifest next update: Sat 25 Jul 2026 10:00:21 +0000
Files and hashes: 1: FjK0gZzIRFGA1r0HMqyZjh1eSaU.roa (hash: 5jTPa/LgCeRZQvqoHjBqfoQDZ2FKgfEuFxlRAqDizkI=)
2: iRaqpdJS_ZAUX-2saDdi1uIHQVU.crl (hash: lqe5R0apPjAFkZMV7CJeXfObf/pmFswIMWIGD2LNcEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iRaqpdJS_ZAUX-2saDdi1uIHQVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:91:9f:00:9b:1f:27:d5:96:3a:a1:50:e0:66:5d:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8916aaa5d252fd90145fedac683762d6e2074155
Validity
Not Before: Jul 24 10:00:21 2026 GMT
Not After : Jul 25 10:00:21 2026 GMT
Subject: CN=ab38d043d625a9b583aec660476f72bf93173ec3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d6:9d:1b:20:84:7b:33:19:bb:b2:ce:23:97:
07:83:f9:91:aa:70:80:3e:7f:91:1a:f4:2a:d6:c7:
20:0e:66:5e:fd:75:15:17:b8:be:5b:1b:d3:4f:c7:
ef:6e:fa:a8:3b:e7:9d:da:fc:38:09:fb:cb:8a:8e:
d3:58:73:91:3d:f2:d0:fa:0d:e6:30:e1:e5:31:c7:
02:69:1b:89:0f:a9:5e:c8:2e:70:f6:4e:74:fe:b8:
82:62:2e:55:89:03:34:65:d0:7e:62:6a:30:57:31:
15:e8:bc:84:c6:c2:62:55:04:4a:29:c8:1e:65:97:
ff:fc:44:f0:11:45:50:9d:33:a7:f1:a9:36:9c:f2:
a4:44:88:42:ce:4a:af:49:15:1d:5a:18:ac:7b:0c:
36:b9:bf:b9:b7:3a:f1:f5:50:72:df:e8:da:1e:c1:
28:0e:90:71:a4:da:3e:32:8c:fd:a0:ff:58:b4:46:
5a:a4:00:ab:63:09:97:8e:4a:f5:74:28:c2:0c:a6:
f5:9b:0b:a3:a4:00:62:65:cc:95:e3:75:75:c2:76:
56:af:cc:6f:fc:27:51:f4:be:fa:6a:23:96:e5:a4:
18:35:97:12:44:38:dc:59:ff:e0:68:cc:de:87:6a:
92:6e:50:22:58:e8:83:4a:45:51:4e:eb:11:fa:c3:
cc:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:38:D0:43:D6:25:A9:B5:83:AE:C6:60:47:6F:72:BF:93:17:3E:C3
X509v3 Authority Key Identifier:
keyid:89:16:AA:A5:D2:52:FD:90:14:5F:ED:AC:68:37:62:D6:E2:07:41:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iRaqpdJS_ZAUX-2saDdi1uIHQVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:1d:45:61:e1:95:3d:06:53:3e:2f:e5:99:89:f8:e4:56:2f:
37:96:cd:e6:98:bb:c1:17:78:72:8d:27:6f:64:3e:50:df:9d:
62:f2:20:ec:55:be:b8:b2:a2:b6:41:9e:57:ff:99:cc:4d:fb:
ca:30:b2:17:61:50:d0:91:fe:b4:7d:9b:32:e9:95:4d:4b:1b:
4b:21:ca:b1:ca:cf:d6:8c:8b:99:df:9e:b1:c7:46:c6:ba:bd:
1f:c5:16:e9:b0:0c:57:1d:7b:c3:ab:8f:68:9a:fe:49:c5:ab:
a2:3a:bc:75:66:c8:1c:95:9d:2e:e5:ac:41:cb:bd:e8:50:c8:
f5:ea:ea:a7:26:53:74:87:95:c7:db:e1:59:29:b8:d2:e3:c0:
77:e7:10:46:2c:3f:1c:3a:5d:0e:99:29:bf:e5:31:69:d8:f1:
eb:c9:38:2c:c3:47:70:5f:c7:d9:38:75:92:31:4b:7a:ac:85:
89:6f:a1:44:78:92:be:70:95:33:d1:9e:20:ce:ef:dc:79:55:
25:9d:59:c1:72:20:ef:ce:f9:d0:64:80:e2:e6:92:b0:2e:d5:
40:0b:5a:f6:ad:29:cd:b2:73:6a:bf:b8:8f:a4:8c:19:11:a4:
e8:02:ad:a5:73:33:2a:3a:30:84:91:41:ad:d2:c4:4e:30:33:
7b:92:92:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:55:53 2026 by rpki-client