Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/I1OA88jQvU73nc_B8qNk738QDTE.mft
File: I1OA88jQvU73nc_B8qNk738QDTE.mft (raw, json)
Hash identifier: FyJTmtwUcOVYWgHMinzyeduMxKyxl5lOlXmbPuY1CVw=
Subject key identifier: 08:56:80:C4:9B:28:44:CE:6A:5D:9A:21:10:79:8C:47:75:50:15:C6
Authority key identifier: 23:53:80:F3:C8:D0:BD:4E:F7:9D:CF:C1:F2:A3:64:EF:7F:10:0D:31
Certificate issuer: /CN=235380f3c8d0bd4ef79dcfc1f2a364ef7f100d31
Certificate serial: 019F935B0BBCD15160BB4A717A61BD272599
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I1OA88jQvU73nc_B8qNk738QDTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/I1OA88jQvU73nc_B8qNk738QDTE.mft
Manifest number: 41
Signing time: Fri 24 Jul 2026 09:00:45 +0000
Manifest this update: Fri 24 Jul 2026 09:00:45 +0000
Manifest next update: Sat 25 Jul 2026 09:00:45 +0000
Files and hashes: 1: 2nvjaO-9QgHUIDo_0O1ylwBW6vQ.roa (hash: oiGKpPGm6qpApMCxU6UFVXeU7Do4Gkz7nDJJxifitKA=)
2: I1OA88jQvU73nc_B8qNk738QDTE.crl (hash: onxXaqEsl30nl9GJuC1unSlO07H0cpT4mGD1qi39rMY=)
3: L3EC22kCSbgO1zCyaBa1frjR2pE.roa (hash: w8QsFoIi60jEHJ7Xofqwu1zr9PxRQqzEho5zefrGjYg=)
4: pxlXr9sUSjIqFgXbd9sR-GcE580.roa (hash: QivBnRPkhkpLbexDZpsfTuH4eBEzkCeooTxQJXFlmDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/I1OA88jQvU73nc_B8qNk738QDTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/I1OA88jQvU73nc_B8qNk738QDTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/I1OA88jQvU73nc_B8qNk738QDTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:0b:bc:d1:51:60:bb:4a:71:7a:61:bd:27:25:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=235380f3c8d0bd4ef79dcfc1f2a364ef7f100d31
Validity
Not Before: Jul 24 09:00:45 2026 GMT
Not After : Jul 25 09:00:45 2026 GMT
Subject: CN=085680c49b2844ce6a5d9a2110798c47755015c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:96:54:a3:e1:54:d7:00:0c:cc:46:a1:75:b8:
19:3b:bd:77:75:85:f6:64:24:4c:c6:4b:03:72:45:
51:6d:a1:aa:b6:2a:11:2b:c2:81:48:50:99:b3:6b:
2b:80:60:3d:1c:41:91:55:41:f6:1a:6e:33:4d:a6:
bc:9a:d2:bb:8a:6a:30:ed:37:b1:33:fb:b3:8d:ef:
4d:29:f3:1f:41:e3:dc:ba:1b:9e:e0:cf:4b:10:d0:
58:92:02:97:1c:d9:dd:b7:ab:16:f8:b3:72:37:e3:
71:c2:c4:86:ed:51:15:82:44:68:05:a8:c9:f7:1a:
c1:5a:11:c0:f6:08:de:a5:a8:48:1b:e2:72:08:b0:
a3:39:e1:5d:39:59:b5:9e:da:9f:2c:b7:c3:c4:bb:
55:11:b6:95:93:ef:31:bd:f0:dc:07:96:de:29:11:
dc:b9:c3:e5:37:83:c5:1f:84:46:84:81:4e:68:d6:
e8:ea:b3:2d:e7:7d:75:45:14:3e:26:4f:21:d4:12:
1e:25:ad:09:61:b6:5a:a4:b2:8f:5a:ec:12:f6:e0:
03:86:0b:ec:f5:00:65:5a:72:5d:4d:bd:2d:cc:a9:
c3:15:ba:53:21:4e:0d:bc:4e:1a:79:7d:1a:99:ef:
83:de:6d:63:ab:fc:db:f2:98:5c:d7:76:8f:b6:cf:
0c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:56:80:C4:9B:28:44:CE:6A:5D:9A:21:10:79:8C:47:75:50:15:C6
X509v3 Authority Key Identifier:
keyid:23:53:80:F3:C8:D0:BD:4E:F7:9D:CF:C1:F2:A3:64:EF:7F:10:0D:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I1OA88jQvU73nc_B8qNk738QDTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/I1OA88jQvU73nc_B8qNk738QDTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/I1OA88jQvU73nc_B8qNk738QDTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:5f:4c:6b:eb:7a:9c:2d:1f:85:60:65:74:35:15:ae:88:97:
b6:57:32:b6:4d:49:6a:68:78:f4:9a:cc:ad:f9:c9:e3:ed:47:
ab:9f:ed:85:da:ee:63:bb:2e:c0:a2:dc:f2:7c:11:8d:86:e7:
db:db:9e:e3:86:8e:0b:2a:6d:65:18:7b:61:7b:15:75:74:6f:
bf:a3:58:0e:e4:0e:63:14:97:5d:55:fe:ab:93:e4:b6:dc:b7:
50:47:fe:e6:df:96:5c:bd:af:db:f5:07:85:81:6b:e1:9e:a2:
f0:c6:09:01:27:c8:4f:4d:64:2c:4b:cb:c8:50:18:34:4f:51:
96:7e:81:c0:3a:d2:b0:92:5d:c5:32:ae:82:8d:e4:94:80:16:
a7:b5:50:80:7d:98:ea:15:3a:e1:a8:12:b3:ad:40:da:08:7d:
5b:2c:47:2e:99:28:f7:6b:3d:44:e8:1a:d4:ff:a2:ff:cb:c9:
1e:5e:24:6f:e9:81:4e:c2:fa:49:23:23:db:ca:a8:18:35:e3:
b8:41:d4:c1:b1:06:d0:5a:ec:a7:0e:86:2c:6a:77:bf:88:46:
fc:7f:dc:db:96:ab:c7:98:24:5c:43:24:77:78:69:6f:03:1b:
53:31:fd:ae:f4:5f:8c:c9:e7:a0:31:20:35:86:c2:66:a4:d9:
65:5e:40:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:43:39 2026 by rpki-client