Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.mft
File: i2ojov0aCVY3ijfU_OJZ3yvXlKc.mft (raw, json)
Hash identifier: 7PV1/Opugn25Dxjh+HQd5gGDu0WBrajquJIwgRuUp/c=
Subject key identifier: CF:F5:11:7E:3F:36:56:70:18:C1:FF:3A:2F:17:91:0A:15:50:BB:0B
Authority key identifier: 8B:6A:23:A2:FD:1A:09:56:37:8A:37:D4:FC:E2:59:DF:2B:D7:94:A7
Certificate issuer: /CN=8b6a23a2fd1a0956378a37d4fce259df2bd794a7
Certificate serial: 019F9135688C636574A42E34F4AE0B1D1766
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2ojov0aCVY3ijfU_OJZ3yvXlKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.mft
Manifest number: 19C7
Signing time: Thu 23 Jul 2026 23:00:24 +0000
Manifest this update: Thu 23 Jul 2026 23:00:24 +0000
Manifest next update: Fri 24 Jul 2026 23:00:24 +0000
Files and hashes: 1: BTEAuUNa_YsO4Msc4ADixEUAqHw.roa (hash: RPWke+z8J8p3T5a+cxL5wCmrsKLPXY/+WIucQz9R2x4=)
2: Fdb2MRiz20g2xgX0HTiyiVn6wdM.roa (hash: P7ndLT2N2wnmbFCzRdtX0zBZJo6QlqplqMU+f7R4Fys=)
3: i2ojov0aCVY3ijfU_OJZ3yvXlKc.crl (hash: 5GMtCgk8UCnpUpZWeNe0fMDNqptVrttxzf5Nc0Un7p0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2ojov0aCVY3ijfU_OJZ3yvXlKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:68:8c:63:65:74:a4:2e:34:f4:ae:0b:1d:17:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6a23a2fd1a0956378a37d4fce259df2bd794a7
Validity
Not Before: Jul 23 23:00:24 2026 GMT
Not After : Jul 24 23:00:24 2026 GMT
Subject: CN=cff5117e3f36567018c1ff3a2f17910a1550bb0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:aa:c8:36:be:f3:9c:67:ff:55:42:d0:ab:44:
f7:a7:fb:87:22:d5:50:51:bb:4f:7e:8d:90:47:c7:
7a:d7:34:0b:54:7f:69:92:2f:e2:04:46:1a:f4:7f:
cd:08:af:2e:b6:6e:cd:54:1d:74:81:a7:31:45:71:
47:f8:f9:05:f2:c5:c6:87:88:14:e3:e9:bb:1b:77:
b1:05:c7:4a:f9:54:5c:3f:6a:a9:36:98:03:e4:d5:
38:97:35:d7:bc:89:10:22:86:ab:f2:ed:2c:8c:6f:
d7:bb:2f:33:46:b4:5c:87:89:70:37:3b:5d:80:ee:
25:e6:ac:a8:26:98:9f:b1:3d:9e:39:95:1a:c7:63:
31:35:6a:57:3f:b8:9a:6c:04:f4:7b:2f:19:4c:32:
ce:84:25:4f:70:49:c3:56:2a:68:1d:6f:1e:db:c3:
0d:c1:d8:1d:06:75:2f:60:27:92:40:34:b2:ff:82:
d0:55:a1:bf:49:50:dc:d1:a1:32:c7:74:55:6b:94:
05:e2:26:61:fd:43:af:1b:91:92:a6:fd:62:d1:14:
55:3c:6f:cc:27:9b:67:1e:da:e7:00:5d:e2:c8:a6:
99:ea:f6:c9:3a:51:32:9e:c8:88:79:dd:46:43:b2:
72:21:a4:19:3c:58:46:a6:b2:8d:07:c8:a9:62:b6:
1f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:F5:11:7E:3F:36:56:70:18:C1:FF:3A:2F:17:91:0A:15:50:BB:0B
X509v3 Authority Key Identifier:
keyid:8B:6A:23:A2:FD:1A:09:56:37:8A:37:D4:FC:E2:59:DF:2B:D7:94:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2ojov0aCVY3ijfU_OJZ3yvXlKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:b5:74:54:a2:af:1d:4b:81:3f:8a:84:78:62:b2:c2:3f:c6:
6b:6b:5c:7f:77:36:06:fb:48:3c:a4:9f:aa:04:72:1c:cf:5c:
00:cb:3e:1b:7f:5c:06:97:2f:e9:27:4e:95:b6:86:b4:48:a3:
1a:2a:55:e1:0c:7f:e7:7d:af:28:9b:6e:46:70:dc:3d:06:96:
f2:67:88:e9:82:6b:1d:5d:c9:51:07:0e:c5:8f:79:74:38:e1:
40:6e:86:6f:b1:07:d9:08:41:97:a4:51:97:da:a7:f1:fe:a4:
b5:ca:85:3f:80:6e:df:67:81:4c:97:cd:da:17:05:af:0c:ec:
cc:5e:88:94:88:47:05:13:00:af:f2:9b:6d:93:36:70:6d:41:
f8:b4:09:37:07:d0:12:34:87:49:bd:f1:a3:ee:15:ee:f3:23:
91:65:da:55:98:35:c7:99:3a:14:0f:ad:f2:52:1d:fd:77:4c:
c3:25:df:26:c3:01:4f:e4:75:60:1e:0b:64:f6:cd:c5:36:9a:
be:71:92:5d:38:86:0f:ef:5c:c8:a6:fc:8d:96:2a:c7:92:36:
3d:5f:b6:35:42:33:62:65:83:2f:58:ef:1c:b8:ba:d2:b4:9d:
4e:a4:ec:74:a0:3f:7f:67:e7:92:f9:7a:d8:7e:84:f2:09:7d:
05:56:ce:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:44:32 2026 by rpki-client