Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/aa270a-c089-4778-9343-b7362edbd8ac/1/ICg7FImXzFYQEgtMRga6cuXa758.mft
File: ICg7FImXzFYQEgtMRga6cuXa758.mft (raw, json)
Hash identifier: FN42rPVN7+Tu0P41tOthG8b4MjpRQudxC9/UYTxM7+Y=
Subject key identifier: 22:1C:F3:0B:E4:7E:28:BA:D6:AA:39:9B:CA:4B:83:A9:1C:7A:B4:48
Authority key identifier: 20:28:3B:14:89:97:CC:56:10:12:0B:4C:46:06:BA:72:E5:DA:EF:9F
Certificate issuer: /CN=20283b148997cc5610120b4c4606ba72e5daef9f
Certificate serial: 019F9549DA788282EC0E403A1AC4855F4BC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ICg7FImXzFYQEgtMRga6cuXa758.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/aa270a-c089-4778-9343-b7362edbd8ac/1/ICg7FImXzFYQEgtMRga6cuXa758.mft
Manifest number: 42
Signing time: Fri 24 Jul 2026 18:01:12 +0000
Manifest this update: Fri 24 Jul 2026 18:01:12 +0000
Manifest next update: Sat 25 Jul 2026 18:01:12 +0000
Files and hashes: 1: ICg7FImXzFYQEgtMRga6cuXa758.crl (hash: k48k1gaYcgp6TfcE+PufMj8PTwmrpyaLfskZsL+s19g=)
2: VdpeYWicryHpzAB4DZOE2_eE8mU.roa (hash: CNoqpW1D+k3FAIJqkeURjeLA7MboxVUVd4vLoWTzRRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/aa270a-c089-4778-9343-b7362edbd8ac/1/ICg7FImXzFYQEgtMRga6cuXa758.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/aa270a-c089-4778-9343-b7362edbd8ac/1/ICg7FImXzFYQEgtMRga6cuXa758.mft
rsync://rpki.ripe.net/repository/DEFAULT/ICg7FImXzFYQEgtMRga6cuXa758.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 18:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:49:da:78:82:82:ec:0e:40:3a:1a:c4:85:5f:4b:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20283b148997cc5610120b4c4606ba72e5daef9f
Validity
Not Before: Jul 24 18:01:12 2026 GMT
Not After : Jul 25 18:01:12 2026 GMT
Subject: CN=221cf30be47e28bad6aa399bca4b83a91c7ab448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b6:54:b5:bd:3f:50:f2:80:65:d6:db:da:de:
af:02:c4:6a:f3:c0:b6:d2:1b:4a:de:4c:80:0d:7b:
c6:76:56:11:39:44:f1:0a:9c:f7:2d:b4:a6:50:ce:
4c:06:f1:32:e9:fd:74:19:e0:1f:fb:1c:bd:a4:1f:
05:7c:6b:f6:e7:e4:da:ef:9f:f4:0c:46:92:d0:38:
09:2c:b8:74:2a:7c:44:04:3f:04:19:d6:e5:a0:cb:
19:74:e2:86:1c:f8:a0:38:94:96:18:9a:ff:39:32:
98:b4:1a:f4:35:89:c6:7a:8c:87:8e:29:db:78:b1:
a9:f9:82:0c:4f:b6:2c:f2:c5:55:7e:e3:d2:fa:56:
5f:84:a5:ec:6c:e0:a8:95:15:0d:e4:55:38:62:27:
f6:87:89:42:a9:17:12:08:fa:ba:43:12:0c:6c:3b:
a1:e9:4e:a0:36:df:00:6d:2c:19:e6:b6:9a:c8:d0:
64:45:09:d4:9d:c2:02:23:4e:3d:87:37:36:45:06:
18:5c:76:12:56:d4:9c:aa:dc:d5:e5:0c:3e:36:20:
9f:ad:48:24:5e:15:1e:49:48:b4:93:33:e5:74:5a:
d2:7f:49:9d:e6:62:f5:43:bf:85:9e:77:a9:54:3c:
e1:ca:60:de:4e:4a:75:09:25:09:74:5c:2b:c8:4f:
3d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:1C:F3:0B:E4:7E:28:BA:D6:AA:39:9B:CA:4B:83:A9:1C:7A:B4:48
X509v3 Authority Key Identifier:
keyid:20:28:3B:14:89:97:CC:56:10:12:0B:4C:46:06:BA:72:E5:DA:EF:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ICg7FImXzFYQEgtMRga6cuXa758.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aa270a-c089-4778-9343-b7362edbd8ac/1/ICg7FImXzFYQEgtMRga6cuXa758.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aa270a-c089-4778-9343-b7362edbd8ac/1/ICg7FImXzFYQEgtMRga6cuXa758.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:85:13:9d:ed:f8:78:5f:3d:53:c6:ee:84:57:21:9f:af:dc:
2b:ea:7c:1c:34:4e:c0:c9:a4:f7:66:c0:9d:11:27:de:93:9d:
34:9c:12:49:bc:15:de:58:67:90:3f:cd:5d:f0:fc:56:27:a5:
ff:45:51:7b:54:a1:ba:f5:8b:14:5e:a4:07:4f:45:33:d0:bd:
cf:a5:2e:fb:3d:c8:57:54:60:87:e6:97:28:88:57:24:99:b1:
6b:87:f8:56:f6:3f:a6:5f:04:8f:b1:e4:26:39:d5:8e:ef:19:
46:88:03:18:8d:60:5a:81:db:ee:34:16:8d:48:88:27:60:83:
85:df:b6:fa:5a:f6:4d:79:20:07:8c:57:7b:56:69:2c:33:79:
69:75:ee:dc:16:9f:3d:e7:1c:9f:be:05:f6:23:4b:b5:c3:be:
8f:0f:7c:db:80:0a:b6:5e:61:19:6e:a2:54:9d:17:76:d5:b6:
75:49:78:74:c5:49:88:8d:26:42:66:40:b2:b6:4e:a9:c0:c3:
d1:ae:b4:92:e5:44:17:e2:16:70:77:d3:eb:80:d8:6a:60:da:
e7:a5:d2:d7:1b:0a:6e:06:d2:dc:03:72:df:ec:e2:ee:38:8c:
0f:1a:80:c5:e2:02:93:31:73:74:ed:e0:fe:05:de:80:0f:a6:
9d:36:69:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 04:06:15 2026 by rpki-client