Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/I795FHzwqGzvWHrdDmao9y7HJrQ.mft
File: I795FHzwqGzvWHrdDmao9y7HJrQ.mft (raw, json)
Hash identifier: azIxtp0IJ0WYX/uo8/U8owMXCAVtyQCvHZGErBZvU7c=
Subject key identifier: 35:AD:95:17:53:AC:5B:19:ED:A3:0C:14:9F:02:29:9C:C0:E1:07:EC
Authority key identifier: 23:BF:79:14:7C:F0:A8:6C:EF:58:7A:DD:0E:66:A8:F7:2E:C7:26:B4
Certificate issuer: /CN=23bf79147cf0a86cef587add0e66a8f72ec726b4
Certificate serial: 019F935AE8ECB46D96EF22D5B8BE01D986C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I795FHzwqGzvWHrdDmao9y7HJrQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/I795FHzwqGzvWHrdDmao9y7HJrQ.mft
Manifest number: 41
Signing time: Fri 24 Jul 2026 09:00:36 +0000
Manifest this update: Fri 24 Jul 2026 09:00:36 +0000
Manifest next update: Sat 25 Jul 2026 09:00:36 +0000
Files and hashes: 1: I795FHzwqGzvWHrdDmao9y7HJrQ.crl (hash: 1XWVf5SFpHj7BJZeqHJjLob+ixQZeL/5x13MnAJZf7M=)
2: Syx-W1nauzr5Dpxe6peULgXAAtY.roa (hash: TRbEL2oQIoKttvvoFuUorq6cRO4At0CjTJYaz/OskZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/I795FHzwqGzvWHrdDmao9y7HJrQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/I795FHzwqGzvWHrdDmao9y7HJrQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/I795FHzwqGzvWHrdDmao9y7HJrQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5a:e8:ec:b4:6d:96:ef:22:d5:b8:be:01:d9:86:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23bf79147cf0a86cef587add0e66a8f72ec726b4
Validity
Not Before: Jul 24 09:00:36 2026 GMT
Not After : Jul 25 09:00:36 2026 GMT
Subject: CN=35ad951753ac5b19eda30c149f02299cc0e107ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:af:34:07:3b:b9:fe:d1:32:84:6c:33:11:b7:
e5:a3:2e:2a:9a:11:e2:27:99:ed:af:52:02:27:92:
6c:dc:de:8e:0b:30:f1:0e:dc:43:d6:f8:85:91:8d:
a5:9d:e6:4e:fa:95:41:b2:90:57:df:c0:0a:66:b5:
81:40:d1:98:3f:68:e5:c2:aa:c0:a1:18:e3:c1:1f:
47:80:0a:c0:04:97:87:a5:3d:cf:b1:e1:44:f8:dd:
ef:09:34:aa:08:0d:20:d7:b7:d5:e1:36:87:5f:05:
83:95:d8:53:35:e9:99:ec:30:11:2a:a6:d0:b0:00:
22:a4:44:69:89:bf:15:f3:3f:1f:b0:4e:ae:d5:5b:
5e:54:0b:84:f3:cc:8b:89:f2:1b:74:a6:46:1c:49:
7f:4f:9a:57:2c:40:9a:54:a0:b4:27:28:21:36:5f:
18:cf:f9:b2:29:cd:88:cb:39:d7:6c:79:df:e5:2c:
c7:ce:71:bf:46:47:ef:32:49:2d:d7:a1:be:1c:54:
33:05:d9:29:4a:08:9a:cc:54:31:5e:a7:34:74:86:
9f:67:43:b8:37:d9:ed:21:a4:49:46:0a:74:51:01:
44:8a:e5:3e:23:b4:e2:81:ca:0b:1c:fc:77:d5:12:
ff:c5:61:85:b2:74:c5:e7:d9:1c:26:2c:e5:91:69:
7e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:AD:95:17:53:AC:5B:19:ED:A3:0C:14:9F:02:29:9C:C0:E1:07:EC
X509v3 Authority Key Identifier:
keyid:23:BF:79:14:7C:F0:A8:6C:EF:58:7A:DD:0E:66:A8:F7:2E:C7:26:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I795FHzwqGzvWHrdDmao9y7HJrQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/I795FHzwqGzvWHrdDmao9y7HJrQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/I795FHzwqGzvWHrdDmao9y7HJrQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:58:d2:8c:40:00:4f:fc:e9:d8:89:c6:58:95:7c:27:cc:4b:
90:e1:8a:4c:6c:33:ba:e4:99:d2:53:1e:75:ab:23:36:03:0f:
33:60:48:78:d1:3b:af:9f:23:e4:13:39:aa:01:1b:89:11:09:
b5:5a:8e:19:ba:e1:ef:32:46:69:45:c4:fd:f3:d1:f8:40:59:
72:ca:f8:21:58:0e:b1:50:b8:2a:17:62:53:cf:80:94:da:ae:
d2:e4:50:5f:46:6b:2e:83:f9:de:11:8d:85:9d:2a:75:ce:74:
6d:5b:c2:cd:1e:ee:c5:f2:6b:6b:a5:aa:c8:8b:d0:9e:81:a8:
b9:e7:a7:4a:d9:6b:6f:8d:22:66:92:02:2a:1f:2b:bd:5a:db:
bf:3f:48:f7:ea:97:f7:43:b5:7d:fe:4c:4d:83:34:f1:f5:cb:
db:54:48:4e:8b:5a:37:fa:97:6e:e8:6f:c7:df:95:86:ac:ce:
76:e6:a9:ce:c0:13:b8:db:e3:d3:38:13:fd:7b:d0:b6:c0:57:
5a:84:5c:d9:0e:59:9b:60:a2:e2:ec:d9:bf:2e:d5:45:a8:80:
61:c4:22:bb:5d:c4:77:ee:26:28:60:14:af:63:29:03:61:62:
22:a2:6b:19:7a:79:80:f4:00:a8:73:d7:91:a5:4c:33:f5:30:
a0:f7:99:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:52:28 2026 by rpki-client