Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.mft
File: izGWcRDKvuxKZreAN-Uqh7K8j10.mft (raw, json)
Hash identifier: U9HH8RBBTwltJU0xGZ4j1F2t+Rl+TSmpajC8MJKy/aM=
Subject key identifier: F6:A3:F5:78:C7:60:64:07:00:2F:27:08:5E:6A:64:AD:1E:C4:0D:2F
Authority key identifier: 8B:31:96:71:10:CA:BE:EC:4A:66:B7:80:37:E5:2A:87:B2:BC:8F:5D
Certificate issuer: /CN=8b31967110cabeec4a66b78037e52a87b2bc8f5d
Certificate serial: 019F935BDBA132EDB673BFFC78303CBA7333
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izGWcRDKvuxKZreAN-Uqh7K8j10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.mft
Manifest number: 16C3
Signing time: Fri 24 Jul 2026 09:01:38 +0000
Manifest this update: Fri 24 Jul 2026 09:01:38 +0000
Manifest next update: Sat 25 Jul 2026 09:01:38 +0000
Files and hashes: 1: 96n2FzRjkBX11HWVM9i_vNB-31E.roa (hash: 9OIDnPnlJZEwGjTFAXCdBpYg5ywi9zAXI41Z4fWCG4k=)
2: izGWcRDKvuxKZreAN-Uqh7K8j10.crl (hash: PoMpXRtLGR5BNcXMbNP1o9cOwuHDWJI0nZ4TwmgUstg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.mft
rsync://rpki.ripe.net/repository/DEFAULT/izGWcRDKvuxKZreAN-Uqh7K8j10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:db:a1:32:ed:b6:73:bf:fc:78:30:3c:ba:73:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b31967110cabeec4a66b78037e52a87b2bc8f5d
Validity
Not Before: Jul 24 09:01:38 2026 GMT
Not After : Jul 25 09:01:38 2026 GMT
Subject: CN=f6a3f578c7606407002f27085e6a64ad1ec40d2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c3:3a:51:c7:16:84:23:10:a6:0b:fd:b7:6e:
75:e4:c6:d9:4f:c0:68:e3:9a:b9:f3:5c:1f:5d:2f:
55:2b:8c:a3:00:5f:8d:13:b0:e7:94:88:e8:ed:8e:
a0:be:19:62:f4:f5:d8:03:d9:ab:70:c0:ac:15:df:
87:fa:2e:42:1f:a7:fb:31:fb:8e:cf:70:b1:9f:1e:
a9:bb:af:2d:19:ac:2e:cb:3f:15:9c:a9:bd:cf:d0:
b4:46:b1:53:4f:d7:41:1a:7b:02:e7:2c:74:2a:50:
50:a9:27:02:aa:c3:8f:c9:32:da:b7:b4:dd:03:2e:
95:88:ed:2b:7e:48:7c:83:e8:50:67:e0:19:cb:e9:
8a:6a:ad:94:5c:bd:fb:81:7e:3f:1f:4b:50:e9:a0:
9c:ab:46:b3:cf:86:88:8c:5c:ac:d9:77:bb:4f:59:
e5:d8:35:dd:be:06:93:7e:1c:6a:7d:1a:75:1b:72:
c6:a2:30:2d:dd:5a:7f:1e:96:8e:2f:f6:d1:52:6b:
cd:69:90:65:91:9b:06:8b:1a:eb:58:c6:88:3d:32:
ca:1f:2b:79:af:a0:a4:38:5f:5a:06:53:80:b6:02:
84:f2:cf:55:64:f0:bc:fb:1c:bb:1f:90:65:d6:79:
cc:94:7c:a7:4e:3b:1c:83:18:53:79:6c:83:5d:5d:
7b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:A3:F5:78:C7:60:64:07:00:2F:27:08:5E:6A:64:AD:1E:C4:0D:2F
X509v3 Authority Key Identifier:
keyid:8B:31:96:71:10:CA:BE:EC:4A:66:B7:80:37:E5:2A:87:B2:BC:8F:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izGWcRDKvuxKZreAN-Uqh7K8j10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:bd:bc:b0:2d:67:6f:c1:75:a8:f5:04:d3:5f:31:b2:9f:d8:
94:c4:ac:14:8e:e1:ee:14:96:87:4c:74:51:eb:4a:0e:a9:a2:
34:ac:5e:c7:60:17:95:94:32:70:1b:de:da:ee:dc:2b:a1:26:
25:91:7f:0e:99:d5:06:b7:d8:e2:9a:39:5b:30:0b:21:11:b5:
f8:f4:2c:e9:31:f3:72:ca:68:15:7b:f5:77:0a:c4:98:a9:07:
75:f5:1b:8d:ee:e5:ee:33:c2:f4:41:4c:c1:da:25:dd:52:d8:
a0:2a:be:25:39:85:69:7a:6b:16:d6:73:69:89:12:83:32:5a:
9c:91:8c:48:7a:79:eb:a8:30:21:35:e1:65:17:d3:38:ca:71:
78:ad:e4:29:ef:ca:9d:c3:be:8d:6f:30:8a:14:87:35:6c:53:
d1:f5:b5:5e:4b:2f:ac:b0:36:72:9b:bc:ac:d5:4d:bf:69:1f:
d7:b5:02:26:dc:18:77:59:4f:ed:00:fc:7c:91:53:4b:8f:53:
81:3c:d4:92:27:3f:f1:a7:51:13:a5:99:23:2a:05:e2:c9:32:
ef:18:b5:b2:4f:da:38:87:31:60:d4:c9:08:39:e9:4a:30:b7:
16:09:e8:78:e8:48:3a:5d:ad:fe:bc:f3:27:35:10:b4:a7:06:
73:ad:37:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:13:20 2026 by rpki-client