Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/0cd4be-247f-4de2-938c-f0cd8bb552e0/1/iay4iT6UGAdH7sGXXtVgTE3b4MU.mft
File: iay4iT6UGAdH7sGXXtVgTE3b4MU.mft (raw, json)
Hash identifier: jOeuCgg1aHJfhnrCtxJ3qLkNewvEX/46pdwjYNP1XPM=
Subject key identifier: BD:91:1E:40:BF:1A:BB:EA:7B:75:DC:10:D6:3A:B5:A3:24:86:80:E6
Authority key identifier: 89:AC:B8:89:3E:94:18:07:47:EE:C1:97:5E:D5:60:4C:4D:DB:E0:C5
Certificate issuer: /CN=89acb8893e94180747eec1975ed5604c4ddbe0c5
Certificate serial: 019F916D0565FD80F7B01F1DBC9E2880648B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iay4iT6UGAdH7sGXXtVgTE3b4MU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/0cd4be-247f-4de2-938c-f0cd8bb552e0/1/iay4iT6UGAdH7sGXXtVgTE3b4MU.mft
Manifest number: 19C6
Signing time: Fri 24 Jul 2026 00:01:08 +0000
Manifest this update: Fri 24 Jul 2026 00:01:08 +0000
Manifest next update: Sat 25 Jul 2026 00:01:08 +0000
Files and hashes: 1: 7oSS-r2bMLw-tHLZnTLEn6ZKtA0.roa (hash: sEaYDQdsiX4RB8VnPuUfSRtKLpLITXk4UddGS53dMkM=)
2: iay4iT6UGAdH7sGXXtVgTE3b4MU.crl (hash: qX4NhXbMH5jW+LgyLLipkz2iF5cFO7EPcZq4VWXNCr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/0cd4be-247f-4de2-938c-f0cd8bb552e0/1/iay4iT6UGAdH7sGXXtVgTE3b4MU.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/0cd4be-247f-4de2-938c-f0cd8bb552e0/1/iay4iT6UGAdH7sGXXtVgTE3b4MU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iay4iT6UGAdH7sGXXtVgTE3b4MU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:05:65:fd:80:f7:b0:1f:1d:bc:9e:28:80:64:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89acb8893e94180747eec1975ed5604c4ddbe0c5
Validity
Not Before: Jul 24 00:01:08 2026 GMT
Not After : Jul 25 00:01:08 2026 GMT
Subject: CN=bd911e40bf1abbea7b75dc10d63ab5a3248680e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e1:d7:be:33:a9:10:91:8a:41:a0:70:b0:a7:
cf:16:d2:d7:c9:91:f6:e6:8c:cc:59:61:96:e1:08:
e9:d7:aa:7a:9e:0a:a8:ff:8a:99:9d:2e:46:bd:3d:
f5:0e:fd:49:e9:fa:5c:f4:2f:b7:77:92:28:ec:47:
e9:2e:20:81:0d:de:71:e8:49:f0:fa:be:48:6e:b0:
22:b7:3a:0d:ff:61:e7:8f:b3:e2:3c:45:a3:c0:bf:
16:30:03:b4:f8:9c:a0:13:2e:d8:d1:61:d4:4c:d7:
50:f8:c6:d8:2f:fd:7d:aa:51:82:e2:31:c3:52:60:
a9:71:a4:6d:36:e0:61:3d:71:93:a3:98:31:07:1e:
07:77:9c:9b:1b:0c:69:a3:0e:01:da:42:14:38:a8:
56:38:46:7a:09:9f:6e:75:47:46:12:1e:93:be:f8:
5d:19:49:cf:aa:c8:ec:fc:4c:fe:dc:4b:cb:0d:53:
7d:7d:46:c4:ab:7f:a7:e6:fb:62:e6:db:ab:7c:89:
6a:4f:82:a0:dc:dc:8d:0d:43:5f:77:1e:c9:d2:b3:
14:d1:28:3a:4a:90:2b:d6:00:9e:d4:26:94:c2:22:
27:c9:e0:cd:c0:76:31:d2:25:58:29:20:bd:d5:50:
b9:ca:a8:bc:c5:a1:f5:4c:1f:54:3d:02:aa:b8:ee:
5b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:91:1E:40:BF:1A:BB:EA:7B:75:DC:10:D6:3A:B5:A3:24:86:80:E6
X509v3 Authority Key Identifier:
keyid:89:AC:B8:89:3E:94:18:07:47:EE:C1:97:5E:D5:60:4C:4D:DB:E0:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iay4iT6UGAdH7sGXXtVgTE3b4MU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0cd4be-247f-4de2-938c-f0cd8bb552e0/1/iay4iT6UGAdH7sGXXtVgTE3b4MU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0cd4be-247f-4de2-938c-f0cd8bb552e0/1/iay4iT6UGAdH7sGXXtVgTE3b4MU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:1c:13:c9:48:8f:14:c2:34:4e:8d:3d:07:ca:17:98:61:83:
2c:64:5e:1d:5c:8e:18:70:27:1e:08:60:10:0b:b9:5b:30:99:
bb:1d:92:b6:de:20:f0:3b:b3:41:72:ff:bc:9f:e9:b4:4d:a1:
40:5f:4e:11:1f:99:27:ec:86:eb:eb:31:dc:f1:0e:7a:65:4b:
e0:e1:e8:f2:39:8f:6c:93:4b:f0:92:f7:ac:5a:27:f9:36:08:
09:03:2b:59:87:f8:fb:1f:aa:72:72:15:e9:bc:04:56:e6:11:
40:b2:ac:95:14:4a:46:e8:20:0c:bd:a2:59:fa:5b:fd:e5:ec:
6d:10:96:cf:66:00:ae:d8:c6:69:02:b1:64:bb:95:7a:9a:f0:
bc:be:b0:13:74:2e:70:62:de:4b:08:96:e8:e2:34:84:e9:c1:
1d:54:c5:0d:8c:f3:c8:7a:b6:fa:cb:22:b8:71:ad:1b:6a:4e:
3f:63:e2:1f:98:14:48:7d:1a:cc:04:df:c7:dc:5a:e5:e1:d4:
f9:9d:51:8d:27:48:c2:84:07:a9:9c:f3:ac:88:7d:8a:78:cd:
f9:78:86:f3:59:e5:95:69:6c:34:27:32:e2:9c:3d:09:c4:b3:
b8:11:34:64:7d:e7:a4:e3:af:38:ae:90:88:31:fd:9f:73:f8:
34:6f:87:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:10:18 2026 by rpki-client