Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.mft
File: IoNxG9erE9o9EfJbtXpPSDwfmaw.mft (raw, json)
Hash identifier: RgDvFigdAeYeKXpMhqBTsuvsrocneg+MYJeuduVNAqQ=
Subject key identifier: D2:E2:DC:2B:22:59:0E:F3:7E:C4:7D:C9:43:47:01:CB:57:D5:A2:58
Authority key identifier: 22:83:71:1B:D7:AB:13:DA:3D:11:F2:5B:B5:7A:4F:48:3C:1F:99:AC
Certificate issuer: /CN=2283711bd7ab13da3d11f25bb57a4f483c1f99ac
Certificate serial: 019F9248AFAB17E860D605326FEE1ADD80B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IoNxG9erE9o9EfJbtXpPSDwfmaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 04:01:04 +0000
Manifest this update: Fri 24 Jul 2026 04:01:04 +0000
Manifest next update: Sat 25 Jul 2026 04:01:04 +0000
Files and hashes: 1: IoNxG9erE9o9EfJbtXpPSDwfmaw.crl (hash: YmLLLYDjBQ7tqIs16OGHwjyt7RzIVIqdizR3/idYsPg=)
2: M7U-ppZwsd4Y0hqrg3uFvL3fNF0.roa (hash: V5ZqVNY/FzC23usoRi5oNuuG/BK57r9pMG9x1bcd1BQ=)
3: ZD6ajEH0bv8mrB6nbh6DLa6EVFo.roa (hash: mzlpti+1V/oTEeIRtH/QUHo9IeJTt/iu7YBQ2fE92aA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/IoNxG9erE9o9EfJbtXpPSDwfmaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:af:ab:17:e8:60:d6:05:32:6f:ee:1a:dd:80:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2283711bd7ab13da3d11f25bb57a4f483c1f99ac
Validity
Not Before: Jul 24 04:01:04 2026 GMT
Not After : Jul 25 04:01:04 2026 GMT
Subject: CN=d2e2dc2b22590ef37ec47dc9434701cb57d5a258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ce:f9:cd:06:35:fe:0c:29:de:e3:73:51:36:
b3:60:7c:cd:dd:af:d6:bc:bf:b7:b7:fd:71:2e:a1:
40:71:42:57:2b:d3:45:59:3e:d0:94:85:94:9e:60:
19:00:6f:dd:66:92:e6:24:91:50:a0:98:1f:4e:8a:
ef:75:54:4f:50:b2:16:f2:87:cc:78:da:46:a8:67:
8a:79:ff:ef:56:56:2c:9b:29:37:2c:cf:b4:dc:13:
58:00:77:99:6f:b1:35:b2:4c:07:9d:35:85:cb:40:
40:04:6d:8a:4d:67:c3:03:6e:cb:88:11:1a:4f:00:
fe:1a:9d:20:91:fb:79:f7:6c:0c:2f:26:9b:32:5f:
59:40:c2:b0:5f:02:04:4d:cb:79:af:0f:c5:35:64:
bb:1c:ad:58:16:21:4d:b7:21:67:ca:f6:56:dd:66:
49:67:3e:0f:b4:32:2f:3c:61:33:de:6f:79:98:66:
7d:0e:d9:f7:4c:9e:43:93:c8:48:de:ec:1d:b6:5b:
c5:bd:8d:c5:7a:27:cc:4f:77:72:7e:46:58:b4:0a:
84:17:a6:a1:04:3c:76:88:6c:66:09:de:b5:2f:0b:
95:58:74:de:02:7d:64:df:42:1c:5f:e9:e9:a1:0f:
68:da:64:79:bf:1f:f9:bb:1a:ab:6a:07:27:fa:93:
39:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:E2:DC:2B:22:59:0E:F3:7E:C4:7D:C9:43:47:01:CB:57:D5:A2:58
X509v3 Authority Key Identifier:
keyid:22:83:71:1B:D7:AB:13:DA:3D:11:F2:5B:B5:7A:4F:48:3C:1F:99:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IoNxG9erE9o9EfJbtXpPSDwfmaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:59:18:e2:83:c9:fb:53:e6:c9:44:05:25:6f:0a:2c:20:a7:
1d:4b:60:8e:b7:d5:f4:86:39:03:9a:3d:cf:d1:c3:73:f1:eb:
99:32:fc:f5:c8:0e:41:17:cb:6d:5f:72:2e:e9:7c:84:63:00:
8e:16:fa:14:66:04:81:82:45:be:2c:ce:1e:70:c7:1e:e4:49:
47:a3:ee:1c:dd:68:b1:74:68:04:60:27:1c:1e:7f:7a:0a:cb:
f1:0f:56:6e:22:32:89:80:22:b2:7a:e6:c2:a3:77:53:f8:a5:
26:df:26:2c:62:15:ab:b9:88:59:8f:c5:f4:0c:a2:d5:25:05:
69:fb:42:43:32:b7:33:84:ec:da:98:64:a3:9a:98:80:cd:02:
08:df:e8:fe:28:0f:0f:be:a1:06:67:a5:1c:fa:31:67:c6:4c:
c0:f8:63:4c:12:0d:ec:74:e9:ef:0e:38:48:f0:16:67:4a:c4:
94:ce:5f:d5:85:69:42:b9:c6:ba:42:40:07:aa:35:60:53:fe:
49:08:fd:98:11:98:7e:c1:fd:ba:a9:4c:69:fc:a0:ca:a9:5b:
b7:b7:9f:ee:7b:e5:04:e5:4a:e9:e7:41:3f:08:f9:75:d8:9c:
b5:64:4d:b5:c5:af:73:ee:5a:b1:c7:76:41:11:c6:6e:73:e1:
5a:84:e1:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:20:46 2026 by rpki-client