Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft
File: iPNC3REnxnrxEWqx-ZfifLTIhOg.mft (raw, json)
Hash identifier: FVBGoCUc1jlvdNt7UHi/bPna8jV1mtqYBYh5OYaoilM=
Subject key identifier: 96:4C:74:8E:58:04:D2:3C:E9:B8:3F:A9:BD:93:EE:BB:1C:83:9A:81
Authority key identifier: 88:F3:42:DD:11:27:C6:7A:F1:11:6A:B1:F9:97:E2:7C:B4:C8:84:E8
Certificate issuer: /CN=88f342dd1127c67af1116ab1f997e27cb4c884e8
Certificate serial: 019F9624EF2B986B5F0F431EC5CAB2792420
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPNC3REnxnrxEWqx-ZfifLTIhOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 22:00:30 +0000
Manifest this update: Fri 24 Jul 2026 22:00:30 +0000
Manifest next update: Sat 25 Jul 2026 22:00:30 +0000
Files and hashes: 1: iPNC3REnxnrxEWqx-ZfifLTIhOg.crl (hash: kfIQ/eUZ8bCZFJBUfs8zvIJ7C0MGlB9q+LT2WSkqAlg=)
2: tsdEYosuda0mGshkl10-Ftg6W4Y.roa (hash: a/sn0U4F/EkCXhkwAu+cTtnXnfLtOqn3iL2j2IEJCMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iPNC3REnxnrxEWqx-ZfifLTIhOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:96:24:ef:2b:98:6b:5f:0f:43:1e:c5:ca:b2:79:24:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88f342dd1127c67af1116ab1f997e27cb4c884e8
Validity
Not Before: Jul 24 22:00:30 2026 GMT
Not After : Jul 25 22:00:30 2026 GMT
Subject: CN=964c748e5804d23ce9b83fa9bd93eebb1c839a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:24:f5:9e:75:af:cb:6f:fd:83:67:35:76:d9:
a1:bc:e0:e0:f2:f1:9b:40:64:50:6d:a8:a9:3d:a4:
99:c9:6c:23:1d:17:77:ad:91:1b:ea:5e:30:a3:f6:
b8:f4:78:f9:c7:ca:1a:a0:df:ac:96:61:b3:96:ea:
0a:12:36:73:23:cc:82:4c:26:f2:d0:a9:8b:88:cd:
13:51:c2:56:c5:3d:cd:f3:ce:22:91:4b:61:d6:98:
58:62:36:44:92:58:89:ed:b2:fe:89:14:75:8d:eb:
fe:7c:fc:3d:f6:b3:c7:66:40:b0:35:d7:e9:49:ac:
58:32:20:54:5d:58:a0:4f:77:c0:32:0e:93:d6:1b:
d6:36:cc:69:3a:fc:1d:6e:86:b6:3d:ac:e2:60:47:
c7:ca:f7:8d:ff:2a:1e:83:5e:82:24:81:6c:54:fd:
9f:63:f8:8b:04:15:90:66:64:15:4c:c4:9b:82:d9:
01:9b:21:4a:19:bc:cf:5e:e9:cb:9c:49:4b:02:65:
83:b3:35:c8:07:db:b0:58:6b:37:57:2d:ba:bf:d5:
b3:da:0d:68:f5:f8:09:a5:69:fc:d7:c6:12:7b:d0:
48:be:2d:ec:75:2f:e5:3c:f5:de:a0:ab:fd:16:2e:
85:b3:cf:36:03:34:6c:3b:c2:ac:2a:21:f6:5f:b6:
34:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:4C:74:8E:58:04:D2:3C:E9:B8:3F:A9:BD:93:EE:BB:1C:83:9A:81
X509v3 Authority Key Identifier:
keyid:88:F3:42:DD:11:27:C6:7A:F1:11:6A:B1:F9:97:E2:7C:B4:C8:84:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPNC3REnxnrxEWqx-ZfifLTIhOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:e1:8c:9b:76:ca:6a:04:fb:69:f6:62:11:aa:31:27:c7:79:
06:33:95:7e:a3:70:6d:c6:5b:da:1c:94:67:42:e4:dd:45:ca:
b4:e6:2d:40:b8:05:54:e5:fe:6f:9b:29:e9:6b:6f:d6:0b:00:
e4:aa:71:b2:e1:d4:6e:aa:de:eb:54:da:ae:f9:48:0f:f0:31:
e2:ad:48:27:6a:73:40:e3:5d:dc:20:e3:34:a8:a7:52:b9:7b:
a6:c9:d9:9f:88:f3:79:57:06:4c:c1:f6:76:22:4d:9a:dc:32:
26:72:76:ce:9d:d8:b9:5d:b6:70:7c:0d:5e:6b:d9:cf:e4:73:
ef:d0:c6:45:fe:ba:76:bb:87:f0:1d:4a:0e:fd:ef:f7:84:4f:
4e:3d:56:fd:5b:a6:e9:1d:f8:63:f6:d4:63:80:48:4e:4a:fb:
93:5d:67:cf:b2:f7:3e:bf:bb:a7:f5:bc:af:f6:d5:ef:ed:07:
71:49:08:f2:11:89:d5:5b:7e:2b:be:5f:ab:25:56:0b:c9:a6:
71:55:3b:e4:03:91:84:0b:9e:99:7a:86:a5:ea:06:88:c6:d2:
b9:ac:8f:82:63:e3:0e:16:11:99:e7:fc:2f:8b:f4:73:c3:5e:
88:96:26:9c:49:a7:c5:4f:42:86:2e:5b:fe:5b:86:9d:5b:f3:
55:a1:c8:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 01:40:31 2026 by rpki-client