Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.mft
File: I_Hgnw5u2JGtF9bOSjxzKNdZtMg.mft (raw, json)
Hash identifier: aru8YVjubB1h2vQePAVG14NzPcv2rWq0TtxaVZRMnMA=
Subject key identifier: 78:88:AE:57:81:D1:9F:D0:6F:4B:24:90:2A:A8:05:7A:BD:6E:B9:D9
Authority key identifier: 23:F1:E0:9F:0E:6E:D8:91:AD:17:D6:CE:4A:3C:73:28:D7:59:B4:C8
Certificate issuer: /CN=23f1e09f0e6ed891ad17d6ce4a3c7328d759b4c8
Certificate serial: 019F92EDB41526D321C0561F7FE45DE64CDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 07:01:19 +0000
Manifest this update: Fri 24 Jul 2026 07:01:19 +0000
Manifest next update: Sat 25 Jul 2026 07:01:19 +0000
Files and hashes: 1: I_Hgnw5u2JGtF9bOSjxzKNdZtMg.crl (hash: 15RD6KZ6tdN5ZA7sQnPjn8dyy7Q2fsRua+Lx+vJjZVc=)
2: YH3qouyi9uf0Sjp7erwfbtdqIMY.roa (hash: XATxeFAkfU3QrOitUmq9zj3TBTO+Je2+3q8oJUZcsYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:b4:15:26:d3:21:c0:56:1f:7f:e4:5d:e6:4c:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23f1e09f0e6ed891ad17d6ce4a3c7328d759b4c8
Validity
Not Before: Jul 24 07:01:19 2026 GMT
Not After : Jul 25 07:01:19 2026 GMT
Subject: CN=7888ae5781d19fd06f4b24902aa8057abd6eb9d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b6:76:ad:18:0c:fc:b4:d4:f7:41:1f:9b:b5:
a1:fb:74:c7:67:5c:64:ad:76:e0:f6:04:79:64:d8:
fb:2c:86:be:10:5f:8c:39:a3:da:3f:b9:89:39:4a:
91:e5:8b:85:20:bf:b3:6c:39:1e:39:0d:be:f1:73:
16:89:cb:c7:c0:39:4d:07:8b:d0:5c:ee:cc:27:28:
72:95:79:34:9b:89:6e:a7:0a:0a:bc:c3:d0:28:12:
a9:e5:0e:11:5a:e0:56:66:be:6b:4c:7d:77:06:6e:
41:37:56:b8:61:03:c5:65:7e:aa:82:38:ef:5c:a5:
58:ae:38:5f:24:bf:b1:bb:e7:c6:aa:34:35:0e:0c:
b0:6d:f3:fe:58:27:c9:ef:67:e6:60:ec:27:84:05:
a4:92:88:41:f0:93:13:da:10:8c:1f:c7:96:98:3c:
73:da:48:5d:f7:9d:ca:b2:62:b6:6a:5c:38:a0:e5:
05:a4:9e:a5:8a:e9:ed:1f:7d:cc:46:b5:89:be:bc:
03:fa:19:22:cf:c6:05:80:39:84:3f:d0:90:c7:65:
8a:8d:5f:a9:91:13:b7:63:16:db:7a:1d:b3:5d:e7:
05:54:a8:84:14:ac:15:0f:42:77:c4:c8:92:3e:bd:
4b:ef:97:f4:df:34:d7:ee:ce:bd:73:b5:56:8f:dc:
5e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:88:AE:57:81:D1:9F:D0:6F:4B:24:90:2A:A8:05:7A:BD:6E:B9:D9
X509v3 Authority Key Identifier:
keyid:23:F1:E0:9F:0E:6E:D8:91:AD:17:D6:CE:4A:3C:73:28:D7:59:B4:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:44:ee:7b:b5:f1:21:df:d6:9f:82:3e:de:36:76:68:0d:9c:
09:6b:57:54:e2:08:34:10:e0:ef:d9:fc:26:32:e0:c1:8f:72:
d9:5a:43:e1:61:0b:8c:02:31:4f:b4:41:e7:20:e4:8f:76:45:
8f:70:01:09:43:cd:7d:e0:4a:33:cf:fd:5d:14:4f:42:87:37:
03:74:4e:f2:2f:88:f6:e0:ad:e9:39:2e:03:22:57:fb:26:3d:
32:15:45:fc:09:89:61:f1:aa:1a:76:78:56:3d:b5:dd:d1:9a:
f2:6a:f1:5e:01:b6:f1:12:7e:9d:b5:ac:81:c2:6e:c9:31:22:
89:8d:98:b9:dd:80:60:8b:cf:9a:65:be:e2:a3:4e:ce:2e:de:
89:49:07:e5:03:df:cd:4b:2d:76:f4:d4:0b:a9:e2:d8:d2:da:
14:90:34:fe:2d:f6:20:66:60:ea:0f:bd:a9:bb:33:db:81:6a:
3d:66:a5:63:60:a4:44:05:66:18:6f:3b:07:18:b1:9c:48:90:
98:86:cc:dd:ab:87:a8:56:7e:df:6c:30:3b:97:47:b7:d8:c9:
f7:bd:8b:50:76:bc:41:f2:ca:02:ae:2d:52:42:36:9c:0d:41:
83:8a:54:f7:ff:ec:4a:1a:28:91:44:ed:e1:f3:d9:66:75:fd:
3d:a7:ce:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:17:05 2026 by rpki-client