Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/476fd0-b8a6-461f-b4c5-38c2c2a79c35/1/iIFmRjoaMByltuuYvd0H45cJGYY.mft
File: iIFmRjoaMByltuuYvd0H45cJGYY.mft (raw, json)
Hash identifier: lC0l6YfBm5//bnFFT7eheOBYW7DpX1lju7bR5sLhNPc=
Subject key identifier: 1E:5B:5A:6D:B7:79:A2:2F:06:A1:3C:B3:74:7C:82:AF:E4:F2:5A:CA
Authority key identifier: 88:81:66:46:3A:1A:30:1C:A5:B6:EB:98:BD:DD:07:E3:97:09:19:86
Certificate issuer: /CN=888166463a1a301ca5b6eb98bddd07e397091986
Certificate serial: 019F935C06EBE4D88A9E693C1812CDFEFDB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iIFmRjoaMByltuuYvd0H45cJGYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/476fd0-b8a6-461f-b4c5-38c2c2a79c35/1/iIFmRjoaMByltuuYvd0H45cJGYY.mft
Manifest number: 14A1
Signing time: Fri 24 Jul 2026 09:01:49 +0000
Manifest this update: Fri 24 Jul 2026 09:01:49 +0000
Manifest next update: Sat 25 Jul 2026 09:01:49 +0000
Files and hashes: 1: 19kTeJepP8HkpIg63hHdZMuI5pU.roa (hash: rYKL3pXSi0W4E3AFcHleDUG0Z3vGSYXA5D+E17BmR8U=)
2: iIFmRjoaMByltuuYvd0H45cJGYY.crl (hash: Yc6QdfF0MdKKLUuKkb8ZptYWI3bRJD0YCuH3pTrTAeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/476fd0-b8a6-461f-b4c5-38c2c2a79c35/1/iIFmRjoaMByltuuYvd0H45cJGYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/476fd0-b8a6-461f-b4c5-38c2c2a79c35/1/iIFmRjoaMByltuuYvd0H45cJGYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iIFmRjoaMByltuuYvd0H45cJGYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5c:06:eb:e4:d8:8a:9e:69:3c:18:12:cd:fe:fd:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=888166463a1a301ca5b6eb98bddd07e397091986
Validity
Not Before: Jul 24 09:01:49 2026 GMT
Not After : Jul 25 09:01:49 2026 GMT
Subject: CN=1e5b5a6db779a22f06a13cb3747c82afe4f25aca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:49:93:05:2c:e5:47:29:5e:8b:ce:b5:25:12:
70:b3:82:3b:a9:07:a5:2c:a6:a4:54:71:1f:6d:cb:
21:bf:83:90:0c:53:87:b1:df:74:e4:eb:4a:8a:33:
2f:76:85:3c:b8:99:35:10:3d:bc:77:f5:9b:3a:67:
55:e9:95:c9:98:66:73:28:05:f3:9c:2a:63:84:d3:
98:c0:12:8e:80:95:9f:c7:04:ca:6a:4a:8f:a7:6c:
a8:64:ff:27:ea:e6:fd:f1:ea:bd:7b:a9:94:07:d3:
a5:69:41:a0:70:0d:f4:03:d0:0c:75:c4:2d:9c:1d:
f0:ef:fc:98:ad:e2:60:4f:aa:f7:7e:eb:ef:72:38:
2e:48:7f:67:cb:1f:96:57:fe:03:34:55:45:ae:b7:
2f:98:ba:b1:05:76:9c:2f:ba:6c:69:04:6c:5c:22:
18:77:d4:a6:e3:9a:95:6e:2a:b9:cf:bc:94:d6:54:
76:8a:4b:44:15:9f:89:60:c3:cd:8f:e7:9c:ee:b1:
f1:03:ec:f8:fd:e0:4e:ce:e5:c9:84:9a:9d:53:41:
e6:c5:2f:e8:62:26:9d:d7:4b:ed:2c:a2:30:40:3a:
da:19:ac:83:38:91:b9:7e:7f:f5:4d:00:f0:f3:ab:
fe:6c:2d:e3:c6:4c:ff:28:cb:1a:3b:fc:7f:89:9a:
8a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:5B:5A:6D:B7:79:A2:2F:06:A1:3C:B3:74:7C:82:AF:E4:F2:5A:CA
X509v3 Authority Key Identifier:
keyid:88:81:66:46:3A:1A:30:1C:A5:B6:EB:98:BD:DD:07:E3:97:09:19:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iIFmRjoaMByltuuYvd0H45cJGYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/476fd0-b8a6-461f-b4c5-38c2c2a79c35/1/iIFmRjoaMByltuuYvd0H45cJGYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/476fd0-b8a6-461f-b4c5-38c2c2a79c35/1/iIFmRjoaMByltuuYvd0H45cJGYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:d3:ea:fc:2d:3d:7f:ee:e1:07:e2:56:74:9a:65:b2:3f:a9:
eb:c9:60:d0:55:32:06:6a:c0:7d:18:df:6a:34:e4:34:f3:0f:
36:60:47:d3:a3:85:b1:7e:d2:06:b1:bb:19:47:ce:5a:a6:b2:
50:09:ab:14:5c:90:11:f9:43:b3:e9:1c:56:8d:88:a2:78:6d:
01:ab:e3:58:22:bf:ad:f5:53:2b:d4:fa:da:8b:e1:19:97:1a:
9b:51:72:5d:62:8d:23:2e:64:5c:e5:c6:76:63:b7:27:1e:08:
75:52:ea:8f:3e:72:53:79:73:f6:ab:9b:ec:d0:01:dd:84:f9:
1b:3f:5c:a4:31:74:d0:8d:58:ff:f0:ad:c7:a3:55:d4:d1:26:
de:bb:9d:1e:4f:06:cd:f3:97:91:f9:68:6e:77:d3:b6:87:4a:
35:9f:4c:eb:3a:10:22:c3:96:f2:43:6e:9f:a4:78:3c:74:93:
5a:d2:e2:8d:88:13:0a:c2:35:a4:36:a5:ab:65:95:80:39:af:
8b:23:db:fa:64:03:8b:95:93:1d:45:2c:9a:af:4c:53:6d:b9:
e0:09:10:2d:d8:39:3f:a5:fa:74:db:23:96:f0:32:4c:43:f9:
c6:79:bc:3c:6d:35:fc:47:d7:b6:42:8e:bb:90:0a:e6:fa:94:
d4:1b:fe:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:04:23 2026 by rpki-client