Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.mft
File: IQH0Od66_1iAOV148Lv62Mp2CL8.mft (raw, json)
Hash identifier: 0rx0b2+/AxwkQhUc+SJQC4GoqRP16Pey2ZzUv6uMsYc=
Subject key identifier: AD:80:23:96:8D:AF:21:C0:FB:F8:F6:B6:73:23:58:B4:CF:58:D3:9C
Authority key identifier: 21:01:F4:39:DE:BA:FF:58:80:39:5D:78:F0:BB:FA:D8:CA:76:08:BF
Certificate issuer: /CN=2101f439debaff5880395d78f0bbfad8ca7608bf
Certificate serial: 019F8F7F96BBA69D8CF8FE9F86777BD27820
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQH0Od66_1iAOV148Lv62Mp2CL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.mft
Manifest number: 1082
Signing time: Thu 23 Jul 2026 15:02:11 +0000
Manifest this update: Thu 23 Jul 2026 15:02:11 +0000
Manifest next update: Fri 24 Jul 2026 15:02:11 +0000
Files and hashes: 1: IQH0Od66_1iAOV148Lv62Mp2CL8.crl (hash: /h1Eow95qOkXqhhc8sNY7FMIs5MrEym/n97G6S57VMg=)
2: LIiML1O5GYrYT2OXv04_3crEOSo.roa (hash: GEv40+sowJMzMWvtaNBUTp1Lf4CV4ySJkJ0S9aCKf/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQH0Od66_1iAOV148Lv62Mp2CL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:96:bb:a6:9d:8c:f8:fe:9f:86:77:7b:d2:78:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2101f439debaff5880395d78f0bbfad8ca7608bf
Validity
Not Before: Jul 23 15:02:11 2026 GMT
Not After : Jul 24 15:02:11 2026 GMT
Subject: CN=ad8023968daf21c0fbf8f6b6732358b4cf58d39c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f9:33:02:9e:d8:8d:3a:41:de:30:8c:5f:dc:
e5:3e:f6:66:7b:5a:31:84:94:a6:da:9c:d8:c4:3d:
d0:00:4a:9a:c7:4e:49:03:f0:19:5f:32:d6:af:39:
5a:fd:25:ec:6d:a5:55:6d:bd:19:6f:9b:d8:22:38:
99:8c:01:df:e7:1e:3e:71:27:95:48:e4:42:27:c4:
5f:9f:7f:c9:bc:72:e9:57:a8:67:4c:76:03:82:9a:
7b:82:0b:47:2a:6f:6a:d9:e3:fc:40:19:46:23:74:
1f:63:cf:84:8d:57:eb:d6:f8:4b:ae:b1:be:46:d3:
af:1d:7e:9d:a1:f7:7e:d4:54:63:74:67:d6:44:6e:
05:3e:d4:ee:af:e7:e8:64:93:88:37:e2:b7:16:3b:
e2:b5:ff:fb:44:ad:3d:5e:f8:a9:fe:d0:ec:59:36:
f8:b8:bf:02:c7:04:ec:59:33:af:81:78:3f:5c:1b:
a7:35:1e:1d:92:18:84:21:ff:23:68:40:0d:e0:b5:
33:c8:f1:f4:d3:f6:60:41:3f:8b:a1:df:a9:bf:7a:
30:5e:d9:4b:e4:02:b8:5d:b3:34:4d:85:12:d2:38:
f7:04:b2:8f:e1:ff:e0:4d:8e:4e:bb:db:af:ff:bf:
7f:84:f2:98:7a:7d:6d:d3:7b:8f:f8:1a:1d:be:49:
e7:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:80:23:96:8D:AF:21:C0:FB:F8:F6:B6:73:23:58:B4:CF:58:D3:9C
X509v3 Authority Key Identifier:
keyid:21:01:F4:39:DE:BA:FF:58:80:39:5D:78:F0:BB:FA:D8:CA:76:08:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQH0Od66_1iAOV148Lv62Mp2CL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:bb:21:2c:db:c4:f8:d5:12:08:00:62:ae:25:e2:4e:1f:ea:
39:21:02:d2:85:ec:98:0d:68:40:ba:13:a6:14:e4:5a:d5:4a:
68:34:65:04:4c:02:0a:46:6b:88:e4:5a:13:90:03:47:9e:83:
c8:88:50:5a:53:cc:2c:0c:4d:c4:79:60:52:ab:25:07:f8:ff:
14:93:86:82:42:97:3e:f6:45:a8:13:da:85:75:80:55:b1:b8:
dc:2e:14:cb:4a:ec:bc:59:84:52:1e:c2:2a:ba:53:ef:1c:17:
a7:a5:f2:26:0a:91:1b:09:70:ea:2d:58:10:00:02:8e:ad:01:
c2:50:1b:23:e5:67:3d:ff:a4:d2:cc:ea:1b:96:11:b3:de:09:
26:f1:0e:92:3f:8e:ae:6b:7f:8c:92:2f:45:70:08:ae:c7:e4:
cd:d8:1c:94:53:43:e2:80:0f:67:a0:b1:e1:66:d1:ae:82:e1:
75:7d:9d:22:dd:1d:75:c0:8a:50:5f:56:26:f1:cc:f1:6a:bc:
44:3e:8e:92:4c:8c:1c:d0:b5:df:4f:d9:a6:56:b7:81:ca:79:
50:dc:9a:5f:53:d6:3c:63:01:92:6c:24:a9:03:61:19:a6:d1:
5a:9b:98:14:9b:d5:a6:e7:a6:f7:a5:d0:0f:f2:35:93:da:05:
c9:83:d1:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:06:34 2026 by rpki-client