Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft
File: iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft (raw, json)
Hash identifier: CSH3rZA3/XAxCeB02N7qVpAAl6Z/7pNwzxamkb+kmcQ=
Subject key identifier: AD:27:20:16:4C:53:10:C5:AE:95:54:13:46:52:E7:7B:00:C7:D0:53
Authority key identifier: 88:44:FC:4A:E1:06:49:9E:05:75:FF:3C:A1:55:6D:BC:0D:9B:46:51
Certificate issuer: /CN=8844fc4ae106499e0575ff3ca1556dbc0d9b4651
Certificate serial: 019F93C88A3CED5A72761F757AF88AA44BA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iET8SuEGSZ4Fdf88oVVtvA2bRlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft
Manifest number: 1921
Signing time: Fri 24 Jul 2026 11:00:21 +0000
Manifest this update: Fri 24 Jul 2026 11:00:21 +0000
Manifest next update: Sat 25 Jul 2026 11:00:21 +0000
Files and hashes: 1: OEVAvwrSHNV-uvr55oxdFx7xxxQ.roa (hash: tRxB0SccSN5sh50OIxV7iRImD06pzo5OWnyES6cYcyc=)
2: aeU9_Yx1c9nw1y-4xtz44SqG1m0.roa (hash: 0t0fFg5NYuzbKW5UvLMqmaiFIgFM8FNQ8jsxvVeiMB0=)
3: iET8SuEGSZ4Fdf88oVVtvA2bRlE.crl (hash: P0st6p0dFCX/qF+c9CFu0HRjt0wHzohXBspSKQuRzk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/iET8SuEGSZ4Fdf88oVVtvA2bRlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c8:8a:3c:ed:5a:72:76:1f:75:7a:f8:8a:a4:4b:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8844fc4ae106499e0575ff3ca1556dbc0d9b4651
Validity
Not Before: Jul 24 11:00:21 2026 GMT
Not After : Jul 25 11:00:21 2026 GMT
Subject: CN=ad2720164c5310c5ae9554134652e77b00c7d053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ac:06:f0:07:87:45:5e:68:e4:cb:c4:aa:ae:
86:a3:c4:cd:61:dc:c5:b7:67:33:4b:ed:b6:90:78:
dc:8c:cc:ac:fd:78:0e:4c:04:4a:d4:55:87:c3:c9:
60:91:32:42:13:e9:13:76:66:04:e6:d5:0a:a3:de:
06:90:d1:05:b8:a4:70:c0:af:d2:0b:9d:eb:f4:a7:
ab:1f:ef:a9:c4:e9:98:ce:98:65:9e:3c:a9:55:e5:
fd:7a:a5:d9:43:f2:6d:02:c1:8d:82:20:4f:d1:c0:
1a:56:ea:44:ed:f7:fa:a1:d0:ae:e4:9c:49:9f:13:
af:67:f5:d1:f7:92:94:7e:69:fd:5d:0c:b1:b4:ce:
25:20:0c:b6:91:dd:5b:4f:c9:0f:84:bb:2b:87:32:
d5:c9:dc:30:0d:69:df:03:36:ae:fe:5d:35:08:46:
51:f6:9e:c1:f5:3d:e6:7b:3a:29:22:09:84:8c:38:
9c:12:4d:71:72:82:98:04:c6:11:de:f5:5c:98:4f:
82:77:73:5e:b7:3f:89:3f:b0:3a:68:ca:35:1e:c9:
21:45:04:2a:48:99:01:56:99:af:9f:f1:b3:8d:e1:
a8:5c:22:b2:8c:79:6a:c4:f6:33:f8:06:98:7c:89:
6b:1c:b0:06:a9:25:af:0a:18:64:8e:43:9e:09:34:
5c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:27:20:16:4C:53:10:C5:AE:95:54:13:46:52:E7:7B:00:C7:D0:53
X509v3 Authority Key Identifier:
keyid:88:44:FC:4A:E1:06:49:9E:05:75:FF:3C:A1:55:6D:BC:0D:9B:46:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iET8SuEGSZ4Fdf88oVVtvA2bRlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:06:3e:71:34:c2:f4:87:25:21:8b:54:7a:a7:cf:a4:df:29:
48:2c:34:05:bc:fd:95:c1:36:22:ff:b6:f6:c2:21:fa:08:c3:
2b:f1:b6:5b:db:ee:9d:9a:26:9f:9d:13:f5:56:dc:8a:63:dc:
09:bb:05:0f:0e:a8:0f:7f:b7:12:db:ab:d2:0b:4e:a7:d6:e1:
51:a2:a3:1e:68:a1:4c:07:a7:2a:6c:19:6d:f0:25:e8:32:eb:
dd:f0:48:2c:b0:72:c8:95:6e:14:12:e3:bf:58:b2:4b:aa:a8:
8c:f1:6c:47:4a:c1:74:f3:b0:c0:81:0d:b2:5a:08:3f:fc:a9:
b6:76:7c:9f:23:11:17:bf:bd:c2:3d:b6:a9:35:06:df:8e:7f:
9d:bb:79:89:e8:87:55:24:ce:83:b4:29:15:8f:b2:24:73:90:
9b:f9:80:99:6d:96:e6:25:a7:10:0b:dc:f6:74:7c:86:b8:ed:
c6:ab:a9:10:56:5f:82:ff:57:f2:ac:c1:a9:82:3a:fd:4e:5d:
ad:06:36:4c:44:55:c8:d7:06:4d:1c:3b:5f:33:fb:4c:24:27:
bc:97:51:16:65:67:61:2e:09:2a:cb:2a:3f:17:ab:7d:c2:de:
4c:2c:cb:2a:bb:20:b6:ab:5c:98:6d:f9:1e:cc:5a:a9:ad:87:
20:e7:76:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:55:04 2026 by rpki-client