Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft
File: iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft (raw, json)
Hash identifier: LUm+kG0rxvsUb2TYcP5FBx7ql+VsWQBZk82cueNyGH4=
Subject key identifier: 96:56:B5:A9:59:A9:9B:D5:97:DD:FE:BD:FF:66:A6:AA:69:F1:81:0F
Authority key identifier: 88:7F:A3:73:71:D7:D4:59:3B:A2:90:EF:45:66:9E:A0:DE:29:37:82
Certificate issuer: /CN=887fa37371d7d4593ba290ef45669ea0de293782
Certificate serial: 019F94A44945D4E6BDA45CDF78B24C8F53D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iH-jc3HX1Fk7opDvRWaeoN4pN4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft
Manifest number: 0AEA
Signing time: Fri 24 Jul 2026 15:00:22 +0000
Manifest this update: Fri 24 Jul 2026 15:00:22 +0000
Manifest next update: Sat 25 Jul 2026 15:00:22 +0000
Files and hashes: 1: iH-jc3HX1Fk7opDvRWaeoN4pN4I.crl (hash: bOAg3DTyvqU/VseO2Pqw8LbkisQVIAxw07svlFogK44=)
2: tFxvsrCqJ_cpCZ3yrGcf9YiNSVg.roa (hash: he9pYZaiWZg80bEFSYp2yYFaMXPObGV75JnhpVutWqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/iH-jc3HX1Fk7opDvRWaeoN4pN4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 15:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:a4:49:45:d4:e6:bd:a4:5c:df:78:b2:4c:8f:53:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=887fa37371d7d4593ba290ef45669ea0de293782
Validity
Not Before: Jul 24 15:00:22 2026 GMT
Not After : Jul 25 15:00:22 2026 GMT
Subject: CN=9656b5a959a99bd597ddfebdff66a6aa69f1810f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:80:0e:6f:f5:f5:26:e5:e0:c7:79:a9:65:ca:
7d:df:6a:b9:b8:46:76:e0:70:2e:c9:71:b6:d8:a6:
c5:bc:fc:84:ca:f2:1f:80:3c:31:69:03:0c:e3:bf:
1b:9d:3e:e1:02:90:87:65:cd:1a:92:62:f1:90:e7:
19:ee:31:f6:92:87:87:7e:08:62:5e:d3:90:23:74:
4a:6c:42:51:a6:b1:0a:19:22:df:f9:45:24:ef:a2:
99:ed:9d:e1:b1:8b:2c:93:f4:af:65:67:05:c6:2f:
d2:c5:1d:c4:69:4b:9f:59:de:af:ba:41:77:08:41:
0b:2f:30:11:b2:74:39:3a:5c:7d:50:96:75:cf:21:
b5:76:df:ac:03:b7:4a:8e:71:3c:6d:6e:03:e9:37:
04:5a:cb:4f:6e:73:36:a0:04:bf:1d:58:b4:83:ab:
b2:d6:e7:85:6d:e9:c5:51:e8:ce:8c:a1:e7:17:b9:
a3:ab:8f:4d:3c:74:b3:2e:6b:42:9a:7e:d8:73:c5:
7f:55:9b:8f:c4:8f:eb:d8:67:f3:0f:96:9e:11:17:
f0:d7:1b:b4:8d:82:ff:55:3b:7a:e3:39:25:83:7a:
41:0d:20:78:bd:b3:94:9a:84:f0:a6:a3:6b:fb:21:
fc:82:a7:3c:f7:69:c2:b4:0b:4e:48:c3:04:1b:20:
5f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:56:B5:A9:59:A9:9B:D5:97:DD:FE:BD:FF:66:A6:AA:69:F1:81:0F
X509v3 Authority Key Identifier:
keyid:88:7F:A3:73:71:D7:D4:59:3B:A2:90:EF:45:66:9E:A0:DE:29:37:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iH-jc3HX1Fk7opDvRWaeoN4pN4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:39:0c:b6:79:da:a5:62:17:34:6e:9a:fe:fa:a8:1c:24:6f:
8a:9a:0c:e6:de:9e:fd:ab:5b:eb:b1:63:dd:cd:25:7d:e0:a6:
77:a5:41:3f:1d:eb:c2:7e:9e:00:a7:0b:eb:8d:66:74:72:7d:
04:d8:6d:a1:81:bc:96:5b:07:a7:5a:7b:14:19:68:c9:9f:23:
2a:93:e7:47:ee:cc:85:d4:7c:52:42:da:6c:7b:aa:06:cd:74:
b2:1c:b7:3f:7c:3c:dd:f6:1b:f3:64:51:d5:0a:04:a5:dc:80:
40:a0:8f:96:d6:f0:35:98:e5:66:46:bd:60:c3:6b:37:bb:7b:
65:d2:e7:69:68:1d:5b:b9:46:5c:92:3e:7c:41:d0:a5:1c:99:
31:3c:95:04:d0:44:03:25:78:84:85:4e:b1:40:65:2f:2c:f2:
2c:f5:a1:b2:1a:e1:83:aa:71:3d:98:d8:ca:de:5e:40:77:5d:
b2:f9:94:d8:f5:b9:81:5a:24:b4:c9:0b:f6:e1:e1:2c:c2:9d:
e7:54:71:a4:55:82:0f:80:6c:2b:4b:88:b0:7d:6e:09:ca:e7:
72:27:7a:67:ca:e6:77:be:36:f4:b4:d7:52:34:d8:5f:d9:0f:
43:30:27:e6:cd:14:42:e8:80:3a:66:18:18:47:1c:4e:36:13:
15:d7:ad:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:48:43 2026 by rpki-client