Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft
File: iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft (raw, json)
Hash identifier: NlmPNlFviywWpraDJcdRoWpafFeCk5u9gkc3VhHyC/4=
Subject key identifier: 7F:92:43:86:30:17:21:F4:A7:ED:8A:BB:6A:57:80:93:01:45:33:DE
Authority key identifier: 88:77:DA:3D:48:30:27:A0:1E:DD:CD:0E:43:5E:82:85:F1:B1:BB:9E
Certificate issuer: /CN=8877da3d483027a01eddcd0e435e8285f1b1bb9e
Certificate serial: 019F9436EEF041449299FC67E602AFAEBC8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 13:00:55 +0000
Manifest this update: Fri 24 Jul 2026 13:00:55 +0000
Manifest next update: Sat 25 Jul 2026 13:00:55 +0000
Files and hashes: 1: _MjZeflusMJHZIBBhksr7jcA7vw.roa (hash: BrV6MzyjqOEJzPWdJnGrS0VIFNiT/BKP8d1n0zB4odM=)
2: iHfaPUgwJ6Ae3c0OQ16ChfGxu54.crl (hash: PBJoU3uPgEdpLnr1I8MCjIbtthUX2ZsDnuKkszeb0nk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft
rsync://rpki.ripe.net/repository/DEFAULT/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:36:ee:f0:41:44:92:99:fc:67:e6:02:af:ae:bc:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8877da3d483027a01eddcd0e435e8285f1b1bb9e
Validity
Not Before: Jul 24 13:00:55 2026 GMT
Not After : Jul 25 13:00:55 2026 GMT
Subject: CN=7f924386301721f4a7ed8abb6a578093014533de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:41:c4:9f:3b:9b:2b:1b:1f:ba:4d:16:92:33:
d4:5a:3a:fd:b0:17:ee:c0:50:35:1c:c4:00:d8:af:
ca:16:21:57:9a:c4:89:e3:ef:aa:e6:87:98:49:a0:
29:2d:e3:bf:e4:6a:98:36:6b:b5:d0:8c:7e:15:68:
e2:d3:18:71:c9:ae:75:35:0f:3d:0f:29:25:5b:b2:
49:c8:9f:56:8f:87:bd:11:e6:e4:3b:e2:5b:78:2f:
e5:15:a7:55:b7:1d:a6:93:48:5e:8f:1e:44:6c:d6:
fc:31:d7:76:72:6f:ef:91:94:74:e9:70:16:83:ab:
61:3d:c7:20:bc:6a:da:7a:ec:cf:02:4e:4c:50:ab:
0b:24:08:e5:6e:74:30:e8:0d:82:5f:ab:54:8e:9e:
b4:e2:b1:e5:39:77:c0:19:d1:91:1d:f1:d9:6a:34:
d5:7f:ad:36:5e:6e:06:65:83:49:ed:33:fd:9d:9f:
b5:47:f4:cf:07:e4:f3:27:19:9a:f0:6a:ad:dc:03:
0d:21:da:b8:87:01:f0:5e:b4:89:15:4b:e4:f0:b5:
f0:a4:58:22:be:1c:27:36:98:f8:c0:7d:ab:a8:60:
b4:fc:f3:3b:4f:6b:e4:ac:2d:2e:d2:ab:07:02:3b:
57:88:f1:70:e7:f4:99:09:6f:a1:08:be:d6:ef:ae:
9d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:92:43:86:30:17:21:F4:A7:ED:8A:BB:6A:57:80:93:01:45:33:DE
X509v3 Authority Key Identifier:
keyid:88:77:DA:3D:48:30:27:A0:1E:DD:CD:0E:43:5E:82:85:F1:B1:BB:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:e6:11:6e:b0:4f:4c:fd:7e:d5:83:26:e1:4c:eb:33:69:13:
4c:f0:f3:e9:8d:28:cd:77:79:d3:bc:91:30:02:d5:3b:02:3a:
2e:68:d6:03:7c:23:73:41:13:fa:9d:c1:44:95:88:eb:a4:5b:
12:c3:fa:20:99:df:af:e9:3d:37:90:fc:7d:92:27:8d:f2:e0:
35:8d:51:80:39:81:bb:0e:4f:b5:9e:1f:4a:00:8d:a9:37:07:
3e:80:75:d1:29:e2:37:37:35:54:a0:de:e1:25:66:07:4c:e5:
4b:60:ef:38:06:cd:d6:1d:45:30:ea:84:db:5d:6a:4d:80:a6:
1d:0c:12:34:6a:ea:73:46:55:ae:e6:82:95:7f:66:8d:ae:e2:
0f:fd:5b:fb:15:8f:86:d9:1e:8c:48:6f:47:ee:58:4e:35:50:
7a:17:96:a6:57:2a:a8:22:dc:30:00:9d:8f:c8:a1:00:d1:8c:
c5:ee:a3:61:4f:2d:e3:e0:92:56:4e:5f:19:ee:28:05:69:d9:
8a:8e:0b:99:e2:71:ab:af:25:1d:5a:ee:be:41:de:43:0b:90:
aa:37:25:62:d0:02:5e:31:d9:d9:63:8a:b8:16:6d:09:66:43:
fa:7b:cf:df:a9:e5:ba:37:d2:bf:0e:ad:a3:ee:69:1f:07:03:
de:dc:ea:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:02:46 2026 by rpki-client