Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft
File: IjbtX1Yj7et5EKzTHV9u6B5csX4.mft (raw, json)
Hash identifier: MVJQ9aNYodCVgZoa57WHzD2rRYHd1eTyJ9tOJqFzGDY=
Subject key identifier: 51:BB:03:A9:1B:B1:92:8A:24:46:D9:28:C2:A5:AD:1C:B2:58:BF:34
Authority key identifier: 22:36:ED:5F:56:23:ED:EB:79:10:AC:D3:1D:5F:6E:E8:1E:5C:B1:7E
Certificate issuer: /CN=2236ed5f5623edeb7910acd31d5f6ee81e5cb17e
Certificate serial: 019F94A521C53D3C50DB7D82B41FB0FC130B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IjbtX1Yj7et5EKzTHV9u6B5csX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft
Manifest number: 11AF
Signing time: Fri 24 Jul 2026 15:01:17 +0000
Manifest this update: Fri 24 Jul 2026 15:01:17 +0000
Manifest next update: Sat 25 Jul 2026 15:01:17 +0000
Files and hashes: 1: CPndinjPYr6tuDu76KQaJ-aGMwI.roa (hash: nrsdPAkRRrAV3pIEBSnHKX1eqjnFVOeohTv704UK0JA=)
2: IjbtX1Yj7et5EKzTHV9u6B5csX4.crl (hash: dhe8Ja8saJeIjCOkiMHizy2k2etRqIwG6YJnqIjnG4E=)
3: b9-WVQZEPxKTQu4HO3vpyGGIgyM.roa (hash: zJruMssE6fAWn+HUVB4+RJJ7aVS5WNO5nmK7xyX8S+g=)
4: dmE1mURwbo1v9xYDFiuIvh4HZz4.roa (hash: E0j3Vog7/eKV4rz8QxbpUA9nxxFmMsDogYNNNnTdFVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IjbtX1Yj7et5EKzTHV9u6B5csX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 15:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:a5:21:c5:3d:3c:50:db:7d:82:b4:1f:b0:fc:13:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2236ed5f5623edeb7910acd31d5f6ee81e5cb17e
Validity
Not Before: Jul 24 15:01:17 2026 GMT
Not After : Jul 25 15:01:17 2026 GMT
Subject: CN=51bb03a91bb1928a2446d928c2a5ad1cb258bf34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:03:22:70:30:74:1c:c8:9b:24:b6:db:24:87:
fb:60:72:3d:3f:6b:3e:80:d5:96:d5:ec:e5:67:61:
29:68:ea:79:c3:f3:97:09:5f:39:d2:65:51:8e:59:
fe:dd:e1:f8:02:21:18:6b:f7:28:ea:27:f3:19:29:
c6:3c:58:eb:60:86:3e:99:41:9e:d9:b1:3c:7c:4f:
a0:c5:b4:08:a1:9f:7b:34:5b:b5:b5:16:5f:42:8c:
44:7d:60:98:f0:e4:50:17:d8:d3:5d:d8:dd:b1:65:
c4:7c:e7:49:1c:0d:6f:97:6f:f7:08:26:f4:5a:1c:
2e:a0:67:1e:19:ee:73:31:ef:b2:16:37:92:fe:31:
8c:11:63:08:c7:4a:5a:00:69:0c:e9:77:97:5c:87:
4b:5f:64:f8:7e:7f:34:89:5c:e6:6e:6f:d6:bd:43:
04:4d:9a:f2:76:66:2c:7d:9d:a4:ab:2c:33:46:b3:
62:e9:c3:ac:0b:39:65:af:d9:f6:42:10:84:29:c0:
39:c4:56:6c:4f:21:22:ed:12:26:f4:26:cd:41:49:
a4:d6:b1:ee:87:a4:36:8c:47:1e:a5:51:ef:99:8c:
fb:7f:84:84:34:a6:88:16:b8:1d:a9:a2:d8:74:26:
27:0c:86:fb:96:56:31:bd:46:9c:f6:f6:3f:f1:df:
d3:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:BB:03:A9:1B:B1:92:8A:24:46:D9:28:C2:A5:AD:1C:B2:58:BF:34
X509v3 Authority Key Identifier:
keyid:22:36:ED:5F:56:23:ED:EB:79:10:AC:D3:1D:5F:6E:E8:1E:5C:B1:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IjbtX1Yj7et5EKzTHV9u6B5csX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:72:f1:9d:f6:ff:b8:16:5d:6b:58:93:a9:cd:14:33:68:e4:
36:ec:1f:23:c3:c6:21:40:03:0b:f0:f4:8b:eb:16:21:b2:62:
65:40:fe:be:11:f0:9d:8d:27:a4:49:14:4f:e5:a8:06:2f:40:
d4:0f:ae:6b:42:20:81:cc:fa:c1:64:26:67:ae:b1:c6:db:2c:
ab:a4:16:92:4b:0e:87:60:24:51:2e:da:18:fc:0f:a2:92:1b:
4f:72:08:5c:92:75:3a:e6:84:c7:68:59:48:95:8c:cc:96:a2:
36:5f:3e:85:76:35:83:fd:76:f8:b4:df:11:55:26:da:e9:d0:
d0:9e:29:e4:01:3a:ad:64:98:be:10:5d:42:ed:b6:a6:6a:b1:
6d:86:a7:6f:bc:3e:c7:8d:ba:df:da:d2:7e:ce:3e:15:83:4f:
1f:87:2d:1b:0b:b7:a9:d1:a7:7f:18:f8:83:51:34:54:ea:45:
44:31:fb:a3:bb:9f:6a:5a:aa:56:b4:4c:2f:ee:63:88:c0:5c:
be:8a:16:82:b2:17:c8:3b:bb:00:7b:45:07:b8:4e:78:1c:aa:
9c:b9:12:e0:21:75:26:25:0e:23:3e:65:bc:d8:37:83:65:72:
bd:ab:89:92:a5:66:1e:6b:34:44:68:59:7e:68:91:65:b0:47:
52:d4:b4:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:10:44 2026 by rpki-client