Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/ij8nyT77e7wLCv6OzCT3A50nUQg.mft
File: ij8nyT77e7wLCv6OzCT3A50nUQg.mft (raw, json)
Hash identifier: rpsP1fbrULjI/IRd8Xp6g1IHSRqoeetTaW8ojtFj7to=
Subject key identifier: 9D:C8:E8:F6:12:CD:DD:9F:1E:5A:9F:DF:8D:F0:4C:A3:FA:98:FC:66
Authority key identifier: 8A:3F:27:C9:3E:FB:7B:BC:0B:0A:FE:8E:CC:24:F7:03:9D:27:51:08
Certificate issuer: /CN=8a3f27c93efb7bbc0b0afe8ecc24f7039d275108
Certificate serial: 019F92B6195412B6A14D2F86F74DEB2C3FAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ij8nyT77e7wLCv6OzCT3A50nUQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/ij8nyT77e7wLCv6OzCT3A50nUQg.mft
Manifest number: 07BD
Signing time: Fri 24 Jul 2026 06:00:35 +0000
Manifest this update: Fri 24 Jul 2026 06:00:35 +0000
Manifest next update: Sat 25 Jul 2026 06:00:35 +0000
Files and hashes: 1: QdViC720LUGk8rbETFc7icn6Tx4.roa (hash: wxpHqs3D6Qy6qVLUeFjXp0nQiZFcnT7PBeNSBBjzhuM=)
2: ij8nyT77e7wLCv6OzCT3A50nUQg.crl (hash: TrbrX+5a7KZXJi4mtBMzIJy36tePUN5eePPuzUiX82c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/ij8nyT77e7wLCv6OzCT3A50nUQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/ij8nyT77e7wLCv6OzCT3A50nUQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ij8nyT77e7wLCv6OzCT3A50nUQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:19:54:12:b6:a1:4d:2f:86:f7:4d:eb:2c:3f:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a3f27c93efb7bbc0b0afe8ecc24f7039d275108
Validity
Not Before: Jul 24 06:00:35 2026 GMT
Not After : Jul 25 06:00:35 2026 GMT
Subject: CN=9dc8e8f612cddd9f1e5a9fdf8df04ca3fa98fc66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:70:67:e4:b2:e9:a0:1e:dc:52:80:74:24:45:
70:45:51:55:3f:a8:b9:e4:9f:a1:38:39:78:98:fe:
75:66:c2:f7:88:78:d0:7b:aa:49:15:de:e6:9f:e6:
eb:02:ef:8b:4c:40:91:4d:a2:6d:85:80:28:65:72:
01:40:6f:aa:ab:c6:c0:54:81:f8:89:26:4d:a2:28:
df:2f:9a:e9:9d:4c:1b:e4:4e:35:3c:60:e1:a0:dc:
90:95:d4:56:b0:f2:14:19:f1:b3:b8:db:a6:f1:79:
18:39:c2:48:93:6c:e3:b4:4b:63:f5:f7:3c:07:d9:
34:85:56:f9:2f:9d:ea:71:51:ad:d7:b4:8a:aa:dc:
af:47:c9:25:9f:80:98:1a:84:6f:28:fe:a3:bd:18:
5d:cd:44:2e:05:e5:1a:7f:e4:87:c2:0b:23:9e:62:
94:39:85:f3:2d:24:f1:f2:8c:f4:fe:43:3b:37:d3:
5e:c0:a2:10:b8:07:28:e5:c0:a9:71:e8:41:87:10:
60:a7:5a:d1:18:1f:06:a2:61:16:2d:64:7d:2d:32:
db:e0:99:57:a4:78:35:10:d8:19:a4:e2:b5:99:44:
42:e6:45:2b:c9:1b:87:fd:8f:e4:05:09:4a:e8:70:
57:85:9c:b7:99:83:4b:e3:9e:c5:94:92:fe:34:79:
49:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:C8:E8:F6:12:CD:DD:9F:1E:5A:9F:DF:8D:F0:4C:A3:FA:98:FC:66
X509v3 Authority Key Identifier:
keyid:8A:3F:27:C9:3E:FB:7B:BC:0B:0A:FE:8E:CC:24:F7:03:9D:27:51:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ij8nyT77e7wLCv6OzCT3A50nUQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/ij8nyT77e7wLCv6OzCT3A50nUQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/ij8nyT77e7wLCv6OzCT3A50nUQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:48:67:15:6b:e3:0d:e4:fa:7a:6f:77:9b:a4:a2:47:66:b4:
e0:ce:09:ba:b7:db:4d:91:d4:83:8c:97:5b:cf:18:c2:2f:59:
46:0d:15:94:31:33:f1:33:06:2f:81:7f:dc:ac:4e:cc:22:4b:
40:67:19:ae:a4:90:bc:89:5a:a9:ba:16:85:b8:d3:b7:9a:cd:
1e:c9:43:30:84:a3:63:21:a9:47:1d:e5:3f:18:8e:0e:a8:89:
9d:8b:ae:d5:c6:76:3e:43:60:e8:8e:3f:e4:3d:5d:3e:4b:94:
e9:48:46:7a:95:03:1a:fa:f4:99:5f:93:f8:66:3d:85:1a:aa:
e5:74:a0:d4:e5:e3:8c:19:2b:bd:02:d2:af:35:3f:cb:47:49:
92:02:b3:aa:d4:9e:1a:33:9f:ef:99:29:63:42:2c:e5:b1:59:
30:da:57:ff:8b:a5:2b:52:91:2a:d8:a4:98:c2:08:7f:15:4e:
89:36:18:dd:e1:f5:51:79:1b:2f:26:bf:49:d0:a1:66:33:2e:
89:d7:ed:1a:d6:be:6a:f2:cf:79:42:0f:4c:e3:79:23:cd:61:
50:65:f7:49:98:d6:94:9f:94:2d:e7:8c:ca:9a:5b:74:2c:f2:
b7:d6:78:de:fb:ba:62:c2:bc:56:a2:ba:3c:bb:bc:f4:30:0d:
f2:a6:f5:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:22:17 2026 by rpki-client