Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.mft
File: I_XCWFOCCEeS8TrRlyBe_dJ1LfI.mft (raw, json)
Hash identifier: nD8elV/KInHsfqatToyS1Zgk0nuSd2igCK3WoNCFP+Y=
Subject key identifier: 11:FF:8B:FB:94:78:D2:F3:65:45:DC:CE:38:11:17:B6:0D:61:B9:62
Authority key identifier: 23:F5:C2:58:53:82:08:47:92:F1:3A:D1:97:20:5E:FD:D2:75:2D:F2
Certificate issuer: /CN=23f5c2585382084792f13ad197205efdd2752df2
Certificate serial: 019F92B65E6860C407520F60E61F6FDED8FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.mft
Manifest number: 0375
Signing time: Fri 24 Jul 2026 06:00:52 +0000
Manifest this update: Fri 24 Jul 2026 06:00:52 +0000
Manifest next update: Sat 25 Jul 2026 06:00:52 +0000
Files and hashes: 1: I_XCWFOCCEeS8TrRlyBe_dJ1LfI.crl (hash: EMotr/usS6TXc7R6cZP6iy6r/dWXMe2i9p1jVHiHEHo=)
2: ayEAcT6oCdclXkVG2FkLRzZ9mOw.roa (hash: 7P+K2VYLnbm0w74/RJLkFBdqeqXQaGd7I3w+dIasZpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:5e:68:60:c4:07:52:0f:60:e6:1f:6f:de:d8:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23f5c2585382084792f13ad197205efdd2752df2
Validity
Not Before: Jul 24 06:00:52 2026 GMT
Not After : Jul 25 06:00:52 2026 GMT
Subject: CN=11ff8bfb9478d2f36545dcce381117b60d61b962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a5:bc:8c:39:f7:ca:96:c7:c3:ec:2c:4c:18:
d1:81:a7:4e:05:9e:48:da:4c:0a:55:88:db:d4:ee:
e5:a7:8b:8b:32:c8:a7:94:d1:48:a1:8b:df:74:ca:
46:fe:ce:69:0e:35:70:55:54:61:8c:5d:67:99:88:
19:5d:84:16:6a:21:d8:69:e5:d7:b9:30:ab:d7:19:
bd:78:bb:48:14:a7:fd:24:15:5b:51:ed:b0:22:87:
c1:3f:c8:7b:37:22:ae:11:ed:91:a6:4e:38:02:45:
87:f8:31:c3:1a:10:07:87:03:eb:04:b3:1c:72:32:
3d:6d:4a:05:be:ec:85:a8:2c:e3:2e:6d:24:f9:ab:
6c:89:97:8d:a5:ab:1d:60:4e:ae:be:c9:e7:65:67:
69:b3:be:17:4a:ef:6a:76:59:97:dc:d2:f8:dc:d2:
ac:c4:3b:d4:0f:7f:a2:d4:a6:3a:43:43:31:c7:47:
4d:12:a1:ee:4e:ab:bf:db:2e:79:ab:1e:9b:6d:81:
6e:48:16:45:05:95:f4:64:e2:b0:47:bb:80:e1:46:
2d:0d:cf:e4:2b:11:4f:a4:06:37:a6:18:ac:8c:27:
35:8c:c8:df:e2:bf:1e:c6:de:88:86:49:a6:ee:1a:
0d:22:48:d3:52:85:68:56:d0:b9:96:0e:26:b4:fa:
a0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:FF:8B:FB:94:78:D2:F3:65:45:DC:CE:38:11:17:B6:0D:61:B9:62
X509v3 Authority Key Identifier:
keyid:23:F5:C2:58:53:82:08:47:92:F1:3A:D1:97:20:5E:FD:D2:75:2D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:59:07:4d:40:c9:86:90:fa:63:a2:73:1b:e9:9c:f6:ac:10:
34:76:8a:19:c9:08:03:04:3d:1a:ea:0f:60:b0:3b:ab:6e:a5:
75:0b:35:86:b8:37:7f:77:08:85:73:b5:54:f0:96:1a:5b:00:
d4:cd:8d:6e:54:3f:b4:bc:39:ef:67:d5:e0:bf:6d:94:bd:b8:
25:c8:88:7c:7c:63:21:27:6a:24:e0:73:3d:a5:e8:b3:cf:56:
53:b0:f0:ac:9d:dd:cc:09:24:66:a6:00:cd:52:95:95:2d:ab:
de:b1:05:10:96:b3:08:b3:8a:b9:dd:49:9a:d5:c7:6f:24:b9:
c4:d5:2a:ac:d3:71:90:dd:af:5e:7b:80:4d:90:ff:c9:27:25:
a8:8d:42:7c:b3:01:1d:a9:77:bb:0f:41:a7:96:b7:72:4c:32:
45:a6:bf:37:da:ea:bc:e6:a2:da:03:66:02:cc:3a:93:ce:b1:
d1:40:e9:ff:d1:b4:72:c3:e6:d5:f2:99:f5:b1:39:38:5d:b2:
c6:40:90:df:03:d1:f2:bc:ac:77:83:6e:ad:0c:e3:9c:cc:0e:
cc:cb:fb:6d:40:17:5f:2e:a1:18:19:01:b6:42:27:69:0e:e8:
6c:27:90:e0:ba:97:74:c3:5f:e6:2b:db:48:68:9f:39:1a:45:
7a:34:71:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:18:01 2026 by rpki-client