Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/e5b14b-9d5b-4346-8e85-63729fe588a2/1/iQCNpBkicovFvtu9cIhwHFKbme0.mft
File: iQCNpBkicovFvtu9cIhwHFKbme0.mft (raw, json)
Hash identifier: WvZK6+FMs1cpfJuO4n1XvEmIQTWwim69rhAlUQItOgA=
Subject key identifier: 1D:62:7E:82:67:17:46:3F:CA:15:A8:B6:4D:04:D9:37:5A:44:73:62
Authority key identifier: 89:00:8D:A4:19:22:72:8B:C5:BE:DB:BD:70:88:70:1C:52:9B:99:ED
Certificate issuer: /CN=89008da41922728bc5bedbbd7088701c529b99ed
Certificate serial: 019F9391F1FC7CAF42850F6345F99848746E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQCNpBkicovFvtu9cIhwHFKbme0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/e5b14b-9d5b-4346-8e85-63729fe588a2/1/iQCNpBkicovFvtu9cIhwHFKbme0.mft
Manifest number: 056F
Signing time: Fri 24 Jul 2026 10:00:43 +0000
Manifest this update: Fri 24 Jul 2026 10:00:43 +0000
Manifest next update: Sat 25 Jul 2026 10:00:43 +0000
Files and hashes: 1: CJHjJvBxO_A1o29RU77bYDobb1Y.asa (hash: OiQ96AcIrfdWv9rYq7YRunMZUUkm1k1hxiflexmUSCE=)
2: ZsGtqMxH4nL8S3-yctBXEQDc62g.roa (hash: +ZsU9QUE73+Gn9nFEGhVwL2RW/GlaE2Pf3U5DjyGOtE=)
3: iQCNpBkicovFvtu9cIhwHFKbme0.crl (hash: v5mns6fAe7shAfY3/5WcFUjRuXjLwKQ73yc+a5YUNyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/e5b14b-9d5b-4346-8e85-63729fe588a2/1/iQCNpBkicovFvtu9cIhwHFKbme0.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/e5b14b-9d5b-4346-8e85-63729fe588a2/1/iQCNpBkicovFvtu9cIhwHFKbme0.mft
rsync://rpki.ripe.net/repository/DEFAULT/iQCNpBkicovFvtu9cIhwHFKbme0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:91:f1:fc:7c:af:42:85:0f:63:45:f9:98:48:74:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89008da41922728bc5bedbbd7088701c529b99ed
Validity
Not Before: Jul 24 10:00:43 2026 GMT
Not After : Jul 25 10:00:43 2026 GMT
Subject: CN=1d627e826717463fca15a8b64d04d9375a447362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d2:43:7c:9f:42:f4:e7:e7:b0:89:84:0a:43:
d0:7d:7c:91:1b:0e:7c:74:c3:3b:20:82:d2:68:52:
11:23:85:2c:e1:40:bf:15:83:71:45:63:31:da:56:
ba:72:11:85:83:cf:30:7f:73:64:39:d5:74:c2:67:
60:3f:30:6b:07:15:bd:78:90:63:d8:68:b1:fd:f2:
72:8b:84:df:5e:7f:8f:61:09:a8:29:29:1e:61:7c:
f7:b8:5e:e7:7a:dc:91:be:0b:30:a3:92:a6:25:b5:
92:ec:4d:17:35:82:e5:6a:6d:82:6e:75:83:2c:6c:
b0:8f:f1:33:05:b3:f5:ea:81:b2:f5:ed:08:8a:7b:
5f:77:71:aa:3b:cc:4c:b0:dd:32:46:33:02:3a:7f:
16:24:b3:db:de:40:2d:da:6a:2d:98:1c:75:ca:fa:
02:b8:b1:5f:0e:ab:35:2c:63:d7:53:97:93:f3:aa:
b7:9a:0f:e9:97:d9:58:82:c5:98:1b:4a:56:d3:ce:
2f:98:6d:c7:73:e8:6d:f8:e5:85:94:5b:4c:ac:ea:
6f:1f:7d:ca:e8:65:b5:8c:8d:91:99:dd:75:6b:f3:
38:88:82:d1:50:f8:88:b8:94:86:f2:60:2f:fe:6a:
82:56:85:0a:e4:be:e4:b0:be:31:99:7a:83:c9:d6:
b1:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:62:7E:82:67:17:46:3F:CA:15:A8:B6:4D:04:D9:37:5A:44:73:62
X509v3 Authority Key Identifier:
keyid:89:00:8D:A4:19:22:72:8B:C5:BE:DB:BD:70:88:70:1C:52:9B:99:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQCNpBkicovFvtu9cIhwHFKbme0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/e5b14b-9d5b-4346-8e85-63729fe588a2/1/iQCNpBkicovFvtu9cIhwHFKbme0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/e5b14b-9d5b-4346-8e85-63729fe588a2/1/iQCNpBkicovFvtu9cIhwHFKbme0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:38:49:2a:08:4f:54:43:5a:04:0c:06:ca:b5:5f:92:6f:da:
42:3e:d3:ed:9f:4b:56:2d:f0:fd:46:01:99:fe:2f:44:4f:dc:
55:4a:0b:40:bd:7c:2c:bd:d5:5e:58:57:73:5c:d7:5e:2d:68:
65:2c:54:aa:23:27:bd:f0:33:09:58:e6:77:25:56:63:cb:81:
24:f7:de:f2:5b:a5:9d:b9:96:fd:b4:9a:c3:c3:3a:95:de:92:
fc:e7:04:e2:d6:43:f1:c4:12:9a:50:13:b8:b1:75:a9:6d:ad:
b4:ac:b1:03:0c:ce:0d:ca:f0:e3:76:b5:42:55:ed:51:7c:c0:
61:d3:66:e3:ca:8f:d8:6c:a9:b9:c6:1e:b5:cb:eb:56:d1:60:
be:a8:66:20:b8:8e:1a:cc:cf:4a:c4:71:b8:72:a6:61:bf:eb:
6a:cc:07:fb:e2:c6:39:a2:39:c2:48:17:90:b2:0b:5e:2e:1b:
df:53:a6:05:53:18:8f:71:9a:df:0b:00:63:30:2c:e9:62:f0:
bd:58:03:25:91:93:94:f9:1d:d0:f9:a8:de:b5:34:03:a8:16:
92:74:63:7c:85:18:aa:5a:7f:8f:d0:93:6a:c8:93:6c:e7:ad:
f1:3d:ee:4b:19:2b:b2:7e:dd:25:3d:b5:0c:33:73:89:44:5b:
cc:3b:04:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:38:36 2026 by rpki-client