
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.mft
File: iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.mft (raw, json)
Hash identifier: 2u9SdkWGScT4diPjJVTbWJUj5qEhCeLZcaf4CTVg2u4=
Subject key identifier: 64:B5:FE:D1:99:8A:74:47:C1:4A:98:49:AB:8A:70:11:B7:EC:4A:5F
Authority key identifier: 89:93:9F:F1:29:3B:7E:22:77:9F:C5:5B:4C:83:F1:3E:52:E9:44:28
Certificate issuer: /CN=89939ff1293b7e22779fc55b4c83f13e52e94428
Certificate serial: 019F94A4BBEB9630003639FB31074D28ABAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.mft
Manifest number: 199F
Signing time: Fri 24 Jul 2026 15:00:51 +0000
Manifest this update: Fri 24 Jul 2026 15:00:51 +0000
Manifest next update: Sat 25 Jul 2026 15:00:51 +0000
Files and hashes: 1: bze-DpbDaFlTujNEYrBpzXK9-lM.roa (hash: ooe09J/1o8+6+gKFLqTffzTatPXG8lw2mIe4kZHRs+0=)
2: iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.crl (hash: L0Fnnz47Y4zd2XJ75KGMlGd+Nnmix1fKXFJ/Blf8CP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:a4:bb:eb:96:30:00:36:39:fb:31:07:4d:28:ab:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89939ff1293b7e22779fc55b4c83f13e52e94428
Validity
Not Before: Jul 24 15:00:51 2026 GMT
Not After : Jul 25 15:00:51 2026 GMT
Subject: CN=64b5fed1998a7447c14a9849ab8a7011b7ec4a5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ce:1c:d2:40:f6:33:96:45:84:38:c8:22:31:
90:05:a9:5d:75:18:0d:c8:83:00:10:a1:72:83:74:
30:5f:82:66:23:1d:a6:3d:13:a2:55:eb:36:7e:09:
1b:d8:d5:be:7d:99:b5:e0:1b:c4:ca:03:24:0f:0f:
64:a0:f4:53:3f:45:14:d2:49:b1:3e:b5:be:19:f1:
a7:c0:33:21:a9:58:eb:94:5c:0c:de:f0:99:4b:57:
65:b5:82:f0:46:f8:a0:b7:55:50:21:c9:73:af:b6:
bf:fd:71:03:f7:38:b6:d7:e3:ad:73:69:88:25:d2:
b2:4a:2f:be:f0:73:7a:ee:ef:38:7f:b8:46:00:e9:
aa:f0:c5:64:11:7e:c4:97:5e:95:05:f1:d4:ab:ba:
f2:62:1d:c9:50:f0:f4:13:76:25:39:b5:31:ba:38:
33:80:a2:17:13:d9:87:0e:95:46:13:99:b8:56:a2:
1b:0a:01:82:74:ec:8d:23:df:bc:fc:da:2b:91:13:
5c:5f:36:fd:bd:e5:ff:15:c8:b6:e2:97:65:bc:8e:
0f:5a:a3:84:66:35:ba:ec:17:9c:98:94:7b:f4:53:
e1:fc:d9:13:b8:94:3d:2d:6b:64:27:b1:7e:04:92:
0a:6c:00:fd:4b:7c:77:64:a0:2c:bb:37:1d:82:77:
74:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:B5:FE:D1:99:8A:74:47:C1:4A:98:49:AB:8A:70:11:B7:EC:4A:5F
X509v3 Authority Key Identifier:
keyid:89:93:9F:F1:29:3B:7E:22:77:9F:C5:5B:4C:83:F1:3E:52:E9:44:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:99:a8:8c:07:55:c1:35:b6:e7:e0:b0:fa:30:9d:a5:4f:7c:
f8:09:a8:d7:fb:8e:0c:f6:bf:c2:3d:96:7c:67:56:98:39:3d:
53:2a:66:7f:d5:18:05:5b:bc:c5:f1:9b:6a:0e:91:e7:0f:af:
29:0c:47:35:98:66:83:eb:1e:d2:18:90:00:96:b0:83:43:0d:
ec:f8:0b:74:86:98:70:bb:b0:86:89:09:c1:8a:46:43:51:45:
39:87:f5:f1:00:d8:04:b6:86:00:58:2c:10:ef:85:58:96:55:
7b:cb:94:9e:6d:2a:86:64:bd:53:f4:4a:0a:1c:f5:dd:09:94:
3a:70:82:29:f4:bf:19:f3:66:2b:14:ff:31:c3:9e:89:83:d3:
db:30:fd:03:f3:c5:59:27:55:21:36:62:cb:10:74:a1:67:c6:
e9:09:f1:44:88:2c:f2:4e:a2:4b:88:6c:40:6a:42:80:67:7d:
10:69:d1:dd:56:4b:97:d0:b7:17:cb:61:69:f1:57:26:21:ce:
18:db:bb:74:4e:cc:ce:27:aa:79:58:fb:91:66:a5:0b:98:3a:
17:78:56:fc:18:b2:d3:ab:75:c3:a2:0d:28:49:94:2e:9a:d2:
1d:61:0a:5f:a5:e9:73:40:3a:85:07:67:77:94:84:ec:c1:9a:
d7:b5:27:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:56:39 2026 by rpki-client