Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft
File: Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft (raw, json)
Hash identifier: CL8wJEOHGSRt4rPUq7bv7Dg55t+97NhwvfHblgYK1b0=
Subject key identifier: B1:41:C0:B8:E4:7A:90:CC:74:ED:80:41:29:09:72:F1:89:6D:98:1F
Authority key identifier: 21:DF:24:5E:AD:99:80:D2:B3:95:33:78:2F:65:D7:56:6D:04:62:D1
Certificate issuer: /CN=21df245ead9980d2b39533782f65d7566d0462d1
Certificate serial: 019F91DB07FF5350B8A26F048BE813E12EF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft
Manifest number: 1323
Signing time: Fri 24 Jul 2026 02:01:18 +0000
Manifest this update: Fri 24 Jul 2026 02:01:18 +0000
Manifest next update: Sat 25 Jul 2026 02:01:18 +0000
Files and hashes: 1: 39jtKCjlUN84oiSNf6WcfKXutcI.roa (hash: j3QkvAZ9jfUhKAEv42rUncts5G9mchS++JOlncvf+58=)
2: Id8kXq2ZgNKzlTN4L2XXVm0EYtE.crl (hash: ynX1L0a9KzHIcc2wgv69vM96uclbsQArvZdvg/V0VpU=)
3: jOTxkiOPdU5nGdnvSM-DcXfM4x0.roa (hash: DfKoS47qDsnRByR5J15LUCrTzvv6IfPekWLLNKdn6JI=)
4: kfIkh8JRl0CLg8N2X34fKzfAAIY.roa (hash: LNo3ChQs7isxQdfvX/1Vp1a9WnepBnzSUSjWncB8U/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:db:07:ff:53:50:b8:a2:6f:04:8b:e8:13:e1:2e:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21df245ead9980d2b39533782f65d7566d0462d1
Validity
Not Before: Jul 24 02:01:18 2026 GMT
Not After : Jul 25 02:01:18 2026 GMT
Subject: CN=b141c0b8e47a90cc74ed8041290972f1896d981f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:17:ff:c5:63:75:29:71:e7:05:71:b9:be:67:
9a:9f:72:43:d0:a5:99:95:9d:46:66:62:fe:9d:09:
e1:ad:ec:50:0e:00:8b:f9:17:22:a4:cb:df:08:ca:
6c:d7:b1:1e:32:10:78:b1:31:5c:30:73:76:40:6a:
9f:91:64:be:bb:e1:f3:70:bc:c0:9b:f7:fe:22:05:
f9:cc:b0:53:04:a5:69:9a:a8:6c:03:08:58:17:2c:
e2:ee:bc:b3:80:7d:90:0d:d2:69:9d:21:36:d7:7b:
66:64:1f:15:c6:73:ce:6d:68:22:66:5b:4a:d1:a6:
1e:03:d7:9c:f2:19:cb:1c:0c:11:ad:e2:f3:ef:5d:
54:76:80:8a:16:72:28:8e:38:4f:52:22:cc:f3:3e:
97:2c:46:b2:a1:db:b6:79:b2:72:79:b2:23:9b:4b:
ff:c0:d8:55:08:f8:95:4a:8c:1c:f7:64:62:f7:3c:
8a:18:88:6b:fe:f6:21:ef:83:7f:d4:32:d9:94:f1:
3e:95:42:6b:bb:e7:1c:2e:13:ca:3c:56:23:3a:ea:
ab:f5:c1:22:24:61:0e:34:1e:ce:eb:e3:ae:45:0e:
a1:e5:6d:70:e8:44:79:c6:28:06:4d:2b:e6:f8:54:
26:b9:2c:62:7d:cf:e9:71:ca:04:57:aa:03:72:b6:
ee:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:41:C0:B8:E4:7A:90:CC:74:ED:80:41:29:09:72:F1:89:6D:98:1F
X509v3 Authority Key Identifier:
keyid:21:DF:24:5E:AD:99:80:D2:B3:95:33:78:2F:65:D7:56:6D:04:62:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:22:92:fd:de:ac:be:b4:b7:4d:35:65:11:a9:59:56:d2:d2:
f6:98:c8:33:6d:81:ad:6d:cb:ab:fb:2c:06:9e:61:63:31:78:
d9:18:0c:a5:93:00:00:ce:d0:2e:3c:63:68:a4:98:9b:aa:b3:
e5:20:58:43:b8:f6:4c:83:17:90:a3:8c:4f:e3:c9:fb:52:ab:
72:92:cf:09:72:1b:73:e8:e8:af:73:10:f2:53:d2:a0:0d:4a:
16:88:be:fe:7e:ee:1c:43:61:44:18:1d:9d:83:74:fc:63:64:
4e:41:84:47:a8:da:3c:f2:db:20:22:7a:fa:0d:2d:59:cb:13:
a5:d3:48:c3:3e:8d:e4:e5:9f:29:1e:7d:49:c4:b2:76:3f:d2:
f8:c5:42:2d:bb:11:79:b8:24:c7:1b:d3:25:b0:c3:4f:28:56:
fa:ff:e3:d6:f6:2c:c6:9c:8f:06:7a:34:8f:4e:d1:50:f2:30:
b9:0b:44:88:03:7f:c2:96:43:04:e0:4c:7c:9a:53:85:53:81:
85:63:d7:95:9c:23:47:2b:e0:5a:9b:ab:bd:b1:18:0b:7e:c7:
03:15:5a:70:21:f3:cc:c7:68:3b:ca:52:04:3a:fb:87:4a:bc:
d9:d1:c9:db:26:28:86:a0:21:40:fb:41:4f:78:5d:c1:2b:7d:
13:23:b5:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:14:39 2026 by rpki-client