Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/4f8444-2c3d-4592-9458-801d89d7366d/1/x02iHagDioIFQrOvr76qqmZreyc.mft
File: x02iHagDioIFQrOvr76qqmZreyc.mft (raw, json)
Hash identifier: 74Yw498ctER8caU747i2DXKiQzspSn8KXogg6PI3HX8=
Subject key identifier: 77:EA:74:3B:6C:8A:8E:3C:0D:24:FB:37:F3:6E:A6:9B:2F:48:41:AF
Authority key identifier: C7:4D:A2:1D:A8:03:8A:82:05:42:B3:AF:AF:BE:AA:AA:66:6B:7B:27
Certificate issuer: /CN=c74da21da8038a820542b3afafbeaaaa666b7b27
Certificate serial: 019F95B6F1D64B0600CB1074D31AD73D5BC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x02iHagDioIFQrOvr76qqmZreyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/4f8444-2c3d-4592-9458-801d89d7366d/1/x02iHagDioIFQrOvr76qqmZreyc.mft
Manifest number: 195D
Signing time: Fri 24 Jul 2026 20:00:22 +0000
Manifest this update: Fri 24 Jul 2026 20:00:22 +0000
Manifest next update: Sat 25 Jul 2026 20:00:22 +0000
Files and hashes: 1: Qd96EibuUMUl47bpcNIQg2lzdXM.roa (hash: bfpu3e5a3SbtwnPEBP2TMhw1nW2Ik4salWdsyYywAxI=)
2: x02iHagDioIFQrOvr76qqmZreyc.crl (hash: 2LBZZKT/5j4ZJIrzat8a0fxIgJmS22q5g3wBv5quZQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/4f8444-2c3d-4592-9458-801d89d7366d/1/x02iHagDioIFQrOvr76qqmZreyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/4f8444-2c3d-4592-9458-801d89d7366d/1/x02iHagDioIFQrOvr76qqmZreyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/x02iHagDioIFQrOvr76qqmZreyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:b6:f1:d6:4b:06:00:cb:10:74:d3:1a:d7:3d:5b:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c74da21da8038a820542b3afafbeaaaa666b7b27
Validity
Not Before: Jul 24 20:00:22 2026 GMT
Not After : Jul 25 20:00:22 2026 GMT
Subject: CN=77ea743b6c8a8e3c0d24fb37f36ea69b2f4841af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e9:af:8d:04:2d:16:4f:8b:dc:c6:08:ff:01:
1b:0f:4d:67:3a:59:10:91:f2:32:0c:b2:0a:8f:88:
52:8a:e4:e6:e0:04:75:26:ac:5c:4a:2a:8c:49:da:
f7:a7:56:97:04:f5:e2:4f:a1:bd:01:00:69:f8:8f:
22:00:ae:c5:72:67:de:a3:ae:8f:96:04:0a:71:1e:
a6:50:9e:26:de:96:76:e5:81:f2:41:d9:cd:da:ab:
c2:97:85:4e:28:86:ea:89:68:0d:4c:8e:73:d2:d9:
05:3e:2e:d6:a1:f6:51:2a:44:c6:8e:18:9b:c9:5e:
27:2e:b3:b9:2b:a4:bc:eb:47:b0:59:68:2a:1c:94:
93:0e:bf:91:38:1e:94:c1:35:1f:bb:96:6d:e8:31:
10:4b:3d:ef:a1:13:3a:63:79:ee:e2:d8:d1:90:e9:
34:48:30:95:d3:45:48:90:28:af:0b:91:c6:db:3d:
ed:36:9c:e4:27:a9:b4:bf:73:b8:28:67:64:e4:37:
58:42:0c:a7:03:31:98:47:79:5b:d3:1b:8a:78:0f:
2d:9f:c2:32:6e:f2:b8:ff:86:8e:b5:b6:c5:6f:2d:
b0:b4:97:44:0a:f1:fd:0b:fd:34:36:55:22:da:50:
45:25:0e:c1:1f:91:b7:69:ee:d5:22:b7:d2:77:e9:
11:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:EA:74:3B:6C:8A:8E:3C:0D:24:FB:37:F3:6E:A6:9B:2F:48:41:AF
X509v3 Authority Key Identifier:
keyid:C7:4D:A2:1D:A8:03:8A:82:05:42:B3:AF:AF:BE:AA:AA:66:6B:7B:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x02iHagDioIFQrOvr76qqmZreyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/4f8444-2c3d-4592-9458-801d89d7366d/1/x02iHagDioIFQrOvr76qqmZreyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/4f8444-2c3d-4592-9458-801d89d7366d/1/x02iHagDioIFQrOvr76qqmZreyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:cd:46:b3:d5:38:82:70:ec:6c:7c:f8:a3:a7:41:eb:17:ff:
55:86:07:62:4e:b2:33:f4:da:3a:10:f5:f8:ed:b0:f7:ac:49:
82:85:7c:7a:90:ae:40:41:a1:ba:65:24:5a:6b:5c:44:c3:c3:
18:c4:42:36:8f:21:99:86:73:d8:39:e0:5e:f0:65:04:90:76:
7f:74:6d:61:0e:19:5a:c9:58:05:dc:a7:5c:e3:4a:75:a6:c5:
e8:26:2b:fd:08:79:55:9a:78:8a:89:f3:08:30:1e:2c:fe:76:
40:47:f5:18:59:22:30:5e:b3:1e:dc:11:46:a5:30:02:e9:0b:
8a:c4:ee:1f:b2:76:83:86:89:13:09:41:77:f4:d7:be:8e:6a:
7d:73:f9:2f:7a:66:6b:2d:3f:d2:1b:5e:fd:39:65:25:fc:d3:
66:8c:c6:97:f1:7f:55:cb:50:c9:23:83:61:87:2b:53:25:5f:
34:64:aa:ea:58:52:f9:48:c2:6f:5d:93:f0:d6:ba:bb:85:49:
d6:18:65:ee:8c:bd:19:15:25:5e:52:4a:6c:d5:ba:65:64:c4:
3d:8a:d4:98:ba:9e:b4:5f:b6:2e:6a:c2:8a:01:9a:e1:ca:a6:
0e:e8:8f:c6:cc:0b:be:27:0b:f8:92:52:d1:4c:9f:67:aa:48:
91:e1:b3:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:13:04 2026 by rpki-client