Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft
File: IacXNhMJ0pOTUcnYuiFz24MZqI8.mft (raw, json)
Hash identifier: PfBCIPgLBNJrVRgn3ZHVBb6yErDaNDX0rz75HnTNqWc=
Subject key identifier: E7:7E:28:D3:AC:1F:15:E8:2A:2F:4F:2E:2D:9D:F1:C4:6E:9A:12:1C
Authority key identifier: 21:A7:17:36:13:09:D2:93:93:51:C9:D8:BA:21:73:DB:83:19:A8:8F
Certificate issuer: /CN=21a717361309d2939351c9d8ba2173db8319a88f
Certificate serial: 019F93245E2118686CDC10223CA616169A63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IacXNhMJ0pOTUcnYuiFz24MZqI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft
Manifest number: 11E4
Signing time: Fri 24 Jul 2026 08:01:01 +0000
Manifest this update: Fri 24 Jul 2026 08:01:01 +0000
Manifest next update: Sat 25 Jul 2026 08:01:01 +0000
Files and hashes: 1: 1-lmEP6bvSg72yf_GUeD4MSKNWhk.roa (hash: UZw/L6lxwycncfuJtQDWqM2GbKpxVlPtsRDnOtxZfq4=)
2: IacXNhMJ0pOTUcnYuiFz24MZqI8.crl (hash: m4pCoAjWBGs3NMSp3PdVW7X/HVIARNb4FX7gCxaThEU=)
3: uy5YZrZ342ZeZ2NGVVpULZDoPcE.roa (hash: ePYFBpMymgZ8ANPnNiychRqaQ6Srx/8bC1+U5miv+Ng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft
rsync://rpki.ripe.net/repository/DEFAULT/IacXNhMJ0pOTUcnYuiFz24MZqI8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:24:5e:21:18:68:6c:dc:10:22:3c:a6:16:16:9a:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21a717361309d2939351c9d8ba2173db8319a88f
Validity
Not Before: Jul 24 08:01:01 2026 GMT
Not After : Jul 25 08:01:01 2026 GMT
Subject: CN=e77e28d3ac1f15e82a2f4f2e2d9df1c46e9a121c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a8:68:17:65:ca:de:bf:cf:72:08:ec:26:d3:
b1:b7:0d:1e:d2:f2:53:d5:c4:0f:1c:52:54:7d:b1:
f3:40:4f:4b:29:da:ba:89:37:d3:29:8f:28:fe:ec:
09:1c:ea:9b:df:6c:8d:3e:67:f2:c7:66:70:9a:3d:
d1:6a:85:16:4a:a8:99:c2:75:d9:9c:b9:f9:3d:72:
c6:8d:81:e0:70:4d:94:c5:7f:a3:0a:72:f8:87:52:
9a:e6:a4:3b:57:54:82:ad:27:8d:9e:8e:f6:24:65:
65:7f:d9:05:b1:92:50:68:08:16:c2:53:dd:4b:05:
11:c8:0e:9c:96:de:28:20:06:46:56:5e:76:d2:e6:
ec:77:fe:dc:e6:12:4a:72:1f:c4:e3:c3:28:3b:da:
74:ac:1c:43:b7:4b:7f:22:bd:19:25:99:18:13:86:
bc:4b:8a:ff:71:01:cc:8a:67:26:ef:c0:0c:83:78:
71:45:6b:8a:00:81:32:e4:8c:44:d9:5d:48:09:05:
73:4a:40:08:0e:29:b7:54:3e:8e:33:d0:67:12:34:
4c:39:56:b4:1b:e2:dc:d8:58:1f:48:05:04:ec:ea:
b6:60:42:4b:85:92:c2:a6:c4:22:fc:4d:9b:a1:e3:
0a:e0:3c:1c:51:93:9e:b3:d7:9c:e2:f1:14:a0:92:
a9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:7E:28:D3:AC:1F:15:E8:2A:2F:4F:2E:2D:9D:F1:C4:6E:9A:12:1C
X509v3 Authority Key Identifier:
keyid:21:A7:17:36:13:09:D2:93:93:51:C9:D8:BA:21:73:DB:83:19:A8:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IacXNhMJ0pOTUcnYuiFz24MZqI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:0a:07:9b:ae:1e:a7:12:a5:8c:61:e1:55:9c:ba:af:80:9a:
f9:f4:f6:72:cc:aa:1d:f2:e1:5d:3a:47:fd:b9:81:8f:ac:e0:
29:79:b3:4c:a7:ca:63:cd:28:7f:e3:85:e5:83:11:7b:f2:65:
3b:18:8c:db:c2:df:02:b2:e4:09:cc:c1:9b:3d:06:81:aa:fc:
58:50:71:3a:3f:3d:66:55:8a:8b:b4:27:89:4c:0c:00:f4:f4:
bd:8f:1a:65:58:09:26:d4:74:9a:4f:47:2d:6b:5f:f7:02:27:
66:5e:e7:9b:bd:0e:0c:06:a1:32:f6:b0:60:ba:20:8f:e6:f9:
99:81:d8:8b:48:45:4f:76:9a:cf:50:e7:e8:b5:3a:66:74:54:
2c:74:d6:ef:38:af:26:5e:84:06:25:c0:4a:be:7b:aa:41:6e:
48:b5:1e:9b:33:2d:e3:26:d9:58:c9:51:e0:f5:cb:24:4a:fa:
9d:81:1c:2a:47:4a:03:df:28:1b:92:6f:db:6c:30:fd:47:37:
3d:e4:c8:dd:11:82:39:16:89:44:22:24:69:d5:f1:30:04:52:
74:d8:53:d7:5e:b7:5e:bb:40:c7:16:da:b1:5c:d6:44:ec:50:
12:a0:5e:97:98:6b:85:ee:ca:3a:bd:c8:43:67:63:c3:0c:c2:
be:fc:42:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:41:59 2026 by rpki-client