Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft
File: iNEpp8ePtm0Hc7yZAINX5QfB574.mft (raw, json)
Hash identifier: FJHmkDspftssJc+R40NdcK62DDXup/4VZbSj1B6Fcr8=
Subject key identifier: 1A:7C:54:69:9E:81:7B:4E:F5:A5:3C:62:2C:47:83:19:52:C3:BA:CD
Authority key identifier: 88:D1:29:A7:C7:8F:B6:6D:07:73:BC:99:00:83:57:E5:07:C1:E7:BE
Certificate issuer: /CN=88d129a7c78fb66d0773bc99008357e507c1e7be
Certificate serial: 019F935BCDDA964232D6D61B9114A9050296
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iNEpp8ePtm0Hc7yZAINX5QfB574.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft
Manifest number: 0AF9
Signing time: Fri 24 Jul 2026 09:01:34 +0000
Manifest this update: Fri 24 Jul 2026 09:01:34 +0000
Manifest next update: Sat 25 Jul 2026 09:01:34 +0000
Files and hashes: 1: WJ4tfO6kiSMSkG1grDmRdHg6U_4.roa (hash: Eb3yXv0Sg6PPztcKbZR4VGFXGGjS4jiVBjwDazfbRcs=)
2: iNEpp8ePtm0Hc7yZAINX5QfB574.crl (hash: vXkjtUPrh57dI1LGOOJ4GUF4+hOzMWVopPjmK+wO9sk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft
rsync://rpki.ripe.net/repository/DEFAULT/iNEpp8ePtm0Hc7yZAINX5QfB574.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:cd:da:96:42:32:d6:d6:1b:91:14:a9:05:02:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88d129a7c78fb66d0773bc99008357e507c1e7be
Validity
Not Before: Jul 24 09:01:34 2026 GMT
Not After : Jul 25 09:01:34 2026 GMT
Subject: CN=1a7c54699e817b4ef5a53c622c47831952c3bacd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:be:88:5a:ed:ae:36:aa:84:1f:01:84:1d:cc:
56:e6:e6:b8:fd:67:95:18:40:a2:ea:22:b1:e3:f2:
02:f7:87:7a:80:0c:79:c9:4c:85:d0:b6:18:56:9b:
16:99:20:01:12:1a:f3:7d:1f:f3:a2:5f:43:2a:29:
bd:53:29:73:20:de:9e:0f:a2:86:88:a7:16:80:da:
0e:04:81:4d:57:4e:7f:98:11:2b:32:f6:56:68:21:
81:d6:49:95:17:ea:80:2c:6d:f4:40:a3:20:b2:73:
19:72:74:ed:a9:e0:45:78:f4:b5:c0:44:09:62:ca:
d0:1f:ad:37:0d:02:e5:bb:f5:c2:94:dc:44:04:dd:
82:98:b8:e3:42:b0:3e:d4:57:6b:8f:61:63:9d:35:
c5:6a:d0:15:33:b3:fd:42:d6:bb:de:dc:e6:bd:83:
28:07:cd:04:26:68:55:c4:1b:26:23:33:ac:63:d7:
a4:93:5b:26:39:db:1b:03:ae:7d:7e:d8:5d:22:eb:
ee:92:2e:4a:6e:d3:c0:48:fc:5a:c1:a6:2f:0d:4d:
a0:63:51:af:ac:fe:9d:93:e4:67:1e:1b:26:0e:8f:
d9:54:55:7f:ed:34:fa:77:a3:f6:4a:0f:ad:cf:17:
e9:20:48:63:6f:2d:42:8e:6a:50:ac:0a:10:4e:19:
58:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:7C:54:69:9E:81:7B:4E:F5:A5:3C:62:2C:47:83:19:52:C3:BA:CD
X509v3 Authority Key Identifier:
keyid:88:D1:29:A7:C7:8F:B6:6D:07:73:BC:99:00:83:57:E5:07:C1:E7:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iNEpp8ePtm0Hc7yZAINX5QfB574.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:e9:2f:39:fa:dd:95:4f:88:36:6d:b0:88:57:a1:e0:98:a3:
ae:a4:1c:0d:1c:8a:57:bb:a8:de:20:73:83:fd:4c:ad:7b:6d:
97:37:7e:fb:5f:28:d2:39:93:8d:f4:88:23:c1:d5:47:13:eb:
4d:ae:67:8d:b2:32:73:28:94:d0:2f:a6:3b:1e:fa:39:e7:b3:
95:c8:db:f9:81:dd:3b:86:36:f2:ea:5c:a6:59:bd:f6:ca:8d:
b2:a3:14:0b:ff:99:18:99:34:a5:27:0d:56:19:85:7c:54:9a:
d5:9b:30:00:21:48:46:d2:60:6c:ff:99:c5:f0:50:72:2d:53:
58:4c:09:a3:12:de:bd:b0:89:9f:98:6d:2f:69:2f:ae:17:a7:
90:74:74:16:aa:28:7b:1c:92:1d:c2:14:dc:6b:3b:94:45:18:
47:68:3e:74:28:ed:81:d4:2e:f1:7c:02:84:06:09:dd:66:cd:
e3:6b:74:eb:b2:98:ad:83:b2:c0:b4:43:71:78:91:ab:c1:f5:
ec:85:5e:a9:3a:0d:b1:21:03:9a:3b:6c:3a:37:99:2d:bc:80:
4f:b8:37:05:20:19:4c:52:23:cd:49:df:af:a2:8c:af:88:b0:
0e:41:8f:6a:6a:38:ce:22:0d:c3:d0:00:50:86:6f:f0:cd:a8:
df:73:bf:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:36:03 2026 by rpki-client