Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.mft
File: iBD8MZigq5lkeHfb5XJeBc7gE_A.mft (raw, json)
Hash identifier: DLY+3k7LUkTgzF27alMdhU2u4wTBWTZk4mgGWxM7Uoo=
Subject key identifier: E6:E0:84:84:57:FB:4A:93:97:25:E7:1E:5A:FC:5D:AB:67:57:39:6E
Authority key identifier: 88:10:FC:31:98:A0:AB:99:64:78:77:DB:E5:72:5E:05:CE:E0:13:F0
Certificate issuer: /CN=8810fc3198a0ab99647877dbe5725e05cee013f0
Certificate serial: 019F8FB57FF3D0B4BC68F8C33F54EB12A6E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBD8MZigq5lkeHfb5XJeBc7gE_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.mft
Manifest number: 1238
Signing time: Thu 23 Jul 2026 16:01:04 +0000
Manifest this update: Thu 23 Jul 2026 16:01:04 +0000
Manifest next update: Fri 24 Jul 2026 16:01:04 +0000
Files and hashes: 1: iBD8MZigq5lkeHfb5XJeBc7gE_A.crl (hash: y3mc6iNgsZ4XmmeMOoO1iRamZDyTHhOKzkGjSVf5GB4=)
2: xtriZj0E7B6zsRP9XIkIcFpnrqU.roa (hash: sr6Ahzw03XTlsg1PwbjbJZ0ftk/dptqXUly+PXrigJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/iBD8MZigq5lkeHfb5XJeBc7gE_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:7f:f3:d0:b4:bc:68:f8:c3:3f:54:eb:12:a6:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8810fc3198a0ab99647877dbe5725e05cee013f0
Validity
Not Before: Jul 23 16:01:04 2026 GMT
Not After : Jul 24 16:01:04 2026 GMT
Subject: CN=e6e0848457fb4a939725e71e5afc5dab6757396e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5f:b5:b0:b7:7d:97:70:b5:d2:1a:c9:10:ad:
01:ee:be:4d:2a:c8:26:c3:fa:2d:cb:0d:d0:fb:fa:
af:4a:ed:a8:c3:da:7a:1d:c8:29:86:d9:69:59:ce:
c7:18:b1:04:dc:b0:11:c9:21:66:d8:7f:eb:bc:3d:
22:cf:a7:1f:1e:0a:4c:71:1d:59:b9:37:88:03:eb:
f3:b1:b5:a3:33:ae:a3:96:f9:14:dc:d6:16:2b:dd:
e0:e5:21:0b:aa:0a:29:12:de:8d:f8:b7:86:f9:98:
51:1c:93:8b:69:fe:7b:b7:0e:bc:5c:f0:9b:79:0f:
f9:c9:e7:1e:8e:66:3e:18:4d:43:00:ea:42:7e:9d:
7f:3f:62:25:31:c2:c1:1d:da:d6:ce:d8:3a:82:ca:
d4:3f:ac:49:a6:b2:3b:2e:eb:5e:46:17:d4:ba:20:
b7:a5:29:76:c5:fd:11:22:e1:91:95:2b:af:da:2e:
b0:7b:8b:12:0a:28:92:dc:8d:b3:76:b1:68:08:8e:
ff:72:f5:89:25:4a:3a:78:3a:b8:d4:12:15:86:a1:
43:04:69:8b:59:f7:ae:10:09:dd:ee:19:2e:e7:57:
89:98:b0:80:ce:be:81:e6:9e:17:50:8f:e6:ee:56:
b9:72:5c:44:31:c6:db:07:c1:f7:bd:24:ed:fd:94:
bc:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:E0:84:84:57:FB:4A:93:97:25:E7:1E:5A:FC:5D:AB:67:57:39:6E
X509v3 Authority Key Identifier:
keyid:88:10:FC:31:98:A0:AB:99:64:78:77:DB:E5:72:5E:05:CE:E0:13:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBD8MZigq5lkeHfb5XJeBc7gE_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:bf:e6:0a:e8:9c:63:ca:11:81:c7:b7:7b:71:55:a6:d9:6a:
9b:b7:be:f1:4b:a2:12:b1:7d:71:07:38:d7:d7:fc:dc:19:ab:
6a:aa:4d:26:ce:64:e2:da:b2:1a:d2:78:69:6b:31:21:21:cf:
a1:a1:7d:5a:3c:b7:3c:c6:b6:04:31:3c:4c:5f:d2:fa:86:98:
c5:e0:e9:6c:7f:fd:e9:de:db:19:70:90:31:eb:4a:49:7c:ae:
34:35:90:15:3d:ec:fa:1b:84:13:bc:00:04:2d:97:fc:3f:93:
5f:0f:0a:72:22:97:f4:95:d8:74:18:64:72:88:53:4a:96:e8:
65:8e:fc:58:4a:98:e4:8a:45:8d:59:6b:9e:e6:a8:d1:0b:31:
da:38:c3:0e:e2:7e:99:af:0c:c5:6b:4f:de:1a:84:cd:7a:6d:
26:de:b1:fb:93:ce:7d:17:57:45:71:84:f2:d0:57:d0:59:31:
61:6b:e4:9e:f2:37:e0:05:7b:df:7e:c0:11:75:f1:61:ab:4c:
c7:97:7e:45:f8:46:05:8c:ed:99:d6:24:71:9f:80:5b:63:22:
35:44:d3:c9:a3:ac:30:86:1e:85:20:1c:4d:98:bf:1c:33:7d:
f6:1c:55:3f:da:33:7f:6a:b8:9d:54:b6:9a:8b:f3:23:a2:db:
4f:a4:e8:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:56:16 2026 by rpki-client