Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/IAsV4Hg_4A8bile9FP29BpJLiDI.mft
File: IAsV4Hg_4A8bile9FP29BpJLiDI.mft (raw, json)
Hash identifier: cjUoMurj+Be8gnjyUwGgkKIFSi5fjbYc23rpiSoXNXg=
Subject key identifier: 01:8A:12:7F:56:30:63:19:EC:2F:F0:E1:DB:40:41:F3:19:35:F0:A8
Authority key identifier: 20:0B:15:E0:78:3F:E0:0F:1B:8A:57:BD:14:FD:BD:06:92:4B:88:32
Certificate issuer: /CN=200b15e0783fe00f1b8a57bd14fdbd06924b8832
Certificate serial: 019F91A3DB73FAA316CE6EBC5FEE77658AA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IAsV4Hg_4A8bile9FP29BpJLiDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/IAsV4Hg_4A8bile9FP29BpJLiDI.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 01:01:02 +0000
Manifest this update: Fri 24 Jul 2026 01:01:02 +0000
Manifest next update: Sat 25 Jul 2026 01:01:02 +0000
Files and hashes: 1: IAsV4Hg_4A8bile9FP29BpJLiDI.crl (hash: DGQBkikkIsthPoer/OUkqMVPbTyWFBELoB0Khw3ymcU=)
2: pjJ3h-AtM7br3AuCdoLvUYqZ6Us.roa (hash: oMubblgpXo7TWZ3eL9+/USYMfrR1dHWkBzKitQqRPPI=)
3: tIEL4J6jSkAPZLSFtELamVkICgM.roa (hash: mcwIFqfoI6qXjVDhr4bgReH1f7CPQDUrI4HFRmfb3wI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/IAsV4Hg_4A8bile9FP29BpJLiDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/IAsV4Hg_4A8bile9FP29BpJLiDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IAsV4Hg_4A8bile9FP29BpJLiDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 01:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:db:73:fa:a3:16:ce:6e:bc:5f:ee:77:65:8a:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=200b15e0783fe00f1b8a57bd14fdbd06924b8832
Validity
Not Before: Jul 24 01:01:02 2026 GMT
Not After : Jul 25 01:01:02 2026 GMT
Subject: CN=018a127f56306319ec2ff0e1db4041f31935f0a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:e3:ed:ab:1a:60:cc:47:1c:19:be:4a:58:c2:
16:8b:af:e0:d9:20:88:d3:ab:19:43:73:da:78:89:
f5:09:c6:28:c0:97:57:c8:e1:f8:fe:07:d4:8a:9c:
a6:42:d9:82:bb:6d:bb:f7:06:67:f7:9a:f1:be:8f:
ea:09:88:a8:a5:06:1d:97:a3:84:0c:5e:cc:46:e9:
eb:a3:78:46:ed:b2:3c:fd:19:1b:b3:a4:d0:c3:b3:
1e:0b:42:f0:39:38:2c:58:5e:b0:06:27:81:25:3b:
63:0e:80:6c:2c:88:79:e7:23:ad:0f:84:46:ff:d8:
11:54:de:c8:1a:7f:f8:64:ae:5e:05:00:97:c4:dd:
43:99:0f:6c:71:21:4c:2e:f7:17:39:1e:53:16:ab:
03:8c:01:ff:9e:75:92:9f:b1:12:57:bd:56:46:8e:
59:74:78:f4:90:bf:bf:67:10:ff:a2:2a:11:97:4f:
39:ca:90:99:28:bc:0f:5a:1d:72:61:72:63:c8:dc:
44:fe:03:5f:dd:f7:ea:27:1a:59:27:1f:bd:bf:c7:
96:85:d5:e1:c5:be:8d:4f:ad:0c:15:60:80:cd:c6:
81:6b:27:b8:cf:9a:81:72:9a:02:c6:cd:82:cb:b8:
a7:c1:24:5b:39:3d:df:8b:c6:ed:6f:50:7c:10:23:
ea:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:8A:12:7F:56:30:63:19:EC:2F:F0:E1:DB:40:41:F3:19:35:F0:A8
X509v3 Authority Key Identifier:
keyid:20:0B:15:E0:78:3F:E0:0F:1B:8A:57:BD:14:FD:BD:06:92:4B:88:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IAsV4Hg_4A8bile9FP29BpJLiDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/IAsV4Hg_4A8bile9FP29BpJLiDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/IAsV4Hg_4A8bile9FP29BpJLiDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:0f:d5:f2:57:eb:a9:b6:2c:13:4e:0f:c1:f0:05:6e:a8:70:
c6:be:f6:87:c3:ee:6d:ac:09:1e:c7:01:dd:da:3c:11:94:59:
df:0e:10:9b:13:3c:53:21:e6:f7:98:f6:d1:95:1e:e9:5b:33:
5e:04:64:45:d0:85:04:4d:27:92:da:78:c8:30:08:44:0a:c5:
0a:be:6e:93:8d:9a:49:00:6f:97:14:45:f4:8c:ef:67:bf:fb:
dc:98:52:8e:b4:e6:52:c9:2d:db:51:71:b4:82:4b:a1:94:94:
2e:f6:1b:88:42:66:b0:63:2d:47:79:68:e0:cd:c7:c5:9a:b5:
36:51:23:16:41:99:34:f2:93:45:4a:72:f4:8c:72:3f:19:8f:
4e:49:b2:56:f6:2f:68:a7:45:31:24:1d:51:88:65:d9:d8:dc:
3c:95:7c:f9:05:3a:af:49:3a:d1:fa:8a:d4:ac:d9:5c:b3:b3:
a3:82:a4:b8:42:8a:97:b7:ef:1f:73:8b:e7:cd:f2:62:0b:70:
30:d0:28:b6:a4:7c:20:32:dc:9f:1c:ec:b7:0a:13:0d:90:85:
0e:0b:eb:54:67:eb:0b:61:72:95:9e:bb:94:97:83:3f:a2:e1:
ec:fa:d4:70:f9:30:94:4e:ae:ff:52:94:59:55:00:f0:99:80:
32:96:fb:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:07:10 2026 by rpki-client