Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.mft
File: iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.mft (raw, json)
Hash identifier: paqVPEOJC6b+VXgwss6qXR/LScRGuCqJlreyBGFn3jg=
Subject key identifier: 88:1E:EB:3C:2E:F3:FB:43:F2:DF:D3:82:D6:38:19:BD:21:7E:8E:E8
Authority key identifier: 88:E7:19:F4:26:79:3B:1E:90:63:77:14:60:AB:D3:11:A3:DF:F1:16
Certificate issuer: /CN=88e719f426793b1e9063771460abd311a3dff116
Certificate serial: 019F9210FB2E0FDBC2578AC6E30BFDFB50E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.mft
Manifest number: 19C5
Signing time: Fri 24 Jul 2026 03:00:14 +0000
Manifest this update: Fri 24 Jul 2026 03:00:14 +0000
Manifest next update: Sat 25 Jul 2026 03:00:14 +0000
Files and hashes: 1: ImConIEQA2KDtzAT0CUbHUEbH_s.roa (hash: A7/XjtAfBEgLHLQ8oNWxPg8deYNIQ6lOIEhh+waSaZI=)
2: ZxLR_I6eiLsRd1oV4IP5PeLu7DE.roa (hash: kZngczWI+T3GrCv/8Yja3kQMBd7RGIDrozKXhV53UWY=)
3: iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.crl (hash: I4h5nsrwqSydHpl6gjQmZoIGUar4dJ/dIhWYu6vL8Ow=)
4: q2aBWG2CuEimsjXb18Ou0fyLb7k.roa (hash: A0AoTuyENlHBNdH6JVEsUQXr8MFCH3cXbTXxCbPc1hg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:10:fb:2e:0f:db:c2:57:8a:c6:e3:0b:fd:fb:50:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88e719f426793b1e9063771460abd311a3dff116
Validity
Not Before: Jul 24 03:00:14 2026 GMT
Not After : Jul 25 03:00:14 2026 GMT
Subject: CN=881eeb3c2ef3fb43f2dfd382d63819bd217e8ee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2e:36:89:92:ac:06:85:a7:43:0e:8d:2b:46:
58:7a:c5:f2:88:bd:a3:a8:02:5f:dc:36:47:74:78:
32:13:34:00:7c:73:26:13:15:74:22:d0:3e:7f:0e:
59:d8:7b:b3:d8:9d:2a:c5:6d:95:0f:2d:77:4d:ff:
d7:b3:26:4e:02:3a:27:c7:fb:47:d0:0e:9d:94:52:
29:09:a8:a0:c1:0b:fd:89:87:a9:f0:b8:24:7d:23:
45:2d:8c:bd:98:25:0a:80:65:df:1d:21:24:10:0b:
02:ee:e8:11:62:b4:86:74:58:45:9d:e5:08:9d:be:
15:31:c7:68:bc:fb:ea:bd:5e:79:e7:65:08:43:5b:
0a:f1:a0:a3:9c:81:7b:2a:67:b9:c0:37:16:d4:48:
11:ee:9c:00:df:11:68:96:57:86:4e:64:87:54:20:
b8:3e:45:14:01:58:02:92:31:c8:0b:53:46:64:17:
f0:f8:0d:1b:31:84:1a:15:c1:14:d2:75:6a:e1:87:
c1:fb:f2:36:ca:16:1a:82:81:aa:02:0b:89:28:67:
fe:ba:cf:9a:00:92:4c:af:60:13:7e:77:5f:ee:72:
c1:f3:d2:de:3e:2f:95:a9:fa:f1:c5:31:ce:e5:cc:
89:78:78:ab:83:6b:65:91:d1:b3:13:8d:af:8f:37:
45:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:1E:EB:3C:2E:F3:FB:43:F2:DF:D3:82:D6:38:19:BD:21:7E:8E:E8
X509v3 Authority Key Identifier:
keyid:88:E7:19:F4:26:79:3B:1E:90:63:77:14:60:AB:D3:11:A3:DF:F1:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:ab:8e:57:57:de:7f:c1:2b:b4:b0:c7:34:55:b6:66:ad:e4:
e1:53:67:bc:1d:91:0a:45:77:3a:66:0e:14:ec:c9:5f:93:4c:
a6:3d:31:0f:dd:f9:fa:0f:6a:be:1b:56:f8:7d:93:f4:56:da:
7e:f2:f4:fc:9c:56:12:6b:f8:38:39:45:7d:8d:37:1c:65:1c:
7b:cd:c2:30:c7:f2:04:20:de:8d:74:77:ec:23:79:44:e4:27:
cf:00:a7:d0:97:1d:2c:f0:fc:f2:bc:2b:b9:62:31:b0:c1:94:
a0:6d:a1:c9:f8:9e:36:04:b8:cb:d7:eb:3f:22:39:df:d0:24:
b1:8b:fb:9d:87:a2:97:69:e8:ed:4d:09:82:b3:c2:b0:c6:cb:
51:01:67:9e:78:b5:ee:47:8c:3d:5a:d3:77:6a:f9:43:18:b8:
be:81:25:9a:11:2e:ed:2a:fb:0d:dd:4a:c3:69:7e:cb:e3:b4:
16:38:3d:32:a2:e2:3c:7d:f9:f1:68:91:5d:c1:40:ac:ed:c2:
23:3a:04:8b:9b:79:57:02:38:b6:5b:0e:7c:49:f5:78:a6:94:
c6:f3:52:be:63:b0:a8:e0:05:ca:4f:b2:46:33:da:e0:88:41:
ba:ff:4d:46:ea:d8:57:50:55:70:54:04:58:ac:3d:a9:11:79:
a9:16:9c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:23:23 2026 by rpki-client