Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/I3ikqcUjJahZIICboaTYniHALxc.mft
File: I3ikqcUjJahZIICboaTYniHALxc.mft (raw, json)
Hash identifier: LnY2fX0u5L2ruWqKYZ4S+x7Qb4U5n9yk1ZOUb97NSEc=
Subject key identifier: 99:8F:82:BD:2A:D9:E2:28:7B:99:0E:B7:03:71:09:0B:58:01:5B:89
Authority key identifier: 23:78:A4:A9:C5:23:25:A8:59:20:80:9B:A1:A4:D8:9E:21:C0:2F:17
Certificate issuer: /CN=2378a4a9c52325a85920809ba1a4d89e21c02f17
Certificate serial: 019F92ECBC0DAA463CCF086429D0BEE705CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I3ikqcUjJahZIICboaTYniHALxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/I3ikqcUjJahZIICboaTYniHALxc.mft
Manifest number: 171A
Signing time: Fri 24 Jul 2026 07:00:15 +0000
Manifest this update: Fri 24 Jul 2026 07:00:15 +0000
Manifest next update: Sat 25 Jul 2026 07:00:15 +0000
Files and hashes: 1: I3ikqcUjJahZIICboaTYniHALxc.crl (hash: XnVmWljFs/9GI4eJjdoDZfvTZIVvlfTznCCxdVTS9P8=)
2: RstGJIXrGP_zn4niceGRZ3XM7pY.roa (hash: iIYRPvDwo0qkOrNzYmf7D6l8FHyxcrfNiQYhWcOuB58=)
3: WfRMYNgnDvdxhv_OgYStuN6FqCQ.roa (hash: uHLuQi8KJbVs5VqNtZkcp+fIJy6HLJbaJ1btjtIY4cM=)
4: XgZUWF_JY2HTJzbvU6Cnd5y6OTQ.roa (hash: xDb3dtwGlNAHcmXCM8UYUqhwZfzy/vemU3ULkTqFlkw=)
5: vvUMzJMS3YN2PdWIsXTg73pWUMU.roa (hash: jqHmBZCizBRZOJ6dgt21LSpJ/Vl6QvBloIY8Xls6yuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/I3ikqcUjJahZIICboaTYniHALxc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/I3ikqcUjJahZIICboaTYniHALxc.mft
rsync://rpki.ripe.net/repository/DEFAULT/I3ikqcUjJahZIICboaTYniHALxc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ec:bc:0d:aa:46:3c:cf:08:64:29:d0:be:e7:05:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2378a4a9c52325a85920809ba1a4d89e21c02f17
Validity
Not Before: Jul 24 07:00:15 2026 GMT
Not After : Jul 25 07:00:15 2026 GMT
Subject: CN=998f82bd2ad9e2287b990eb70371090b58015b89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:06:e2:4f:0c:01:00:2e:12:cd:38:13:c1:c2:
2c:5b:44:54:4c:72:60:da:f3:be:d4:9c:0f:3a:81:
f7:48:9d:0f:a6:18:c8:91:df:69:b5:92:7f:b8:c0:
47:4e:80:b2:be:83:d0:f0:85:aa:a6:44:68:3e:60:
43:53:75:3f:2e:c1:51:28:56:d6:c7:fd:fa:97:cc:
ad:00:3f:e0:f0:db:e5:4a:31:bf:de:39:a9:75:10:
2e:6b:ca:a2:77:ce:7c:19:b1:4e:c1:d8:37:0d:b3:
3b:05:4c:4c:08:f0:41:10:86:54:cb:19:52:08:7d:
44:57:9a:7a:d1:f3:fa:a0:ef:fa:a2:30:82:5b:ff:
48:6d:a5:99:33:85:3c:3e:a0:67:13:19:44:66:f0:
ac:4a:6a:33:68:5b:13:db:fd:fe:8c:94:e7:ed:a0:
1d:3e:66:24:a3:71:bb:16:d5:0a:c8:41:ea:50:9f:
74:b0:35:00:51:26:03:58:e3:e1:f5:92:d5:d7:d5:
84:ec:08:4d:74:b6:ed:6a:b6:1e:a2:75:76:65:0a:
8a:4b:2f:f1:7f:0d:e2:12:ad:32:77:79:86:3e:a4:
92:f3:5f:58:78:7a:9a:87:d6:06:8c:b3:4a:6b:c7:
82:81:27:4a:46:f6:72:e2:47:09:16:36:ce:bf:16:
da:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:8F:82:BD:2A:D9:E2:28:7B:99:0E:B7:03:71:09:0B:58:01:5B:89
X509v3 Authority Key Identifier:
keyid:23:78:A4:A9:C5:23:25:A8:59:20:80:9B:A1:A4:D8:9E:21:C0:2F:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3ikqcUjJahZIICboaTYniHALxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/I3ikqcUjJahZIICboaTYniHALxc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/I3ikqcUjJahZIICboaTYniHALxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:b6:0a:30:1e:b2:42:cb:6d:b2:67:c6:50:85:c4:65:65:5f:
66:04:9f:91:75:a1:37:e5:ce:63:17:36:37:90:ea:3b:6a:c1:
55:a8:58:d6:92:96:32:84:1d:b1:de:38:6a:4b:67:44:de:8c:
e9:ee:33:e5:b9:20:e1:63:d6:ad:f9:10:ac:93:0c:c7:02:c6:
48:ec:47:6e:a8:86:44:d3:0d:30:86:52:51:9c:b4:19:17:43:
76:ef:04:f8:8c:41:c1:f0:c0:07:41:27:01:a2:b2:61:66:b1:
ca:d9:fa:cf:fc:4e:ac:dd:4f:36:de:47:7b:62:97:e7:51:aa:
d0:23:b2:13:51:ec:60:a6:c0:56:29:db:5d:ce:58:16:6b:4f:
74:ac:69:9c:9c:bf:e3:fd:be:0d:7c:53:a7:7d:7e:47:12:90:
82:f4:4f:c7:9d:a5:dd:25:a3:48:49:1d:0b:dc:90:d8:82:33:
30:79:f1:a2:dd:06:5c:84:ad:9c:20:67:09:62:a1:61:85:58:
17:c4:21:6a:cb:81:cb:65:e9:37:5c:df:bc:24:6d:77:e2:e2:
60:1e:83:7d:22:10:78:62:12:4f:a8:08:9a:b4:ef:9c:e3:69:
8a:e3:6b:67:8f:ae:94:a3:5d:b5:17:42:a9:a6:9f:87:a1:69:
d7:d7:3f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:50:24 2026 by rpki-client