Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/797390-81d4-4c5d-ab71-7088568c51c0/1/iq94tpd0pVUH3qv4xMlpQunvDSA.mft
File: iq94tpd0pVUH3qv4xMlpQunvDSA.mft (raw, json)
Hash identifier: GGCQB9M5Z3A1DX7HH4pwCAt3KClFBlf0R1XJ3BsB7s8=
Subject key identifier: 54:5F:E0:51:31:F4:0F:7B:47:A5:0D:6B:00:4E:BF:00:4B:44:D4:4B
Authority key identifier: 8A:AF:78:B6:97:74:A5:55:07:DE:AB:F8:C4:C9:69:42:E9:EF:0D:20
Certificate issuer: /CN=8aaf78b69774a55507deabf8c4c96942e9ef0d20
Certificate serial: 019F92B64896E441E0C16F76C957CE2E0DD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iq94tpd0pVUH3qv4xMlpQunvDSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/797390-81d4-4c5d-ab71-7088568c51c0/1/iq94tpd0pVUH3qv4xMlpQunvDSA.mft
Manifest number: 10C3
Signing time: Fri 24 Jul 2026 06:00:47 +0000
Manifest this update: Fri 24 Jul 2026 06:00:47 +0000
Manifest next update: Sat 25 Jul 2026 06:00:47 +0000
Files and hashes: 1: AOuKaEFuAus3hz3w0WC3j7I2mqc.roa (hash: YMOsepey7pZcM4gw70d5HgYaXkzZjfvaKQx2Aill38c=)
2: iq94tpd0pVUH3qv4xMlpQunvDSA.crl (hash: AgVXFsZBZJu841Ewc7LT9DrYN1GtrZk+c91s0rglmAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/797390-81d4-4c5d-ab71-7088568c51c0/1/iq94tpd0pVUH3qv4xMlpQunvDSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/797390-81d4-4c5d-ab71-7088568c51c0/1/iq94tpd0pVUH3qv4xMlpQunvDSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iq94tpd0pVUH3qv4xMlpQunvDSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:48:96:e4:41:e0:c1:6f:76:c9:57:ce:2e:0d:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8aaf78b69774a55507deabf8c4c96942e9ef0d20
Validity
Not Before: Jul 24 06:00:47 2026 GMT
Not After : Jul 25 06:00:47 2026 GMT
Subject: CN=545fe05131f40f7b47a50d6b004ebf004b44d44b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:23:df:ce:33:83:22:ee:98:f1:f1:b6:58:fa:
3a:59:32:3a:64:07:e1:64:52:e0:1d:4c:07:4e:60:
f8:30:7c:21:05:84:fb:af:75:1d:fb:48:f2:c4:4a:
16:63:bb:4f:77:ae:aa:45:7c:4e:53:1d:fb:e8:7f:
39:74:8b:41:5b:ea:f1:96:59:95:18:1e:08:5c:b8:
4f:77:05:ff:d4:35:a2:59:47:8e:8a:fb:73:16:f0:
5a:dd:4b:9f:c9:34:d7:8e:32:1f:a0:fc:d6:b8:39:
e6:d7:68:0d:0f:04:3f:d9:88:da:e7:5b:0c:d6:63:
e3:56:55:39:77:1f:6a:ef:2f:96:b7:d1:ab:bd:4d:
7c:fe:10:b3:59:60:4c:ad:16:72:b2:5f:ce:94:db:
82:16:25:21:b2:55:63:7e:ef:10:02:59:f6:15:08:
b3:df:ce:37:6a:b4:0c:03:16:f6:c8:1e:61:f7:8f:
c5:ea:f9:d0:b4:1c:97:0d:9d:2e:47:5c:0e:b0:97:
80:2d:ae:62:4b:f7:83:94:ca:e3:f7:d2:84:8b:a9:
92:cc:44:80:eb:73:be:46:8b:d9:c4:3e:93:1d:f6:
99:44:08:59:c3:6c:37:06:72:ac:cc:19:51:e6:49:
92:33:b9:63:f5:a9:96:78:6d:11:a6:09:49:c5:e6:
2e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:5F:E0:51:31:F4:0F:7B:47:A5:0D:6B:00:4E:BF:00:4B:44:D4:4B
X509v3 Authority Key Identifier:
keyid:8A:AF:78:B6:97:74:A5:55:07:DE:AB:F8:C4:C9:69:42:E9:EF:0D:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iq94tpd0pVUH3qv4xMlpQunvDSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/797390-81d4-4c5d-ab71-7088568c51c0/1/iq94tpd0pVUH3qv4xMlpQunvDSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/797390-81d4-4c5d-ab71-7088568c51c0/1/iq94tpd0pVUH3qv4xMlpQunvDSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:00:1d:ef:06:fb:99:ec:b7:a3:31:02:e2:2f:a5:88:70:81:
01:28:0e:fb:18:c7:b3:39:5e:c8:9e:75:b9:22:03:f6:9b:a0:
e9:bb:25:ff:21:a6:02:e6:fe:a0:d1:3c:19:2d:5f:8c:df:6e:
7a:76:a8:b8:b3:5a:12:ca:42:8c:48:33:db:63:58:e7:66:c6:
8c:c8:32:44:a6:49:10:ab:8b:f4:3f:a7:5a:17:ae:96:19:e7:
fd:7a:60:c9:9d:37:28:7f:dc:9d:a6:9a:c1:a0:7c:91:53:7a:
06:6d:0e:d0:5e:a4:2a:13:81:7b:56:5e:bf:40:f8:85:11:58:
35:a0:02:71:64:6f:c1:8f:55:59:4d:d6:88:62:ac:43:02:a0:
b9:0d:f3:e0:0c:c0:5b:a0:99:9d:bb:5e:64:b9:da:7b:41:80:
91:36:f4:81:dc:6d:10:52:37:a6:ab:24:dd:d8:fb:86:e6:85:
54:1b:71:b5:76:bb:cb:1d:6c:5e:4a:e3:45:b4:11:ae:e5:37:
be:0c:bb:e0:3b:dd:2e:5d:d4:da:3c:7b:52:5b:4d:b1:b3:de:
26:fb:4a:3f:cf:81:51:41:d8:69:ce:67:3f:8f:8b:ba:e5:6f:
13:1f:fc:fb:dc:cf:a6:a2:0a:81:80:e7:36:e8:a7:86:43:56:
1c:0a:f9:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:43:56 2026 by rpki-client