Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/e99401-930b-4e69-ad62-5912c34bba96/1/iHX9AcLoxTbR1lDyWXd2AFSl70E.mft
File: iHX9AcLoxTbR1lDyWXd2AFSl70E.mft (raw, json)
Hash identifier: SFlZMHD+w4jEq556ZDlFjDurp2ZOWHZXLpC57+Or+kM=
Subject key identifier: 3F:B0:1D:ED:3C:38:70:44:AD:28:BE:10:68:A8:3A:FE:53:BF:99:13
Authority key identifier: 88:75:FD:01:C2:E8:C5:36:D1:D6:50:F2:59:77:76:00:54:A5:EF:41
Certificate issuer: /CN=8875fd01c2e8c536d1d650f25977760054a5ef41
Certificate serial: 019F8EA2B356893F71B6E042A9061F001C57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHX9AcLoxTbR1lDyWXd2AFSl70E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/e99401-930b-4e69-ad62-5912c34bba96/1/iHX9AcLoxTbR1lDyWXd2AFSl70E.mft
Manifest number: 73
Signing time: Thu 23 Jul 2026 11:00:55 +0000
Manifest this update: Thu 23 Jul 2026 11:00:55 +0000
Manifest next update: Fri 24 Jul 2026 11:00:55 +0000
Files and hashes: 1: _bPoF2ZH4mhZ8Ri8aUb1EwwCjzM.asa (hash: FN6qeizQ7kr3SU7QJEODvtVTBtcF/dzMFYrvZ6+fXAw=)
2: iHX9AcLoxTbR1lDyWXd2AFSl70E.crl (hash: mXDxr6RP81WSonQHLeUqJqFc+ae3ctjNASPz+lYq4Ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/e99401-930b-4e69-ad62-5912c34bba96/1/iHX9AcLoxTbR1lDyWXd2AFSl70E.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/e99401-930b-4e69-ad62-5912c34bba96/1/iHX9AcLoxTbR1lDyWXd2AFSl70E.mft
rsync://rpki.ripe.net/repository/DEFAULT/iHX9AcLoxTbR1lDyWXd2AFSl70E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:b3:56:89:3f:71:b6:e0:42:a9:06:1f:00:1c:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8875fd01c2e8c536d1d650f25977760054a5ef41
Validity
Not Before: Jul 23 11:00:55 2026 GMT
Not After : Jul 24 11:00:55 2026 GMT
Subject: CN=3fb01ded3c387044ad28be1068a83afe53bf9913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:8b:ce:f7:02:53:58:54:68:87:01:16:94:05:
08:96:ed:13:29:87:c5:e7:26:cc:8a:92:32:d6:1c:
16:a9:2e:13:26:13:85:ee:85:f9:16:f0:c6:af:e9:
c7:db:4a:60:61:5b:ec:eb:48:4e:c7:1e:9a:fa:45:
a8:14:80:da:17:b4:88:a6:07:ef:7c:39:71:a1:ff:
08:eb:a3:49:5b:57:41:73:30:d4:bb:1d:fd:e6:78:
57:3b:64:f7:f6:9c:1c:35:00:29:46:c3:e7:b5:d5:
fd:52:95:19:8e:7f:fe:d1:2e:9a:17:44:88:3f:ba:
39:47:b5:7a:63:2a:05:33:68:bb:f2:9e:2b:95:71:
69:e2:53:1f:10:7c:c3:42:7f:c3:7e:63:b0:b3:e4:
c7:f6:3f:c5:d8:d9:b2:5b:b3:75:d1:c5:0c:f5:63:
4e:ec:07:e3:66:ee:45:93:be:a0:05:1e:65:73:0d:
ce:af:fe:39:2d:b4:d5:dd:39:aa:8a:19:bb:10:27:
b0:a6:8f:d5:3c:ae:6e:b5:f5:37:ac:0c:29:f8:b6:
83:8c:b5:71:62:be:81:35:92:9b:03:cb:b7:86:03:
5d:3d:08:05:1f:8f:89:b0:0d:f3:b6:bb:c7:6b:1f:
b9:76:aa:30:19:c5:15:4c:d4:c6:b5:87:92:53:78:
fc:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:B0:1D:ED:3C:38:70:44:AD:28:BE:10:68:A8:3A:FE:53:BF:99:13
X509v3 Authority Key Identifier:
keyid:88:75:FD:01:C2:E8:C5:36:D1:D6:50:F2:59:77:76:00:54:A5:EF:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHX9AcLoxTbR1lDyWXd2AFSl70E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/e99401-930b-4e69-ad62-5912c34bba96/1/iHX9AcLoxTbR1lDyWXd2AFSl70E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/e99401-930b-4e69-ad62-5912c34bba96/1/iHX9AcLoxTbR1lDyWXd2AFSl70E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:c1:59:19:d0:ef:2c:bf:36:6c:86:c2:b3:88:78:fe:02:d4:
79:e7:7c:09:b0:20:32:ea:39:90:77:d2:a6:06:98:7e:a0:9b:
11:25:54:a0:36:02:b3:f6:ac:39:b4:d1:05:eb:e8:ad:ef:62:
8a:7f:7d:f9:ea:8e:60:d6:63:ca:d1:13:72:1c:f3:2a:18:8f:
90:63:3a:3b:46:27:56:81:8f:8c:a2:db:bf:a1:6c:da:19:06:
e1:6e:16:c5:d3:27:af:f4:37:c6:15:77:f3:57:eb:da:71:34:
0b:92:53:fe:3e:19:4a:96:ad:48:54:9b:fd:41:23:7c:72:c4:
b4:d3:2a:5b:d8:35:9b:31:ff:a8:e4:db:95:73:ae:dd:f0:28:
22:82:c4:32:74:a0:77:c9:70:48:2c:cf:fc:fb:4c:62:0e:15:
30:65:2b:08:82:92:b6:94:74:c8:70:95:6f:91:ac:25:4e:d4:
a9:1b:73:3c:32:2d:d3:34:48:72:02:dc:2d:f0:2b:23:cd:62:
0f:85:5e:95:a2:87:3d:19:1f:1f:fc:7e:f0:09:dd:ce:b0:02:
8c:a9:e5:91:df:80:9c:da:f9:70:c7:a2:83:4f:ec:15:c7:68:
dd:c7:a8:de:57:63:f0:3e:47:1b:dc:3c:5c:43:1a:9a:08:34:
bc:24:2d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:54:43 2026 by rpki-client