Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/5e4d7e-ac21-4f02-9581-f00d92dc07b8/1/mIb0shUIFe2ng-fzz7m35Tzn2X8.mft
File: mIb0shUIFe2ng-fzz7m35Tzn2X8.mft (raw, json)
Hash identifier: LWsgOO/acN5nYiDih2zFM3bPdqWNk/aKaUdr8nlQvyo=
Subject key identifier: E9:1D:F7:22:C4:74:A3:0B:44:A4:3B:F9:E0:96:C0:84:F3:E0:EF:58
Authority key identifier: 98:86:F4:B2:15:08:15:ED:A7:83:E7:F3:CF:B9:B7:E5:3C:E7:D9:7F
Certificate issuer: /CN=9886f4b2150815eda783e7f3cfb9b7e53ce7d97f
Certificate serial: 019F92ECE88138FAC53113FA2545375628AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mIb0shUIFe2ng-fzz7m35Tzn2X8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/5e4d7e-ac21-4f02-9581-f00d92dc07b8/1/mIb0shUIFe2ng-fzz7m35Tzn2X8.mft
Manifest number: A2
Signing time: Fri 24 Jul 2026 07:00:27 +0000
Manifest this update: Fri 24 Jul 2026 07:00:27 +0000
Manifest next update: Sat 25 Jul 2026 07:00:27 +0000
Files and hashes: 1: E6Emgi8OOcxRYIN6dlPoick6xdc.roa (hash: b17vqDW+cXgHkIk7rlMgxV1W0X2t1+N9MIRFO/oaFGs=)
2: cJhwzvA4MmD9szzdzlqYrmM_RIk.roa (hash: 0CQ7EyVMolzZdZkEGpCpBtQGO5aHXkTTya7T0UCv1hY=)
3: mIb0shUIFe2ng-fzz7m35Tzn2X8.crl (hash: nWb7klsPTdIdQQu4OMqjsh4QbnPMoXk565t2t4JQM+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/5e4d7e-ac21-4f02-9581-f00d92dc07b8/1/mIb0shUIFe2ng-fzz7m35Tzn2X8.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/5e4d7e-ac21-4f02-9581-f00d92dc07b8/1/mIb0shUIFe2ng-fzz7m35Tzn2X8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mIb0shUIFe2ng-fzz7m35Tzn2X8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ec:e8:81:38:fa:c5:31:13:fa:25:45:37:56:28:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9886f4b2150815eda783e7f3cfb9b7e53ce7d97f
Validity
Not Before: Jul 24 07:00:27 2026 GMT
Not After : Jul 25 07:00:27 2026 GMT
Subject: CN=e91df722c474a30b44a43bf9e096c084f3e0ef58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4b:3f:10:3e:e0:71:2c:e9:dc:b5:31:44:b9:
7d:5f:a5:dc:4e:34:c5:f8:75:35:31:4a:15:1d:1e:
a6:2a:24:aa:68:d5:0a:8d:cb:1f:d0:bd:2a:fe:51:
9a:71:34:fc:7e:e2:0f:e2:33:0d:b1:94:b3:59:34:
ac:09:e3:97:36:eb:c6:57:86:f0:e6:ea:af:83:c2:
16:0a:a3:60:67:41:53:68:a4:af:bc:20:18:3e:aa:
6e:52:b2:9b:58:d5:37:2a:1f:40:1d:bd:a5:03:ca:
11:b8:5d:e9:47:c4:da:36:06:9a:0a:bf:10:85:6f:
b7:91:21:da:10:64:4c:b9:e0:18:11:9b:d7:16:cb:
63:15:cc:75:04:72:65:a1:8c:4e:28:01:05:fe:25:
39:89:ba:c3:38:f9:62:96:6e:fb:22:e7:fd:a5:cf:
6d:96:77:83:e0:10:5a:3d:ab:92:91:35:93:f2:fe:
93:dc:a7:55:53:ed:ed:33:77:97:55:09:38:d6:32:
5e:70:22:43:1f:8a:ec:f8:76:e7:e0:f9:20:97:18:
10:21:42:29:4b:f0:e1:28:10:f1:0a:99:81:c6:4c:
e2:5d:d3:bd:c5:65:9a:59:09:22:b1:31:c3:e3:20:
1b:89:12:2b:30:7c:56:16:ac:4f:dc:67:fc:01:69:
b2:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:1D:F7:22:C4:74:A3:0B:44:A4:3B:F9:E0:96:C0:84:F3:E0:EF:58
X509v3 Authority Key Identifier:
keyid:98:86:F4:B2:15:08:15:ED:A7:83:E7:F3:CF:B9:B7:E5:3C:E7:D9:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mIb0shUIFe2ng-fzz7m35Tzn2X8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/5e4d7e-ac21-4f02-9581-f00d92dc07b8/1/mIb0shUIFe2ng-fzz7m35Tzn2X8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/5e4d7e-ac21-4f02-9581-f00d92dc07b8/1/mIb0shUIFe2ng-fzz7m35Tzn2X8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:b2:26:50:e3:fe:3e:80:54:bd:56:c2:2b:36:d8:98:e5:56:
bd:2c:af:f6:b8:a7:48:49:40:c0:ab:52:58:3a:44:da:fc:62:
e7:1b:c6:52:6a:0e:30:38:33:6d:97:c5:0e:ad:0e:96:a4:3e:
3c:a7:71:22:4f:6b:27:61:5c:3e:54:9a:48:8b:ca:0b:8d:4f:
6c:16:5d:d5:98:15:47:04:4a:1b:f9:b7:5b:fd:ff:58:16:49:
94:7f:2b:bd:7a:b5:64:4a:e5:2a:46:59:c1:7c:2d:2c:fe:42:
da:22:21:8d:28:6a:7c:a6:89:45:1b:a6:b5:db:7d:6b:73:8f:
82:5e:1a:94:a6:c6:e8:02:4a:d8:7d:2d:11:85:b2:3b:17:19:
18:c1:37:64:3d:2a:8f:e2:b7:98:35:b5:4f:99:f1:e1:06:4a:
62:8b:a1:c3:e8:c4:96:47:c0:b8:43:84:9f:de:65:8c:09:05:
e8:0a:48:45:4d:43:9e:21:76:fc:f9:0b:03:8f:95:b6:09:4f:
3a:e7:2a:db:59:10:62:40:27:0a:47:cd:6a:90:23:fd:59:9d:
e6:e6:5a:ed:5d:c9:ab:29:d4:2c:b3:42:e0:ab:af:14:a2:dd:
7b:cf:9c:63:24:bb:e4:8c:88:49:df:da:3f:d7:24:b0:08:85:
d9:23:37:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:53:28 2026 by rpki-client