Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.mft
File: Iv_HI9FXk0BDE0zu0DQkqUKFnYM.mft (raw, json)
Hash identifier: 8eYfJgbwTr1wFtfiBTf77WuoawtqbgE6cTRbHPeuLrk=
Subject key identifier: D7:C0:2C:DB:A6:A0:99:1F:8B:EB:D4:42:F6:2B:78:EB:01:D3:8B:A0
Authority key identifier: 22:FF:C7:23:D1:57:93:40:43:13:4C:EE:D0:34:24:A9:42:85:9D:83
Certificate issuer: /CN=22ffc723d157934043134ceed03424a942859d83
Certificate serial: 019F935B6870F9980C51372CEEB816ACCF3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.mft
Manifest number: 41
Signing time: Fri 24 Jul 2026 09:01:08 +0000
Manifest this update: Fri 24 Jul 2026 09:01:08 +0000
Manifest next update: Sat 25 Jul 2026 09:01:08 +0000
Files and hashes: 1: 1-ztMd_gBTxeC8uA2Q0YdYpsYMeo.roa (hash: WXcCQ4Yl4FGns7m2jmJSD78rirZ3yMRIuiQENmN/+zw=)
2: 2LF9uim0YdDpGegCa61UauWuWfA.roa (hash: EJUG4c12axqY7VnRB7LGjwYbiGZwDBmNfyhI3v0wbAg=)
3: Iv_HI9FXk0BDE0zu0DQkqUKFnYM.crl (hash: gndNLj5pLPn2D7vNeCvZgMC5qgSid495XxahJX1CMB0=)
4: OWW7Tr0ddkzX8cpnriB4IyyEFmI.roa (hash: 65mD2shWItoOmc6tgeQNjaLe4tC+absIZWq2fClFhYk=)
5: _axzcFhLDGGR4sv8QLqgaVPeZLg.roa (hash: 0ELmAmWAy/TUmV7JbvaRF67zOVFNgHGzya+qArU3iX4=)
6: d9UMor1VyAKI95wbo0VML8JqXA0.roa (hash: Ue762QdnWxcT+gtVI8j0lIqvVnpOu+dK95cax6FcHFw=)
7: e5ECE1RgIH1_tNwoNA7WBLrErgk.roa (hash: YkBX43vtYMPV17x/YHA+YGWAAvLIc2O3OMYxK/YMeuw=)
8: jcSGVISkjZOB8Wm3cMTPdYzI6qg.roa (hash: cGm7WweVD+uApG+/ivyi4OOmekGxuRqlS+jllKuOX7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:68:70:f9:98:0c:51:37:2c:ee:b8:16:ac:cf:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22ffc723d157934043134ceed03424a942859d83
Validity
Not Before: Jul 24 09:01:08 2026 GMT
Not After : Jul 25 09:01:08 2026 GMT
Subject: CN=d7c02cdba6a0991f8bebd442f62b78eb01d38ba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:23:a9:49:62:00:9d:de:40:f8:02:29:d8:1d:
dc:80:44:c8:38:8d:85:77:7d:71:8f:ee:df:96:1f:
ba:2c:ee:ce:51:41:a9:e2:28:03:b6:32:3c:bf:4b:
ba:e2:c8:81:36:ab:ae:ce:c5:3d:3d:b1:26:74:89:
bc:5c:cb:cc:82:88:fe:89:eb:32:00:60:75:33:f4:
40:9a:d2:1b:eb:87:63:54:10:cb:49:c3:26:88:8f:
63:ef:0a:16:97:d4:c2:8b:fb:44:1d:8a:2d:c7:ff:
a7:0d:af:aa:f7:f4:55:c1:f6:a5:e4:19:7b:92:4e:
b2:0f:41:aa:80:b2:d4:95:7f:ac:5c:49:1b:4e:cb:
58:e8:f9:ab:64:0f:6f:91:12:37:55:e1:90:0f:5e:
64:0e:0a:c5:3c:67:4c:c0:10:a8:81:a3:e3:8a:7c:
bf:4e:ad:8f:a9:90:82:da:5d:95:8e:9d:15:38:11:
e0:7e:e8:13:34:7c:c0:f9:92:5e:c0:27:66:80:49:
6d:ac:b1:d2:60:ac:70:3c:2d:f6:c1:6f:85:17:bc:
fd:47:7a:23:5c:7f:96:38:77:21:b7:06:ee:57:86:
71:ee:6f:cb:62:4e:03:12:3c:ed:58:75:b2:b7:ec:
48:0f:c4:4a:4e:0b:8d:9b:09:3a:f7:14:27:d3:13:
88:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:C0:2C:DB:A6:A0:99:1F:8B:EB:D4:42:F6:2B:78:EB:01:D3:8B:A0
X509v3 Authority Key Identifier:
keyid:22:FF:C7:23:D1:57:93:40:43:13:4C:EE:D0:34:24:A9:42:85:9D:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:0a:7f:f1:87:7b:ce:25:57:ba:c4:ee:14:af:6d:05:2d:96:
ea:29:95:d9:02:65:18:4a:16:80:03:1c:e6:4f:2c:73:4a:ef:
8c:8f:6c:73:73:8a:d4:3e:f3:26:fa:6d:83:37:85:7b:f0:4c:
bc:0c:4d:97:34:bf:6d:19:87:f9:25:fc:22:b9:81:62:38:45:
bc:cf:5c:d1:9d:df:6d:87:ee:20:83:b4:a9:9d:f2:0d:95:a8:
c2:f1:90:95:55:4f:95:28:1d:17:09:5c:b4:b2:ae:29:e8:31:
4b:c0:b8:98:b9:83:05:73:f5:e6:24:7b:59:ca:89:1f:4f:20:
df:8c:b0:41:4e:ad:2c:8c:26:88:32:a0:bd:68:a2:5c:cc:32:
34:b0:42:1b:13:34:36:a8:3d:67:f9:42:db:e3:b2:12:0c:d2:
25:dc:d0:0b:87:2e:f9:1f:0a:f3:48:b2:ab:d2:d0:9e:7d:45:
39:d5:77:37:37:38:4a:01:7b:6f:2e:c5:ac:0b:5a:e0:52:23:
2c:4e:1b:0f:4e:af:c1:92:8b:95:0c:33:c4:0b:ba:58:00:06:
06:be:77:3c:20:48:3d:9d:ed:39:04:cb:02:14:61:39:c3:5e:
84:bf:52:9c:f2:ea:40:77:b2:00:46:7e:2a:7b:9a:95:02:90:
6f:80:7e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:09:44 2026 by rpki-client