Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/d20b8c-9fac-41f7-9e79-c410062d4d52/1/iZJ3h0cqfL3Zff209Tt077O7vFs.mft
File: iZJ3h0cqfL3Zff209Tt077O7vFs.mft (raw, json)
Hash identifier: 8arvNlUpIvmP/8VUwpmpiWXHXyalahSdMbZCS4KZKiE=
Subject key identifier: C0:1D:A8:99:97:F4:F3:80:4A:2A:B7:CB:31:68:4B:F2:AF:14:2C:56
Authority key identifier: 89:92:77:87:47:2A:7C:BD:D9:7D:FD:B4:F5:3B:74:EF:B3:BB:BC:5B
Certificate issuer: /CN=89927787472a7cbdd97dfdb4f53b74efb3bbbc5b
Certificate serial: 019F8FB57EF3D4A067ADF2EBAB9A4A441020
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iZJ3h0cqfL3Zff209Tt077O7vFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/d20b8c-9fac-41f7-9e79-c410062d4d52/1/iZJ3h0cqfL3Zff209Tt077O7vFs.mft
Manifest number: 14F6
Signing time: Thu 23 Jul 2026 16:01:04 +0000
Manifest this update: Thu 23 Jul 2026 16:01:04 +0000
Manifest next update: Fri 24 Jul 2026 16:01:04 +0000
Files and hashes: 1: iZJ3h0cqfL3Zff209Tt077O7vFs.crl (hash: xtVSn2insbGAvS7hqCx1Q0QDdMrWBOVjm6O23I7El54=)
2: kt-dzWz4ump9exEN1VN1o9bh0sQ.roa (hash: 3EXp+7ZKktgIDQ1+hPu50wusQGozvYQkFp906943fvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/d20b8c-9fac-41f7-9e79-c410062d4d52/1/iZJ3h0cqfL3Zff209Tt077O7vFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/d20b8c-9fac-41f7-9e79-c410062d4d52/1/iZJ3h0cqfL3Zff209Tt077O7vFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/iZJ3h0cqfL3Zff209Tt077O7vFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:7e:f3:d4:a0:67:ad:f2:eb:ab:9a:4a:44:10:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89927787472a7cbdd97dfdb4f53b74efb3bbbc5b
Validity
Not Before: Jul 23 16:01:04 2026 GMT
Not After : Jul 24 16:01:04 2026 GMT
Subject: CN=c01da89997f4f3804a2ab7cb31684bf2af142c56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:4f:3d:aa:11:20:84:db:d9:c5:6d:11:b8:8a:
ea:dd:ee:69:f6:7a:e5:e5:0c:c4:4d:81:84:19:21:
11:94:a2:29:c2:d8:ce:20:c7:65:74:88:22:b7:c6:
3e:5a:e2:a5:14:69:30:2b:b1:12:7c:5c:e4:37:85:
ac:ee:9a:ec:59:2b:6e:09:ff:3e:d7:4c:19:48:63:
02:a3:37:78:e1:1f:19:d3:6f:d7:ba:bc:9c:18:1d:
88:d8:8a:de:c3:a9:95:bc:58:15:71:df:a0:be:4e:
52:99:b7:a8:d7:9b:a4:ae:0e:3d:9a:4b:af:cb:77:
27:96:f0:2b:df:2c:ec:4c:86:b1:0e:64:d7:66:7d:
02:49:67:62:fa:e7:34:d7:15:59:3a:f8:87:72:09:
a1:0d:cf:7a:4f:52:e2:c3:5a:c7:cc:8c:54:86:70:
93:cd:c0:e1:63:4b:f5:81:6a:f8:3c:89:5c:5a:12:
63:c6:c0:9a:ca:48:62:c7:2e:e9:3c:d5:f7:12:6f:
2a:0c:6e:f8:40:7d:35:4c:24:92:5c:35:04:0b:35:
d8:13:6a:02:b6:ec:0a:89:06:39:d8:c9:66:1c:da:
cf:47:49:52:d3:64:f9:79:af:ed:6c:b8:28:55:6d:
35:13:48:55:ac:71:af:36:0e:15:97:15:e9:66:89:
3c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:1D:A8:99:97:F4:F3:80:4A:2A:B7:CB:31:68:4B:F2:AF:14:2C:56
X509v3 Authority Key Identifier:
keyid:89:92:77:87:47:2A:7C:BD:D9:7D:FD:B4:F5:3B:74:EF:B3:BB:BC:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iZJ3h0cqfL3Zff209Tt077O7vFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d20b8c-9fac-41f7-9e79-c410062d4d52/1/iZJ3h0cqfL3Zff209Tt077O7vFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d20b8c-9fac-41f7-9e79-c410062d4d52/1/iZJ3h0cqfL3Zff209Tt077O7vFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:9a:08:da:08:e2:15:2a:49:a3:ea:82:b1:ed:a1:4d:91:e3:
a5:39:cb:37:f8:3a:23:32:b9:4d:ea:6c:e0:64:7f:9d:b9:17:
8e:ed:fb:35:26:77:e6:a2:28:2d:84:c5:ee:f0:ee:07:a1:4c:
a9:8e:2a:41:8f:71:be:bd:e2:70:6f:84:ba:dd:f8:dd:47:bc:
b8:f3:09:d4:a2:4d:01:d8:ff:60:38:17:88:89:ba:9e:e1:17:
2a:b0:7b:c8:9a:d8:55:62:82:9f:18:37:9f:3e:4b:5b:da:c5:
45:e6:dd:29:d4:88:19:96:ce:4e:de:a2:af:fa:80:35:5f:3b:
2e:d8:6f:4d:17:a0:37:8b:03:5d:0a:2d:af:e4:e5:1a:b0:6c:
f3:48:bc:f2:53:e3:e0:87:20:fb:0c:c2:36:7a:e6:98:f3:2f:
51:20:a7:f7:d7:fb:ea:88:3a:3f:a1:17:13:6c:ef:61:73:2e:
f3:2e:63:ff:4e:ca:81:29:f3:03:8d:54:a5:3e:f6:ca:87:ec:
74:88:2e:a0:45:37:12:29:2d:5e:a3:ca:69:a6:8e:69:24:dd:
f5:e4:f5:85:21:95:4b:db:24:19:7c:33:18:d3:80:0e:49:92:
5a:84:6c:f8:ef:f0:15:f6:8a:72:ff:c2:5e:86:4e:98:cb:0d:
49:0d:32:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:41:07 2026 by rpki-client