Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/177f1d-ac39-4a9d-941d-fa8d8ca9495b/1/IONyheqmIxC8nncrST2dYrqKeTg.mft
File: IONyheqmIxC8nncrST2dYrqKeTg.mft (raw, json)
Hash identifier: etmEytd/gN+tyVu+ENB7PsIXOajEa6HqZ2FsG1Wvt3U=
Subject key identifier: 8A:F6:D4:60:B8:B9:47:63:BC:EF:A2:A9:39:14:E4:91:BF:D1:30:0D
Authority key identifier: 20:E3:72:85:EA:A6:23:10:BC:9E:77:2B:49:3D:9D:62:BA:8A:79:38
Certificate issuer: /CN=20e37285eaa62310bc9e772b493d9d62ba8a7938
Certificate serial: 019F93246C86B144641D5B2BD736BA2A70A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IONyheqmIxC8nncrST2dYrqKeTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/177f1d-ac39-4a9d-941d-fa8d8ca9495b/1/IONyheqmIxC8nncrST2dYrqKeTg.mft
Manifest number: 0A04
Signing time: Fri 24 Jul 2026 08:01:05 +0000
Manifest this update: Fri 24 Jul 2026 08:01:05 +0000
Manifest next update: Sat 25 Jul 2026 08:01:05 +0000
Files and hashes: 1: IONyheqmIxC8nncrST2dYrqKeTg.crl (hash: 1vySI6EaLifYXfjabwfDlzSQwazSTrTrKaVallyx7ug=)
2: dshUZvB4McXbpCwuJto_ABAOvNQ.roa (hash: V5ln1lpZELvPyBOpg3oQ56WAm93C6lBYruWQT9Rpyxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/177f1d-ac39-4a9d-941d-fa8d8ca9495b/1/IONyheqmIxC8nncrST2dYrqKeTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/177f1d-ac39-4a9d-941d-fa8d8ca9495b/1/IONyheqmIxC8nncrST2dYrqKeTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IONyheqmIxC8nncrST2dYrqKeTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:24:6c:86:b1:44:64:1d:5b:2b:d7:36:ba:2a:70:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20e37285eaa62310bc9e772b493d9d62ba8a7938
Validity
Not Before: Jul 24 08:01:05 2026 GMT
Not After : Jul 25 08:01:05 2026 GMT
Subject: CN=8af6d460b8b94763bcefa2a93914e491bfd1300d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:73:88:fc:a0:42:44:bc:6b:80:b8:fc:1d:6b:
b9:a3:0a:65:5e:30:f0:77:dd:7f:01:5a:b9:b6:22:
67:8f:4b:79:72:d0:40:e1:22:3c:3a:1b:a9:7a:b5:
7f:28:5d:2a:1f:ab:9e:93:d3:40:3d:5b:ce:b8:ee:
03:7d:18:62:30:a4:db:53:35:d3:ac:cd:25:40:48:
a0:36:36:ca:79:f9:94:f0:ef:e3:b3:45:40:19:01:
f9:8b:31:c8:44:62:ba:80:cb:8f:af:5c:57:fd:74:
29:44:54:49:37:3b:ff:e8:f6:55:d7:88:a7:1f:29:
92:33:b6:3e:25:50:dd:a9:37:9e:75:fb:9d:07:7f:
eb:5a:65:ad:84:29:4b:bb:ba:4e:b5:18:1b:bb:9f:
42:98:67:fc:a6:ad:42:85:1c:48:3f:bb:2e:61:7f:
58:0c:90:a6:17:67:fe:cc:bf:ba:27:6b:b6:da:44:
d0:1e:05:4c:46:50:b2:6a:e3:16:db:ea:e0:4a:1c:
6a:2d:9b:67:a5:e5:f0:8a:ba:20:1a:f5:e2:4b:2d:
a9:b7:f3:35:85:44:21:70:a2:68:43:76:7e:78:0a:
56:7f:35:30:f3:85:4b:0c:e7:7f:c3:3d:be:02:e0:
5e:39:d0:84:ea:ab:cd:7d:4d:cd:ff:78:ef:48:65:
f1:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:F6:D4:60:B8:B9:47:63:BC:EF:A2:A9:39:14:E4:91:BF:D1:30:0D
X509v3 Authority Key Identifier:
keyid:20:E3:72:85:EA:A6:23:10:BC:9E:77:2B:49:3D:9D:62:BA:8A:79:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IONyheqmIxC8nncrST2dYrqKeTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/177f1d-ac39-4a9d-941d-fa8d8ca9495b/1/IONyheqmIxC8nncrST2dYrqKeTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/177f1d-ac39-4a9d-941d-fa8d8ca9495b/1/IONyheqmIxC8nncrST2dYrqKeTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:ae:1f:23:50:70:54:93:d2:b6:c7:e3:31:1e:24:de:41:fd:
57:2d:66:65:97:fc:55:97:f2:cc:86:42:8d:86:01:2a:e6:bc:
e5:d1:0f:93:55:36:2f:0f:36:a5:d6:1e:3c:d8:d3:dd:f2:ca:
29:f1:02:02:16:59:ec:74:06:64:53:28:e4:1f:d6:5b:8e:a9:
2f:ce:c2:c7:14:5e:76:6a:11:a7:6c:f5:c4:ad:58:24:ed:ea:
74:6e:a6:9b:a8:ac:53:e3:5b:1b:80:b2:4a:99:e0:ee:5d:16:
7a:92:a4:6f:b3:98:3f:11:5d:34:e2:e6:97:8b:3e:83:1a:ff:
c6:e0:7a:f6:b9:0c:24:f5:06:e3:19:39:b3:e1:11:c5:77:f5:
0e:94:58:00:44:44:61:5d:d1:3a:dc:8b:d0:f0:17:83:07:12:
ae:c8:bb:2c:30:2b:3d:09:2e:83:b1:e0:b8:e0:6e:f9:bc:c2:
a1:d2:a0:b9:64:0f:e3:49:76:8f:ee:40:67:11:c4:72:9d:f9:
9b:d9:e9:da:46:6d:c7:f9:45:b2:61:ed:c9:8a:17:98:3f:8c:
ce:9f:1a:2e:3d:09:b2:2a:00:ea:ce:9d:99:b4:67:3b:fc:63:
db:e3:64:ab:11:9d:99:ff:1d:a2:9f:16:2e:77:26:ea:c9:f3:
c5:e0:8e:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:05:07 2026 by rpki-client