Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.mft
File: INyR5mZJTQ3FaiuB0imr1u41-Ew.mft (raw, json)
Hash identifier: F59SSxtDR6TyMiSL8gwdc+EKduk7qGj3nMNpyfkHLnA=
Subject key identifier: 00:C4:C0:5F:73:94:36:47:F9:54:9D:C3:B2:6B:EA:9D:6E:0F:03:F2
Authority key identifier: 20:DC:91:E6:66:49:4D:0D:C5:6A:2B:81:D2:29:AB:D6:EE:35:F8:4C
Certificate issuer: /CN=20dc91e666494d0dc56a2b81d229abd6ee35f84c
Certificate serial: 019F8E6C2C03CC7C35D54D34B3E4F627A5AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/INyR5mZJTQ3FaiuB0imr1u41-Ew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.mft
Manifest number: 19C1
Signing time: Thu 23 Jul 2026 10:01:21 +0000
Manifest this update: Thu 23 Jul 2026 10:01:21 +0000
Manifest next update: Fri 24 Jul 2026 10:01:21 +0000
Files and hashes: 1: INyR5mZJTQ3FaiuB0imr1u41-Ew.crl (hash: xl8ed4QV0/OPmXDRAPsEpNuNnUkfaAOzdHxeZJdT2k0=)
2: V8NlnKjUgS7bj4rUkCz5LctnTTY.roa (hash: 2V4IKo8nS+06Kfv+fwmatbojuyWYf1XN4kaAl/BcTuo=)
3: oEH5CL4Krryfh-iShKBtkq07VfQ.asa (hash: GkycII0/qjAz0UiuBL6s5szZ1IchdfI3Luf3s69wkYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.mft
rsync://rpki.ripe.net/repository/DEFAULT/INyR5mZJTQ3FaiuB0imr1u41-Ew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 10:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:6c:2c:03:cc:7c:35:d5:4d:34:b3:e4:f6:27:a5:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20dc91e666494d0dc56a2b81d229abd6ee35f84c
Validity
Not Before: Jul 23 10:01:21 2026 GMT
Not After : Jul 24 10:01:21 2026 GMT
Subject: CN=00c4c05f73943647f9549dc3b26bea9d6e0f03f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:71:26:cf:48:14:dd:1a:c6:27:fa:9b:0d:4a:
7f:1d:31:19:2b:67:89:fb:35:80:c3:1a:51:9d:ac:
b1:ea:80:49:f2:f7:57:10:b0:38:e1:12:c3:cf:94:
dd:b5:46:07:32:89:ad:15:fb:e4:51:0c:6c:71:e8:
8f:ee:a1:ea:34:23:dd:ab:2f:b8:15:f3:3a:bf:a8:
ad:28:a9:f4:a0:3f:c6:f5:32:e4:8a:e2:6b:f0:42:
36:9a:77:ef:0b:32:c5:81:9d:8c:b4:e3:05:11:d7:
fa:d2:60:e2:b0:dd:1b:0b:ac:5e:40:d8:ee:8c:3e:
ef:03:e1:29:bc:22:3e:c1:8d:04:2b:97:fd:3f:68:
85:ee:d5:6a:21:58:b2:98:3f:c1:2d:35:0f:ba:f9:
ac:17:da:8f:fa:be:ac:5b:d9:0d:45:a3:d3:a6:81:
1b:f3:de:07:c7:a0:f6:34:11:f0:b1:b2:82:7c:67:
92:5f:86:19:cd:ca:74:32:21:7d:91:8f:71:de:d2:
b8:aa:ed:a1:65:56:bd:0f:19:7a:83:ae:d3:85:bd:
be:75:6a:8b:26:cb:a2:74:20:63:9b:9f:f2:cd:17:
8c:60:e0:d8:62:1b:28:40:0b:b9:d8:c5:1f:5f:d9:
31:96:e6:5f:0d:2c:38:c8:05:1c:d2:aa:02:9d:cc:
90:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:C4:C0:5F:73:94:36:47:F9:54:9D:C3:B2:6B:EA:9D:6E:0F:03:F2
X509v3 Authority Key Identifier:
keyid:20:DC:91:E6:66:49:4D:0D:C5:6A:2B:81:D2:29:AB:D6:EE:35:F8:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INyR5mZJTQ3FaiuB0imr1u41-Ew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:9f:3a:a6:13:53:28:26:21:40:53:bf:78:0a:78:68:dc:1a:
7d:97:43:5b:22:03:09:8c:26:9b:6f:9b:a5:9a:a0:56:f9:86:
f8:bb:d1:5e:c1:7b:2b:60:88:9f:34:a9:8a:07:0f:16:3e:80:
7c:b4:78:2f:8b:a5:99:45:e1:5d:6a:93:cd:cc:f8:5f:78:ab:
0e:e6:94:95:10:da:29:51:21:41:db:e0:60:4a:48:7c:7a:60:
49:e9:e6:4e:a6:b4:4c:89:14:ed:53:55:fb:fb:3f:fe:82:55:
a9:af:17:75:6c:cd:bf:af:5f:db:5e:41:5e:2e:6f:6a:a6:77:
a3:87:f4:ac:c4:66:0e:26:2b:d9:7a:6c:b1:3c:09:23:cc:d0:
79:d4:46:7a:e9:2e:48:2b:ba:8f:c1:b5:14:ed:ac:ab:1b:e9:
3d:86:62:f8:f3:14:91:02:38:84:ab:fa:96:18:46:84:be:a1:
8b:a7:44:7b:4d:dd:6c:77:0f:9b:b3:56:03:d8:5a:42:77:0a:
22:02:bd:6e:57:ec:63:55:f3:09:39:1c:4f:b5:05:43:d3:15:
41:08:e7:40:a2:86:09:b6:a5:d9:0f:14:c9:3e:62:22:26:6d:
f2:c1:f9:93:16:7f:b1:3d:cc:13:c8:21:6e:a5:52:76:73:4e:
72:80:28:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:09:34 2026 by rpki-client