Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/7abdf1-252e-4b36-9270-a96102c83641/1/i7nJXujwyzU8HemSB5KjTTAkRhc.mft
File: i7nJXujwyzU8HemSB5KjTTAkRhc.mft (raw, json)
Hash identifier: vA+e+Bot2SqmZS1U0+OWZAXfPf6YcQNu3VtCwEK+Gjg=
Subject key identifier: D5:47:B4:72:BE:FB:D4:49:A8:7F:DF:E5:15:76:06:15:E1:A9:57:A0
Authority key identifier: 8B:B9:C9:5E:E8:F0:CB:35:3C:1D:E9:92:07:92:A3:4D:30:24:46:17
Certificate issuer: /CN=8bb9c95ee8f0cb353c1de9920792a34d30244617
Certificate serial: 019F8F7FB61448B65EABD367B340C6D86DD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i7nJXujwyzU8HemSB5KjTTAkRhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/7abdf1-252e-4b36-9270-a96102c83641/1/i7nJXujwyzU8HemSB5KjTTAkRhc.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:02:19 +0000
Manifest this update: Thu 23 Jul 2026 15:02:19 +0000
Manifest next update: Fri 24 Jul 2026 15:02:19 +0000
Files and hashes: 1: 1vRpnwT5aWEFUf7idoYyMgEId1A.roa (hash: n5E9zBhbTEAOt3MyaXx4rOi5mO2COvIRgHqBDBLt80c=)
2: RTei5mA4S96lbi42Q3vTGKXxacg.asa (hash: ZSqSBARSF1NeaRnky6OQdESjN9MCG3xVCSNU88xKLhE=)
3: i7nJXujwyzU8HemSB5KjTTAkRhc.crl (hash: Ko1pFyovdybwIVwSlAVBZ4NgXNe2Ldgf/x3nVdhVFwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/7abdf1-252e-4b36-9270-a96102c83641/1/i7nJXujwyzU8HemSB5KjTTAkRhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/7abdf1-252e-4b36-9270-a96102c83641/1/i7nJXujwyzU8HemSB5KjTTAkRhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/i7nJXujwyzU8HemSB5KjTTAkRhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:b6:14:48:b6:5e:ab:d3:67:b3:40:c6:d8:6d:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bb9c95ee8f0cb353c1de9920792a34d30244617
Validity
Not Before: Jul 23 15:02:19 2026 GMT
Not After : Jul 24 15:02:19 2026 GMT
Subject: CN=d547b472befbd449a87fdfe515760615e1a957a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:95:49:e8:9d:3f:4a:7c:da:04:3c:c0:e9:76:
2c:d0:00:56:1a:bc:2e:f7:06:1d:d5:e1:7f:d5:55:
cf:e7:bd:16:e8:b2:04:0a:10:67:7d:40:98:cb:bc:
41:f9:07:56:98:d0:8c:5d:8a:fc:7f:de:ee:c3:80:
57:fa:cc:db:b0:97:8f:3b:bb:22:74:b4:21:17:55:
41:4d:96:96:a6:7f:66:3b:30:2a:52:68:ae:c0:72:
9a:8f:f1:f6:10:75:4b:d1:96:44:09:e7:59:f3:43:
11:a6:16:aa:26:ab:92:7c:5f:3a:12:e2:e5:0c:a1:
3e:6f:af:ec:8b:0f:ad:d3:a2:7a:38:cd:77:2b:b0:
0d:0a:7a:60:62:9f:74:8f:3d:fa:07:d8:dd:6f:22:
55:54:a9:1f:09:59:ff:14:53:ac:24:ec:be:d5:53:
6c:14:f4:c2:cc:96:50:38:3a:1c:b6:3f:22:67:07:
44:b1:65:bb:1a:a9:63:29:a7:3b:75:2b:a2:6d:0f:
aa:54:d7:0e:bc:3a:4a:f1:d8:17:cd:47:f5:96:81:
99:df:3d:6c:f0:93:88:9b:54:cb:ce:34:ff:0e:0d:
24:aa:fc:38:72:14:3a:c8:34:51:26:4c:26:43:23:
5e:ec:f9:20:e7:ea:b8:d9:93:62:71:5e:bb:e4:0c:
9d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:47:B4:72:BE:FB:D4:49:A8:7F:DF:E5:15:76:06:15:E1:A9:57:A0
X509v3 Authority Key Identifier:
keyid:8B:B9:C9:5E:E8:F0:CB:35:3C:1D:E9:92:07:92:A3:4D:30:24:46:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7nJXujwyzU8HemSB5KjTTAkRhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7abdf1-252e-4b36-9270-a96102c83641/1/i7nJXujwyzU8HemSB5KjTTAkRhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7abdf1-252e-4b36-9270-a96102c83641/1/i7nJXujwyzU8HemSB5KjTTAkRhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:8f:b3:52:55:07:d1:9d:d6:ef:88:ab:4e:48:d3:35:4a:c1:
8b:12:6a:b7:f0:06:d5:48:ce:80:ad:d0:c1:1d:f4:64:f0:c9:
e3:47:cd:c6:36:3c:2a:8e:40:79:b8:82:d3:f6:c3:86:26:79:
25:9d:99:9f:48:54:05:e0:ad:2d:01:f9:92:99:f5:32:9e:4a:
0b:9f:32:aa:d1:1a:98:65:9b:46:27:e1:85:0c:a9:e1:19:75:
25:b7:ce:ae:57:a7:0c:86:9b:e5:bf:cb:93:51:0e:a5:af:ed:
39:b5:08:8e:78:5d:0d:bb:f6:3d:d3:b6:59:5f:4c:bc:30:fc:
3b:55:57:3d:73:e8:c3:fc:8b:d6:d8:b2:6f:16:74:d1:0a:67:
df:f3:ab:2e:7a:a6:0e:7d:36:8f:ee:cd:ab:29:1b:6a:46:b8:
d4:ae:4e:1f:7e:f6:fa:27:87:ec:9b:84:1b:55:27:d2:c1:30:
7c:00:60:28:5c:34:c3:fd:e7:9d:18:38:2d:71:27:8c:95:50:
2b:91:c2:e5:51:dd:38:b3:15:25:c4:32:f5:3b:f1:43:d2:9d:
64:b2:29:c8:87:c7:86:93:82:d6:0c:3b:82:6f:42:13:b8:b8:
e6:6a:10:37:ab:75:df:79:ba:f7:03:fa:95:e1:bf:e0:ae:f8:
b8:5c:90:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:58:12 2026 by rpki-client