Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.mft
File: I32X8VCOekR4mfWaVfuKpiQe9RA.mft (raw, json)
Hash identifier: oYCwZgxFgVH8y5ReCe9dyG5hlQ8MHg1GwSx5MfTmtw8=
Subject key identifier: 66:96:87:4B:53:60:41:10:CA:0E:A5:74:47:31:93:2A:C8:FC:87:F6
Authority key identifier: 23:7D:97:F1:50:8E:7A:44:78:99:F5:9A:55:FB:8A:A6:24:1E:F5:10
Certificate issuer: /CN=237d97f1508e7a447899f59a55fb8aa6241ef510
Certificate serial: 019F91DA35DFE530C07E36726681D772B9B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I32X8VCOekR4mfWaVfuKpiQe9RA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.mft
Manifest number: 0853
Signing time: Fri 24 Jul 2026 02:00:24 +0000
Manifest this update: Fri 24 Jul 2026 02:00:24 +0000
Manifest next update: Sat 25 Jul 2026 02:00:24 +0000
Files and hashes: 1: 2MeX37cZHGHHuxJtj1E28ddzIsI.roa (hash: LZd2fssCxVZOERqVCoqkBsBn4xYtLG5cKZGv8FiTdNw=)
2: I32X8VCOekR4mfWaVfuKpiQe9RA.crl (hash: sazUr+lrCJ+KTbmIlIPy0775E8oNZPxSF22EzA/z3Ng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.mft
rsync://rpki.ripe.net/repository/DEFAULT/I32X8VCOekR4mfWaVfuKpiQe9RA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:35:df:e5:30:c0:7e:36:72:66:81:d7:72:b9:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237d97f1508e7a447899f59a55fb8aa6241ef510
Validity
Not Before: Jul 24 02:00:24 2026 GMT
Not After : Jul 25 02:00:24 2026 GMT
Subject: CN=6696874b53604110ca0ea5744731932ac8fc87f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:94:b0:ad:04:9e:7d:7b:02:49:c0:76:51:c1:
fd:43:99:81:fe:64:8d:af:b4:91:ea:60:be:27:09:
58:d2:84:db:32:7d:1e:2f:2a:ea:4a:1f:ac:92:72:
90:3c:a8:ff:8a:3c:8f:92:9d:5e:eb:a8:50:5f:04:
36:36:d7:ee:25:1d:a4:e1:f6:99:a9:0b:9e:22:0d:
e8:b7:fa:35:dd:b4:74:9e:30:84:09:b6:6c:17:4a:
af:68:6d:06:f2:fa:8d:5e:c7:cd:96:4b:62:3c:0b:
80:dd:c7:42:98:e7:9e:24:c0:44:20:f9:dc:22:26:
ce:44:83:bd:fd:a0:c9:94:06:0c:2b:d8:8b:5c:68:
48:a4:50:5d:ea:ff:06:f2:45:4f:ef:1f:18:3c:2d:
c1:88:5c:fb:62:1d:95:db:e5:ce:65:66:c3:cb:05:
7a:c0:e9:0b:01:a0:ac:05:b6:e1:8a:70:fb:10:ea:
21:1a:d1:96:ad:88:dd:67:c9:b7:6c:b8:32:69:0a:
64:c3:42:a7:5e:a2:54:0d:6e:0c:12:db:d7:a4:62:
a1:3e:ff:b4:4c:e9:c3:d0:2b:47:09:d8:9c:94:5e:
c6:1c:cb:aa:10:b4:46:78:ef:61:1d:fe:0b:03:3b:
b8:47:51:77:94:8f:a9:1e:7e:92:53:30:72:84:21:
29:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:96:87:4B:53:60:41:10:CA:0E:A5:74:47:31:93:2A:C8:FC:87:F6
X509v3 Authority Key Identifier:
keyid:23:7D:97:F1:50:8E:7A:44:78:99:F5:9A:55:FB:8A:A6:24:1E:F5:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I32X8VCOekR4mfWaVfuKpiQe9RA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:90:7a:6e:a1:7c:5a:4a:d3:e3:bd:d4:a1:36:62:7a:dc:90:
7c:2b:38:2c:2b:9a:b6:5c:82:a0:59:7c:f0:10:8c:b7:be:47:
06:fa:12:f2:5d:18:28:01:9b:6d:7c:7d:35:05:95:91:ea:94:
4e:01:ef:f3:1b:2c:c4:71:3d:a1:3f:04:43:bc:fb:a6:f3:0a:
b0:f2:bb:97:c9:11:91:20:d0:d4:01:84:fb:ac:d3:6b:e0:29:
e3:7a:2b:d9:ac:81:ff:49:a6:a8:dc:8a:c7:ea:d5:cf:60:a3:
e9:91:c5:dd:eb:32:9b:ef:fb:13:61:a4:e7:af:21:e9:4c:f1:
d1:83:8f:fe:16:18:3b:da:51:ec:2f:21:62:56:19:00:11:12:
dd:7d:c8:9c:b5:21:c8:9f:ed:4d:cf:83:b3:8f:a8:28:58:d2:
25:a6:d7:8a:0a:f9:35:89:39:79:79:f3:83:aa:7f:8b:12:b9:
ed:1e:46:89:20:c7:e6:4e:44:28:6f:dc:37:37:31:f1:c5:39:
2b:7d:05:fb:c3:26:da:33:0f:9f:a3:4b:29:80:bb:40:ee:68:
45:77:14:19:6d:7f:6e:d9:be:8e:34:24:78:9d:0c:9b:34:fb:
6d:3a:a7:ba:ac:0c:1a:94:9d:6d:2f:cf:36:3c:f1:1f:27:0b:
62:8d:10:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:28:45 2026 by rpki-client