Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/ido1Hh4yCS63YfLI6ix1oZcALUs.mft
File: ido1Hh4yCS63YfLI6ix1oZcALUs.mft (raw, json)
Hash identifier: Vz1rv5gnNIGO5LNQrlqnvCMNW4iEL8WaY+e8qkU72V4=
Subject key identifier: C2:E0:B4:85:DA:CB:04:FB:01:9D:42:2F:45:38:E8:64:4E:42:95:BD
Authority key identifier: 89:DA:35:1E:1E:32:09:2E:B7:61:F2:C8:EA:2C:75:A1:97:00:2D:4B
Certificate issuer: /CN=89da351e1e32092eb761f2c8ea2c75a197002d4b
Certificate serial: 019F935A948593C14345193B04BC59CD15FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ido1Hh4yCS63YfLI6ix1oZcALUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/ido1Hh4yCS63YfLI6ix1oZcALUs.mft
Manifest number: 41
Signing time: Fri 24 Jul 2026 09:00:14 +0000
Manifest this update: Fri 24 Jul 2026 09:00:14 +0000
Manifest next update: Sat 25 Jul 2026 09:00:14 +0000
Files and hashes: 1: TTj59N_k0baRYBbpMvwMER52UMA.roa (hash: Qb/eGpeDdebAZbVO1qCzlupreg9p5z6Eu1FINEUZOCw=)
2: ido1Hh4yCS63YfLI6ix1oZcALUs.crl (hash: FezxQn723lb2HT06FSH5LxVSb0v9PWHCY+DEdmmX2XQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/ido1Hh4yCS63YfLI6ix1oZcALUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/ido1Hh4yCS63YfLI6ix1oZcALUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ido1Hh4yCS63YfLI6ix1oZcALUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5a:94:85:93:c1:43:45:19:3b:04:bc:59:cd:15:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89da351e1e32092eb761f2c8ea2c75a197002d4b
Validity
Not Before: Jul 24 09:00:14 2026 GMT
Not After : Jul 25 09:00:14 2026 GMT
Subject: CN=c2e0b485dacb04fb019d422f4538e8644e4295bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:80:e1:a2:51:7a:5f:55:9e:c5:43:b7:ce:d1:
37:5a:85:91:04:3b:b6:73:17:97:17:e1:3f:ec:af:
32:97:7e:92:07:f5:d3:58:53:bf:05:23:0f:3a:63:
9e:2e:02:56:5b:6c:0e:48:0e:33:c4:16:6a:9b:16:
78:50:e9:bf:8e:0f:e8:d1:80:97:90:a5:12:7e:16:
42:0e:a2:0d:5f:92:de:11:b5:b9:e1:c0:07:b6:90:
3d:32:4e:0e:d5:a5:c5:e5:ec:e3:1a:10:5d:b5:c7:
5a:fc:d2:73:ef:3e:7f:99:7e:b8:51:aa:f5:df:2b:
24:55:d8:0c:82:b2:69:24:a4:17:2c:5d:a0:5b:63:
f9:91:3f:6e:94:45:b7:ff:15:fa:11:73:4f:4f:4b:
d5:7c:c5:53:14:91:f4:ef:8a:41:e9:b1:39:b3:f5:
0e:8c:21:72:be:f3:46:18:4c:c1:b7:6b:24:00:5a:
f7:4e:d1:83:30:90:2d:0b:e2:87:07:a8:32:84:34:
60:93:34:8e:f4:86:4f:4d:5a:25:c4:6b:40:c7:81:
8d:98:ca:78:28:64:e5:83:1e:65:45:6d:c4:66:7d:
9e:ee:01:59:45:f5:09:4d:56:02:47:0a:7b:4c:36:
bc:ca:b0:8c:e0:47:9c:3f:69:46:f4:c2:c2:fa:dc:
9d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:E0:B4:85:DA:CB:04:FB:01:9D:42:2F:45:38:E8:64:4E:42:95:BD
X509v3 Authority Key Identifier:
keyid:89:DA:35:1E:1E:32:09:2E:B7:61:F2:C8:EA:2C:75:A1:97:00:2D:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ido1Hh4yCS63YfLI6ix1oZcALUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/ido1Hh4yCS63YfLI6ix1oZcALUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/ido1Hh4yCS63YfLI6ix1oZcALUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:f3:58:be:72:cf:ff:13:9d:61:91:8f:a5:9b:3b:91:a1:98:
c1:99:d1:04:ad:1a:7d:09:b6:e5:14:fe:18:b4:a4:76:8e:de:
6a:42:92:4f:38:5e:77:51:18:d6:83:3d:e9:00:69:7b:35:17:
7c:41:db:9e:e0:37:9c:eb:eb:0e:b2:11:ff:75:c3:6e:69:c8:
16:fb:6e:02:4b:e8:90:98:1c:5e:0e:cf:ff:90:26:00:1a:33:
12:b3:ad:67:1a:56:09:f0:18:74:04:c8:99:66:b8:59:6b:14:
ea:81:c5:9e:9e:7e:f9:28:b9:13:fb:34:9b:89:ec:fa:79:29:
52:e9:15:0e:6e:14:ac:09:5d:df:27:28:fb:6b:31:98:b1:f3:
6c:62:8a:28:d1:8b:2c:d2:e3:48:f8:cc:44:c1:e7:ee:d6:92:
89:d2:57:1f:33:a0:6e:79:09:9e:ca:70:77:92:28:91:06:b4:
d9:35:88:66:9c:b5:58:66:87:51:5a:94:1b:fa:2b:d9:54:66:
65:c4:1f:6e:83:c8:ef:49:fe:50:ce:49:25:73:7f:ca:84:97:
b0:c9:62:b5:24:66:0d:dd:62:20:ac:da:bd:d9:70:c1:57:9f:
0c:7e:91:14:ef:47:33:23:db:8a:fa:c7:46:fd:7e:0b:ac:61:
13:c5:7f:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:07:18 2026 by rpki-client