Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/64443e-03f8-4375-941c-e1d195ac35d2/1/1-iWi8osetikWERKHCUKl7RgbUZ8.mft
File: 1-iWi8osetikWERKHCUKl7RgbUZ8.mft (raw, json)
Hash identifier: enWk6ZLiAbwkQoixh7T5zXWKjrTgE++nX2mJnkmd/K4=
Subject key identifier: 5A:2B:37:A2:D0:E8:4F:00:7F:3C:FF:33:55:E4:4D:A5:81:9F:71:36
Authority key identifier: FA:25:A2:F2:8B:1E:B6:29:16:11:12:87:09:42:A5:ED:18:1B:51:9F
Certificate issuer: /CN=fa25a2f28b1eb629161112870942a5ed181b519f
Certificate serial: 019F90914078BE55C3BBCEDDEC20B3053A42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-iWi8osetikWERKHCUKl7RgbUZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/64443e-03f8-4375-941c-e1d195ac35d2/1/1-iWi8osetikWERKHCUKl7RgbUZ8.mft
Manifest number: 0216
Signing time: Thu 23 Jul 2026 20:01:06 +0000
Manifest this update: Thu 23 Jul 2026 20:01:06 +0000
Manifest next update: Fri 24 Jul 2026 20:01:06 +0000
Files and hashes: 1: 1-iWi8osetikWERKHCUKl7RgbUZ8.crl (hash: qFEieCgYeNkaLb5gUcIxxY1oXNx+I037b0t7ndZNLhk=)
2: npTp4Du46e6L-gb7_xi1R_gV0tY.roa (hash: AYItR+eYoLuQ57cxd9qVNl7nClhJqimYPK8LL9esiTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/64443e-03f8-4375-941c-e1d195ac35d2/1/1-iWi8osetikWERKHCUKl7RgbUZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/64443e-03f8-4375-941c-e1d195ac35d2/1/1-iWi8osetikWERKHCUKl7RgbUZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-iWi8osetikWERKHCUKl7RgbUZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:91:40:78:be:55:c3:bb:ce:dd:ec:20:b3:05:3a:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa25a2f28b1eb629161112870942a5ed181b519f
Validity
Not Before: Jul 23 20:01:06 2026 GMT
Not After : Jul 24 20:01:06 2026 GMT
Subject: CN=5a2b37a2d0e84f007f3cff3355e44da5819f7136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c9:ff:f4:31:e8:72:f4:72:e9:83:a1:dd:c4:
c6:96:43:2e:aa:8e:c6:27:fc:f8:76:46:cf:98:b2:
e8:a1:0d:1b:d3:2a:40:41:43:1f:9f:39:ab:e1:7f:
7e:4f:50:11:dc:58:05:7a:b4:65:3c:f6:7f:e2:11:
04:1d:a4:fc:f5:8c:85:e9:41:5e:c2:2e:03:70:18:
9f:53:20:af:d5:3d:6b:de:1a:e9:d1:4d:2a:39:aa:
ed:c2:64:2a:e3:63:3e:6a:d1:f9:25:7c:62:73:ba:
5b:55:53:ac:cb:c5:b9:3a:10:c6:95:b1:de:e1:56:
6a:10:fe:d1:55:f2:4a:14:91:12:60:c2:fe:5a:ce:
e1:13:ac:30:35:72:ff:e1:8f:15:fe:f2:92:28:69:
34:e9:7d:9a:bf:70:24:04:58:78:4f:90:36:ec:ce:
8f:80:e4:d5:71:ae:81:b9:24:6e:b1:ec:50:de:e2:
da:b9:f9:9e:85:78:53:da:0a:1f:a0:7a:0d:27:1e:
cf:76:d8:ba:40:90:4d:28:22:32:17:57:64:a1:62:
05:ac:f2:de:40:85:31:79:55:65:d4:a1:1b:00:90:
f8:6d:de:76:b0:60:df:df:61:13:2a:f6:ad:3d:2b:
dd:8b:51:4d:6c:65:53:1d:d8:08:1f:02:74:31:c2:
04:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:2B:37:A2:D0:E8:4F:00:7F:3C:FF:33:55:E4:4D:A5:81:9F:71:36
X509v3 Authority Key Identifier:
keyid:FA:25:A2:F2:8B:1E:B6:29:16:11:12:87:09:42:A5:ED:18:1B:51:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-iWi8osetikWERKHCUKl7RgbUZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/64443e-03f8-4375-941c-e1d195ac35d2/1/1-iWi8osetikWERKHCUKl7RgbUZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/64443e-03f8-4375-941c-e1d195ac35d2/1/1-iWi8osetikWERKHCUKl7RgbUZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:7d:83:5c:e7:31:d7:32:f4:94:84:5d:59:ed:1e:88:df:79:
f9:b9:03:3b:f5:f6:c5:ec:7e:5f:a8:22:f0:d2:8c:ce:d6:77:
4a:dd:ce:fe:1d:ab:ef:07:c5:25:ed:ad:dc:40:0f:df:6d:b1:
47:1c:f4:56:ee:14:46:1b:c4:5e:49:d9:0c:a9:d8:5e:fd:8f:
03:28:eb:65:4e:d9:81:a7:74:f1:15:a9:f1:90:1b:88:50:fa:
79:bb:2d:e7:21:4b:2f:e6:d1:48:f6:54:82:c4:cc:40:28:2b:
aa:45:de:64:b6:15:c2:f6:3e:3f:ad:03:2e:c9:dd:8f:28:36:
ee:96:3e:5e:40:38:80:c2:d0:c5:6b:23:cd:39:ce:49:18:c0:
05:33:61:06:bf:85:ca:16:62:37:c0:be:34:7e:f6:75:f6:3b:
33:32:65:b3:30:c4:1d:24:a5:fe:e7:c7:6c:68:a7:76:2b:97:
6c:ca:9e:f2:fe:96:a6:59:e9:2e:72:d0:0d:47:91:1e:81:30:
b6:a5:6b:6d:2d:9d:34:a4:7e:c0:02:74:33:c2:7a:f2:c1:8f:
81:13:61:29:48:80:12:12:6e:c4:d3:50:6d:53:b3:3a:01:1c:
b1:aa:c8:d9:ca:1d:40:59:25:0c:39:7d:8a:ef:c8:62:bc:4c:
2b:da:6c:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:02:13 2026 by rpki-client