Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/5ded6c-b469-420c-b15e-52b3f68dc0c2/1/i7dzgYUSSQpQCthD6irnF-8hsUw.mft
File: i7dzgYUSSQpQCthD6irnF-8hsUw.mft (raw, json)
Hash identifier: sOlqKLEqieEWJZn4qT4TEOECTar5fff4RPxuCp7Mj0A=
Subject key identifier: A1:1A:FC:9D:D5:C7:AB:4D:CE:28:E9:5A:31:4D:DD:85:FE:BD:56:A0
Authority key identifier: 8B:B7:73:81:85:12:49:0A:50:0A:D8:43:EA:2A:E7:17:EF:21:B1:4C
Certificate issuer: /CN=8bb773818512490a500ad843ea2ae717ef21b14c
Certificate serial: 019F95B7B5B1EA1DCCA751CFEC40B5D0F245
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i7dzgYUSSQpQCthD6irnF-8hsUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/5ded6c-b469-420c-b15e-52b3f68dc0c2/1/i7dzgYUSSQpQCthD6irnF-8hsUw.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 20:01:12 +0000
Manifest this update: Fri 24 Jul 2026 20:01:12 +0000
Manifest next update: Sat 25 Jul 2026 20:01:12 +0000
Files and hashes: 1: Ra13SMTFBvpWhxXrpfFnFw-OimM.roa (hash: b0Za2pBFcrD4LJ53MzUO0gNJytzhPTrcz+l8K+RFsRM=)
2: i7dzgYUSSQpQCthD6irnF-8hsUw.crl (hash: 4fAfDEJnk7zZ8mcLvGlyFRRkBnCBsddj1smDSM8ZgBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/5ded6c-b469-420c-b15e-52b3f68dc0c2/1/i7dzgYUSSQpQCthD6irnF-8hsUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/5ded6c-b469-420c-b15e-52b3f68dc0c2/1/i7dzgYUSSQpQCthD6irnF-8hsUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/i7dzgYUSSQpQCthD6irnF-8hsUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:b7:b5:b1:ea:1d:cc:a7:51:cf:ec:40:b5:d0:f2:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bb773818512490a500ad843ea2ae717ef21b14c
Validity
Not Before: Jul 24 20:01:12 2026 GMT
Not After : Jul 25 20:01:12 2026 GMT
Subject: CN=a11afc9dd5c7ab4dce28e95a314ddd85febd56a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:74:cf:c5:8c:79:70:71:e7:e3:7c:13:40:b8:
48:08:2c:0e:e2:fe:db:23:02:e4:1b:53:43:15:15:
16:8f:bd:5a:a2:9d:44:bb:81:ca:20:83:2f:d8:78:
b8:58:bd:26:2f:c6:10:73:59:84:4b:94:57:a6:c5:
63:4a:28:b5:1e:35:16:1f:8a:65:db:da:40:86:e7:
a5:fb:eb:34:59:15:48:db:cc:33:2c:5b:58:c3:62:
5c:e0:13:1b:96:cc:12:df:47:bb:8d:33:a3:70:e2:
07:8f:c6:15:64:46:35:15:29:fa:25:07:1c:0e:5e:
d0:02:54:0f:87:51:92:54:2b:01:7b:c4:70:f1:5f:
66:43:4d:5e:65:ef:ee:72:e6:89:2e:be:f8:9b:b1:
d5:1b:f8:b8:26:39:57:30:3b:ff:9f:e5:d2:65:16:
94:d0:4f:64:19:39:86:b5:e6:41:30:53:65:4a:30:
65:5d:db:6b:43:0e:12:87:e8:0e:8d:31:f1:bf:6a:
30:4f:2f:75:cd:1e:82:eb:22:7c:22:83:0a:d7:6e:
df:73:f0:7e:1f:72:f2:48:c2:60:17:49:31:e4:86:
f3:41:fd:50:06:ed:65:c7:46:de:de:37:e9:9a:92:
d2:47:4a:3d:58:7a:e2:ec:8a:0f:2b:6f:ee:17:34:
ae:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:1A:FC:9D:D5:C7:AB:4D:CE:28:E9:5A:31:4D:DD:85:FE:BD:56:A0
X509v3 Authority Key Identifier:
keyid:8B:B7:73:81:85:12:49:0A:50:0A:D8:43:EA:2A:E7:17:EF:21:B1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7dzgYUSSQpQCthD6irnF-8hsUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5ded6c-b469-420c-b15e-52b3f68dc0c2/1/i7dzgYUSSQpQCthD6irnF-8hsUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5ded6c-b469-420c-b15e-52b3f68dc0c2/1/i7dzgYUSSQpQCthD6irnF-8hsUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:32:a8:7f:35:62:4a:ec:28:6b:d2:dc:75:30:68:8c:88:6d:
4e:d6:10:81:b7:c8:df:45:6a:1a:eb:22:d3:f3:4b:e2:72:2b:
53:44:f3:20:7a:3e:cf:f8:5d:c1:15:f3:af:8b:53:d9:31:e2:
4a:88:3f:f1:0c:07:a3:c1:16:b1:18:fb:08:6d:32:82:15:2f:
b0:37:4f:51:7f:6d:d9:44:41:b8:2e:fc:49:fe:ac:c6:a8:84:
68:03:7f:9c:a9:1a:8c:74:35:e5:d1:81:88:e3:6a:4f:d2:f3:
bd:fc:25:33:b6:f5:69:82:e2:c6:e5:e4:69:49:cc:ba:39:8a:
0a:b6:2f:88:56:3e:0c:5d:73:ee:16:7c:28:0d:51:b8:8d:6a:
64:1d:5b:00:3b:f0:3b:44:13:df:57:84:c4:59:5e:47:c3:a0:
9b:fd:34:db:14:9c:a7:5b:7e:d0:5f:e4:a3:ce:8e:d0:67:7c:
d4:7e:9d:e1:ae:dd:74:c3:27:40:ff:a6:69:92:cd:38:0a:b4:
10:3c:3a:9a:90:e4:2f:f6:b1:0d:15:1d:62:1c:1f:70:96:ba:
b5:be:03:43:a6:e5:bf:87:b5:4d:3f:ea:2f:d8:5f:e9:80:67:
23:a2:a7:60:93:7c:4c:0e:13:53:e7:a4:db:df:d0:fa:b8:2a:
61:f3:25:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 02:04:38 2026 by rpki-client