Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/fa14e8-f716-4075-8614-3f495bf99431/1/206iqo001DtLZBo68wZChJv0qP4.mft
File: 206iqo001DtLZBo68wZChJv0qP4.mft (raw, json)
Hash identifier: uhzguXTqM5kSwyByNT8mD1Xnw+lmPnfELOSVfEXTGj4=
Subject key identifier: 2A:45:A6:0F:84:A8:E6:3F:86:F5:98:C9:37:26:91:CE:6F:9E:5F:CF
Authority key identifier: DB:4E:A2:AA:8D:34:D4:3B:4B:64:1A:3A:F3:06:42:84:9B:F4:A8:FE
Certificate issuer: /CN=db4ea2aa8d34d43b4b641a3af30642849bf4a8fe
Certificate serial: 019F92ED8239C3D1CCA6FE6C4523F27F32E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/206iqo001DtLZBo68wZChJv0qP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/fa14e8-f716-4075-8614-3f495bf99431/1/206iqo001DtLZBo68wZChJv0qP4.mft
Manifest number: 8E
Signing time: Fri 24 Jul 2026 07:01:06 +0000
Manifest this update: Fri 24 Jul 2026 07:01:06 +0000
Manifest next update: Sat 25 Jul 2026 07:01:06 +0000
Files and hashes: 1: 206iqo001DtLZBo68wZChJv0qP4.crl (hash: ZHqOScIMkfmq4q5K8V3+90jgiy2VBhYtf71QWCleR90=)
2: 91e9yF9Tf7PVgXnUQvheAdf-6Us.roa (hash: 98Ii+uAjQhKWebR7PAPkmqEpVcWs6e6h4lYnAI9zFHo=)
3: pLjHrcvcNBFAlqR4zJOOhU_NC-c.roa (hash: i1jQeihj8pFQh1bbrfH4V97DkpUqCZyj8dwZ2mijp1g=)
4: yfOZU5CKZDAcHHGqxEk4K09qllU.roa (hash: gRxq9ezYdjnbgaXmyUT7raFFHRBGAap8BunIHpMnOwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/fa14e8-f716-4075-8614-3f495bf99431/1/206iqo001DtLZBo68wZChJv0qP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/fa14e8-f716-4075-8614-3f495bf99431/1/206iqo001DtLZBo68wZChJv0qP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/206iqo001DtLZBo68wZChJv0qP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:82:39:c3:d1:cc:a6:fe:6c:45:23:f2:7f:32:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db4ea2aa8d34d43b4b641a3af30642849bf4a8fe
Validity
Not Before: Jul 24 07:01:06 2026 GMT
Not After : Jul 25 07:01:06 2026 GMT
Subject: CN=2a45a60f84a8e63f86f598c9372691ce6f9e5fcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cd:94:6c:65:4b:56:f2:0a:b3:90:9a:f6:44:
21:e8:b6:d9:d0:35:af:33:bb:7d:f2:8a:9c:36:34:
cd:52:b7:58:3f:19:0a:3c:6b:5b:30:bf:a5:d3:d8:
f4:d2:c8:0f:a1:9a:ae:3e:ab:21:b4:0b:f0:01:d0:
1b:8a:49:28:26:41:5b:c0:57:77:18:a6:bf:95:6e:
9b:0b:13:5f:ee:71:f7:4d:4d:98:d5:35:fd:74:36:
80:bd:58:2a:f7:8d:13:fc:e7:27:ac:0b:67:34:9c:
f5:c2:e7:9f:d5:9f:d5:30:aa:1f:1c:71:7e:04:7a:
d8:26:c6:98:c2:f8:4c:c2:e3:54:3a:b7:ec:d5:82:
90:8c:8d:67:15:66:73:8b:21:ea:0e:f3:08:87:00:
e0:fc:e6:6f:38:6a:e1:91:85:09:d9:46:12:01:0f:
8f:21:1b:bc:ae:7c:fb:98:78:f7:81:b5:be:28:e1:
98:ae:f7:ed:9c:3c:a0:b1:b5:54:e0:62:93:bd:ba:
0d:6f:bb:64:1a:fa:b5:65:ad:d2:d1:97:c0:3c:99:
9e:09:67:d3:0b:c1:51:4e:e5:a6:7c:ca:6e:ad:90:
59:d0:ed:d5:07:b9:69:7b:0e:87:4c:ac:1b:28:4e:
e2:da:b5:aa:7e:61:8b:99:47:cb:45:3a:92:ef:68:
c1:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:45:A6:0F:84:A8:E6:3F:86:F5:98:C9:37:26:91:CE:6F:9E:5F:CF
X509v3 Authority Key Identifier:
keyid:DB:4E:A2:AA:8D:34:D4:3B:4B:64:1A:3A:F3:06:42:84:9B:F4:A8:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/206iqo001DtLZBo68wZChJv0qP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/fa14e8-f716-4075-8614-3f495bf99431/1/206iqo001DtLZBo68wZChJv0qP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/fa14e8-f716-4075-8614-3f495bf99431/1/206iqo001DtLZBo68wZChJv0qP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:10:4f:16:fc:49:8d:15:6c:a7:02:6d:27:7d:41:97:39:13:
70:c4:43:14:ec:9c:30:1e:32:0f:2b:2d:4b:68:b9:b9:3e:6e:
31:85:d6:8e:b4:95:1f:07:43:02:a9:19:15:03:2b:62:f5:27:
eb:9e:63:34:4d:10:22:b7:bb:19:c2:f4:0e:8e:69:b7:05:cc:
16:53:5a:70:4c:d4:9e:3b:6d:33:fd:ba:f8:d0:33:3d:20:d0:
0e:7c:c4:30:78:28:51:2f:6e:b5:0e:7f:aa:d5:97:96:2e:86:
29:89:22:40:65:47:8e:58:1c:67:bb:5b:97:92:dd:08:a8:5d:
2e:7e:b0:72:54:4e:b5:ed:c2:cc:40:ce:0d:90:cb:b9:c5:1e:
e8:b9:37:e1:0c:cd:29:5b:4b:c9:5d:7f:72:ab:dc:68:cf:a0:
f8:ae:81:e5:79:51:b5:6e:44:ed:61:55:4b:a2:70:ac:c7:f0:
a3:a4:25:29:5b:34:57:59:7e:c5:40:b7:de:82:8b:90:94:fb:
b9:1f:03:fd:96:2b:53:46:d4:73:27:d3:e0:e1:42:d5:c3:0e:
81:6c:d8:d9:ef:ed:4d:77:b8:a4:aa:00:de:23:b1:34:e8:93:
b6:91:a2:0f:f6:cb:8c:f3:79:9a:3e:f2:aa:ec:6c:7e:47:1e:
de:aa:b7:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:09:33 2026 by rpki-client