Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.mft
File: ia7Sz_jOMbM0-DoLMF_u8B1x2nU.mft (raw, json)
Hash identifier: GhkbOrfVExO+Zj9sodUOzRyxr0zxe6Xpn3eMN8w/WRI=
Subject key identifier: 30:13:D5:A8:80:91:F3:14:18:B0:A7:14:56:C4:24:94:A4:85:11:7E
Authority key identifier: 89:AE:D2:CF:F8:CE:31:B3:34:F8:3A:0B:30:5F:EE:F0:1D:71:DA:75
Certificate issuer: /CN=89aed2cff8ce31b334f83a0b305feef01d71da75
Certificate serial: 019F9392369C53EE8BE01BB3948C6FBE2037
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.mft
Manifest number: 1982
Signing time: Fri 24 Jul 2026 10:01:00 +0000
Manifest this update: Fri 24 Jul 2026 10:01:00 +0000
Manifest next update: Sat 25 Jul 2026 10:01:00 +0000
Files and hashes: 1: FwqF1yEFG7mKuQRa7RkSyKPz0W0.roa (hash: arAr0Lk0kEre21H8drvKyvd7aUFHvFqu0QRUk2zIk0Y=)
2: ia7Sz_jOMbM0-DoLMF_u8B1x2nU.crl (hash: ev11bw6wRDTf6cLdxUdTph+R9Nn4OM2EGcrGvW5UQMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:92:36:9c:53:ee:8b:e0:1b:b3:94:8c:6f:be:20:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89aed2cff8ce31b334f83a0b305feef01d71da75
Validity
Not Before: Jul 24 10:01:00 2026 GMT
Not After : Jul 25 10:01:00 2026 GMT
Subject: CN=3013d5a88091f31418b0a71456c42494a485117e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4a:e8:14:7d:a1:0d:62:85:34:4d:c1:d4:34:
f4:09:67:86:83:71:c4:42:ca:5c:25:02:f1:ba:44:
d3:9c:69:e8:10:7d:7e:45:50:41:32:69:7a:d2:a7:
42:4b:6c:c6:5a:63:f5:58:ec:2b:91:15:0b:42:1e:
6f:d2:53:e0:ac:23:97:73:16:bf:b6:1e:90:c1:f3:
59:dd:3c:62:5e:69:4d:3c:63:72:20:81:de:2e:18:
80:02:0b:b2:af:5d:c5:71:a7:20:64:7a:cf:87:6b:
03:4a:e4:77:61:45:51:f9:24:b4:c0:e1:e7:50:3d:
95:31:34:4b:5e:4e:c0:73:fb:6b:f4:7c:b3:1a:5f:
72:53:ca:a9:d1:6a:a3:54:b6:a7:4c:c0:6b:50:ca:
c4:0f:48:92:ce:0b:0d:01:cc:bb:ec:0a:f1:d0:cc:
b3:16:d3:08:31:e8:ed:f4:a2:c1:e3:8e:2d:6c:44:
e3:42:30:45:79:0e:63:be:4a:83:bf:52:3d:63:29:
8a:3c:9c:2b:4d:86:8a:bd:b5:0b:f9:4e:70:ef:f3:
fd:b5:91:68:67:95:bd:22:cf:b2:9a:d7:82:b8:ce:
1b:54:b7:bf:fe:f9:dc:64:ce:0d:46:5f:f2:1e:37:
80:77:b2:dd:48:c2:a0:8e:9c:1d:6c:f1:96:72:55:
b7:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:13:D5:A8:80:91:F3:14:18:B0:A7:14:56:C4:24:94:A4:85:11:7E
X509v3 Authority Key Identifier:
keyid:89:AE:D2:CF:F8:CE:31:B3:34:F8:3A:0B:30:5F:EE:F0:1D:71:DA:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:59:68:ff:93:cb:18:01:94:50:5f:ec:f7:c5:2e:4b:e6:07:
11:6c:d8:ba:84:93:be:93:ce:e4:d3:6a:7d:55:0d:04:66:1b:
5f:28:97:4e:d8:3a:79:4b:ac:b3:76:d4:ff:93:dd:d2:8d:03:
39:9e:22:3a:f2:32:5f:4d:a1:61:7e:45:3f:03:ea:9c:b3:b9:
1d:d1:4a:ea:c9:85:49:b2:72:03:7d:57:16:1f:08:4d:af:97:
86:65:6e:d7:30:06:97:f9:1e:fc:6c:f6:c6:de:d3:64:75:42:
07:67:59:68:36:af:b2:e9:03:82:b2:fc:27:8f:f0:43:b0:48:
6d:20:b4:a1:e4:c3:1b:b8:ab:6f:17:d3:e3:ed:85:14:1f:ba:
4e:df:27:11:c3:f3:72:a2:e1:14:4b:7f:1d:05:06:a2:47:1d:
b8:cf:48:f2:4f:29:52:ca:35:73:9b:a6:82:44:66:a2:9c:c6:
e9:79:c3:ac:4c:7a:21:c5:95:27:d3:68:3e:33:05:12:ad:24:
dd:d0:79:e8:c7:5a:ea:a7:b8:5c:a4:08:c0:e0:9e:dc:c1:4e:
7e:fb:7a:86:51:be:00:d8:5d:c0:0e:b7:24:76:4b:23:18:cf:
54:1c:ba:1d:9d:47:66:6d:c4:f6:0e:d4:7f:3f:4e:09:b9:4a:
3d:01:d8:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:32:02 2026 by rpki-client