Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.mft
File: ihZhi3H_yA4cP0HtDfyJq16WP9I.mft (raw, json)
Hash identifier: Rn3m9K0CT77WUqVggWMkdl5kFY5Co/8lxpBuIfp1HKY=
Subject key identifier: D1:AA:49:E5:D0:16:BE:25:F6:2C:30:00:75:F4:A3:38:CB:55:15:41
Authority key identifier: 8A:16:61:8B:71:FF:C8:0E:1C:3F:41:ED:0D:FC:89:AB:5E:96:3F:D2
Certificate issuer: /CN=8a16618b71ffc80e1c3f41ed0dfc89ab5e963fd2
Certificate serial: 019F958055ECF859170B376C233531BE1691
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ihZhi3H_yA4cP0HtDfyJq16WP9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.mft
Manifest number: 19CF
Signing time: Fri 24 Jul 2026 19:00:43 +0000
Manifest this update: Fri 24 Jul 2026 19:00:43 +0000
Manifest next update: Sat 25 Jul 2026 19:00:43 +0000
Files and hashes: 1: SheiKMejj2UlfePnEJK4YM6UYGQ.roa (hash: Ll9jhdHvmhGlynW15LRcU3rlqzasSbGuWZW11z3vQs0=)
2: auDg02aDw-Ng4UMnzRMAZPV_78A.roa (hash: A2MCkRQZ/VKnTqKHBJZ1hnIKYJGRR8Cd5N45/0b9lic=)
3: ihZhi3H_yA4cP0HtDfyJq16WP9I.crl (hash: SLn5fE5+hEQPL72N1xt3pUH6oUyi6KtKUJPqj2DO2uE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ihZhi3H_yA4cP0HtDfyJq16WP9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:80:55:ec:f8:59:17:0b:37:6c:23:35:31:be:16:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a16618b71ffc80e1c3f41ed0dfc89ab5e963fd2
Validity
Not Before: Jul 24 19:00:43 2026 GMT
Not After : Jul 25 19:00:43 2026 GMT
Subject: CN=d1aa49e5d016be25f62c300075f4a338cb551541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e5:4b:45:75:20:8a:28:dd:ae:06:bb:69:81:
0e:d4:99:e0:b1:64:32:fe:92:c8:4c:79:1a:47:ed:
8f:7c:80:c8:40:36:af:67:13:b7:c7:b1:6b:41:37:
f1:73:e4:19:cf:87:68:f2:c7:5c:42:97:6d:a5:41:
f9:45:27:79:08:01:04:d6:9c:83:e0:34:86:7c:35:
0a:f8:3d:57:0f:b1:4b:dc:ab:22:2a:ae:e1:79:58:
23:3f:0f:48:76:ed:ea:1b:0f:57:f6:dd:05:eb:f4:
76:72:18:e1:05:db:54:e5:fe:81:ab:11:db:be:56:
30:f9:bc:8e:46:51:d5:e3:ad:f6:30:f2:72:50:14:
2e:ee:9a:90:85:e1:f7:a4:34:71:ea:3b:8f:7c:08:
ad:c5:17:38:fb:01:d1:ea:1c:52:d6:ac:a4:4d:f9:
66:e1:26:f0:77:73:0a:02:c2:37:d8:13:0c:16:3c:
b8:68:25:3e:be:64:a4:5a:25:2e:09:91:3f:ea:4a:
83:91:8e:77:09:cf:06:b2:b8:12:fa:77:bf:4c:f4:
e8:03:5a:33:5f:ff:1b:9b:99:75:d7:66:70:9d:b3:
f2:c6:0c:00:69:81:a6:66:0c:bf:14:47:52:41:49:
2b:44:1c:0f:7a:bb:30:9e:e8:57:9b:98:e1:39:ec:
ff:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:AA:49:E5:D0:16:BE:25:F6:2C:30:00:75:F4:A3:38:CB:55:15:41
X509v3 Authority Key Identifier:
keyid:8A:16:61:8B:71:FF:C8:0E:1C:3F:41:ED:0D:FC:89:AB:5E:96:3F:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ihZhi3H_yA4cP0HtDfyJq16WP9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:ea:85:aa:ad:9c:76:19:2c:98:fd:c4:12:5c:1c:28:e3:78:
34:85:1e:66:84:14:68:66:93:b6:f9:4e:ca:cc:e5:3e:7e:5a:
b4:f5:c3:41:27:f8:f7:f8:82:ba:55:70:7b:74:dc:d3:59:f5:
e3:eb:d2:5d:69:ac:67:14:c9:8d:e1:66:f6:8d:6e:8e:41:5e:
9c:5f:07:d8:a2:00:66:74:71:ed:65:89:d6:28:e9:f4:d5:cb:
d0:57:d0:3f:2f:70:56:b7:72:e2:fe:c7:53:9c:d6:69:ad:9f:
58:59:bb:fa:fc:64:c7:a4:9e:38:f0:ce:92:dc:7c:97:f3:5e:
ed:53:da:8d:97:8a:ea:61:e6:b2:0c:dd:22:6d:fe:a3:11:79:
2c:81:b4:08:98:bd:4b:7c:c3:c2:4e:e8:ae:9f:a6:fe:c8:ce:
58:35:83:6d:20:38:e0:0a:4b:83:8d:de:7b:fa:5e:b6:0b:e4:
34:f9:e3:9e:37:4f:9c:bd:e6:18:27:4e:8c:34:79:64:7a:dd:
66:33:52:ae:dd:2f:1d:74:94:3d:83:eb:f0:7c:67:64:59:ed:
2e:21:c1:36:21:03:72:9f:38:cb:d9:e2:48:8f:ec:cc:6b:eb:
7b:69:90:14:53:f5:e9:5a:60:5f:cd:4a:2f:ea:43:85:96:ce:
54:cc:75:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:15:55 2026 by rpki-client