Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft
File: IXt6sGK8gos0jQUwbmU1R0i51tY.mft (raw, json)
Hash identifier: GD/sDZTBJIRAnFyDj0e8guIiJq1C+b/w9uoZ/RF9Fc0=
Subject key identifier: 08:E7:28:C6:56:46:04:BA:64:08:2B:4A:3E:E2:A6:74:1E:C0:55:67
Authority key identifier: 21:7B:7A:B0:62:BC:82:8B:34:8D:05:30:6E:65:35:47:48:B9:D6:D6
Certificate issuer: /CN=217b7ab062bc828b348d05306e65354748b9d6d6
Certificate serial: 019F9392313668C72F3A9575F62F7A6395CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft
Manifest number: 0D7F
Signing time: Fri 24 Jul 2026 10:00:59 +0000
Manifest this update: Fri 24 Jul 2026 10:00:59 +0000
Manifest next update: Sat 25 Jul 2026 10:00:59 +0000
Files and hashes: 1: Ha1zzuR5phsP43HrNuYV02K8JmM.roa (hash: OIS0Kv+EMSNX8skAuIawL3We9Kkncv5+iFQyWWdpmbk=)
2: IXt6sGK8gos0jQUwbmU1R0i51tY.crl (hash: xV1MH6bZHRj5RAwuzo288ypNv1X/kLv19sEbuMPnOCg=)
3: SqHxe2uwvaoACopO4_oazg_nels.roa (hash: 9zPi+ENkqVQXBQ+5cr5nLO5x0488pkDK6RTbeEiOUlc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:92:31:36:68:c7:2f:3a:95:75:f6:2f:7a:63:95:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=217b7ab062bc828b348d05306e65354748b9d6d6
Validity
Not Before: Jul 24 10:00:59 2026 GMT
Not After : Jul 25 10:00:59 2026 GMT
Subject: CN=08e728c6564604ba64082b4a3ee2a6741ec05567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:51:0b:da:f0:91:a1:62:95:3e:cd:4d:c7:8d:
ed:20:8a:13:ae:86:b4:c0:50:11:ed:b7:7c:e7:9e:
02:29:ab:b6:97:7d:c9:1e:70:23:1c:8d:76:8a:f8:
ca:09:b1:13:97:f9:44:12:4f:20:27:ce:7d:62:b8:
b2:bc:33:93:af:dd:f7:20:64:0a:24:5a:fa:8e:23:
dd:f1:1d:ba:e5:54:90:40:02:37:29:9b:69:b0:5d:
92:c4:9b:80:eb:b4:ee:6f:22:00:83:57:0e:09:1e:
d9:32:58:7c:e0:20:b5:25:1e:e4:d0:2c:c9:04:6a:
0b:cb:fe:12:65:72:8f:4b:3d:0d:36:c4:63:9c:42:
c0:0f:5f:ad:c8:87:a3:b2:72:d4:00:44:dc:82:d6:
8d:e9:03:30:96:18:08:40:fe:fb:34:82:e9:09:5e:
90:8d:a4:95:f7:ba:5d:83:44:38:7d:80:37:c9:10:
1a:02:6e:ac:c2:37:14:c4:f7:35:ca:b1:55:36:81:
00:ed:ef:04:92:cb:1f:74:2c:4e:8e:10:50:aa:15:
05:3c:53:70:e1:7e:ee:3b:bc:8e:19:b7:2b:66:c6:
0d:92:66:06:35:f0:7d:1b:23:ca:f4:e3:14:f0:bb:
0d:bf:b3:31:ae:ec:97:7c:fa:b4:fa:dc:bb:58:de:
18:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:E7:28:C6:56:46:04:BA:64:08:2B:4A:3E:E2:A6:74:1E:C0:55:67
X509v3 Authority Key Identifier:
keyid:21:7B:7A:B0:62:BC:82:8B:34:8D:05:30:6E:65:35:47:48:B9:D6:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:0b:c8:f2:6d:b3:8c:ef:8d:15:5c:51:7f:3d:67:41:b0:33:
f3:5d:0d:a6:73:bf:22:7a:39:af:71:ce:90:e6:76:cb:a1:fa:
11:ff:e1:de:e3:c1:4f:36:e0:66:16:27:d6:92:97:a6:8e:41:
8f:ad:27:de:12:79:9c:28:37:90:48:e3:90:96:fc:90:43:4f:
3c:35:01:96:b9:2a:7f:01:4a:4b:e4:84:bc:9e:c9:9c:d2:e0:
c7:26:00:25:04:cf:ce:9a:68:ba:98:3a:cb:60:54:c3:aa:4e:
36:bd:10:83:e2:38:15:b0:9e:75:12:62:7b:24:df:86:09:6b:
0b:55:ca:44:05:16:b0:6e:50:9e:a8:14:b5:7e:0c:91:66:b6:
54:19:9f:2b:f3:db:9a:b7:65:00:0a:9c:bb:bc:78:fd:71:d2:
88:a1:57:13:38:5f:50:c1:7a:2e:bc:b1:75:4a:c6:ec:e1:65:
bb:03:da:74:ba:60:24:72:11:62:30:c4:6d:34:95:d7:d3:c5:
1f:0d:e4:73:35:2c:24:79:62:4e:ca:8f:2a:65:a6:2a:d5:bc:
5f:ab:b3:f7:1d:53:1a:aa:2e:75:d1:df:5f:5d:f6:5b:fb:92:
6c:e6:e9:f2:1e:b7:96:21:ab:8c:d9:6c:42:89:16:19:6a:9a:
cf:df:92:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:03:24 2026 by rpki-client