Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft
File: i96i1KsTgPCjt_59T6eCjhyUNVg.mft (raw, json)
Hash identifier: laQqEi8RKuWFN4T1EHNxYcdg3ERjN08JwCrvpS8oVf8=
Subject key identifier: 8A:1A:80:9E:3C:BC:18:AF:59:6B:57:F8:DB:B1:84:D6:ED:4C:2A:7D
Authority key identifier: 8B:DE:A2:D4:AB:13:80:F0:A3:B7:FE:7D:4F:A7:82:8E:1C:94:35:58
Certificate issuer: /CN=8bdea2d4ab1380f0a3b7fe7d4fa7828e1c943558
Certificate serial: 019F9400013A93138CC8D2C091AC32DC3446
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i96i1KsTgPCjt_59T6eCjhyUNVg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 12:00:55 +0000
Manifest this update: Fri 24 Jul 2026 12:00:55 +0000
Manifest next update: Sat 25 Jul 2026 12:00:55 +0000
Files and hashes: 1: WUGBWhMtlbuPeSgdJcR9TomYq_g.roa (hash: YpNprpEpdwv3WzbtNOJB6/axNyALJCziE+BSrnsp57Y=)
2: i96i1KsTgPCjt_59T6eCjhyUNVg.crl (hash: INRROuOCWL079TFPSrH9saaXHCf1n2lAuCFxsmm9jPg=)
3: iUaiCf92bE9L1AogU_P4Ws5OIvg.roa (hash: lB/aDmJbZNaICyqV1bdphm8nQcK/tHuDQZq5sC+egbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft
rsync://rpki.ripe.net/repository/DEFAULT/i96i1KsTgPCjt_59T6eCjhyUNVg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:00:01:3a:93:13:8c:c8:d2:c0:91:ac:32:dc:34:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bdea2d4ab1380f0a3b7fe7d4fa7828e1c943558
Validity
Not Before: Jul 24 12:00:55 2026 GMT
Not After : Jul 25 12:00:55 2026 GMT
Subject: CN=8a1a809e3cbc18af596b57f8dbb184d6ed4c2a7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:57:6a:0c:22:9e:8a:12:1c:ad:ab:2c:2b:28:
33:ec:7d:b7:0f:7a:9a:02:e7:4f:07:1f:48:99:1b:
8f:81:44:7d:62:10:c1:85:9a:fb:64:72:d3:9a:0a:
0e:ef:4e:22:e7:50:f8:a1:99:60:28:99:07:02:21:
2d:97:bb:87:fc:ef:9d:22:3f:bd:2d:f8:52:54:35:
c0:a6:da:bd:ff:c9:28:b4:fc:7c:77:90:a2:43:ff:
64:d8:f0:f2:7b:e7:7d:d4:21:9b:35:f7:ad:78:44:
7a:c9:79:4d:fa:df:9c:51:38:e0:78:04:56:14:4b:
92:28:3b:eb:15:d8:dd:84:4b:57:46:cb:17:5f:f6:
30:34:7e:ad:f9:53:b2:0a:6b:aa:03:4e:0d:fd:d1:
e6:cf:b7:fb:62:f9:d1:64:54:2a:a1:5e:69:cf:e6:
3c:09:aa:fc:9d:70:62:49:f5:8b:d7:f0:ee:38:aa:
24:ec:2f:72:a2:84:00:93:54:29:3f:5d:c3:e6:7e:
2a:ca:c2:b8:80:1a:9a:3e:ee:7d:1b:2e:60:9a:21:
84:80:d3:e4:8d:99:c5:fa:e3:6b:d5:94:3b:eb:52:
99:f5:bc:47:e8:50:84:38:34:aa:2c:0c:8c:84:38:
56:01:36:7c:31:ff:50:fe:7a:0c:b4:ca:8c:80:de:
0e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:1A:80:9E:3C:BC:18:AF:59:6B:57:F8:DB:B1:84:D6:ED:4C:2A:7D
X509v3 Authority Key Identifier:
keyid:8B:DE:A2:D4:AB:13:80:F0:A3:B7:FE:7D:4F:A7:82:8E:1C:94:35:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i96i1KsTgPCjt_59T6eCjhyUNVg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:55:25:ef:a7:35:8a:a7:27:7a:9f:07:cb:9c:f2:ef:26:7c:
13:09:e6:45:1d:cc:00:75:0a:05:2e:33:cc:f2:40:e1:91:3f:
d5:e3:46:6a:cc:4f:1f:02:01:4b:31:d3:11:24:11:ad:85:a7:
3b:59:c0:62:54:73:19:f9:a4:fd:fa:a1:37:75:9e:99:b0:84:
c4:e5:a4:a7:95:72:62:7c:f7:93:b4:7c:f8:98:b1:17:ac:e7:
b9:1d:83:64:4a:d1:aa:af:8f:6e:b1:2a:6c:de:36:68:e7:a0:
24:87:83:b7:b6:3e:7b:f9:2c:2f:71:87:7a:8f:62:29:b8:91:
a2:44:fb:c8:36:56:4d:8e:cb:52:01:c9:f4:b5:2f:1f:ae:a0:
dd:8f:0d:10:f5:d3:73:fb:13:66:2b:2b:b9:ea:e6:ef:f6:3d:
44:4f:84:23:91:23:9c:c6:d9:2e:36:fd:03:a3:f7:6c:2d:49:
85:3d:1a:44:74:ae:6b:56:20:77:b1:8e:39:7a:55:f8:1a:a0:
f6:83:20:74:c5:2c:c0:48:f7:ee:9e:88:65:14:f3:e8:58:a2:
3a:c3:36:82:dd:58:63:36:d6:ea:f5:40:ff:8b:37:a3:de:0b:
f8:ec:d6:58:5a:27:88:fe:d9:f4:b7:b1:85:1b:40:6a:24:a1:
c5:cd:64:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:02:19 2026 by rpki-client