Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft
File: iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft (raw, json)
Hash identifier: 40WG4ZYrVfgWua4DSrpoO6P/ABwbd5qOj+FczVGhzAk=
Subject key identifier: E8:58:4C:31:8F:C4:C9:41:93:01:DA:79:7E:E6:40:C7:45:81:EA:B4
Authority key identifier: 88:FF:4E:E6:23:D8:FA:B7:3C:90:1D:0C:BD:C9:3A:32:1E:9C:CF:B7
Certificate issuer: /CN=88ff4ee623d8fab73c901d0cbdc93a321e9ccfb7
Certificate serial: 019F8FEBBBE8B3C70E276F5802EB016D2997
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft
Manifest number: 0D60
Signing time: Thu 23 Jul 2026 17:00:18 +0000
Manifest this update: Thu 23 Jul 2026 17:00:18 +0000
Manifest next update: Fri 24 Jul 2026 17:00:18 +0000
Files and hashes: 1: WDCEfBOgZu0IS0tXVscqDchFouE.roa (hash: M77yLF1D375mORfB1s9NJJsYDZZdRI/2B/Q2R1Rr0oU=)
2: eHFFve7oB3P4jI8nEd4tmbXombs.roa (hash: 2jkRmBwjqx2G1TPqQBkiFukmoNh6yKO3uMYlkbOFlyk=)
3: iP9O5iPY-rc8kB0Mvck6Mh6cz7c.crl (hash: lQ09wWlF82G91ghaB2KeGK0kZBsFosFUo9G8KcTVg8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:eb:bb:e8:b3:c7:0e:27:6f:58:02:eb:01:6d:29:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88ff4ee623d8fab73c901d0cbdc93a321e9ccfb7
Validity
Not Before: Jul 23 17:00:18 2026 GMT
Not After : Jul 24 17:00:18 2026 GMT
Subject: CN=e8584c318fc4c9419301da797ee640c74581eab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:74:51:a4:cf:4d:20:cd:34:8c:82:67:c7:9b:
50:f4:0a:c9:9b:38:2f:a4:86:4c:74:13:a2:bd:85:
a4:3c:ee:e2:ab:87:a6:9a:b1:f0:5a:70:41:20:2a:
12:16:31:93:54:7a:6c:5b:f1:ad:00:8d:11:97:6d:
58:d7:db:25:45:e5:f6:ea:54:92:63:4a:9d:68:f3:
8b:ca:63:0d:f0:c6:47:c0:51:88:39:f6:ba:be:54:
39:de:ea:0b:7f:26:df:1e:c5:18:d8:ef:78:cc:a8:
78:b4:42:4d:a5:40:c5:c6:c4:40:1f:36:9e:e2:f4:
65:93:86:7f:f0:8a:76:b8:32:9b:d2:45:71:fb:1d:
95:3d:f3:37:a5:95:21:78:6d:3b:2c:48:cc:dd:f3:
a0:3e:7d:36:bd:c2:4e:63:88:34:cc:5c:6c:e8:cd:
e4:92:ca:25:a3:94:ff:e9:9f:d0:89:6b:58:62:8d:
c3:16:bb:6b:2a:5e:43:84:b3:71:22:e0:75:9e:45:
6b:5e:65:26:f6:af:3b:5b:a5:76:9e:17:e9:12:fc:
23:8e:dc:34:79:f3:de:8c:f7:39:7b:90:74:24:f9:
fa:15:74:5a:4b:2b:2d:19:57:40:cf:22:78:12:6d:
ae:2d:9f:0c:7a:9b:d2:92:01:7d:76:d6:d2:cc:25:
0d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:58:4C:31:8F:C4:C9:41:93:01:DA:79:7E:E6:40:C7:45:81:EA:B4
X509v3 Authority Key Identifier:
keyid:88:FF:4E:E6:23:D8:FA:B7:3C:90:1D:0C:BD:C9:3A:32:1E:9C:CF:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:3f:89:f6:d9:8d:ec:bb:37:ca:24:e7:a9:31:fc:75:84:65:
4f:db:11:a3:ec:6d:88:a4:df:07:9d:5f:b7:cc:79:57:f0:6d:
57:a1:65:37:ec:08:09:bc:f8:a4:d0:ac:9b:13:fa:0d:83:2b:
b6:cc:fa:6a:e2:08:50:42:24:fd:30:bd:d1:05:fc:ea:fc:29:
86:1f:22:9a:0d:bd:36:41:02:c5:91:2f:98:24:54:0f:6c:a6:
34:b7:35:5f:79:a3:40:9f:b7:0a:f1:62:c4:41:c5:45:5e:70:
96:0f:9f:4a:b7:1d:62:22:9d:d1:c7:26:a0:d0:54:41:0f:eb:
a5:c9:4c:3d:3b:c7:74:68:4c:a5:e1:87:f5:46:09:a0:e3:7d:
6c:11:01:ec:38:1d:c7:56:7d:96:bc:ed:8c:d0:ea:06:0b:50:
09:5e:d4:1d:ac:74:02:fe:a6:45:06:89:e2:2b:bb:32:cc:5b:
43:21:4d:f0:4a:25:28:21:d0:a5:e6:d3:c3:c8:4a:8d:ed:74:
03:bd:6d:d8:65:02:51:c5:de:d3:82:a6:50:d1:f0:b2:d8:d7:
78:15:6b:4c:7a:1f:10:6b:88:86:9f:b6:12:38:2c:8f:1e:12:
32:66:ec:ea:27:3f:94:33:a3:6d:98:f0:b7:c0:ae:39:6c:6d:
a4:08:1a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:53:33 2026 by rpki-client