Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a02c08-f31b-48c5-ad47-f83b8d04087c/1/iFwJUi9jX8r6KbzrrHLIlOT_7tI.mft
File: iFwJUi9jX8r6KbzrrHLIlOT_7tI.mft (raw, json)
Hash identifier: fqNsmvfT4ykCmRA7GTSLAeRE6zVyCpFLjNl5q3mfD1w=
Subject key identifier: DC:3A:B0:9F:21:E6:30:E6:52:9F:21:F3:B4:07:C8:B3:F0:6C:0F:05
Authority key identifier: 88:5C:09:52:2F:63:5F:CA:FA:29:BC:EB:AC:72:C8:94:E4:FF:EE:D2
Certificate issuer: /CN=885c09522f635fcafa29bcebac72c894e4ffeed2
Certificate serial: 019F954A409F198E96FB863C23CD3BB222CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFwJUi9jX8r6KbzrrHLIlOT_7tI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a02c08-f31b-48c5-ad47-f83b8d04087c/1/iFwJUi9jX8r6KbzrrHLIlOT_7tI.mft
Manifest number: 047C
Signing time: Fri 24 Jul 2026 18:01:38 +0000
Manifest this update: Fri 24 Jul 2026 18:01:38 +0000
Manifest next update: Sat 25 Jul 2026 18:01:38 +0000
Files and hashes: 1: 3IMviFqKeTkgcM4hJ3DCovEJPT4.roa (hash: PJ8bbhBGDwD8QZsH/L9/+WbI+Jn53tual+W0DILWDvw=)
2: iFwJUi9jX8r6KbzrrHLIlOT_7tI.crl (hash: w+2MR6cN9taJa1ZwJXDZxM4cLPXgaaC0giqgWMwAuck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a02c08-f31b-48c5-ad47-f83b8d04087c/1/iFwJUi9jX8r6KbzrrHLIlOT_7tI.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/a02c08-f31b-48c5-ad47-f83b8d04087c/1/iFwJUi9jX8r6KbzrrHLIlOT_7tI.mft
rsync://rpki.ripe.net/repository/DEFAULT/iFwJUi9jX8r6KbzrrHLIlOT_7tI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:4a:40:9f:19:8e:96:fb:86:3c:23:cd:3b:b2:22:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885c09522f635fcafa29bcebac72c894e4ffeed2
Validity
Not Before: Jul 24 18:01:38 2026 GMT
Not After : Jul 25 18:01:38 2026 GMT
Subject: CN=dc3ab09f21e630e6529f21f3b407c8b3f06c0f05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:39:e7:da:67:4b:c3:65:c6:32:b2:61:4a:fa:
09:1d:d1:db:a8:78:8e:34:17:4e:0c:86:a1:43:61:
59:bf:0e:e0:32:1e:61:0f:22:9b:d2:32:c9:a4:16:
5f:89:87:20:66:a1:a4:95:19:f1:08:98:4e:9a:8c:
86:89:79:f1:1a:2f:81:4d:ea:f6:fc:63:93:0a:43:
50:99:f0:69:05:35:30:20:8b:fd:bc:f1:33:a1:61:
94:23:a9:5f:f0:cf:16:4b:0c:22:01:46:7d:88:64:
f1:15:b1:7c:46:09:c1:27:3c:e5:d1:24:cc:bd:29:
46:e3:3b:a5:a7:d9:8a:ee:45:88:75:a2:4e:df:c3:
7f:70:3f:49:a4:a2:7d:72:e8:82:bb:f2:8a:ab:fa:
6d:8d:60:7b:2f:f2:5b:0a:24:f5:30:7a:15:51:9c:
1d:e9:78:8e:70:da:ef:53:e6:aa:de:4a:f0:14:4a:
14:37:ba:2d:09:c1:ed:dc:66:4a:96:ac:0f:8a:02:
da:4a:01:25:f6:ae:85:05:11:bd:68:9d:00:a7:8c:
0d:b2:fa:69:a6:7e:40:f2:a1:a2:f8:49:75:92:fc:
31:df:69:41:0f:79:41:e1:d7:4e:c1:62:b2:31:ed:
56:b4:ee:8b:9f:0c:74:28:70:e3:f5:f9:24:0f:b7:
cb:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:3A:B0:9F:21:E6:30:E6:52:9F:21:F3:B4:07:C8:B3:F0:6C:0F:05
X509v3 Authority Key Identifier:
keyid:88:5C:09:52:2F:63:5F:CA:FA:29:BC:EB:AC:72:C8:94:E4:FF:EE:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFwJUi9jX8r6KbzrrHLIlOT_7tI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a02c08-f31b-48c5-ad47-f83b8d04087c/1/iFwJUi9jX8r6KbzrrHLIlOT_7tI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a02c08-f31b-48c5-ad47-f83b8d04087c/1/iFwJUi9jX8r6KbzrrHLIlOT_7tI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:0c:db:91:43:22:0e:56:50:81:f0:ee:61:11:41:41:6b:7c:
ef:f8:3a:6e:d6:98:0b:64:98:0e:77:66:92:b0:ae:39:e4:ed:
31:78:c0:cf:14:31:e8:d9:ec:85:96:b9:36:bc:8b:81:1d:72:
11:0e:b1:74:75:0a:9e:ab:55:18:18:02:b3:31:d5:55:e4:15:
50:ee:71:6c:12:4d:d1:22:60:25:dd:62:a7:0e:de:c9:26:85:
83:99:60:7d:ea:23:3e:ee:64:cd:e8:1e:77:8d:a3:05:16:d0:
5f:18:e7:c7:1c:17:3e:01:13:24:87:9c:df:16:47:01:ca:09:
17:a7:53:98:2a:be:2f:80:aa:84:fe:43:a9:6a:4e:af:d4:91:
fa:7a:1c:93:87:19:01:0d:1b:47:18:5f:ff:67:7c:24:37:7e:
f4:a4:2f:1a:37:01:44:a9:19:6d:2d:6a:b3:10:03:cc:a9:fc:
43:2a:31:5d:02:14:95:f4:67:98:6c:2c:c5:97:57:f9:2c:4c:
fd:62:9f:61:1c:52:a7:8f:41:64:a8:3e:0c:06:e0:e9:1e:50:
33:5d:37:92:83:0d:6b:52:a0:01:cc:18:45:2d:d9:38:a1:40:
21:d3:a4:df:0c:9d:dc:c4:f8:e5:ed:a7:75:5c:1b:f4:01:85:
33:90:a9:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:27:55 2026 by rpki-client