Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/156f45-da23-4e25-a08c-3687c2f7d83e/1/mIzm5O4J72ZlgoZFF5CWnXz_6bk.mft
File: mIzm5O4J72ZlgoZFF5CWnXz_6bk.mft (raw, json)
Hash identifier: SUaeR38vOeZPya6HNL/Z6tL1QNnlwyd/Dzpg8tWZ1D0=
Subject key identifier: DD:06:C9:66:8D:65:FE:C8:41:68:71:F8:EA:4F:E1:91:71:02:99:4D
Authority key identifier: 98:8C:E6:E4:EE:09:EF:66:65:82:86:45:17:90:96:9D:7C:FF:E9:B9
Certificate issuer: /CN=988ce6e4ee09ef66658286451790969d7cffe9b9
Certificate serial: 019F935B2D6C5FE8AA80959806D7A4011F26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mIzm5O4J72ZlgoZFF5CWnXz_6bk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/156f45-da23-4e25-a08c-3687c2f7d83e/1/mIzm5O4J72ZlgoZFF5CWnXz_6bk.mft
Manifest number: 01BB
Signing time: Fri 24 Jul 2026 09:00:53 +0000
Manifest this update: Fri 24 Jul 2026 09:00:53 +0000
Manifest next update: Sat 25 Jul 2026 09:00:53 +0000
Files and hashes: 1: mIzm5O4J72ZlgoZFF5CWnXz_6bk.crl (hash: U58jQlbTL5bAe8Gcd7rN28/nHBM9yBSWH6S7OZkKQjE=)
2: qnONVkF_M-vtNihhtsXh0zM04k0.roa (hash: AaKR7xKCkFq/gBrhGm01TbC+Cp8UgyjlwsWBI+Oke+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/156f45-da23-4e25-a08c-3687c2f7d83e/1/mIzm5O4J72ZlgoZFF5CWnXz_6bk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/156f45-da23-4e25-a08c-3687c2f7d83e/1/mIzm5O4J72ZlgoZFF5CWnXz_6bk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mIzm5O4J72ZlgoZFF5CWnXz_6bk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:2d:6c:5f:e8:aa:80:95:98:06:d7:a4:01:1f:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=988ce6e4ee09ef66658286451790969d7cffe9b9
Validity
Not Before: Jul 24 09:00:53 2026 GMT
Not After : Jul 25 09:00:53 2026 GMT
Subject: CN=dd06c9668d65fec8416871f8ea4fe1917102994d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ec:20:33:c5:ac:8c:dd:29:19:65:c2:82:6e:
e0:6f:0e:a6:9a:b3:f7:fb:28:03:a8:c8:70:e6:a5:
37:90:5e:77:53:3e:01:6c:69:f0:5b:c7:0a:ab:9b:
98:37:b1:44:1e:af:d4:b3:6d:30:83:fa:15:d1:05:
ff:8b:4b:bd:50:3f:54:c4:53:bf:c6:42:cf:8f:c4:
18:fe:73:9b:83:e3:d2:5c:4d:86:dc:61:71:d6:aa:
44:bd:bf:a6:32:df:91:0d:49:63:07:83:9d:58:39:
e2:af:96:1b:83:ed:26:c2:fa:e7:4d:e5:47:e8:77:
f4:f4:bb:d3:ec:20:a2:53:ac:e5:ad:50:9a:7f:a5:
f6:6b:81:dd:b0:56:2a:e6:62:7e:8c:2f:9a:df:e6:
6f:93:23:23:0b:1a:79:c0:0d:cf:9c:05:ab:8a:a9:
eb:8e:67:ae:db:d8:5d:30:c5:a5:a4:7e:48:92:50:
67:ea:a3:bf:bb:53:ac:d6:04:b6:68:28:e8:ac:7f:
cc:37:4f:7c:d5:45:57:c9:3a:9c:6d:3f:6a:08:75:
d5:09:dd:7e:bd:d2:32:ee:df:11:36:de:a5:b5:55:
be:20:60:8a:66:cb:07:59:5d:76:bd:95:00:ea:5e:
3e:e4:54:6a:18:fe:81:3b:6f:69:62:30:12:32:91:
38:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:06:C9:66:8D:65:FE:C8:41:68:71:F8:EA:4F:E1:91:71:02:99:4D
X509v3 Authority Key Identifier:
keyid:98:8C:E6:E4:EE:09:EF:66:65:82:86:45:17:90:96:9D:7C:FF:E9:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mIzm5O4J72ZlgoZFF5CWnXz_6bk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/156f45-da23-4e25-a08c-3687c2f7d83e/1/mIzm5O4J72ZlgoZFF5CWnXz_6bk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/156f45-da23-4e25-a08c-3687c2f7d83e/1/mIzm5O4J72ZlgoZFF5CWnXz_6bk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:14:45:a2:27:d9:c5:b7:93:18:4a:a5:4f:68:9b:e6:ef:96:
80:f6:47:70:88:d8:55:3c:3e:fe:d9:f1:a3:06:b9:3e:f1:23:
15:12:bc:19:da:ab:90:c9:a4:32:94:62:3e:ce:64:63:64:1e:
8b:73:e9:46:4e:be:81:d8:95:fe:de:f8:35:b4:1a:bb:d1:40:
48:b7:68:53:d9:9e:f6:97:00:ee:0c:9b:a4:c6:ed:a5:a2:76:
89:a2:0e:33:31:7a:65:d3:44:7c:53:d7:90:27:cf:ac:78:ce:
d1:b6:55:54:c1:de:2d:a6:50:cf:3a:47:1b:a7:25:a2:30:50:
c7:9f:22:fc:00:70:70:5e:00:55:ff:d5:48:4a:68:43:61:d4:
fd:0f:05:40:c1:1a:df:fc:3f:2c:c6:b2:87:a8:87:3c:a9:b5:
b1:98:68:29:4b:83:c5:1a:9c:47:11:d9:6e:9b:6f:d1:fc:39:
7b:19:fc:8a:50:8e:7c:96:d5:bd:27:67:54:04:68:1d:ea:f4:
63:9b:5f:05:65:20:09:9e:64:70:76:ec:a9:0f:fa:48:64:0d:
0e:c5:de:d5:54:e0:77:06:d6:11:2e:c4:4c:e1:8d:0b:c0:5d:
a4:3b:6c:26:6b:9d:37:b4:cf:aa:12:7e:18:99:db:f5:c5:6a:
3c:da:7b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:16:54 2026 by rpki-client