Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.mft
File: iVVHgNslskPAotNhl5sTCn8Txg0.mft (raw, json)
Hash identifier: hXrezkxm4XkDtRATOetKB+mq6UO4pfhrbnJTSuRlpvQ=
Subject key identifier: 97:AD:C9:43:86:FA:E6:B9:22:AD:AF:78:69:8D:F7:48:01:93:AC:F7
Authority key identifier: 89:55:47:80:DB:25:B2:43:C0:A2:D3:61:97:9B:13:0A:7F:13:C6:0D
Certificate issuer: /CN=89554780db25b243c0a2d361979b130a7f13c60d
Certificate serial: 019F91DB23AE36A5EEE2DBBA8CF62555FE69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iVVHgNslskPAotNhl5sTCn8Txg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.mft
Manifest number: 0EF0
Signing time: Fri 24 Jul 2026 02:01:25 +0000
Manifest this update: Fri 24 Jul 2026 02:01:25 +0000
Manifest next update: Sat 25 Jul 2026 02:01:25 +0000
Files and hashes: 1: 04FKSiNEBSVxxBYiPtE8VcsRvqM.roa (hash: iIsFB+u1yXou/MBTJQN92523XOZ49HIi4J+JzBjc0Vk=)
2: iVVHgNslskPAotNhl5sTCn8Txg0.crl (hash: qQ4Zva3pckt/KUeoEQugNE8Nr2uGuGol//iwOOF8Kb8=)
3: yUZd6eY1ILFj_NVgWnntQzVJiGs.roa (hash: aYbs72JfiEw4WjwVxwNiVwxvegvGGWCTaf1wWunmceE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/iVVHgNslskPAotNhl5sTCn8Txg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:db:23:ae:36:a5:ee:e2:db:ba:8c:f6:25:55:fe:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89554780db25b243c0a2d361979b130a7f13c60d
Validity
Not Before: Jul 24 02:01:25 2026 GMT
Not After : Jul 25 02:01:25 2026 GMT
Subject: CN=97adc94386fae6b922adaf78698df7480193acf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f8:47:0d:5e:64:76:0c:85:0b:3f:69:f7:07:
11:d6:ed:c9:1c:f7:12:ca:ee:c8:15:1a:38:02:9c:
c4:dd:e2:71:7e:ad:6a:35:8f:5e:9e:77:c6:7c:9f:
eb:cf:6b:4b:61:35:d4:54:d4:8e:f4:bd:24:74:49:
af:c1:7c:69:60:ba:0c:40:72:32:b1:54:1d:f0:21:
b3:94:23:99:af:db:86:93:44:27:09:26:a1:99:00:
cd:13:17:05:62:48:4b:79:98:03:cb:97:53:02:72:
00:4b:0a:a5:d9:78:24:a9:1f:b8:5f:3b:1f:98:20:
fe:e4:7f:11:14:cc:92:d1:69:ba:9f:51:4a:6b:f2:
2f:9b:39:9c:ea:6e:e8:6c:a4:83:55:e3:fc:04:46:
6d:d7:76:7c:32:fc:41:82:ed:1c:2d:ee:80:4d:c7:
51:12:9c:07:95:43:2c:3b:6d:45:8c:6b:56:73:eb:
f9:7a:ef:eb:3c:49:31:e4:99:29:e9:b1:16:ac:b4:
df:af:0a:34:94:ff:77:0c:90:ea:ec:02:25:7f:f2:
de:81:4d:63:c2:0f:43:83:d5:19:8c:30:17:12:7c:
63:b3:cd:cf:94:2f:60:3d:30:74:aa:b1:07:6b:42:
e0:5c:88:c3:c0:54:c6:bc:b7:4a:f4:ed:df:26:17:
a2:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:AD:C9:43:86:FA:E6:B9:22:AD:AF:78:69:8D:F7:48:01:93:AC:F7
X509v3 Authority Key Identifier:
keyid:89:55:47:80:DB:25:B2:43:C0:A2:D3:61:97:9B:13:0A:7F:13:C6:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iVVHgNslskPAotNhl5sTCn8Txg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:b9:92:76:fd:06:90:aa:36:3e:3a:30:ac:ac:61:0d:c4:e0:
11:a0:aa:cf:1d:09:23:aa:a8:27:01:58:a3:09:de:fa:da:08:
1c:38:46:54:d9:b3:7c:9e:8c:94:35:99:44:d5:7a:ea:5d:0b:
2b:90:7b:ac:91:3b:16:d1:16:85:c3:24:45:c3:1d:91:0d:03:
5d:c7:e4:4f:c2:28:91:b2:96:7e:ae:50:f9:67:08:79:d1:ca:
ad:3c:7d:93:6a:34:6e:38:95:b7:e5:6c:58:e8:e3:ad:46:d0:
5c:f5:7c:35:05:2b:29:7a:10:ec:32:75:cc:fb:f3:0a:17:9e:
11:a0:6d:03:e6:18:1c:19:30:11:3c:2a:02:96:69:80:63:4c:
30:53:27:f8:ad:17:54:1a:41:d0:9b:fd:af:04:05:6a:06:05:
fa:6a:e0:16:35:71:fc:43:15:75:44:20:9f:61:94:94:42:3d:
e4:0a:22:d3:da:a9:7c:70:f7:3d:73:fe:17:30:7a:b2:bb:08:
3d:5c:89:2f:c7:67:3b:4a:7f:9d:95:15:ea:4d:3a:4c:d2:b8:
96:f4:c7:57:79:89:d0:a9:de:41:94:cd:71:0f:0b:cb:2c:e3:
26:38:aa:73:e0:48:c5:86:dd:e5:62:3e:14:91:20:f5:41:7e:
96:9f:49:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:46:00 2026 by rpki-client