Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/c84cd3-672b-44b2-8ce0-40289479ac05/1/iA2KtqoscvB5dV92zwEgql3dx98.mft
File: iA2KtqoscvB5dV92zwEgql3dx98.mft (raw, json)
Hash identifier: XK+B9cAYjpU3CpskKCZRYqBtVB1j4bUu0lfPFKapdag=
Subject key identifier: 38:C2:15:A4:5F:8D:B6:A2:48:C3:01:6E:63:62:70:50:68:4D:50:CC
Authority key identifier: 88:0D:8A:B6:AA:2C:72:F0:79:75:5F:76:CF:01:20:AA:5D:DD:C7:DF
Certificate issuer: /CN=880d8ab6aa2c72f079755f76cf0120aa5dddc7df
Certificate serial: 019F96252B92F8F269C4DBD977D34554B686
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iA2KtqoscvB5dV92zwEgql3dx98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/c84cd3-672b-44b2-8ce0-40289479ac05/1/iA2KtqoscvB5dV92zwEgql3dx98.mft
Manifest number: 11AB
Signing time: Fri 24 Jul 2026 22:00:46 +0000
Manifest this update: Fri 24 Jul 2026 22:00:46 +0000
Manifest next update: Sat 25 Jul 2026 22:00:46 +0000
Files and hashes: 1: iA2KtqoscvB5dV92zwEgql3dx98.crl (hash: 4yo1aIDnpEMHZu4ltriUV2lGWCqhxBOUJTsczHquz+0=)
2: tl9JmYqZuc8rnWm5B3tF-CPUxEg.roa (hash: ti/VYS4hognsUWtb/PVfBo1Uhz2rYc5vy7DleprVf/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/c84cd3-672b-44b2-8ce0-40289479ac05/1/iA2KtqoscvB5dV92zwEgql3dx98.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/c84cd3-672b-44b2-8ce0-40289479ac05/1/iA2KtqoscvB5dV92zwEgql3dx98.mft
rsync://rpki.ripe.net/repository/DEFAULT/iA2KtqoscvB5dV92zwEgql3dx98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:96:25:2b:92:f8:f2:69:c4:db:d9:77:d3:45:54:b6:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=880d8ab6aa2c72f079755f76cf0120aa5dddc7df
Validity
Not Before: Jul 24 22:00:46 2026 GMT
Not After : Jul 25 22:00:46 2026 GMT
Subject: CN=38c215a45f8db6a248c3016e63627050684d50cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:4e:0e:22:d1:2a:67:af:79:3a:17:10:ef:6f:
b8:aa:b2:73:8c:8d:18:a7:44:25:cf:fe:e1:3d:c9:
f7:f7:5f:dc:6f:53:b3:5b:17:0f:f4:8e:04:4a:0e:
08:b2:2a:52:55:1e:dc:be:ee:e8:61:31:b7:5f:e0:
74:88:f6:ef:3b:30:88:7a:43:35:2c:1f:1e:a9:f4:
76:1e:60:7c:e2:76:ab:58:af:ff:f3:d8:4c:15:92:
65:26:89:01:fd:e7:fd:cd:45:7b:71:59:3c:43:bc:
6f:ff:9f:c6:db:10:5d:12:41:6f:0c:b3:51:a0:9b:
11:1d:9d:f0:d4:1b:fc:ee:c2:09:12:0f:75:b2:97:
61:eb:88:00:e9:79:d3:e7:f2:c7:b3:5f:5c:ee:67:
90:6e:9f:3e:25:e3:8c:bd:8e:fb:66:e1:7c:ae:8a:
4d:81:c0:05:2e:f1:27:4f:14:65:b0:c1:28:90:0e:
6c:26:11:b4:84:b6:08:1c:4e:c7:71:47:30:98:ad:
8f:f9:9b:9b:23:21:bb:df:e9:2a:b3:6e:82:9d:e1:
b7:3b:fa:44:1a:93:90:c2:a3:8a:90:30:9b:09:4b:
fa:88:f3:c9:f8:41:3d:ff:25:ce:dd:d6:b5:73:85:
98:95:71:68:a4:52:c0:5d:b4:1d:ab:09:37:f8:db:
57:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:C2:15:A4:5F:8D:B6:A2:48:C3:01:6E:63:62:70:50:68:4D:50:CC
X509v3 Authority Key Identifier:
keyid:88:0D:8A:B6:AA:2C:72:F0:79:75:5F:76:CF:01:20:AA:5D:DD:C7:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iA2KtqoscvB5dV92zwEgql3dx98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c84cd3-672b-44b2-8ce0-40289479ac05/1/iA2KtqoscvB5dV92zwEgql3dx98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c84cd3-672b-44b2-8ce0-40289479ac05/1/iA2KtqoscvB5dV92zwEgql3dx98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:16:71:55:06:74:ed:0e:69:2c:61:b0:53:31:43:92:97:42:
c3:23:c1:a2:c6:5c:bf:14:36:73:89:8c:50:d7:e6:26:bb:00:
93:c5:27:df:98:b7:cf:41:0b:3b:d0:1e:97:da:0b:fb:86:76:
d4:74:2b:81:35:b3:b7:3e:f2:58:8a:d4:da:da:b0:43:cc:6f:
7d:c7:5f:a2:b8:b0:ae:7e:11:8f:77:d6:b0:62:42:17:39:f1:
44:65:03:54:5b:7c:10:7e:ce:ca:26:4b:f7:c5:d9:ba:26:6e:
f9:bb:53:54:e4:8f:00:ae:a1:c1:6b:0d:e1:75:88:ee:4d:21:
16:4e:1f:14:3e:26:77:53:49:f9:10:99:ff:e5:8b:18:4e:9b:
be:cb:dd:dd:02:7c:05:e6:3f:78:1a:62:f5:a4:9c:0c:f8:05:
00:54:fd:c2:d7:38:f2:b3:e0:0d:cd:aa:02:9e:9e:2f:57:d5:
1c:c4:5f:cd:f9:ea:0a:b1:11:6e:aa:7c:cb:20:dd:5f:f8:40:
91:43:32:f2:33:13:07:70:fa:10:3f:81:7c:1a:25:c7:ff:42:
1f:cf:b7:cf:9e:d3:42:0e:23:45:18:20:7b:b4:9a:96:9c:a5:
4d:cd:ac:b6:06:5d:8e:c8:6a:d5:9a:8b:89:b6:94:73:ad:0f:
de:e3:1c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:25:49 2026 by rpki-client