Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.mft
File: IuSOFh5JBZI_bUqirgohUw8t4gs.mft (raw, json)
Hash identifier: 5BwmJdD/Y34Y3jEGtxdk5GEX1896Bv7s9VwxJmRmQ+4=
Subject key identifier: 21:18:22:5C:34:5D:7F:B3:32:97:F5:C5:2A:EF:CF:67:7F:FF:1B:B6
Authority key identifier: 22:E4:8E:16:1E:49:05:92:3F:6D:4A:A2:AE:0A:21:53:0F:2D:E2:0B
Certificate issuer: /CN=22e48e161e4905923f6d4aa2ae0a21530f2de20b
Certificate serial: 019F9436E9A983825245C92DF5BA33CDF2EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IuSOFh5JBZI_bUqirgohUw8t4gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.mft
Manifest number: 19C6
Signing time: Fri 24 Jul 2026 13:00:54 +0000
Manifest this update: Fri 24 Jul 2026 13:00:54 +0000
Manifest next update: Sat 25 Jul 2026 13:00:54 +0000
Files and hashes: 1: IuSOFh5JBZI_bUqirgohUw8t4gs.crl (hash: 3TRnNvBLm9yaMsW5nC0tajQEuhjz75kzD6qkeDi7MnU=)
2: WjnU7eVkPkVNVM9MOmgLUUUpMzM.roa (hash: +R4Zj+vw0Ft1e0nUhwZse4EmeZXGoZD55vZpzhImACo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.mft
rsync://rpki.ripe.net/repository/DEFAULT/IuSOFh5JBZI_bUqirgohUw8t4gs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:36:e9:a9:83:82:52:45:c9:2d:f5:ba:33:cd:f2:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22e48e161e4905923f6d4aa2ae0a21530f2de20b
Validity
Not Before: Jul 24 13:00:54 2026 GMT
Not After : Jul 25 13:00:54 2026 GMT
Subject: CN=2118225c345d7fb33297f5c52aefcf677fff1bb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d9:b4:d7:74:56:9c:b7:42:0b:69:5a:fa:6c:
5b:6a:06:78:f9:6b:0b:05:55:0a:e0:01:eb:7e:b9:
66:05:66:d0:1b:f4:c8:07:bf:93:42:65:6c:57:c9:
ea:fc:bd:f7:14:a2:0e:09:3f:f2:10:aa:36:7e:27:
a9:13:48:7a:b5:e7:90:10:e7:c1:1c:49:d7:48:c1:
2e:41:25:b1:27:32:97:92:be:ed:a7:ad:22:da:48:
38:cc:6b:94:35:f0:fb:03:3b:58:d9:c2:93:fa:1e:
0a:18:c8:59:1c:43:07:96:1f:49:21:43:a3:74:88:
85:5b:73:71:d3:c9:41:65:c2:64:ce:5d:ac:36:72:
63:ef:44:cd:71:85:13:df:d9:26:b7:77:3d:b8:36:
86:57:c3:2c:1d:c1:c2:44:87:5a:de:70:a9:7b:9a:
ac:bc:b1:62:dd:aa:d1:37:8d:de:4e:58:15:34:13:
04:a0:f7:6d:de:b8:59:c6:dd:40:71:7c:f2:aa:53:
b6:3b:ee:fa:1f:91:1b:13:2d:b3:c7:0e:75:c5:22:
75:e9:ec:7b:02:c2:0c:fa:b6:13:70:94:71:19:d2:
7c:1c:09:a7:b2:5a:32:f5:1d:04:71:0e:62:7d:19:
f9:27:f9:e8:75:0b:70:62:e0:1f:22:ce:0c:8d:b1:
e6:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:18:22:5C:34:5D:7F:B3:32:97:F5:C5:2A:EF:CF:67:7F:FF:1B:B6
X509v3 Authority Key Identifier:
keyid:22:E4:8E:16:1E:49:05:92:3F:6D:4A:A2:AE:0A:21:53:0F:2D:E2:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IuSOFh5JBZI_bUqirgohUw8t4gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:a7:8c:b1:83:76:14:2d:ae:20:4c:33:40:30:d8:1f:a1:e3:
2e:83:fd:b9:15:dd:5f:0c:c5:84:4e:6b:f6:0b:5b:5a:9a:ac:
dd:44:02:ee:e0:de:47:ff:99:72:16:dc:51:b4:d7:7d:5d:07:
e2:93:9d:ff:d6:9a:c9:fd:03:c4:90:63:c3:23:7a:32:6e:bd:
a5:fb:ae:41:fd:84:19:17:a6:df:f6:ca:5c:20:0e:8e:c1:79:
c5:63:b3:ad:3a:e6:df:18:b7:c6:14:3b:94:5e:79:88:5f:59:
d3:6f:10:53:84:fd:57:46:8e:36:08:01:1e:a4:8e:d2:9f:62:
74:42:69:69:34:9f:d7:74:c0:d2:51:7b:89:a2:56:8d:8f:6c:
7b:d0:c2:29:14:2a:8e:77:3d:d2:6a:e9:02:81:9a:1c:b1:cf:
d7:40:9d:c0:ef:fa:6f:1f:ad:df:3e:5c:25:77:32:82:86:d9:
3a:08:a1:00:87:6a:ef:df:2a:d5:ec:fe:76:e9:89:02:ed:d7:
d1:a8:07:7a:7f:7d:e4:e0:5a:de:78:9c:3b:48:1d:f1:c4:df:
b4:73:2a:d6:28:33:12:c0:5f:aa:16:19:9d:5f:62:7f:70:9c:
02:12:b0:78:da:27:36:b6:71:58:29:01:f0:1d:de:db:b1:c5:
f6:b4:7b:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:54:07 2026 by rpki-client