Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/476fd0-b8a6-461f-b4c5-38c2c2a79c35/1/iIFmRjoaMByltuuYvd0H45cJGYY.mft
File: iIFmRjoaMByltuuYvd0H45cJGYY.mft (raw, json)
Hash identifier: JDIldlDHe4jr9vOKuN4e54AAJPI9n8w+oszMBFDYvoE=
Subject key identifier: 48:04:04:2D:69:29:32:72:90:38:47:05:0A:1C:F0:54:04:FA:07:7B
Authority key identifier: 88:81:66:46:3A:1A:30:1C:A5:B6:EB:98:BD:DD:07:E3:97:09:19:86
Certificate issuer: /CN=888166463a1a301ca5b6eb98bddd07e397091986
Certificate serial: 019FAE642C67EB38CF75B7739580BCECB2DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iIFmRjoaMByltuuYvd0H45cJGYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/476fd0-b8a6-461f-b4c5-38c2c2a79c35/1/iIFmRjoaMByltuuYvd0H45cJGYY.mft
Manifest number: 14AF
Signing time: Wed 29 Jul 2026 15:00:28 +0000
Manifest this update: Wed 29 Jul 2026 15:00:28 +0000
Manifest next update: Thu 30 Jul 2026 15:00:28 +0000
Files and hashes: 1: 19kTeJepP8HkpIg63hHdZMuI5pU.roa (hash: rYKL3pXSi0W4E3AFcHleDUG0Z3vGSYXA5D+E17BmR8U=)
2: iIFmRjoaMByltuuYvd0H45cJGYY.crl (hash: JwbLlIg9Px5vYyco9kyzO7Kk2MyJHiORvgbrqcjdnFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/476fd0-b8a6-461f-b4c5-38c2c2a79c35/1/iIFmRjoaMByltuuYvd0H45cJGYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/476fd0-b8a6-461f-b4c5-38c2c2a79c35/1/iIFmRjoaMByltuuYvd0H45cJGYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iIFmRjoaMByltuuYvd0H45cJGYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 14:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ae:64:2c:67:eb:38:cf:75:b7:73:95:80:bc:ec:b2:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=888166463a1a301ca5b6eb98bddd07e397091986
Validity
Not Before: Jul 29 15:00:28 2026 GMT
Not After : Jul 30 15:00:28 2026 GMT
Subject: CN=4804042d69293272903847050a1cf05404fa077b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e2:20:23:2e:c5:2e:4f:85:52:bc:40:cc:f0:
dc:1b:ea:bd:34:b3:e3:75:19:81:80:dd:72:46:0d:
a1:fe:79:a2:94:d2:c0:1d:05:a5:98:a6:04:ce:8e:
73:a5:b3:06:d2:8b:c8:76:28:ce:a2:ce:12:65:b1:
0a:2a:db:b4:3c:ad:a3:53:2e:a8:41:d0:39:ef:88:
3c:d2:b0:1b:02:6e:15:e7:5e:ca:65:c5:c7:93:5f:
58:a3:17:e3:a3:64:32:00:8a:a8:4c:ba:da:52:82:
e1:a3:37:17:2b:36:3f:33:74:f7:24:de:14:be:ee:
d1:e7:6c:36:5b:70:da:39:af:58:fb:ec:5b:55:05:
9a:ff:b2:4c:c0:af:38:4b:83:83:f0:3e:95:fc:0e:
98:ef:e9:ca:7f:89:03:39:b8:fb:9d:59:c9:ea:96:
d7:00:05:c2:55:69:ab:51:a7:94:cb:e4:aa:96:0c:
ba:43:20:81:45:e4:e5:0f:83:6d:09:b2:c0:14:68:
11:6d:7a:4f:e1:8e:13:e8:95:31:8f:0b:3d:56:d1:
73:f9:f2:3f:2b:6d:96:3e:80:09:c4:cf:7e:0f:cc:
6a:b7:8c:f6:42:c8:6d:22:f7:55:ec:60:f0:73:57:
ac:34:ce:10:d4:0d:2a:0e:af:dc:54:ce:87:fb:77:
ce:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:04:04:2D:69:29:32:72:90:38:47:05:0A:1C:F0:54:04:FA:07:7B
X509v3 Authority Key Identifier:
keyid:88:81:66:46:3A:1A:30:1C:A5:B6:EB:98:BD:DD:07:E3:97:09:19:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iIFmRjoaMByltuuYvd0H45cJGYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/476fd0-b8a6-461f-b4c5-38c2c2a79c35/1/iIFmRjoaMByltuuYvd0H45cJGYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/476fd0-b8a6-461f-b4c5-38c2c2a79c35/1/iIFmRjoaMByltuuYvd0H45cJGYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:1f:fd:bc:3f:30:87:ee:b9:b0:8f:80:4e:c3:9f:6b:10:3f:
50:cc:35:d8:e9:3d:c3:81:e8:e8:73:2f:32:af:b2:7c:01:ee:
9c:6f:ba:2f:fb:2e:b6:37:99:68:c8:6c:82:33:f1:4b:e8:9a:
13:ae:a9:44:96:c5:1e:aa:d6:35:3f:2c:f7:bd:40:a9:a8:ab:
c7:01:45:79:84:d0:ea:d3:f6:08:09:c5:01:bd:b6:47:b5:7e:
a2:e5:42:4f:72:ad:30:c7:c7:ab:7b:38:7e:c0:eb:0d:69:ed:
7c:b3:62:47:87:a2:ee:35:06:41:91:03:be:e1:36:1c:55:66:
82:87:25:1c:36:68:97:7e:56:9d:79:1a:4a:b4:13:8b:6a:57:
0c:52:25:cd:2e:17:b0:4e:33:a1:88:32:de:58:eb:75:0d:48:
17:d7:c4:f2:02:d4:e3:c8:aa:f7:60:f0:1a:bf:50:a8:2d:3a:
fa:21:d3:5a:d0:67:71:f6:59:c4:56:bb:0a:45:d1:42:89:88:
46:ca:c9:fe:bf:e2:21:de:70:33:42:5d:fa:71:ab:1f:62:2a:
3f:74:f8:a2:e9:15:27:49:00:2a:99:17:01:64:b3:69:80:be:
7a:15:15:b0:a9:46:61:a2:f8:80:cd:c9:42:bb:52:b6:8e:6b:
c7:a9:b2:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+uZCxn6zjPdbdzlYC87LLbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4ODE2NjQ2M2ExYTMwMWNhNWI2ZWI5OGJkZGQwN2UzOTcw
OTE5ODYwHhcNMjYwNzI5MTUwMDI4WhcNMjYwNzMwMTUwMDI4WjAzMTEwLwYDVQQD
Eyg0ODA0MDQyZDY5MjkzMjcyOTAzODQ3MDUwYTFjZjA1NDA0ZmEwNzdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+IgIy7FLk+FUrxAzPDcG+q9NLPj
dRmBgN1yRg2h/nmilNLAHQWlmKYEzo5zpbMG0ovIdijOos4SZbEKKtu0PK2jUy6o
QdA574g80rAbAm4V517KZcXHk19Yoxfjo2QyAIqoTLraUoLhozcXKzY/M3T3JN4U
vu7R52w2W3DaOa9Y++xbVQWa/7JMwK84S4OD8D6V/A6Y7+nKf4kDObj7nVnJ6pbX
AAXCVWmrUaeUy+Sqlgy6QyCBReTlD4NtCbLAFGgRbXpP4Y4T6JUxjws9VtFz+fI/
K22WPoAJxM9+D8xqt4z2QshtIvdV7GDwc1esNM4Q1A0qDq/cVM6H+3fOKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEgEBC1pKTJykDhHBQoc8FQE+gd7MB8GA1UdIwQY
MBaAFIiBZkY6GjAcpbbrmL3dB+OXCRmGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUlGbVJqb2FNQnlsdHV1WXZkMEg0NWNKR1lZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi80NzZmZDAtYjhhNi00NjFmLWI0YzUt
MzhjMmMyYTc5YzM1LzEvaUlGbVJqb2FNQnlsdHV1WXZkMEg0NWNKR1lZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi80NzZmZDAtYjhhNi00NjFmLWI0YzUtMzhjMmMyYTc5YzM1
LzEvaUlGbVJqb2FNQnlsdHV1WXZkMEg0NWNKR1lZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArh/9vD8w
h+65sI+ATsOfaxA/UMw12Ok9w4Ho6HMvMq+yfAHunG+6L/sutjeZaMhsgjPxS+ia
E66pRJbFHqrWNT8s971AqairxwFFeYTQ6tP2CAnFAb22R7V+ouVCT3KtMMfHq3s4
fsDrDWntfLNiR4ei7jUGQZEDvuE2HFVmgoclHDZol35WnXkaSrQTi2pXDFIlzS4X
sE4zoYgy3ljrdQ1IF9fE8gLU48iq92DwGr9QqC06+iHTWtBncfZZxFa7CkXRQomI
RsrJ/r/iId5wM0Jd+nGrH2IqP3T4oukVJ0kAKpkXAWSzaYC+ehUVsKlGYaL4gM3J
QrtSto5rx6myTw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 18:14:08 2026 by rpki-client