Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft
File: IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft (raw, json)
Hash identifier: rldP6WIgUwpCfOwBX9n0TP+Q0xVgZ0SIKq5hdt1+qw4=
Subject key identifier: 37:49:9B:EF:59:7B:C6:B9:45:D1:D4:6E:E3:31:BA:C4:84:E0:3B:E6
Authority key identifier: 20:05:85:36:1D:51:A7:2E:7B:A6:30:8C:0C:EB:16:02:44:83:11:78
Certificate issuer: /CN=200585361d51a72e7ba6308c0ceb160244831178
Certificate serial: 019ED42BBCBC4DBD3D07348283E48FE7D109
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IAWFNh1Rpy57pjCMDOsWAkSDEXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft
Manifest number: 0A98
Signing time: Wed 17 Jun 2026 06:01:36 +0000
Manifest this update: Wed 17 Jun 2026 06:01:36 +0000
Manifest next update: Thu 18 Jun 2026 06:01:36 +0000
Files and hashes: 1: 4kSC89D1AOgPjo_VC2p_1wAdyJ4.roa (hash: 49whWUdE9kNFPfnAL8tYbd6+c7MEWg0vvwt7AatABa0=)
2: IAWFNh1Rpy57pjCMDOsWAkSDEXg.crl (hash: bnOgQpDsCcD4sDK9mzIDoxq6X5WWGG5eldc3cKzmqAI=)
3: d32KHDz4hQyuCuhNOb9K5kOq2qY.roa (hash: Sa1ntueDsGqjR2cwqIdDg9aoAqEdJGNyLoTHBEU6HPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IAWFNh1Rpy57pjCMDOsWAkSDEXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 06:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d4:2b:bc:bc:4d:bd:3d:07:34:82:83:e4:8f:e7:d1:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=200585361d51a72e7ba6308c0ceb160244831178
Validity
Not Before: Jun 17 06:01:36 2026 GMT
Not After : Jun 18 06:01:36 2026 GMT
Subject: CN=37499bef597bc6b945d1d46ee331bac484e03be6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:94:ac:65:f7:4e:c6:82:3b:7c:b2:dc:a2:bb:
c3:13:ea:62:61:9e:1e:70:93:75:5c:f5:d7:0c:d3:
fe:5d:6b:3e:27:2c:ec:c7:90:3e:15:b9:97:f5:b0:
82:f7:c9:23:1e:5d:a1:f6:f0:b5:bf:89:9c:a2:7c:
f2:1e:88:dc:f7:52:2e:4a:53:9d:a8:4f:53:7a:6c:
1d:6c:d4:a4:5d:31:53:c1:ab:ca:65:30:f5:f2:3f:
81:d8:fb:11:03:bc:ce:a0:80:67:1a:1c:a3:b1:59:
d1:a1:91:68:73:e0:d8:e7:4e:27:b2:d6:8d:84:98:
bb:e0:b6:00:76:95:bb:a2:9f:84:03:ed:cd:5c:da:
0c:fd:dd:25:98:af:65:fe:8c:1e:97:7c:04:18:02:
9a:94:91:27:5a:7d:0f:4e:52:57:3f:f3:3c:16:2b:
c1:47:72:58:78:f1:56:62:37:ec:be:0a:b2:e8:f0:
5b:71:bb:87:d2:71:e2:08:ea:9a:06:68:44:54:b1:
ed:08:70:00:74:19:d9:f5:e2:76:bb:3f:4a:73:b9:
8d:ac:8b:cf:cf:65:27:f5:29:44:eb:20:c2:e6:f5:
65:c1:bb:d5:86:17:ff:60:1b:fd:13:e8:1a:c3:73:
e7:b8:0b:fc:d4:29:62:ed:97:c9:fc:9f:32:81:f4:
22:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:49:9B:EF:59:7B:C6:B9:45:D1:D4:6E:E3:31:BA:C4:84:E0:3B:E6
X509v3 Authority Key Identifier:
keyid:20:05:85:36:1D:51:A7:2E:7B:A6:30:8C:0C:EB:16:02:44:83:11:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IAWFNh1Rpy57pjCMDOsWAkSDEXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:a2:40:56:a1:66:f1:02:c7:4b:1a:db:15:78:a7:82:7e:34:
2b:0f:28:b0:50:04:8c:48:09:93:6e:b8:71:6e:3f:ec:a7:f4:
b9:67:ef:4a:cd:7a:2b:f3:6c:8b:e7:da:b1:40:fd:29:76:cc:
70:e2:aa:0d:f6:05:69:e4:c3:d8:77:e0:7b:47:3b:15:12:2d:
6b:4c:09:05:38:7e:15:b0:04:4b:c8:ae:ff:91:75:41:d3:f5:
c9:7a:51:79:12:41:63:0a:80:ec:06:80:08:1f:28:83:cb:f0:
3c:43:c8:df:4a:82:5a:35:8d:ff:12:1a:25:2a:6d:f4:72:61:
b2:30:5c:1f:c5:2e:2e:30:30:26:43:af:43:ec:88:f8:a6:02:
c3:67:71:76:9c:d1:16:83:2a:0d:90:a5:0e:76:60:c5:3c:bd:
a8:88:72:12:37:36:29:e4:db:76:c8:53:eb:72:df:bb:43:ea:
9b:96:ea:a6:ff:b8:69:8f:7d:c8:f1:ef:02:26:6f:8b:f7:24:
d8:aa:c1:ca:49:47:34:ff:44:64:44:31:21:95:4b:7b:a3:73:
0a:13:70:53:01:e3:d5:46:88:1e:31:6f:f6:ba:bf:5c:e0:9a:
ab:61:27:6d:56:a9:4f:31:e4:74:7d:0f:25:80:af:df:7e:f3:
35:af:69:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7UK7y8Tb09BzSCg+SP59EJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwMDU4NTM2MWQ1MWE3MmU3YmE2MzA4YzBjZWIxNjAyNDQ4
MzExNzgwHhcNMjYwNjE3MDYwMTM2WhcNMjYwNjE4MDYwMTM2WjAzMTEwLwYDVQQD
EygzNzQ5OWJlZjU5N2JjNmI5NDVkMWQ0NmVlMzMxYmFjNDg0ZTAzYmU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZSsZfdOxoI7fLLcorvDE+piYZ4e
cJN1XPXXDNP+XWs+Jyzsx5A+FbmX9bCC98kjHl2h9vC1v4mconzyHojc91IuSlOd
qE9TemwdbNSkXTFTwavKZTD18j+B2PsRA7zOoIBnGhyjsVnRoZFoc+DY504nstaN
hJi74LYAdpW7op+EA+3NXNoM/d0lmK9l/owel3wEGAKalJEnWn0PTlJXP/M8FivB
R3JYePFWYjfsvgqy6PBbcbuH0nHiCOqaBmhEVLHtCHAAdBnZ9eJ2uz9Kc7mNrIvP
z2Un9SlE6yDC5vVlwbvVhhf/YBv9E+gaw3PnuAv81Cli7ZfJ/J8ygfQiJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDdJm+9Ze8a5RdHUbuMxusSE4DvmMB8GA1UdIwQY
MBaAFCAFhTYdUacue6YwjAzrFgJEgxF4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUFXRk5oMVJweTU3cGpDTURPc1dBa1NERVhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9kODdmOGUtNjcyMy00YjE2LTllNzEt
MzE3Nzk4NzViNGZhLzEvSUFXRk5oMVJweTU3cGpDTURPc1dBa1NERVhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9kODdmOGUtNjcyMy00YjE2LTllNzEtMzE3Nzk4NzViNGZh
LzEvSUFXRk5oMVJweTU3cGpDTURPc1dBa1NERVhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMaJAVqFm
8QLHSxrbFXingn40Kw8osFAEjEgJk264cW4/7Kf0uWfvSs16K/Nsi+fasUD9KXbM
cOKqDfYFaeTD2Hfge0c7FRIta0wJBTh+FbAES8iu/5F1QdP1yXpReRJBYwqA7AaA
CB8og8vwPEPI30qCWjWN/xIaJSpt9HJhsjBcH8UuLjAwJkOvQ+yI+KYCw2dxdpzR
FoMqDZClDnZgxTy9qIhyEjc2KeTbdshT63Lfu0Pqm5bqpv+4aY99yPHvAiZvi/ck
2KrByklHNP9EZEQxIZVLe6NzChNwUwHj1UaIHjFv9rq/XOCaq2EnbVapTzHkdH0P
JYCv337zNa9pIA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 11:38:22 2026 by rpki-client