Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft
File: IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft (raw, json)
Hash identifier: kQ2JDr3cjibf1Uge+4lgQ+QHOSWUyrlzPkS0LQ0iXoo=
Subject key identifier: A7:AC:06:42:F4:9B:27:62:B7:33:42:AF:CC:37:7D:86:36:6E:82:43
Authority key identifier: 20:05:85:36:1D:51:A7:2E:7B:A6:30:8C:0C:EB:16:02:44:83:11:78
Certificate issuer: /CN=200585361d51a72e7ba6308c0ceb160244831178
Certificate serial: 01A0CA47BA94069C660BD8F6E99D69AFE8EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IAWFNh1Rpy57pjCMDOsWAkSDEXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft
Manifest number: 0B9C
Signing time: Tue 22 Sep 2026 18:01:33 +0000
Manifest this update: Tue 22 Sep 2026 18:01:33 +0000
Manifest next update: Wed 23 Sep 2026 18:01:33 +0000
Files and hashes: 1: 4kSC89D1AOgPjo_VC2p_1wAdyJ4.roa (hash: 49whWUdE9kNFPfnAL8tYbd6+c7MEWg0vvwt7AatABa0=)
2: IAWFNh1Rpy57pjCMDOsWAkSDEXg.crl (hash: iIcTCnoBOMZS/WFFv62RCuwA9OABVCbsNFObGZ0hdHk=)
3: d32KHDz4hQyuCuhNOb9K5kOq2qY.roa (hash: Sa1ntueDsGqjR2cwqIdDg9aoAqEdJGNyLoTHBEU6HPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IAWFNh1Rpy57pjCMDOsWAkSDEXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:47:ba:94:06:9c:66:0b:d8:f6:e9:9d:69:af:e8:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=200585361d51a72e7ba6308c0ceb160244831178
Validity
Not Before: Sep 22 18:01:33 2026 GMT
Not After : Sep 23 18:01:33 2026 GMT
Subject: CN=a7ac0642f49b2762b73342afcc377d86366e8243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:da:b8:a8:15:ea:4e:d2:41:14:4a:be:b6:fe:
6c:b6:e4:f6:83:58:e2:7d:2d:dc:53:8e:5a:28:ae:
7e:40:ea:fa:1d:00:34:59:31:f0:6e:0a:5f:20:82:
fb:cc:57:e5:09:fa:ef:fc:b0:03:17:58:a0:2d:c5:
49:8a:97:b7:8b:be:fa:97:f7:14:13:ea:70:99:0b:
7e:0b:d5:51:cc:ea:42:2f:4d:92:85:2a:84:08:ad:
91:5c:45:59:03:7c:f5:be:43:45:bd:ac:c4:4e:ef:
dc:24:08:20:04:18:dd:20:fb:9c:43:a7:b5:97:1c:
87:1d:56:f1:3d:5d:7b:63:66:b0:a7:2a:e1:dc:4a:
fe:90:1e:a0:69:ed:11:76:a7:e2:e6:ce:8b:d4:95:
73:69:39:f4:69:46:ec:9c:68:c9:3b:ac:e9:a1:c2:
db:f2:c1:a9:15:74:49:1c:94:01:4b:9a:e6:ef:cb:
de:6b:5e:10:6f:26:9a:af:5e:72:5a:8f:c7:ea:fe:
2c:f4:0b:66:fc:f6:f7:55:42:46:7c:da:04:85:1b:
2b:6d:29:59:82:2b:62:04:c4:bf:0e:4d:f8:af:40:
84:ec:19:96:5d:3a:d7:99:a6:85:9d:d1:b4:fd:c3:
f2:ed:9b:9f:81:75:f1:b4:5a:d4:44:d5:a2:bc:fb:
48:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:AC:06:42:F4:9B:27:62:B7:33:42:AF:CC:37:7D:86:36:6E:82:43
X509v3 Authority Key Identifier:
keyid:20:05:85:36:1D:51:A7:2E:7B:A6:30:8C:0C:EB:16:02:44:83:11:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IAWFNh1Rpy57pjCMDOsWAkSDEXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:ca:ab:72:0c:6e:cb:ec:e7:d7:00:96:97:70:9c:6d:50:b6:
6a:f2:dd:dd:c3:7f:d2:1d:2b:ad:0f:da:c3:b0:b9:c5:b3:f0:
7a:ef:d3:25:c5:41:59:87:54:a9:d7:36:07:98:9a:88:cc:f5:
7e:fd:ab:72:c0:c1:58:83:2b:2b:a4:66:68:ea:16:5b:0d:7a:
f6:0e:2d:b2:cd:88:be:03:e4:6b:fa:ac:59:b1:2c:8c:23:c6:
d3:08:ae:d4:5c:a8:3b:48:db:53:75:e1:1b:fa:ba:d4:2c:e8:
78:e1:a3:f5:7d:35:ba:82:cb:3c:57:91:1c:cd:d6:17:55:ce:
35:fc:5a:59:dc:ae:04:cb:14:fa:59:2c:6b:29:ca:de:29:1a:
66:7e:cf:3a:cb:6c:0d:0c:9b:8c:ba:7f:91:00:94:55:c1:6f:
2c:c2:2e:0f:df:81:84:e8:63:8f:62:93:c8:21:11:bb:c4:bb:
da:e8:69:49:10:44:0c:0e:fe:9a:8e:84:a9:08:cb:c9:50:de:
5f:82:41:49:c9:74:94:fc:8d:01:3b:1f:67:13:60:07:eb:65:
7c:07:3b:31:4e:9f:5a:91:f4:73:f6:c3:a3:40:79:23:1a:13:
63:d7:64:47:40:1a:ff:a0:57:19:7e:8d:95:4b:cb:e3:81:1a:
cd:03:58:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDKR7qUBpxmC9j26Z1pr+jqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwMDU4NTM2MWQ1MWE3MmU3YmE2MzA4YzBjZWIxNjAyNDQ4
MzExNzgwHhcNMjYwOTIyMTgwMTMzWhcNMjYwOTIzMTgwMTMzWjAzMTEwLwYDVQQD
EyhhN2FjMDY0MmY0OWIyNzYyYjczMzQyYWZjYzM3N2Q4NjM2NmU4MjQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdq4qBXqTtJBFEq+tv5stuT2g1ji
fS3cU45aKK5+QOr6HQA0WTHwbgpfIIL7zFflCfrv/LADF1igLcVJipe3i776l/cU
E+pwmQt+C9VRzOpCL02ShSqECK2RXEVZA3z1vkNFvazETu/cJAggBBjdIPucQ6e1
lxyHHVbxPV17Y2awpyrh3Er+kB6gae0Rdqfi5s6L1JVzaTn0aUbsnGjJO6zpocLb
8sGpFXRJHJQBS5rm78vea14Qbyaar15yWo/H6v4s9Atm/Pb3VUJGfNoEhRsrbSlZ
gitiBMS/Dk34r0CE7BmWXTrXmaaFndG0/cPy7ZufgXXxtFrURNWivPtI6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKesBkL0myditzNCr8w3fYY2boJDMB8GA1UdIwQY
MBaAFCAFhTYdUacue6YwjAzrFgJEgxF4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUFXRk5oMVJweTU3cGpDTURPc1dBa1NERVhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9kODdmOGUtNjcyMy00YjE2LTllNzEt
MzE3Nzk4NzViNGZhLzEvSUFXRk5oMVJweTU3cGpDTURPc1dBa1NERVhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9kODdmOGUtNjcyMy00YjE2LTllNzEtMzE3Nzk4NzViNGZh
LzEvSUFXRk5oMVJweTU3cGpDTURPc1dBa1NERVhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkMqrcgxu
y+zn1wCWl3CcbVC2avLd3cN/0h0rrQ/aw7C5xbPweu/TJcVBWYdUqdc2B5iaiMz1
fv2rcsDBWIMrK6RmaOoWWw169g4tss2IvgPka/qsWbEsjCPG0wiu1FyoO0jbU3Xh
G/q61CzoeOGj9X01uoLLPFeRHM3WF1XONfxaWdyuBMsU+lksaynK3ikaZn7POsts
DQybjLp/kQCUVcFvLMIuD9+BhOhjj2KTyCERu8S72uhpSRBEDA7+mo6EqQjLyVDe
X4JBScl0lPyNATsfZxNgB+tlfAc7MU6fWpH0c/bDo0B5IxoTY9dkR0Aa/6BXGX6N
lUvL44EazQNYtw==
-----END CERTIFICATE-----
Generated at Tue Sep 22 20:51:47 2026 by rpki-client