Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft
File: ifKArlGVUMen9JU6sn16593rE0E.mft (raw, json)
Hash identifier: aYWnFEriPwmiNuMtL5JXr/vJ042+FkgVGYgIr2jW0pI=
Subject key identifier: F9:D0:29:01:7D:B3:3E:8B:4A:D2:97:0B:D2:D0:67:BC:62:46:96:B8
Authority key identifier: 89:F2:80:AE:51:95:50:C7:A7:F4:95:3A:B2:7D:7A:E7:DD:EB:13:41
Certificate issuer: /CN=89f280ae519550c7a7f4953ab27d7ae7ddeb1341
Certificate serial: 019FA90718B38F0BA5BB4CB9DE7700AD23E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ifKArlGVUMen9JU6sn16593rE0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft
Manifest number: 1965
Signing time: Tue 28 Jul 2026 14:00:42 +0000
Manifest this update: Tue 28 Jul 2026 14:00:42 +0000
Manifest next update: Wed 29 Jul 2026 14:00:42 +0000
Files and hashes: 1: 6CW7JYEKskJr6yo0DDu4CWa4jUI.roa (hash: adF3q2VLnpMi1Z/r5xi4cFiAP5apevVr8J5nUI/Kilc=)
2: ifKArlGVUMen9JU6sn16593rE0E.crl (hash: 82ZiN0mp1az6SF5h/uQSxxj6lU1wPerCiR08xAIS/Ng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ifKArlGVUMen9JU6sn16593rE0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:18:b3:8f:0b:a5:bb:4c:b9:de:77:00:ad:23:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89f280ae519550c7a7f4953ab27d7ae7ddeb1341
Validity
Not Before: Jul 28 14:00:42 2026 GMT
Not After : Jul 29 14:00:42 2026 GMT
Subject: CN=f9d029017db33e8b4ad2970bd2d067bc624696b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:26:73:9a:b0:2e:58:47:82:00:62:6e:57:65:
08:d8:dd:ed:93:52:49:29:ea:25:98:56:bb:b6:13:
ac:a8:52:04:4b:52:65:af:fa:ad:1f:99:69:08:62:
b0:55:d9:c4:5e:fa:5f:e7:56:e3:2d:23:c6:be:ea:
65:a9:ee:10:8c:e6:07:29:65:2e:5b:b1:c6:b5:47:
81:ed:13:64:c0:cd:49:c1:03:9f:a2:bc:f9:3c:18:
99:00:b6:10:32:a1:aa:9c:fd:5d:45:87:47:5d:94:
d9:50:a3:6b:8c:ab:bd:b3:b1:d1:89:cb:2f:64:75:
2f:2a:5f:f2:43:d6:d0:bc:b0:f2:c5:9d:38:d7:ec:
11:82:e2:38:0f:f6:d7:90:49:72:63:b8:3a:68:19:
f4:18:41:f5:ba:dd:40:00:7f:59:c2:eb:b0:c7:e4:
1d:2c:f6:6e:7f:c2:8c:64:26:f4:08:7c:5f:29:55:
54:8d:5b:32:5b:c3:7a:2d:84:0c:70:e0:7a:0e:e4:
8a:4d:25:76:21:f5:78:b9:70:3b:32:4e:3d:7b:d9:
d4:a3:92:07:1b:7c:74:44:01:f0:f7:dd:b6:5a:e3:
c8:90:77:ee:3d:c7:eb:7b:f1:e0:30:7e:15:3f:a1:
66:e9:00:3a:be:4f:1c:17:3c:73:00:76:1d:bd:28:
07:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:D0:29:01:7D:B3:3E:8B:4A:D2:97:0B:D2:D0:67:BC:62:46:96:B8
X509v3 Authority Key Identifier:
keyid:89:F2:80:AE:51:95:50:C7:A7:F4:95:3A:B2:7D:7A:E7:DD:EB:13:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ifKArlGVUMen9JU6sn16593rE0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:eb:18:86:c5:07:97:c8:7d:1f:16:95:ae:1d:f9:58:0c:68:
a6:5e:29:ef:3c:11:23:ef:2a:97:51:a6:4d:dc:8d:da:c1:1e:
c9:ff:23:39:31:3a:bc:c1:0c:9b:a3:9b:74:b3:db:a9:a3:db:
43:45:65:ef:d3:d6:92:f5:b8:45:67:d3:c1:bb:b5:2f:f9:ee:
87:1e:18:f5:55:52:35:3b:0e:ad:46:aa:7a:72:b3:c9:5c:e2:
07:3b:1d:67:15:ce:68:3d:46:df:87:34:1b:20:4e:ac:13:67:
22:c6:88:ea:72:38:7b:a8:19:48:8f:0c:60:fd:ee:81:f0:f5:
54:e2:2b:e5:39:8a:44:16:6d:7a:3d:43:75:50:ca:43:6e:cb:
1f:14:54:68:55:83:5d:ae:85:ad:57:80:34:cc:bd:88:e5:ee:
90:48:f8:3f:5d:58:be:2f:d5:2f:39:fb:53:5a:ff:d1:46:e3:
c8:6a:5d:fa:f2:e7:89:16:61:e6:00:65:57:07:0a:37:b7:49:
b5:7e:0f:77:0c:ce:e2:cf:04:44:45:3f:f0:80:b5:07:a6:de:
47:5e:07:c7:35:f3:e6:11:fd:ce:53:64:29:6a:10:bc:04:f4:
58:ac:8a:ff:c7:cf:90:ec:2a:ea:f3:90:ce:dd:54:1b:e6:ac:
3b:e5:66:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pBxizjwulu0y53ncArSPnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5ZjI4MGFlNTE5NTUwYzdhN2Y0OTUzYWIyN2Q3YWU3ZGRl
YjEzNDEwHhcNMjYwNzI4MTQwMDQyWhcNMjYwNzI5MTQwMDQyWjAzMTEwLwYDVQQD
EyhmOWQwMjkwMTdkYjMzZThiNGFkMjk3MGJkMmQwNjdiYzYyNDY5NmI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCZzmrAuWEeCAGJuV2UI2N3tk1JJ
KeolmFa7thOsqFIES1Jlr/qtH5lpCGKwVdnEXvpf51bjLSPGvuplqe4QjOYHKWUu
W7HGtUeB7RNkwM1JwQOforz5PBiZALYQMqGqnP1dRYdHXZTZUKNrjKu9s7HRicsv
ZHUvKl/yQ9bQvLDyxZ041+wRguI4D/bXkElyY7g6aBn0GEH1ut1AAH9Zwuuwx+Qd
LPZuf8KMZCb0CHxfKVVUjVsyW8N6LYQMcOB6DuSKTSV2IfV4uXA7Mk49e9nUo5IH
G3x0RAHw9922WuPIkHfuPcfre/HgMH4VP6Fm6QA6vk8cFzxzAHYdvSgHBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPnQKQF9sz6LStKXC9LQZ7xiRpa4MB8GA1UdIwQY
MBaAFInygK5RlVDHp/SVOrJ9eufd6xNBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWZLQXJsR1ZVTWVuOUpVNnNuMTY1OTNyRTBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9mZGNlNGMtMmVhNS00N2ViLTk0YmMt
NWI1MGVhODhlZWFiLzEvaWZLQXJsR1ZVTWVuOUpVNnNuMTY1OTNyRTBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9mZGNlNGMtMmVhNS00N2ViLTk0YmMtNWI1MGVhODhlZWFi
LzEvaWZLQXJsR1ZVTWVuOUpVNnNuMTY1OTNyRTBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzOsYhsUH
l8h9HxaVrh35WAxopl4p7zwRI+8ql1GmTdyN2sEeyf8jOTE6vMEMm6ObdLPbqaPb
Q0Vl79PWkvW4RWfTwbu1L/nuhx4Y9VVSNTsOrUaqenKzyVziBzsdZxXOaD1G34c0
GyBOrBNnIsaI6nI4e6gZSI8MYP3ugfD1VOIr5TmKRBZtej1DdVDKQ27LHxRUaFWD
Xa6FrVeANMy9iOXukEj4P11Yvi/VLzn7U1r/0UbjyGpd+vLniRZh5gBlVwcKN7dJ
tX4PdwzO4s8EREU/8IC1B6beR14HxzXz5hH9zlNkKWoQvAT0WKyK/8fPkOwq6vOQ
zt1UG+asO+Vm6Q==
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:04:52 2026 by rpki-client