Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/1IVR4mFps7PhJPaWTicC6VdoJT4.mft
File: 1IVR4mFps7PhJPaWTicC6VdoJT4.mft (raw, json)
Hash identifier: cq/8WVIo51TpBNjcjBMqEbdSZJewiqEyXfTs9FtC9DI=
Subject key identifier: A4:20:78:7A:E1:0C:6C:1F:2A:C7:55:6D:1C:CC:E4:94:4F:F6:F5:07
Authority key identifier: D4:85:51:E2:61:69:B3:B3:E1:24:F6:96:4E:27:02:E9:57:68:25:3E
Certificate issuer: /CN=d48551e26169b3b3e124f6964e2702e95768253e
Certificate serial: 019FAAF55C857C350BB3336126AF9ED2C9CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1IVR4mFps7PhJPaWTicC6VdoJT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/1IVR4mFps7PhJPaWTicC6VdoJT4.mft
Manifest number: 09F0
Signing time: Tue 28 Jul 2026 23:00:34 +0000
Manifest this update: Tue 28 Jul 2026 23:00:34 +0000
Manifest next update: Wed 29 Jul 2026 23:00:34 +0000
Files and hashes: 1: 1IVR4mFps7PhJPaWTicC6VdoJT4.crl (hash: ERfiLeuX+OozX+e5ATlpdizBeaTjCQ9WtwVKnjzFdbQ=)
2: dUE7B1BI2eY5vxH0sjXn_eEtdiE.roa (hash: Td10cn+TUBgy7bh+w4UsjfRQk/m+lGjAwnzc4Ms7SgE=)
3: koyfl1fbRQ7wL_4CDR4bR8SUJ6w.roa (hash: +ihoHt66MtdHz9TjemIYSdtViPsR/B1PabBEU1L+tYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/1IVR4mFps7PhJPaWTicC6VdoJT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/1IVR4mFps7PhJPaWTicC6VdoJT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1IVR4mFps7PhJPaWTicC6VdoJT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:5c:85:7c:35:0b:b3:33:61:26:af:9e:d2:c9:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48551e26169b3b3e124f6964e2702e95768253e
Validity
Not Before: Jul 28 23:00:34 2026 GMT
Not After : Jul 29 23:00:34 2026 GMT
Subject: CN=a420787ae10c6c1f2ac7556d1ccce4944ff6f507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:fd:7d:09:69:a2:d8:46:65:11:8d:b7:7a:ef:
e1:c5:94:62:cb:aa:07:e1:b0:c6:8d:d4:2c:7e:27:
9d:c9:91:d0:65:94:85:45:fa:08:4c:ac:e2:d7:20:
19:f2:bb:c4:2a:7a:4f:24:76:d5:8e:7d:e7:bb:52:
11:ae:e8:7a:12:c3:af:f6:9c:07:80:0a:70:43:6c:
a4:da:cd:f1:69:23:5e:00:f4:ee:ca:7b:9d:27:95:
5e:5e:b6:97:9c:6a:5b:d8:6f:a2:9e:c3:45:e1:27:
58:3b:d1:55:6b:f0:d8:f5:12:26:f6:4e:c0:cd:19:
c2:6e:c1:1c:2f:58:e4:88:5f:bf:4a:f1:19:54:93:
de:18:f3:7c:51:c6:ba:c3:6c:c9:a4:df:7e:79:90:
13:a0:0f:58:77:19:1b:c2:c2:29:15:65:90:bc:b6:
ec:95:e8:50:25:76:9d:0f:0c:1e:18:44:95:d0:8d:
91:65:70:d7:1a:81:e4:fe:ec:7f:e7:4c:70:7c:51:
67:ce:e8:a9:17:39:29:30:0c:e1:54:6e:d0:d9:5e:
96:c3:83:c1:e5:2c:11:76:1f:64:2d:d5:b2:40:d2:
ab:4d:46:c6:cc:00:d8:5a:49:62:ad:55:58:f7:d8:
5f:b1:98:1a:8f:0a:79:88:22:e1:56:b7:d2:b9:f5:
32:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:20:78:7A:E1:0C:6C:1F:2A:C7:55:6D:1C:CC:E4:94:4F:F6:F5:07
X509v3 Authority Key Identifier:
keyid:D4:85:51:E2:61:69:B3:B3:E1:24:F6:96:4E:27:02:E9:57:68:25:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IVR4mFps7PhJPaWTicC6VdoJT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/1IVR4mFps7PhJPaWTicC6VdoJT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/1IVR4mFps7PhJPaWTicC6VdoJT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:7c:48:6f:a9:a0:63:e8:92:eb:6b:de:46:33:43:4b:95:fc:
e3:f9:8f:60:d2:aa:60:e2:58:ad:68:17:4a:fe:2e:12:7f:34:
c4:7a:2d:6b:c2:bf:f7:89:b2:aa:85:a6:ae:5c:e3:b7:72:83:
52:9a:75:f9:07:0a:6f:ee:68:fc:59:7d:46:eb:d0:ae:01:c9:
a2:4f:65:e7:71:eb:5f:2e:3e:0e:cb:0b:db:d0:b5:f2:c0:b3:
7f:53:ad:73:72:1e:48:5c:3b:37:ef:30:47:d6:9d:59:eb:65:
31:32:ef:fe:93:51:c3:e3:5b:1d:a2:4f:c1:a2:09:ea:36:cc:
7f:c8:04:a9:54:23:47:b3:6e:66:bd:1a:80:a5:44:d9:cb:e8:
90:65:96:b1:2f:83:de:9e:3c:c8:c5:64:2c:6d:32:cd:ac:34:
75:88:4c:60:e7:b9:39:c3:34:f7:03:50:0a:82:08:90:e8:2a:
c5:e9:eb:31:f7:a0:40:5d:31:76:13:8c:2e:b6:3f:27:22:54:
96:51:d8:12:28:34:a5:c2:3c:34:43:0c:fb:bd:34:c5:dd:1b:
8c:60:79:22:33:3e:b6:23:24:bb:ba:0b:33:0c:5a:29:8b:cf:
be:e1:5c:c9:66:ab:97:cf:02:f3:11:0e:71:f6:2f:2e:1c:92:
40:05:e8:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+q9VyFfDULszNhJq+e0snLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0ODU1MWUyNjE2OWIzYjNlMTI0ZjY5NjRlMjcwMmU5NTc2
ODI1M2UwHhcNMjYwNzI4MjMwMDM0WhcNMjYwNzI5MjMwMDM0WjAzMTEwLwYDVQQD
EyhhNDIwNzg3YWUxMGM2YzFmMmFjNzU1NmQxY2NjZTQ5NDRmZjZmNTA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlf19CWmi2EZlEY23eu/hxZRiy6oH
4bDGjdQsfiedyZHQZZSFRfoITKzi1yAZ8rvEKnpPJHbVjn3nu1IRruh6EsOv9pwH
gApwQ2yk2s3xaSNeAPTuynudJ5VeXraXnGpb2G+insNF4SdYO9FVa/DY9RIm9k7A
zRnCbsEcL1jkiF+/SvEZVJPeGPN8Uca6w2zJpN9+eZAToA9YdxkbwsIpFWWQvLbs
lehQJXadDwweGESV0I2RZXDXGoHk/ux/50xwfFFnzuipFzkpMAzhVG7Q2V6Ww4PB
5SwRdh9kLdWyQNKrTUbGzADYWklirVVY99hfsZgajwp5iCLhVrfSufUyGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKQgeHrhDGwfKsdVbRzM5JRP9vUHMB8GA1UdIwQY
MBaAFNSFUeJhabOz4ST2lk4nAulXaCU+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUlWUjRtRnBzN1BoSlBhV1RpY0M2VmRvSlQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9lYWQyNzctODRjOS00YjhlLTg3OWUt
NWY3MzI2NzEwMmE2LzEvMUlWUjRtRnBzN1BoSlBhV1RpY0M2VmRvSlQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9lYWQyNzctODRjOS00YjhlLTg3OWUtNWY3MzI2NzEwMmE2
LzEvMUlWUjRtRnBzN1BoSlBhV1RpY0M2VmRvSlQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADnxIb6mg
Y+iS62veRjNDS5X84/mPYNKqYOJYrWgXSv4uEn80xHota8K/94myqoWmrlzjt3KD
Upp1+QcKb+5o/Fl9RuvQrgHJok9l53HrXy4+DssL29C18sCzf1Otc3IeSFw7N+8w
R9adWetlMTLv/pNRw+NbHaJPwaIJ6jbMf8gEqVQjR7NuZr0agKVE2cvokGWWsS+D
3p48yMVkLG0yzaw0dYhMYOe5OcM09wNQCoIIkOgqxenrMfegQF0xdhOMLrY/JyJU
llHYEig0pcI8NEMM+700xd0bjGB5IjM+tiMku7oLMwxaKYvPvuFcyWarl88C8xEO
cfYvLhySQAXoLw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 00:45:58 2026 by rpki-client