Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/74c76f-5d70-4eef-99f5-131cc48640dc/1/iWsznbz4QR1YQAjPAptHyIqzedU.mft
File: iWsznbz4QR1YQAjPAptHyIqzedU.mft (raw, json)
Hash identifier: kj3rF+JoPF2bPRhSazGgAdriKJltS7UZlt/x5iMLpVo=
Subject key identifier: C9:E9:F9:EF:95:54:1D:1E:FC:E1:D4:E8:0D:DB:E2:72:3F:EB:39:0D
Authority key identifier: 89:6B:33:9D:BC:F8:41:1D:58:40:08:CF:02:9B:47:C8:8A:B3:79:D5
Certificate issuer: /CN=896b339dbcf8411d584008cf029b47c88ab379d5
Certificate serial: 019FAAF5762D19F4A5CE91D8D0538846746E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iWsznbz4QR1YQAjPAptHyIqzedU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/74c76f-5d70-4eef-99f5-131cc48640dc/1/iWsznbz4QR1YQAjPAptHyIqzedU.mft
Manifest number: 01B0
Signing time: Tue 28 Jul 2026 23:00:41 +0000
Manifest this update: Tue 28 Jul 2026 23:00:41 +0000
Manifest next update: Wed 29 Jul 2026 23:00:41 +0000
Files and hashes: 1: _01xdN9b6VGiDq8TdVfHkv4nsNA.roa (hash: cof+3EhtbeAEqNmK/OvBSq8ShRaGyYdb9JejvgRl8nA=)
2: iWsznbz4QR1YQAjPAptHyIqzedU.crl (hash: Qc0o6rb0JG6cXJKENHhyH0JPeND7dGnmVhuFYZWetdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/74c76f-5d70-4eef-99f5-131cc48640dc/1/iWsznbz4QR1YQAjPAptHyIqzedU.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/74c76f-5d70-4eef-99f5-131cc48640dc/1/iWsznbz4QR1YQAjPAptHyIqzedU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iWsznbz4QR1YQAjPAptHyIqzedU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:76:2d:19:f4:a5:ce:91:d8:d0:53:88:46:74:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896b339dbcf8411d584008cf029b47c88ab379d5
Validity
Not Before: Jul 28 23:00:41 2026 GMT
Not After : Jul 29 23:00:41 2026 GMT
Subject: CN=c9e9f9ef95541d1efce1d4e80ddbe2723feb390d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6c:c3:da:bf:ac:92:36:87:b8:c0:38:57:a3:
6d:70:84:8c:cf:83:5f:19:7e:b8:1f:8a:67:f7:64:
c9:40:17:8d:4e:05:eb:cf:72:3d:a5:0d:56:1e:d0:
d9:c3:18:a4:d9:90:1f:92:b7:42:76:80:a0:e0:64:
5f:26:a0:0b:c4:be:85:fd:5a:ce:f3:56:43:40:b2:
69:47:ca:86:b9:27:ae:d3:ef:af:05:1c:05:e0:d3:
5e:ff:82:fa:38:a0:86:81:60:fc:cd:e4:94:e8:09:
85:db:b4:11:8c:b7:be:28:6b:64:f8:a2:72:61:92:
44:66:7a:15:78:ef:8c:b1:50:56:da:0a:ea:1c:6a:
c6:38:80:b8:41:48:05:61:8e:78:aa:0a:c4:ad:b0:
76:be:3b:40:63:80:ae:38:05:f1:d0:0a:7f:83:2a:
03:ec:51:f0:db:0f:ce:3c:d7:25:76:fc:f1:48:e5:
28:ef:63:39:cd:d8:33:82:47:0d:cf:0f:9b:03:00:
3e:d1:16:53:5b:55:33:8a:62:4b:e5:00:40:99:1b:
0f:a9:7b:bf:4c:89:9b:ed:18:94:27:34:66:a2:ae:
c9:bd:79:7a:f6:34:96:13:06:77:a2:a1:75:13:e4:
64:8c:61:f1:94:c0:ce:de:4b:c5:d7:3a:88:53:d0:
04:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:E9:F9:EF:95:54:1D:1E:FC:E1:D4:E8:0D:DB:E2:72:3F:EB:39:0D
X509v3 Authority Key Identifier:
keyid:89:6B:33:9D:BC:F8:41:1D:58:40:08:CF:02:9B:47:C8:8A:B3:79:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWsznbz4QR1YQAjPAptHyIqzedU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/74c76f-5d70-4eef-99f5-131cc48640dc/1/iWsznbz4QR1YQAjPAptHyIqzedU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/74c76f-5d70-4eef-99f5-131cc48640dc/1/iWsznbz4QR1YQAjPAptHyIqzedU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:47:bb:28:c5:9a:21:a6:03:5c:05:b2:1a:9a:6a:7b:30:9f:
e3:51:0c:dd:03:54:8e:a1:09:6f:e1:b5:25:eb:57:45:ff:56:
24:c3:f0:a5:f9:aa:e4:99:4e:5e:bb:14:d1:2d:9a:7d:17:84:
be:95:b5:95:f8:ac:ac:ee:09:95:0f:50:74:a3:19:9f:bb:5b:
05:85:db:3c:9b:b3:5c:21:c5:78:35:63:c6:d1:91:45:9d:46:
c2:5b:bb:89:31:9a:ad:64:58:ab:b4:5c:e1:62:c3:c0:43:b2:
c1:e2:2a:a9:0d:d4:4a:4e:bd:5f:a7:23:9d:ef:e0:18:fe:fd:
d2:d8:08:33:0a:03:0a:7f:88:9e:8e:5b:05:37:31:d8:c2:c7:
d9:ec:4c:12:33:49:cb:9b:1f:1a:81:94:a8:a8:3e:fa:32:1a:
79:fd:fc:4a:a0:3c:e3:f3:d8:c0:9c:b6:a4:37:52:9a:1e:c7:
8c:34:b1:f8:ec:43:d4:3d:80:4b:b4:7a:0c:a1:58:1f:95:3a:
b6:c0:f9:44:9e:62:37:ac:ae:8f:e6:7a:bb:15:d7:56:92:78:
2e:38:c0:6a:1e:d4:10:fe:21:b9:b0:42:e8:17:2f:c1:5a:ee:
8b:7c:e5:df:71:e3:78:86:ed:c2:b0:eb:68:8c:b8:d3:17:ff:
d3:d1:fa:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+q9XYtGfSlzpHY0FOIRnRuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5NmIzMzlkYmNmODQxMWQ1ODQwMDhjZjAyOWI0N2M4OGFi
Mzc5ZDUwHhcNMjYwNzI4MjMwMDQxWhcNMjYwNzI5MjMwMDQxWjAzMTEwLwYDVQQD
EyhjOWU5ZjllZjk1NTQxZDFlZmNlMWQ0ZTgwZGRiZTI3MjNmZWIzOTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmzD2r+skjaHuMA4V6NtcISMz4Nf
GX64H4pn92TJQBeNTgXrz3I9pQ1WHtDZwxik2ZAfkrdCdoCg4GRfJqALxL6F/VrO
81ZDQLJpR8qGuSeu0++vBRwF4NNe/4L6OKCGgWD8zeSU6AmF27QRjLe+KGtk+KJy
YZJEZnoVeO+MsVBW2grqHGrGOIC4QUgFYY54qgrErbB2vjtAY4CuOAXx0Ap/gyoD
7FHw2w/OPNcldvzxSOUo72M5zdgzgkcNzw+bAwA+0RZTW1UzimJL5QBAmRsPqXu/
TImb7RiUJzRmoq7JvXl69jSWEwZ3oqF1E+RkjGHxlMDO3kvF1zqIU9AE+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMnp+e+VVB0e/OHU6A3b4nI/6zkNMB8GA1UdIwQY
MBaAFIlrM528+EEdWEAIzwKbR8iKs3nVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVdzem5iejRRUjFZUUFqUEFwdEh5SXF6ZWRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS83NGM3NmYtNWQ3MC00ZWVmLTk5ZjUt
MTMxY2M0ODY0MGRjLzEvaVdzem5iejRRUjFZUUFqUEFwdEh5SXF6ZWRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS83NGM3NmYtNWQ3MC00ZWVmLTk5ZjUtMTMxY2M0ODY0MGRj
LzEvaVdzem5iejRRUjFZUUFqUEFwdEh5SXF6ZWRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtUe7KMWa
IaYDXAWyGppqezCf41EM3QNUjqEJb+G1JetXRf9WJMPwpfmq5JlOXrsU0S2afReE
vpW1lfisrO4JlQ9QdKMZn7tbBYXbPJuzXCHFeDVjxtGRRZ1Gwlu7iTGarWRYq7Rc
4WLDwEOyweIqqQ3USk69X6cjne/gGP790tgIMwoDCn+Ino5bBTcx2MLH2exMEjNJ
y5sfGoGUqKg++jIaef38SqA84/PYwJy2pDdSmh7HjDSx+OxD1D2AS7R6DKFYH5U6
tsD5RJ5iN6yuj+Z6uxXXVpJ4LjjAah7UEP4hubBC6BcvwVrui3zl33HjeIbtwrDr
aIy40xf/09H6EQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 09:08:11 2026 by rpki-client