Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/9e3f2a-1440-4084-84c2-9312d087dfca/1/20IFnOKR1Jpmkgcxx2faVj7yESQ.mft
File: 20IFnOKR1Jpmkgcxx2faVj7yESQ.mft (raw, json)
Hash identifier: gt2PcBg74+nOt+fxJNi1yUg3nzxHBRD5D2GA4nZexaw=
Subject key identifier: 6C:8D:02:0D:60:0E:28:B8:6B:CB:DC:03:15:FA:BD:7F:BB:BF:62:8E
Authority key identifier: DB:42:05:9C:E2:91:D4:9A:66:92:07:31:C7:67:DA:56:3E:F2:11:24
Certificate issuer: /CN=db42059ce291d49a66920731c767da563ef21124
Certificate serial: 019FAA88693914C4ABAE20BB16CC504325C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/20IFnOKR1Jpmkgcxx2faVj7yESQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/9e3f2a-1440-4084-84c2-9312d087dfca/1/20IFnOKR1Jpmkgcxx2faVj7yESQ.mft
Manifest number: 0CD0
Signing time: Tue 28 Jul 2026 21:01:34 +0000
Manifest this update: Tue 28 Jul 2026 21:01:34 +0000
Manifest next update: Wed 29 Jul 2026 21:01:34 +0000
Files and hashes: 1: 20IFnOKR1Jpmkgcxx2faVj7yESQ.crl (hash: t0ENUT7mPs5lAPE+nW0n25HXOyumLBpLNZw228d7vjw=)
2: K_G3q1oHoFkLaOnMyEVLIcn7Qmw.roa (hash: /NaxyStNTlcpIpTarZjjR+9kQ6m4FlTTRFr5N6+rcrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/9e3f2a-1440-4084-84c2-9312d087dfca/1/20IFnOKR1Jpmkgcxx2faVj7yESQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/9e3f2a-1440-4084-84c2-9312d087dfca/1/20IFnOKR1Jpmkgcxx2faVj7yESQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/20IFnOKR1Jpmkgcxx2faVj7yESQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:69:39:14:c4:ab:ae:20:bb:16:cc:50:43:25:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db42059ce291d49a66920731c767da563ef21124
Validity
Not Before: Jul 28 21:01:34 2026 GMT
Not After : Jul 29 21:01:34 2026 GMT
Subject: CN=6c8d020d600e28b86bcbdc0315fabd7fbbbf628e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:58:60:e7:00:db:10:1f:94:36:b0:21:a0:23:
86:33:af:d6:d7:a7:e3:60:58:d3:66:a3:26:11:ae:
3d:92:08:12:00:62:c0:10:ce:15:a5:b1:fc:d6:dc:
58:28:a5:90:76:b3:35:b5:f0:63:04:60:a7:c0:f5:
2c:ce:97:52:28:81:8f:14:d0:e5:47:45:36:80:45:
d4:4e:81:76:8e:8a:6f:bc:b7:51:22:e5:b7:cd:90:
de:b6:0e:e0:f3:ba:97:e2:46:e4:77:3e:7e:70:89:
00:a3:61:20:be:5b:3f:1e:dd:ef:bb:ef:d4:f5:b1:
42:3b:a3:22:f6:fb:e8:68:03:bc:fa:88:84:46:2d:
61:37:0c:da:65:9b:cb:f5:7c:ec:e3:87:89:cf:26:
79:aa:80:a2:70:6f:fb:e9:44:dc:dc:60:dc:0a:76:
b2:d1:d5:20:00:85:e2:57:2b:0e:63:a6:35:1f:e5:
a4:40:17:44:65:bf:c1:30:62:bb:e0:2f:9a:65:04:
c6:e2:d9:dd:bd:b0:0c:e9:96:8f:c4:42:03:9a:2a:
5f:93:00:c6:7f:77:08:12:68:c5:74:3c:0f:5f:d4:
97:d6:b2:b9:76:3b:e9:92:ea:01:44:50:e7:15:57:
51:c0:be:fa:39:c3:0b:ee:01:b7:27:04:83:bf:ea:
11:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:8D:02:0D:60:0E:28:B8:6B:CB:DC:03:15:FA:BD:7F:BB:BF:62:8E
X509v3 Authority Key Identifier:
keyid:DB:42:05:9C:E2:91:D4:9A:66:92:07:31:C7:67:DA:56:3E:F2:11:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/20IFnOKR1Jpmkgcxx2faVj7yESQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9e3f2a-1440-4084-84c2-9312d087dfca/1/20IFnOKR1Jpmkgcxx2faVj7yESQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9e3f2a-1440-4084-84c2-9312d087dfca/1/20IFnOKR1Jpmkgcxx2faVj7yESQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:7a:2b:c1:8f:18:86:90:c0:75:b2:11:40:80:9e:09:e5:61:
01:4c:ff:68:67:d4:ec:72:47:b6:09:4b:af:5b:cc:88:49:5d:
70:05:6a:e1:10:01:09:bc:df:7b:9f:d0:8b:0f:18:84:45:fa:
24:e2:16:41:b4:34:07:0d:d7:b1:e4:a3:58:45:77:c3:29:47:
ae:ef:79:e5:80:23:d5:4f:24:a6:93:c2:0b:55:70:a1:b1:5b:
e9:2b:fb:cd:3d:17:9b:8d:7d:7f:e7:5c:73:db:aa:45:5d:37:
5a:75:99:c2:c5:32:79:86:e9:1f:23:d6:d1:cf:6a:26:0d:54:
6e:00:8e:98:93:97:51:51:3f:e9:b8:11:2a:58:84:a2:2b:2c:
b8:6f:10:2a:10:56:0c:6d:7e:fd:21:73:ff:0b:03:a0:a5:a8:
26:5f:09:ce:a2:d9:e9:97:99:27:13:c8:49:25:9b:e5:e8:96:
9d:01:c1:f6:12:57:d5:f9:89:58:5f:f2:fc:d5:3d:11:bd:29:
98:bf:0d:75:8e:73:af:6e:f3:ed:47:ed:da:c1:9d:55:be:31:
f4:f6:15:f7:e4:2f:f7:27:e1:b6:b7:1d:dc:30:9d:9a:94:dd:
95:60:3d:47:fb:88:09:f0:e6:f6:c0:22:6f:41:38:7d:35:48:
bd:91:18:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qiGk5FMSrriC7FsxQQyXGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiNDIwNTljZTI5MWQ0OWE2NjkyMDczMWM3NjdkYTU2M2Vm
MjExMjQwHhcNMjYwNzI4MjEwMTM0WhcNMjYwNzI5MjEwMTM0WjAzMTEwLwYDVQQD
Eyg2YzhkMDIwZDYwMGUyOGI4NmJjYmRjMDMxNWZhYmQ3ZmJiYmY2MjhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1hg5wDbEB+UNrAhoCOGM6/W16fj
YFjTZqMmEa49kggSAGLAEM4VpbH81txYKKWQdrM1tfBjBGCnwPUszpdSKIGPFNDl
R0U2gEXUToF2jopvvLdRIuW3zZDetg7g87qX4kbkdz5+cIkAo2Egvls/Ht3vu+/U
9bFCO6Mi9vvoaAO8+oiERi1hNwzaZZvL9Xzs44eJzyZ5qoCicG/76UTc3GDcCnay
0dUgAIXiVysOY6Y1H+WkQBdEZb/BMGK74C+aZQTG4tndvbAM6ZaPxEIDmipfkwDG
f3cIEmjFdDwPX9SX1rK5djvpkuoBRFDnFVdRwL76OcML7gG3JwSDv+oRmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGyNAg1gDii4a8vcAxX6vX+7v2KOMB8GA1UdIwQY
MBaAFNtCBZzikdSaZpIHMcdn2lY+8hEkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjBJRm5PS1IxSnBta2djeHgyZmFWajd5RVNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni85ZTNmMmEtMTQ0MC00MDg0LTg0YzIt
OTMxMmQwODdkZmNhLzEvMjBJRm5PS1IxSnBta2djeHgyZmFWajd5RVNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni85ZTNmMmEtMTQ0MC00MDg0LTg0YzItOTMxMmQwODdkZmNh
LzEvMjBJRm5PS1IxSnBta2djeHgyZmFWajd5RVNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOXorwY8Y
hpDAdbIRQICeCeVhAUz/aGfU7HJHtglLr1vMiEldcAVq4RABCbzfe5/Qiw8YhEX6
JOIWQbQ0Bw3XseSjWEV3wylHru955YAj1U8kppPCC1VwobFb6Sv7zT0Xm419f+dc
c9uqRV03WnWZwsUyeYbpHyPW0c9qJg1UbgCOmJOXUVE/6bgRKliEoissuG8QKhBW
DG1+/SFz/wsDoKWoJl8JzqLZ6ZeZJxPISSWb5eiWnQHB9hJX1fmJWF/y/NU9Eb0p
mL8NdY5zr27z7Uft2sGdVb4x9PYV9+Qv9yfhtrcd3DCdmpTdlWA9R/uICfDm9sAi
b0E4fTVIvZEY3w==
-----END CERTIFICATE-----
Generated at Wed Jul 29 04:43:44 2026 by rpki-client