Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/b9dbe5-4fb8-4975-a1c8-997597b2d808/1/iG3awir3vGlEuLJjKkuqxSLJIH4.mft
File: iG3awir3vGlEuLJjKkuqxSLJIH4.mft (raw, json)
Hash identifier: hBjABCqaT/CeR1oDb2v9bja2hXpSYKWJ0NLwAGas68c=
Subject key identifier: 7D:A5:A8:75:FF:9B:FC:17:40:B6:4A:D0:8B:68:F2:D0:8D:16:59:99
Authority key identifier: 88:6D:DA:C2:2A:F7:BC:69:44:B8:B2:63:2A:4B:AA:C5:22:C9:20:7E
Certificate issuer: /CN=886ddac22af7bc6944b8b2632a4baac522c9207e
Certificate serial: 019FAA87F248D62296EF3B5F2909062EE411
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iG3awir3vGlEuLJjKkuqxSLJIH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/b9dbe5-4fb8-4975-a1c8-997597b2d808/1/iG3awir3vGlEuLJjKkuqxSLJIH4.mft
Manifest number: 4D
Signing time: Tue 28 Jul 2026 21:01:03 +0000
Manifest this update: Tue 28 Jul 2026 21:01:03 +0000
Manifest next update: Wed 29 Jul 2026 21:01:03 +0000
Files and hashes: 1: 1X5LpoPkiiIfqJJshC34MniOMI4.roa (hash: UQKIVsiFeFuAnLSpr7xUCS9KnEW9kjaFk6PUq4VbMUQ=)
2: iG3awir3vGlEuLJjKkuqxSLJIH4.crl (hash: U6S3QvJg0b/TcFEHdZcU1Ije1h4xt3m6H/7t28jxx8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/b9dbe5-4fb8-4975-a1c8-997597b2d808/1/iG3awir3vGlEuLJjKkuqxSLJIH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/b9dbe5-4fb8-4975-a1c8-997597b2d808/1/iG3awir3vGlEuLJjKkuqxSLJIH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iG3awir3vGlEuLJjKkuqxSLJIH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:f2:48:d6:22:96:ef:3b:5f:29:09:06:2e:e4:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=886ddac22af7bc6944b8b2632a4baac522c9207e
Validity
Not Before: Jul 28 21:01:03 2026 GMT
Not After : Jul 29 21:01:03 2026 GMT
Subject: CN=7da5a875ff9bfc1740b64ad08b68f2d08d165999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bb:79:7f:94:e2:49:99:b3:a1:dc:98:1b:f0:
c0:82:af:05:94:95:4c:57:49:bb:3d:a2:eb:f8:7a:
b6:28:b8:19:16:92:c8:09:c6:e1:a9:73:a3:2a:0b:
ac:2f:3e:60:47:e6:65:85:22:1d:c5:54:2e:39:cd:
10:ae:d3:ff:38:02:0d:97:f7:ad:2e:e8:69:3f:9a:
88:70:4d:39:75:5f:a2:d9:0d:05:f9:f6:95:a6:81:
de:ed:e7:68:b3:84:bb:fc:ef:52:c9:48:14:ea:5c:
56:1f:f2:f5:af:23:02:7d:24:b1:2a:9d:41:e7:e6:
a7:01:b5:25:fb:8f:8c:72:88:91:85:a3:33:27:27:
54:27:44:82:43:e7:ed:19:37:a4:77:7b:3a:d4:36:
5e:e6:17:e0:b6:e0:96:1a:16:41:23:44:e2:2a:a5:
cc:54:e1:16:d7:5c:88:52:e9:07:ef:a5:b1:4a:07:
38:03:8c:c5:5b:cb:57:7e:ad:b7:83:74:24:72:a4:
0d:9e:22:68:91:d4:56:44:5a:26:ec:39:ce:4e:f4:
f3:88:d6:7c:6e:3e:fb:da:7e:01:90:97:56:0e:da:
dd:c6:0d:03:8f:c5:c6:18:38:83:69:61:cb:ee:39:
84:c5:77:68:11:c8:94:9e:c5:7a:64:c9:c8:03:09:
37:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:A5:A8:75:FF:9B:FC:17:40:B6:4A:D0:8B:68:F2:D0:8D:16:59:99
X509v3 Authority Key Identifier:
keyid:88:6D:DA:C2:2A:F7:BC:69:44:B8:B2:63:2A:4B:AA:C5:22:C9:20:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iG3awir3vGlEuLJjKkuqxSLJIH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b9dbe5-4fb8-4975-a1c8-997597b2d808/1/iG3awir3vGlEuLJjKkuqxSLJIH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b9dbe5-4fb8-4975-a1c8-997597b2d808/1/iG3awir3vGlEuLJjKkuqxSLJIH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:5b:04:59:7d:ff:d0:57:3e:b9:8e:67:e8:e0:82:e4:60:e0:
6a:c5:83:93:96:d1:85:50:6e:cf:58:da:a2:f1:eb:a1:6c:1b:
34:ec:6d:d3:6c:b7:24:94:64:48:25:21:33:16:4b:4d:d5:fb:
f5:d7:d4:f2:bc:46:3e:d4:ff:ae:d6:e0:18:b7:3e:77:c7:55:
89:fe:a2:09:a2:b5:0d:77:9a:6e:63:2f:2a:e0:f7:fb:18:3d:
04:83:95:25:f4:a4:1b:6e:df:50:15:24:99:22:27:25:a2:5d:
21:84:35:ff:0b:4c:3f:ea:4d:40:c8:43:3b:46:8d:72:ce:10:
ac:69:d9:81:ee:c1:21:ea:57:ae:8c:da:e8:86:f8:1a:c4:ce:
b0:a6:79:db:0a:d5:b1:8e:f5:65:35:38:62:f8:60:43:43:35:
cf:40:e0:a1:4d:2e:6a:2c:c8:0d:b5:a7:ec:76:59:cc:45:87:
65:69:cd:b5:e3:03:9d:63:5a:d7:95:4d:77:40:f4:8b:90:c2:
fc:ad:e3:60:b9:91:04:d4:1d:40:fc:c0:12:37:94:33:03:a9:
4a:56:36:33:ae:0a:16:3b:a6:ed:34:68:8f:b0:2a:86:a2:d3:
cd:3a:e9:81:0d:0e:c9:3f:a0:56:8c:19:68:61:9e:80:b8:fe:
58:95:87:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qh/JI1iKW7ztfKQkGLuQRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4NmRkYWMyMmFmN2JjNjk0NGI4YjI2MzJhNGJhYWM1MjJj
OTIwN2UwHhcNMjYwNzI4MjEwMTAzWhcNMjYwNzI5MjEwMTAzWjAzMTEwLwYDVQQD
Eyg3ZGE1YTg3NWZmOWJmYzE3NDBiNjRhZDA4YjY4ZjJkMDhkMTY1OTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLt5f5TiSZmzodyYG/DAgq8FlJVM
V0m7PaLr+Hq2KLgZFpLICcbhqXOjKgusLz5gR+ZlhSIdxVQuOc0QrtP/OAINl/et
LuhpP5qIcE05dV+i2Q0F+faVpoHe7edos4S7/O9SyUgU6lxWH/L1ryMCfSSxKp1B
5+anAbUl+4+McoiRhaMzJydUJ0SCQ+ftGTekd3s61DZe5hfgtuCWGhZBI0TiKqXM
VOEW11yIUukH76WxSgc4A4zFW8tXfq23g3QkcqQNniJokdRWRFom7DnOTvTziNZ8
bj772n4BkJdWDtrdxg0Dj8XGGDiDaWHL7jmExXdoEciUnsV6ZMnIAwk3kwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH2lqHX/m/wXQLZK0Ito8tCNFlmZMB8GA1UdIwQY
MBaAFIht2sIq97xpRLiyYypLqsUiySB+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUczYXdpcjN2R2xFdUxKaktrdXF4U0xKSUg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9iOWRiZTUtNGZiOC00OTc1LWExYzgt
OTk3NTk3YjJkODA4LzEvaUczYXdpcjN2R2xFdUxKaktrdXF4U0xKSUg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy9iOWRiZTUtNGZiOC00OTc1LWExYzgtOTk3NTk3YjJkODA4
LzEvaUczYXdpcjN2R2xFdUxKaktrdXF4U0xKSUg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvlsEWX3/
0Fc+uY5n6OCC5GDgasWDk5bRhVBuz1jaovHroWwbNOxt02y3JJRkSCUhMxZLTdX7
9dfU8rxGPtT/rtbgGLc+d8dVif6iCaK1DXeabmMvKuD3+xg9BIOVJfSkG27fUBUk
mSInJaJdIYQ1/wtMP+pNQMhDO0aNcs4QrGnZge7BIepXroza6Ib4GsTOsKZ52wrV
sY71ZTU4YvhgQ0M1z0DgoU0uaizIDbWn7HZZzEWHZWnNteMDnWNa15VNd0D0i5DC
/K3jYLmRBNQdQPzAEjeUMwOpSlY2M64KFjum7TRoj7AqhqLTzTrpgQ0OyT+gVowZ
aGGegLj+WJWHnA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 00:37:43 2026 by rpki-client