
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.mft
File: MIfS4cwIqVF0v3lOLy3m49A--Co.mft (raw, json)
Hash identifier: C/nt08Y4tdGA7skJda1kHNhIkY5pM1gX8ProBE+S2XA=
Subject key identifier: 3E:61:B8:4E:83:8A:C2:C8:37:8D:BB:36:F5:43:BF:65:6F:44:DA:C8
Authority key identifier: 30:87:D2:E1:CC:08:A9:51:74:BF:79:4E:2F:2D:E6:E3:D0:3E:F8:2A
Certificate issuer: /CN=3087d2e1cc08a95174bf794e2f2de6e3d03ef82a
Certificate serial: 019FACAD14A34A97303EAF13FE0485CCA967
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MIfS4cwIqVF0v3lOLy3m49A--Co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.mft
Manifest number: 153C
Signing time: Wed 29 Jul 2026 07:00:51 +0000
Manifest this update: Wed 29 Jul 2026 07:00:51 +0000
Manifest next update: Thu 30 Jul 2026 07:00:51 +0000
Files and hashes: 1: MIfS4cwIqVF0v3lOLy3m49A--Co.crl (hash: YKeAHBFYeOlvF1Ucff1K9e6Q70RgJdAAogdYBiYEmKE=)
2: UO3-ECp44i-4NHov7ZcCJgmk2iw.roa (hash: pq04zRZsIbyhYdzYcYCke50JhIGeXTbV4hV+QB02Ah0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.mft
rsync://rpki.ripe.net/repository/DEFAULT/MIfS4cwIqVF0v3lOLy3m49A--Co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:ad:14:a3:4a:97:30:3e:af:13:fe:04:85:cc:a9:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3087d2e1cc08a95174bf794e2f2de6e3d03ef82a
Validity
Not Before: Jul 29 07:00:51 2026 GMT
Not After : Jul 30 07:00:51 2026 GMT
Subject: CN=3e61b84e838ac2c8378dbb36f543bf656f44dac8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c7:23:71:fd:8e:0a:b5:96:29:5b:08:c8:ae:
3c:6c:90:20:51:77:c4:d8:05:55:19:49:fa:a8:54:
c6:46:0b:5c:6e:1f:bd:1d:1c:6d:73:0f:03:c0:0e:
73:84:43:fe:93:6f:44:86:85:ba:b4:02:c7:7c:47:
33:99:5f:81:8e:11:cc:bf:56:36:7a:61:f4:83:fe:
ed:a1:ea:44:92:d1:bf:35:19:5a:a4:d3:50:63:d6:
b7:2a:37:75:29:1b:36:3e:d4:25:9e:93:8b:16:0e:
2f:bd:89:e0:c8:b2:75:65:b9:8c:fd:ad:db:0b:4f:
32:04:e4:a1:28:60:73:8c:5a:06:c7:58:6e:06:c0:
83:99:59:f2:69:97:69:c8:55:49:d7:84:71:87:0a:
4e:94:e4:e9:c5:d7:f7:b1:4c:d2:63:ba:c0:e2:2a:
4a:67:21:01:3b:19:72:b7:f8:12:0a:25:7a:b6:12:
0b:6e:09:3e:9d:17:40:ac:00:3f:57:61:cc:31:37:
5c:cc:e1:34:00:84:a6:a0:9a:42:d3:1a:fc:83:f5:
b4:9a:56:50:8d:a6:87:ec:41:86:b3:3e:fc:37:39:
31:c9:c3:fa:4f:db:7d:bd:f1:6a:87:4c:64:b1:fe:
02:ca:79:54:b3:0d:1b:db:8e:f7:93:ad:07:1b:93:
b0:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:61:B8:4E:83:8A:C2:C8:37:8D:BB:36:F5:43:BF:65:6F:44:DA:C8
X509v3 Authority Key Identifier:
keyid:30:87:D2:E1:CC:08:A9:51:74:BF:79:4E:2F:2D:E6:E3:D0:3E:F8:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MIfS4cwIqVF0v3lOLy3m49A--Co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:75:9e:c8:99:7c:38:fc:d7:0d:b9:70:d1:37:41:e5:36:62:
a9:01:b1:74:e8:34:b7:47:4f:26:5b:5f:77:15:93:aa:76:54:
3f:e4:89:79:55:86:20:75:b6:d2:2e:2d:dc:af:05:48:3b:35:
4d:64:bd:6c:07:e3:3b:94:f0:85:5c:ce:86:3c:2e:55:58:59:
e9:4a:7d:92:ee:7e:61:16:d6:06:ab:27:04:db:89:40:aa:71:
20:fa:b0:66:44:1c:ab:90:ec:07:0d:20:84:45:4e:c2:f7:9e:
67:07:53:68:62:f2:d6:36:c0:15:0d:c9:33:d1:7a:f7:86:90:
b3:0d:04:13:69:9c:16:5e:c8:10:8e:14:da:41:a7:e9:a1:86:
79:5c:6c:1d:12:4d:2e:81:0a:a4:23:a6:0f:9f:5f:7c:b1:50:
65:7c:aa:9b:8b:9d:90:a2:a8:f5:b1:54:f0:d9:28:d6:f9:e0:
ac:11:b5:f2:e5:35:fc:e9:40:8a:15:d2:d0:13:39:23:27:96:
b3:1e:fc:a9:40:2a:1d:ae:2d:56:a8:55:3c:9b:6a:43:5a:34:
55:da:0e:1f:c7:bb:f1:77:7c:2c:9d:2e:0f:33:ca:9a:44:d7:
4b:96:cb:32:4d:c5:9b:1b:00:92:bc:c9:7a:ab:aa:a7:ec:66:
2b:6c:9f:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+srRSjSpcwPq8T/gSFzKlnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwODdkMmUxY2MwOGE5NTE3NGJmNzk0ZTJmMmRlNmUzZDAz
ZWY4MmEwHhcNMjYwNzI5MDcwMDUxWhcNMjYwNzMwMDcwMDUxWjAzMTEwLwYDVQQD
EygzZTYxYjg0ZTgzOGFjMmM4Mzc4ZGJiMzZmNTQzYmY2NTZmNDRkYWM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMcjcf2OCrWWKVsIyK48bJAgUXfE
2AVVGUn6qFTGRgtcbh+9HRxtcw8DwA5zhEP+k29EhoW6tALHfEczmV+BjhHMv1Y2
emH0g/7toepEktG/NRlapNNQY9a3Kjd1KRs2PtQlnpOLFg4vvYngyLJ1ZbmM/a3b
C08yBOShKGBzjFoGx1huBsCDmVnyaZdpyFVJ14RxhwpOlOTpxdf3sUzSY7rA4ipK
ZyEBOxlyt/gSCiV6thILbgk+nRdArAA/V2HMMTdczOE0AISmoJpC0xr8g/W0mlZQ
jaaH7EGGsz78NzkxycP6T9t9vfFqh0xksf4CynlUsw0b2473k60HG5OwwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD5huE6DisLIN427NvVDv2VvRNrIMB8GA1UdIwQY
MBaAFDCH0uHMCKlRdL95Ti8t5uPQPvgqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUlmUzRjd0lxVkYwdjNsT0x5M200OUEtLUNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8xYmE5YTYtZjYxNi00ZTc0LTk2N2Qt
N2U3MTkwZmZjNGM5LzEvTUlmUzRjd0lxVkYwdjNsT0x5M200OUEtLUNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy8xYmE5YTYtZjYxNi00ZTc0LTk2N2QtN2U3MTkwZmZjNGM5
LzEvTUlmUzRjd0lxVkYwdjNsT0x5M200OUEtLUNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASHWeyJl8
OPzXDblw0TdB5TZiqQGxdOg0t0dPJltfdxWTqnZUP+SJeVWGIHW20i4t3K8FSDs1
TWS9bAfjO5TwhVzOhjwuVVhZ6Up9ku5+YRbWBqsnBNuJQKpxIPqwZkQcq5DsBw0g
hEVOwveeZwdTaGLy1jbAFQ3JM9F694aQsw0EE2mcFl7IEI4U2kGn6aGGeVxsHRJN
LoEKpCOmD59ffLFQZXyqm4udkKKo9bFU8Nko1vngrBG18uU1/OlAihXS0BM5IyeW
sx78qUAqHa4tVqhVPJtqQ1o0VdoOH8e78Xd8LJ0uDzPKmkTXS5bLMk3FmxsAkrzJ
equqp+xmK2yfyQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 09:30:21 2026 by rpki-client