Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.mft
File: a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.mft (raw, json)
Hash identifier: dm81JHWNmk0JbLmHoHRlQ2bw0rl9hCn6ao3Ms1P6x38=
Subject key identifier: 58:11:C9:4B:DA:79:03:6D:C1:1E:29:BB:65:AA:78:6F:BB:E3:1B:1B
Authority key identifier: 6B:F8:8E:82:B3:5A:0A:D6:D0:FF:31:56:AF:13:19:DF:C1:62:F8:E8
Certificate issuer: /CN=6bf88e82b35a0ad6d0ff3156af1319dfc162f8e8
Certificate serial: 019D9A74ECEE26BB5B59189345D6FCFC4F4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.mft
Manifest number: 0708
Signing time: Fri 17 Apr 2026 08:00:47 +0000
Manifest this update: Fri 17 Apr 2026 08:00:47 +0000
Manifest next update: Sat 18 Apr 2026 08:00:47 +0000
Files and hashes: 1: HdU5cxfsxlP0K4CqDFvCNnZmq28.roa (hash: xbyeSFIpEueYvgfQTG6iJ17W5Phz2i4KFR7f+DJwSVQ=)
2: a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.crl (hash: 1AyrXVPMosGyAkQR+UcDC5NEzF10nszU5rJfEObjcrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.mft
rsync://rpki.ripe.net/repository/DEFAULT/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:ec:ee:26:bb:5b:59:18:93:45:d6:fc:fc:4f:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bf88e82b35a0ad6d0ff3156af1319dfc162f8e8
Validity
Not Before: Apr 17 08:00:47 2026 GMT
Not After : Apr 18 08:00:47 2026 GMT
Subject: CN=5811c94bda79036dc11e29bb65aa786fbbe31b1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c4:6b:da:e7:6d:b6:3e:d9:c4:d8:40:ae:4c:
73:7b:52:10:a3:0f:0d:22:78:4d:ea:77:e7:0d:44:
a5:a7:15:6f:fe:80:cf:45:89:c6:7a:26:47:08:c8:
a7:2d:5a:61:35:1b:26:0f:18:3a:98:29:5a:75:a7:
ba:9b:4d:f5:2d:75:20:24:27:60:29:7a:1d:cf:e8:
71:ce:af:c9:59:da:5b:14:38:8b:86:cd:22:49:22:
cd:a1:c9:75:2d:58:52:8d:3f:ee:89:42:17:00:69:
c6:da:c1:63:d0:e3:8b:83:d6:7d:36:4f:02:d8:c8:
8f:9e:28:85:4d:86:f9:25:b5:c1:bd:54:aa:f1:99:
00:73:45:f0:69:e1:75:1d:d4:5c:67:0d:db:4e:20:
11:25:76:de:14:d9:c3:8a:0b:cc:b5:cd:19:21:0e:
4e:19:e7:5a:c6:98:aa:85:80:4b:f3:d8:2e:7d:89:
6d:4d:84:a9:94:64:b3:8d:3b:bc:60:df:40:0e:c3:
d7:2b:2f:04:87:7d:67:d4:5b:15:85:7e:93:25:05:
89:c1:ac:a7:94:b2:a8:bc:86:45:33:6e:c7:16:81:
23:a9:19:e4:f9:4a:a7:b1:3d:25:c5:7c:d1:05:8a:
58:f2:73:63:82:d9:8c:bf:78:f3:55:9b:cf:cb:9e:
da:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:11:C9:4B:DA:79:03:6D:C1:1E:29:BB:65:AA:78:6F:BB:E3:1B:1B
X509v3 Authority Key Identifier:
keyid:6B:F8:8E:82:B3:5A:0A:D6:D0:FF:31:56:AF:13:19:DF:C1:62:F8:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:7a:36:f6:f6:62:28:e1:ba:e6:79:84:89:c9:dc:22:0d:08:
35:7a:d0:28:cf:a4:3f:83:ef:eb:f1:a3:52:c7:a5:23:03:10:
bb:c7:35:67:00:c3:05:aa:8c:db:c9:f1:9a:d9:6a:4d:19:10:
a4:1c:a6:66:5d:cc:09:01:1c:2c:3a:48:fc:fc:c2:30:1e:35:
07:59:a4:02:ab:3b:0f:11:43:5a:a1:d6:82:04:63:06:a2:ee:
6f:ff:b2:03:62:66:ed:8b:27:7b:1d:87:7d:ed:c6:4b:55:af:
2f:ab:88:01:c1:a2:66:26:27:2d:39:98:27:2d:eb:7c:aa:3e:
b8:1c:62:ad:a8:07:9f:e5:74:d9:4b:70:d9:cd:9e:f6:9d:a1:
bd:2b:b2:82:de:31:e0:27:42:40:af:01:74:8e:88:d7:02:2b:
83:65:40:51:0a:f0:f4:7d:9c:49:c0:51:f1:1d:77:58:20:98:
2e:5c:20:35:74:35:c8:0f:3f:b9:03:2e:1e:c6:de:74:73:f8:
0b:51:f5:46:90:71:c2:33:a7:7c:be:fb:d7:13:42:5d:03:7e:
38:5b:95:7e:7f:2f:31:8d:6f:b6:28:00:15:8f:68:a5:c7:a6:
75:fe:9f:fc:ff:e3:84:52:1c:36:25:3f:4f:dc:ad:18:57:78:
ac:38:1d:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2adOzuJrtbWRiTRdb8/E9PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiZjg4ZTgyYjM1YTBhZDZkMGZmMzE1NmFmMTMxOWRmYzE2
MmY4ZTgwHhcNMjYwNDE3MDgwMDQ3WhcNMjYwNDE4MDgwMDQ3WjAzMTEwLwYDVQQD
Eyg1ODExYzk0YmRhNzkwMzZkYzExZTI5YmI2NWFhNzg2ZmJiZTMxYjFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8Rr2udttj7ZxNhArkxze1IQow8N
InhN6nfnDUSlpxVv/oDPRYnGeiZHCMinLVphNRsmDxg6mCladae6m031LXUgJCdg
KXodz+hxzq/JWdpbFDiLhs0iSSLNocl1LVhSjT/uiUIXAGnG2sFj0OOLg9Z9Nk8C
2MiPniiFTYb5JbXBvVSq8ZkAc0XwaeF1HdRcZw3bTiARJXbeFNnDigvMtc0ZIQ5O
GedaxpiqhYBL89gufYltTYSplGSzjTu8YN9ADsPXKy8Eh31n1FsVhX6TJQWJwayn
lLKovIZFM27HFoEjqRnk+UqnsT0lxXzRBYpY8nNjgtmMv3jzVZvPy57arQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFgRyUvaeQNtwR4pu2WqeG+74xsbMB8GA1UdIwQY
MBaAFGv4joKzWgrW0P8xVq8TGd/BYvjoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYV9pT2dyTmFDdGJRX3pGV3J4TVozOEZpLU9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xYmNiOGQtMjBhNC00MzQ3LWI4ZGEt
YmZiZDU2OTRhOTRkLzEvYV9pT2dyTmFDdGJRX3pGV3J4TVozOEZpLU9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8xYmNiOGQtMjBhNC00MzQ3LWI4ZGEtYmZiZDU2OTRhOTRk
LzEvYV9pT2dyTmFDdGJRX3pGV3J4TVozOEZpLU9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0no29vZi
KOG65nmEicncIg0INXrQKM+kP4Pv6/GjUselIwMQu8c1ZwDDBaqM28nxmtlqTRkQ
pBymZl3MCQEcLDpI/PzCMB41B1mkAqs7DxFDWqHWggRjBqLub/+yA2Jm7Ysnex2H
fe3GS1WvL6uIAcGiZiYnLTmYJy3rfKo+uBxiragHn+V02Utw2c2e9p2hvSuygt4x
4CdCQK8BdI6I1wIrg2VAUQrw9H2cScBR8R13WCCYLlwgNXQ1yA8/uQMuHsbedHP4
C1H1RpBxwjOnfL771xNCXQN+OFuVfn8vMY1vtigAFY9opcemdf6f/P/jhFIcNiU/
T9ytGFd4rDgdRg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:42:59 2026 by rpki-client