Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft
File: IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft (raw, json)
Hash identifier: w8/5d5MURSWSz9YZVctwSU7bAF3sJag3SxXy0Ypih+4=
Subject key identifier: B3:0F:F6:89:04:EE:50:08:C3:13:A0:28:FB:1D:ED:DC:A1:C3:F6:AC
Authority key identifier: 21:A0:00:80:CD:2C:B1:BB:07:39:03:B3:2B:25:AD:66:0A:36:64:86
Certificate issuer: /CN=21a00080cd2cb1bb073903b32b25ad660a366486
Certificate serial: 019ED318B03386D41CEA447171A4582BE610
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft
Manifest number: 1839
Signing time: Wed 17 Jun 2026 01:01:10 +0000
Manifest this update: Wed 17 Jun 2026 01:01:10 +0000
Manifest next update: Thu 18 Jun 2026 01:01:10 +0000
Files and hashes: 1: IaAAgM0ssbsHOQOzKyWtZgo2ZIY.crl (hash: wdGLKJHRCUb1hm9Bk7AMNy3bLFyGF/FA2HctRg9SYRA=)
2: VND09LSiHkpjSOuhfnkKXr1ycfk.roa (hash: EuKqokjCANLNooQ3HgGRZe/o74jjpFvSm4Mcmm5yRzA=)
3: a8PSnoMbEUhv4Faq7MVolsfXT_Y.roa (hash: BPdIhgn9ulm4J7RgTCmSDSsMLRstDEKHEvI4iWcZR7s=)
4: u26fRlT_magCXskBSsLbW-Zc4HE.roa (hash: 9IYpduU01RzT9y1ftFaznGYathxT6zXqQawir2B1XDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d3:18:b0:33:86:d4:1c:ea:44:71:71:a4:58:2b:e6:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21a00080cd2cb1bb073903b32b25ad660a366486
Validity
Not Before: Jun 17 01:01:10 2026 GMT
Not After : Jun 18 01:01:10 2026 GMT
Subject: CN=b30ff68904ee5008c313a028fb1deddca1c3f6ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:be:f1:92:be:e9:4c:8b:e6:a7:c0:28:bf:44:
04:d6:e7:f8:a9:11:27:b9:12:94:eb:ff:30:2d:c9:
50:6e:1e:60:52:04:cb:6f:cb:fe:47:15:04:d4:4c:
c3:3f:62:96:f6:20:f1:90:37:00:ab:53:3b:b4:37:
e2:cb:b5:73:79:81:12:3e:22:10:8d:16:48:92:6d:
f1:e6:02:a2:4c:28:42:57:7a:47:18:81:e7:b3:fa:
30:b2:55:82:01:6c:9f:4e:ce:06:c3:8f:74:e4:6e:
68:3a:72:6e:47:80:10:fd:c7:3e:72:8e:1a:22:66:
9f:58:80:22:52:43:1d:3c:a3:c6:16:e9:dd:5d:2c:
72:9c:1c:ed:89:5b:46:8c:07:e5:d2:e7:ec:a7:c5:
72:b9:a1:77:b3:7a:a6:4e:27:e3:d5:6f:ee:cd:97:
d3:ae:7e:14:68:a0:e5:f7:d0:83:7b:6d:c8:21:06:
05:4b:77:14:1b:1c:8b:85:e7:2b:14:59:be:67:a2:
c6:b2:3f:8a:c1:16:e0:e9:d4:48:78:2a:96:10:85:
2b:0d:7d:d6:f7:7d:74:f1:67:28:8a:fa:0e:01:5a:
4d:79:4b:d9:df:be:65:76:e8:d8:7e:dd:44:52:cf:
f3:1c:f1:59:27:98:9b:1b:52:77:10:c2:bc:1c:63:
91:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:0F:F6:89:04:EE:50:08:C3:13:A0:28:FB:1D:ED:DC:A1:C3:F6:AC
X509v3 Authority Key Identifier:
keyid:21:A0:00:80:CD:2C:B1:BB:07:39:03:B3:2B:25:AD:66:0A:36:64:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:f9:71:99:b4:31:20:bb:52:37:81:0d:d5:ef:52:85:68:11:
75:ae:d0:50:f8:ff:ba:03:51:54:24:3c:b3:d7:0a:db:7d:73:
de:58:fc:e1:0e:45:99:de:23:66:7f:06:31:01:25:fe:a4:28:
c1:e8:f5:8f:c0:b6:6a:5e:95:8c:c3:99:52:f7:29:15:a6:3e:
ff:9e:d3:eb:73:b9:1e:4e:fc:c6:cb:ba:5d:e7:66:e0:e8:16:
70:fd:a7:6b:30:39:56:8a:b1:e4:59:5b:5f:91:de:f5:c1:ba:
14:e2:e0:3b:6c:35:3a:bd:6d:83:26:57:8c:7d:74:77:a6:ac:
60:4e:ee:6e:d5:4b:cf:1b:f0:3f:12:0f:0e:dc:7b:03:5c:dc:
b3:74:67:ad:d5:8c:7d:93:71:24:75:df:39:34:02:30:0c:e9:
04:1c:54:07:dd:7a:23:d8:ba:7d:70:00:a3:87:84:f4:30:19:
03:f6:3e:9b:73:2e:e2:24:4e:16:da:ba:73:62:73:bf:26:51:
c5:91:3e:63:3f:95:70:90:00:22:27:7f:9e:a5:e4:2b:30:7e:
11:be:09:2e:43:fa:d0:da:4a:e7:10:26:02:b7:c6:53:1a:2f:
15:6f:ee:03:d4:07:6a:30:d2:36:91:98:bf:50:c0:94:ad:43:
fa:4a:74:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7TGLAzhtQc6kRxcaRYK+YQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxYTAwMDgwY2QyY2IxYmIwNzM5MDNiMzJiMjVhZDY2MGEz
NjY0ODYwHhcNMjYwNjE3MDEwMTEwWhcNMjYwNjE4MDEwMTEwWjAzMTEwLwYDVQQD
EyhiMzBmZjY4OTA0ZWU1MDA4YzMxM2EwMjhmYjFkZWRkY2ExYzNmNmFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2b7xkr7pTIvmp8Aov0QE1uf4qREn
uRKU6/8wLclQbh5gUgTLb8v+RxUE1EzDP2KW9iDxkDcAq1M7tDfiy7VzeYESPiIQ
jRZIkm3x5gKiTChCV3pHGIHns/owslWCAWyfTs4Gw4905G5oOnJuR4AQ/cc+co4a
ImafWIAiUkMdPKPGFundXSxynBztiVtGjAfl0ufsp8VyuaF3s3qmTifj1W/uzZfT
rn4UaKDl99CDe23IIQYFS3cUGxyLhecrFFm+Z6LGsj+KwRbg6dRIeCqWEIUrDX3W
93108WcoivoOAVpNeUvZ375ldujYft1EUs/zHPFZJ5ibG1J3EMK8HGORNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLMP9okE7lAIwxOgKPsd7dyhw/asMB8GA1UdIwQY
MBaAFCGgAIDNLLG7BzkDsyslrWYKNmSGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWFBQWdNMHNzYnNIT1FPekt5V3RaZ28yWklZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy82YzNkOWYtOGE0Zi00YTZjLTg1Nzkt
ZTkyZWNlNGQzY2IzLzEvSWFBQWdNMHNzYnNIT1FPekt5V3RaZ28yWklZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy82YzNkOWYtOGE0Zi00YTZjLTg1NzktZTkyZWNlNGQzY2Iz
LzEvSWFBQWdNMHNzYnNIT1FPekt5V3RaZ28yWklZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACPlxmbQx
ILtSN4EN1e9ShWgRda7QUPj/ugNRVCQ8s9cK231z3lj84Q5Fmd4jZn8GMQEl/qQo
wej1j8C2al6VjMOZUvcpFaY+/57T63O5Hk78xsu6Xedm4OgWcP2nazA5Voqx5Flb
X5He9cG6FOLgO2w1Or1tgyZXjH10d6asYE7ubtVLzxvwPxIPDtx7A1zcs3RnrdWM
fZNxJHXfOTQCMAzpBBxUB916I9i6fXAAo4eE9DAZA/Y+m3Mu4iROFtq6c2JzvyZR
xZE+Yz+VcJAAIid/nqXkKzB+Eb4JLkP60NpK5xAmArfGUxovFW/uA9QHajDSNpGY
v1DAlK1D+kp0xg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:17:53 2026 by rpki-client