Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft
File: IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft (raw, json)
Hash identifier: ps0Trg4sCgVVQc8dQBiM6HHmhRUHNuEfytcRo0oX2ZU=
Subject key identifier: CA:96:AF:89:30:16:D7:3A:93:F1:9F:78:75:80:09:D8:9F:FA:09:42
Authority key identifier: 21:A0:00:80:CD:2C:B1:BB:07:39:03:B3:2B:25:AD:66:0A:36:64:86
Certificate issuer: /CN=21a00080cd2cb1bb073903b32b25ad660a366486
Certificate serial: 019D984FB9E0F90E6DC7D9A1B0307F1D3BA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft
Manifest number: 1796
Signing time: Thu 16 Apr 2026 22:00:54 +0000
Manifest this update: Thu 16 Apr 2026 22:00:54 +0000
Manifest next update: Fri 17 Apr 2026 22:00:54 +0000
Files and hashes: 1: IaAAgM0ssbsHOQOzKyWtZgo2ZIY.crl (hash: rBD53ObsuCb+86kh4fclsnZeBMIGOWImc6Jt6ekA2yg=)
2: VND09LSiHkpjSOuhfnkKXr1ycfk.roa (hash: EuKqokjCANLNooQ3HgGRZe/o74jjpFvSm4Mcmm5yRzA=)
3: a8PSnoMbEUhv4Faq7MVolsfXT_Y.roa (hash: BPdIhgn9ulm4J7RgTCmSDSsMLRstDEKHEvI4iWcZR7s=)
4: u26fRlT_magCXskBSsLbW-Zc4HE.roa (hash: 9IYpduU01RzT9y1ftFaznGYathxT6zXqQawir2B1XDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:b9:e0:f9:0e:6d:c7:d9:a1:b0:30:7f:1d:3b:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21a00080cd2cb1bb073903b32b25ad660a366486
Validity
Not Before: Apr 16 22:00:54 2026 GMT
Not After : Apr 17 22:00:54 2026 GMT
Subject: CN=ca96af893016d73a93f19f78758009d89ffa0942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:31:55:43:ff:13:3d:fb:ef:94:6c:d8:c6:b3:
0a:93:7d:5d:ec:1c:21:47:52:e1:c3:36:5e:89:c2:
ed:7b:84:2d:b9:5e:80:8b:17:f5:53:95:1a:b0:f1:
b8:bd:88:bd:7e:89:fc:b3:32:7a:85:9d:4e:e7:b0:
3c:6e:ff:78:a0:f9:f1:17:5d:a0:fd:9d:ca:f5:44:
32:d1:51:e8:b3:8c:f7:5b:ce:11:7d:d0:92:8f:fe:
ac:e2:f7:cf:a0:e2:af:eb:6a:08:65:83:23:21:6e:
e8:46:39:80:9c:5b:9e:5d:a9:b6:2f:b9:bb:d6:96:
2e:7d:d1:71:27:50:a6:6a:cd:4e:c8:de:34:fa:f3:
1b:ad:61:9c:5d:15:a5:1b:05:a8:a9:11:2d:96:f5:
00:53:18:e6:d9:1d:31:9a:da:ba:5a:0d:0d:fa:49:
8f:d6:fa:6b:b0:a9:70:78:b3:f1:41:80:7b:e3:ce:
30:5d:d0:66:b9:f6:e5:e6:06:7c:e0:17:32:d8:62:
3a:02:78:10:51:bb:92:cf:ed:5d:f0:fa:38:24:31:
51:09:2f:3a:b1:3c:0c:8c:2c:6b:84:87:18:9a:3a:
b3:d5:96:94:66:7e:8a:79:e0:99:4c:0a:6b:fa:fd:
60:72:7a:a7:09:ff:33:1f:40:62:59:46:22:1f:a7:
c8:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:96:AF:89:30:16:D7:3A:93:F1:9F:78:75:80:09:D8:9F:FA:09:42
X509v3 Authority Key Identifier:
keyid:21:A0:00:80:CD:2C:B1:BB:07:39:03:B3:2B:25:AD:66:0A:36:64:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:b0:40:ef:bb:b3:96:79:22:c5:aa:f1:4d:ca:f3:0e:6e:7c:
49:41:b3:c7:af:14:45:a6:a8:9b:17:6d:db:80:e4:78:e9:87:
c5:40:78:7d:d1:35:6d:a9:7f:54:e8:a7:51:82:b2:d0:46:e4:
e6:8a:2f:f1:1c:df:06:1f:4e:9f:04:12:1a:17:da:af:ed:bc:
3a:ba:3a:eb:71:17:64:0e:11:f2:4e:3d:dc:6a:f0:de:56:11:
37:f2:b7:fb:a1:10:05:60:bc:77:c7:d2:2c:63:47:9d:ca:b0:
04:bf:0b:cb:7c:72:21:8c:ed:c1:a4:69:db:51:c1:6e:8a:17:
5b:46:fa:e9:6e:33:3f:2d:b4:f6:62:2b:7e:52:c0:b1:6a:7a:
65:ac:f3:b8:5f:29:6b:7b:0f:81:b2:21:5d:f2:d0:2f:30:60:
ea:e6:7c:e5:a5:d0:f0:ed:f6:09:ba:fc:2c:ec:74:8a:fd:88:
9c:5a:05:65:a8:c4:7d:bc:c6:14:e5:97:e3:0c:bf:2f:c4:11:
16:df:87:58:08:cd:d8:64:c5:c7:13:56:47:f8:70:b4:ce:04:
6f:a0:c8:20:67:a6:39:5e:05:c8:48:34:82:e0:b4:9f:92:3f:
38:07:b2:61:22:19:68:12:25:b1:29:5c:9d:06:10:47:47:8b:
c3:0a:df:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YT7ng+Q5tx9mhsDB/HTupMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxYTAwMDgwY2QyY2IxYmIwNzM5MDNiMzJiMjVhZDY2MGEz
NjY0ODYwHhcNMjYwNDE2MjIwMDU0WhcNMjYwNDE3MjIwMDU0WjAzMTEwLwYDVQQD
EyhjYTk2YWY4OTMwMTZkNzNhOTNmMTlmNzg3NTgwMDlkODlmZmEwOTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDFVQ/8TPfvvlGzYxrMKk31d7Bwh
R1LhwzZeicLte4QtuV6Aixf1U5UasPG4vYi9fon8szJ6hZ1O57A8bv94oPnxF12g
/Z3K9UQy0VHos4z3W84RfdCSj/6s4vfPoOKv62oIZYMjIW7oRjmAnFueXam2L7m7
1pYufdFxJ1Cmas1OyN40+vMbrWGcXRWlGwWoqREtlvUAUxjm2R0xmtq6Wg0N+kmP
1vprsKlweLPxQYB7484wXdBmufbl5gZ84Bcy2GI6AngQUbuSz+1d8Po4JDFRCS86
sTwMjCxrhIcYmjqz1ZaUZn6KeeCZTApr+v1gcnqnCf8zH0BiWUYiH6fIpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMqWr4kwFtc6k/GfeHWACdif+glCMB8GA1UdIwQY
MBaAFCGgAIDNLLG7BzkDsyslrWYKNmSGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWFBQWdNMHNzYnNIT1FPekt5V3RaZ28yWklZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy82YzNkOWYtOGE0Zi00YTZjLTg1Nzkt
ZTkyZWNlNGQzY2IzLzEvSWFBQWdNMHNzYnNIT1FPekt5V3RaZ28yWklZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy82YzNkOWYtOGE0Zi00YTZjLTg1NzktZTkyZWNlNGQzY2Iz
LzEvSWFBQWdNMHNzYnNIT1FPekt5V3RaZ28yWklZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASbBA77uz
lnkixarxTcrzDm58SUGzx68URaaomxdt24DkeOmHxUB4fdE1bal/VOinUYKy0Ebk
5oov8RzfBh9OnwQSGhfar+28Oro663EXZA4R8k493Grw3lYRN/K3+6EQBWC8d8fS
LGNHncqwBL8Ly3xyIYztwaRp21HBbooXW0b66W4zPy209mIrflLAsWp6ZazzuF8p
a3sPgbIhXfLQLzBg6uZ85aXQ8O32Cbr8LOx0iv2InFoFZajEfbzGFOWX4wy/L8QR
Ft+HWAjN2GTFxxNWR/hwtM4Eb6DIIGemOV4FyEg0guC0n5I/OAeyYSIZaBIlsSlc
nQYQR0eLwwrfew==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:36:02 2026 by rpki-client