Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/IQG2OI1kNfVJkJBTgrQdyWdf1JA.mft
File: IQG2OI1kNfVJkJBTgrQdyWdf1JA.mft (raw, json)
Hash identifier: P+Bv4vV+8CeCSXESsPq0y42z3RGC74IwajTwkco5CYk=
Subject key identifier: C0:52:FF:B7:06:19:75:A9:83:F0:94:93:77:23:7B:1E:1D:CB:D5:6D
Authority key identifier: 21:01:B6:38:8D:64:35:F5:49:90:90:53:82:B4:1D:C9:67:5F:D4:90
Certificate issuer: /CN=2101b6388d6435f54990905382b41dc9675fd490
Certificate serial: 019EBF5B20F4EBE99471D9C57C88148350A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQG2OI1kNfVJkJBTgrQdyWdf1JA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/IQG2OI1kNfVJkJBTgrQdyWdf1JA.mft
Manifest number: 07EA
Signing time: Sat 13 Jun 2026 05:01:20 +0000
Manifest this update: Sat 13 Jun 2026 05:01:20 +0000
Manifest next update: Sun 14 Jun 2026 05:01:20 +0000
Files and hashes: 1: Bb0AlX7LVs8xu9FbBxHR7jZ41sc.roa (hash: 1RAeUNL+1NswFK++fmlLXs7tYc2gvuypR/zGLkI4pFk=)
2: IQG2OI1kNfVJkJBTgrQdyWdf1JA.crl (hash: 8rbFZArh933VEwfq7lnKVoKhUd9UUYwUYSTAHnOJ3p8=)
3: wuwvCCyqsgM8AhmBamIU1CDvuC4.roa (hash: 7kzHmkdddwIql7JhhvogOzHNgfL2sl/BzbMljE2+YF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/IQG2OI1kNfVJkJBTgrQdyWdf1JA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/IQG2OI1kNfVJkJBTgrQdyWdf1JA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQG2OI1kNfVJkJBTgrQdyWdf1JA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 05:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5b:20:f4:eb:e9:94:71:d9:c5:7c:88:14:83:50:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2101b6388d6435f54990905382b41dc9675fd490
Validity
Not Before: Jun 13 05:01:20 2026 GMT
Not After : Jun 14 05:01:20 2026 GMT
Subject: CN=c052ffb7061975a983f0949377237b1e1dcbd56d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:78:08:8f:9f:da:ad:78:db:b0:30:b3:a2:5f:
b6:11:e7:2a:db:84:9f:91:ca:8e:a5:88:2b:aa:32:
9f:b0:e9:ea:88:32:84:79:3d:1f:11:6d:cc:2d:cd:
1c:da:15:8c:aa:51:fb:aa:d0:10:0b:e6:41:99:24:
d2:44:84:4e:75:1f:59:82:68:72:a4:f5:93:30:40:
dc:46:33:9d:c3:df:ba:98:1b:8b:d8:39:8b:66:02:
d6:05:bc:64:ab:df:84:2e:a0:cb:22:d2:6d:63:e3:
67:8d:4f:a3:fe:ea:7b:fd:72:c4:cf:6d:69:1a:a1:
3a:c6:ba:33:8a:b1:17:b7:24:ef:c2:1f:69:d4:5a:
b9:6a:4c:b7:64:7a:1e:96:96:f3:7d:78:21:a2:dc:
0f:8f:63:a7:c5:ca:9d:41:15:87:c3:cf:3d:cf:7d:
37:fc:7a:ee:01:7d:41:07:40:b2:d7:a7:f7:8c:30:
67:12:de:66:30:d5:87:d2:0c:7f:2e:71:26:f5:14:
d8:0b:a1:55:3a:7c:e1:1f:db:5a:b2:d7:fd:6e:41:
98:d8:2e:52:61:68:75:58:8a:06:74:84:54:c7:24:
b8:d7:99:b8:e4:f7:4e:78:dc:43:a3:cd:0f:7f:4d:
11:40:a5:c3:cf:55:b2:e5:ea:0c:6d:ef:40:a8:3d:
6b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:52:FF:B7:06:19:75:A9:83:F0:94:93:77:23:7B:1E:1D:CB:D5:6D
X509v3 Authority Key Identifier:
keyid:21:01:B6:38:8D:64:35:F5:49:90:90:53:82:B4:1D:C9:67:5F:D4:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQG2OI1kNfVJkJBTgrQdyWdf1JA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/IQG2OI1kNfVJkJBTgrQdyWdf1JA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/IQG2OI1kNfVJkJBTgrQdyWdf1JA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:a6:dd:a4:98:44:fc:b5:74:e1:d7:eb:2a:9c:0e:a9:8c:1f:
55:92:b4:31:5b:fa:f0:93:94:58:08:95:da:f5:42:4c:35:cb:
ac:85:d0:7c:85:7c:58:d7:a6:5b:05:d7:31:7b:84:37:90:eb:
dc:ee:09:19:fd:f8:77:fd:e4:52:24:ee:3c:46:47:7a:c3:86:
9b:c6:65:d6:f8:3d:c1:6f:92:69:08:03:f8:11:19:81:76:75:
d6:8b:9c:14:bc:53:5b:5c:fa:74:09:ae:94:3d:5e:3c:64:25:
c2:fb:f8:99:e4:26:59:6e:54:91:1b:3f:d8:a7:8d:be:25:40:
00:4c:fd:98:71:d8:6c:dc:c0:2e:b8:e0:c4:3b:95:74:f3:27:
35:c7:eb:b3:74:0a:72:54:1f:b5:e1:55:76:33:f2:78:06:04:
a7:d2:62:fc:84:ea:25:22:84:96:51:3f:ec:c4:e3:fd:34:38:
9e:13:4e:c6:44:fc:67:34:19:80:ff:e5:0c:a6:d1:85:7d:37:
47:f9:35:ea:e2:a9:d7:f0:55:25:ae:c1:51:7a:54:b8:b6:9e:
90:f3:53:75:97:8f:70:8e:8c:11:e6:53:79:21:e6:73:05:42:
90:c9:6d:97:2a:aa:c8:f9:93:bc:57:fb:fa:bf:1f:7c:0b:9c:
1b:a0:6f:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/WyD06+mUcdnFfIgUg1CmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMDFiNjM4OGQ2NDM1ZjU0OTkwOTA1MzgyYjQxZGM5Njc1
ZmQ0OTAwHhcNMjYwNjEzMDUwMTIwWhcNMjYwNjE0MDUwMTIwWjAzMTEwLwYDVQQD
EyhjMDUyZmZiNzA2MTk3NWE5ODNmMDk0OTM3NzIzN2IxZTFkY2JkNTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3gIj5/arXjbsDCzol+2Eecq24Sf
kcqOpYgrqjKfsOnqiDKEeT0fEW3MLc0c2hWMqlH7qtAQC+ZBmSTSRIROdR9Zgmhy
pPWTMEDcRjOdw9+6mBuL2DmLZgLWBbxkq9+ELqDLItJtY+NnjU+j/up7/XLEz21p
GqE6xrozirEXtyTvwh9p1Fq5aky3ZHoelpbzfXghotwPj2OnxcqdQRWHw889z303
/HruAX1BB0Cy16f3jDBnEt5mMNWH0gx/LnEm9RTYC6FVOnzhH9tastf9bkGY2C5S
YWh1WIoGdIRUxyS415m45PdOeNxDo80Pf00RQKXDz1Wy5eoMbe9AqD1rZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMBS/7cGGXWpg/CUk3cjex4dy9VtMB8GA1UdIwQY
MBaAFCEBtjiNZDX1SZCQU4K0HclnX9SQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVFHMk9JMWtOZlZKa0pCVGdyUWR5V2RmMUpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9jMjA5NWEtM2IzZC00YWM0LTljMzIt
NGRmODkxMjE4OGY3LzEvSVFHMk9JMWtOZlZKa0pCVGdyUWR5V2RmMUpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9jMjA5NWEtM2IzZC00YWM0LTljMzItNGRmODkxMjE4OGY3
LzEvSVFHMk9JMWtOZlZKa0pCVGdyUWR5V2RmMUpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcabdpJhE
/LV04dfrKpwOqYwfVZK0MVv68JOUWAiV2vVCTDXLrIXQfIV8WNemWwXXMXuEN5Dr
3O4JGf34d/3kUiTuPEZHesOGm8Zl1vg9wW+SaQgD+BEZgXZ11oucFLxTW1z6dAmu
lD1ePGQlwvv4meQmWW5UkRs/2KeNviVAAEz9mHHYbNzALrjgxDuVdPMnNcfrs3QK
clQfteFVdjPyeAYEp9Ji/ITqJSKEllE/7MTj/TQ4nhNOxkT8ZzQZgP/lDKbRhX03
R/k16uKp1/BVJa7BUXpUuLaekPNTdZePcI6MEeZTeSHmcwVCkMltlyqqyPmTvFf7
+r8ffAucG6Bvkw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 16:20:09 2026 by rpki-client