Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/IQG2OI1kNfVJkJBTgrQdyWdf1JA.mft
File: IQG2OI1kNfVJkJBTgrQdyWdf1JA.mft (raw, json)
Hash identifier: xZim7CWRp4OI7BPtTr/VE+I2NHRCE3oAKlIcfx0bNpw=
Subject key identifier: 4C:5A:06:99:CF:EB:D6:27:D1:DF:B3:21:BA:C0:F2:DC:88:57:41:AD
Authority key identifier: 21:01:B6:38:8D:64:35:F5:49:90:90:53:82:B4:1D:C9:67:5F:D4:90
Certificate issuer: /CN=2101b6388d6435f54990905382b41dc9675fd490
Certificate serial: 019EC14952B7F7785FAF7640B1D4099BB6FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQG2OI1kNfVJkJBTgrQdyWdf1JA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/IQG2OI1kNfVJkJBTgrQdyWdf1JA.mft
Manifest number: 07EB
Signing time: Sat 13 Jun 2026 14:01:08 +0000
Manifest this update: Sat 13 Jun 2026 14:01:08 +0000
Manifest next update: Sun 14 Jun 2026 14:01:08 +0000
Files and hashes: 1: Bb0AlX7LVs8xu9FbBxHR7jZ41sc.roa (hash: 1RAeUNL+1NswFK++fmlLXs7tYc2gvuypR/zGLkI4pFk=)
2: IQG2OI1kNfVJkJBTgrQdyWdf1JA.crl (hash: r3P1vcX65xha7ZyoL9Gr3CMQVzuJfXa1AmCdsc/I8OA=)
3: wuwvCCyqsgM8AhmBamIU1CDvuC4.roa (hash: 7kzHmkdddwIql7JhhvogOzHNgfL2sl/BzbMljE2+YF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/IQG2OI1kNfVJkJBTgrQdyWdf1JA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/IQG2OI1kNfVJkJBTgrQdyWdf1JA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQG2OI1kNfVJkJBTgrQdyWdf1JA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:49:52:b7:f7:78:5f:af:76:40:b1:d4:09:9b:b6:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2101b6388d6435f54990905382b41dc9675fd490
Validity
Not Before: Jun 13 14:01:08 2026 GMT
Not After : Jun 14 14:01:08 2026 GMT
Subject: CN=4c5a0699cfebd627d1dfb321bac0f2dc885741ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3e:0b:40:06:4b:40:8a:4b:ef:b3:7b:fe:11:
6c:10:22:38:1a:aa:ed:c6:72:a2:19:52:a1:c9:5c:
b8:dc:ba:70:1c:93:f4:c6:e0:ae:e6:fc:2f:fc:5b:
29:3a:6b:ef:a9:f9:f8:b2:b3:06:52:6f:40:ff:e6:
0c:92:d0:b7:ae:bd:61:4e:d8:41:73:3b:10:50:2e:
b4:1b:53:9b:c4:54:56:95:8b:c6:90:0b:2a:05:8d:
1a:ff:41:b9:6d:74:6b:d7:90:86:45:43:9d:41:19:
66:b3:01:52:11:23:a4:a7:7a:e5:69:91:93:ea:9e:
57:03:ae:d9:4b:09:9f:e6:41:13:30:8c:09:01:93:
e5:8e:aa:7d:21:51:73:06:f6:32:af:29:db:96:5b:
1c:96:2e:52:70:55:4a:c1:b7:0f:dd:3d:23:db:63:
b3:90:98:68:1b:27:e2:53:dd:97:f1:7e:72:a4:98:
b7:c3:bc:5f:90:5a:ed:46:17:87:1b:07:68:c1:0b:
fc:6c:7a:c3:68:fb:33:cf:e9:f9:c4:d3:e2:ee:16:
c1:46:9d:ab:77:e0:08:32:28:6c:c0:30:5e:89:56:
b9:12:3d:bd:b4:94:b9:83:07:ef:b8:56:68:f2:45:
21:72:e9:b0:44:23:22:ab:88:69:34:0d:39:5e:8b:
0d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:5A:06:99:CF:EB:D6:27:D1:DF:B3:21:BA:C0:F2:DC:88:57:41:AD
X509v3 Authority Key Identifier:
keyid:21:01:B6:38:8D:64:35:F5:49:90:90:53:82:B4:1D:C9:67:5F:D4:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQG2OI1kNfVJkJBTgrQdyWdf1JA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/IQG2OI1kNfVJkJBTgrQdyWdf1JA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/IQG2OI1kNfVJkJBTgrQdyWdf1JA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:a1:54:7f:a3:2f:d1:53:31:48:08:44:88:97:21:81:c0:90:
61:fa:af:c4:21:11:62:a3:b2:64:7c:2d:ca:ee:5a:5c:54:89:
6f:00:3b:ac:44:08:04:b7:82:12:70:c1:84:fe:df:4b:d9:c6:
73:24:77:76:04:6d:33:ae:71:6e:9e:4b:aa:30:da:6d:5d:7c:
4e:6e:a1:c8:b5:aa:b4:7f:70:ed:8b:b6:d0:d0:81:4b:55:9b:
0c:62:3f:fa:c1:75:90:11:1b:76:b2:2b:20:07:aa:f5:18:5d:
14:05:ac:06:90:6e:22:4d:24:73:6e:aa:ed:e1:28:11:26:d8:
e0:72:17:16:69:62:2b:aa:fc:9c:8b:0a:b3:ef:ef:c3:a7:e8:
bc:96:7f:b9:4b:8f:45:d6:7f:a7:50:0d:7e:d2:6e:ab:df:8a:
a0:7d:57:c7:2f:a1:92:de:d8:cd:0b:d6:6b:73:40:e3:b1:d9:
e0:fa:88:dd:d3:51:d2:1e:24:e3:7a:31:79:f9:5f:50:d1:70:
93:0a:f0:0b:88:ac:ef:aa:59:70:e3:30:85:5e:cf:41:0e:c3:
2f:3e:db:5b:37:92:d4:ae:38:fc:3c:d7:d6:f2:b7:ea:aa:53:
fd:e0:cd:21:f7:2b:fb:73:23:2e:bd:aa:2d:15:1c:ca:ea:3c:
84:59:bb:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7BSVK393hfr3ZAsdQJm7b9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMDFiNjM4OGQ2NDM1ZjU0OTkwOTA1MzgyYjQxZGM5Njc1
ZmQ0OTAwHhcNMjYwNjEzMTQwMTA4WhcNMjYwNjE0MTQwMTA4WjAzMTEwLwYDVQQD
Eyg0YzVhMDY5OWNmZWJkNjI3ZDFkZmIzMjFiYWMwZjJkYzg4NTc0MWFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuj4LQAZLQIpL77N7/hFsECI4Gqrt
xnKiGVKhyVy43LpwHJP0xuCu5vwv/FspOmvvqfn4srMGUm9A/+YMktC3rr1hTthB
czsQUC60G1ObxFRWlYvGkAsqBY0a/0G5bXRr15CGRUOdQRlmswFSESOkp3rlaZGT
6p5XA67ZSwmf5kETMIwJAZPljqp9IVFzBvYyrynbllscli5ScFVKwbcP3T0j22Oz
kJhoGyfiU92X8X5ypJi3w7xfkFrtRheHGwdowQv8bHrDaPszz+n5xNPi7hbBRp2r
d+AIMihswDBeiVa5Ej29tJS5gwfvuFZo8kUhcumwRCMiq4hpNA05XosNVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFExaBpnP69Yn0d+zIbrA8tyIV0GtMB8GA1UdIwQY
MBaAFCEBtjiNZDX1SZCQU4K0HclnX9SQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVFHMk9JMWtOZlZKa0pCVGdyUWR5V2RmMUpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9jMjA5NWEtM2IzZC00YWM0LTljMzIt
NGRmODkxMjE4OGY3LzEvSVFHMk9JMWtOZlZKa0pCVGdyUWR5V2RmMUpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9jMjA5NWEtM2IzZC00YWM0LTljMzItNGRmODkxMjE4OGY3
LzEvSVFHMk9JMWtOZlZKa0pCVGdyUWR5V2RmMUpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWqFUf6Mv
0VMxSAhEiJchgcCQYfqvxCERYqOyZHwtyu5aXFSJbwA7rEQIBLeCEnDBhP7fS9nG
cyR3dgRtM65xbp5LqjDabV18Tm6hyLWqtH9w7Yu20NCBS1WbDGI/+sF1kBEbdrIr
IAeq9RhdFAWsBpBuIk0kc26q7eEoESbY4HIXFmliK6r8nIsKs+/vw6fovJZ/uUuP
RdZ/p1ANftJuq9+KoH1Xxy+hkt7YzQvWa3NA47HZ4PqI3dNR0h4k43oxeflfUNFw
kwrwC4is76pZcOMwhV7PQQ7DLz7bWzeS1K44/DzX1vK36qpT/eDNIfcr+3MjLr2q
LRUcyuo8hFm7bw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 18:19:31 2026 by rpki-client