Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a314cc-066e-4c09-a36a-d0bd0e803fd1/1/IkCgcYD88zY191fMFEng1dvU_bg.mft
File: IkCgcYD88zY191fMFEng1dvU_bg.mft (raw, json)
Hash identifier: BHquHg0fFUW3M7YzSG5VzMN5xOG9jM2EuhsOou5MPMw=
Subject key identifier: 9B:7B:FE:88:2B:A9:FE:FF:33:DF:5F:76:28:00:FC:4F:2A:87:B4:08
Authority key identifier: 22:40:A0:71:80:FC:F3:36:35:F7:57:CC:14:49:E0:D5:DB:D4:FD:B8
Certificate issuer: /CN=2240a07180fcf33635f757cc1449e0d5dbd4fdb8
Certificate serial: 019FA89A33C53E39553A2C5F157C2A5DAC81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IkCgcYD88zY191fMFEng1dvU_bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/a314cc-066e-4c09-a36a-d0bd0e803fd1/1/IkCgcYD88zY191fMFEng1dvU_bg.mft
Manifest number: 05BA
Signing time: Tue 28 Jul 2026 12:01:45 +0000
Manifest this update: Tue 28 Jul 2026 12:01:45 +0000
Manifest next update: Wed 29 Jul 2026 12:01:45 +0000
Files and hashes: 1: IkCgcYD88zY191fMFEng1dvU_bg.crl (hash: BxXrpKbvBDfIf9OTnVBVuG90BdaUBEn08rjvWWY9l04=)
2: PPCzo4aoB52WIulHl2b-W42AOQQ.roa (hash: v7GTmELXw/VVFQyWL5TMg5z0A0nUbHsal/nQ+BR/mNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/a314cc-066e-4c09-a36a-d0bd0e803fd1/1/IkCgcYD88zY191fMFEng1dvU_bg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/a314cc-066e-4c09-a36a-d0bd0e803fd1/1/IkCgcYD88zY191fMFEng1dvU_bg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IkCgcYD88zY191fMFEng1dvU_bg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:9a:33:c5:3e:39:55:3a:2c:5f:15:7c:2a:5d:ac:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2240a07180fcf33635f757cc1449e0d5dbd4fdb8
Validity
Not Before: Jul 28 12:01:45 2026 GMT
Not After : Jul 29 12:01:45 2026 GMT
Subject: CN=9b7bfe882ba9feff33df5f762800fc4f2a87b408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:08:00:57:de:33:43:77:03:f5:27:18:1c:6e:
b7:9e:87:1f:37:2f:a5:33:c7:0d:c8:7b:a3:a6:65:
41:68:4e:7b:48:31:3f:88:47:b9:ce:78:d5:a4:c0:
52:62:3e:ea:96:d5:44:bc:18:32:da:34:90:bd:db:
dc:cd:f8:dd:d1:d4:00:a0:4b:fd:f9:8c:15:f9:69:
4a:fb:d2:26:10:5f:a4:27:61:82:38:e7:8e:ee:b0:
e0:3e:77:34:c8:78:d6:91:04:e5:81:89:dd:c9:f6:
5d:c0:55:0a:88:90:10:5d:e2:86:e5:ab:a1:24:6e:
50:40:39:10:f9:0e:dd:fb:16:07:a1:72:56:b1:86:
3c:fc:e1:73:dd:5e:38:47:3e:dd:f9:a4:cf:3e:e8:
a6:b2:6d:6e:2b:4f:df:a7:64:dd:95:45:a6:da:78:
93:cf:3d:16:50:6f:d7:32:54:26:e6:81:7f:d1:35:
a3:89:20:8a:11:1d:1a:16:31:00:39:c0:40:20:e1:
8e:66:8f:d3:ab:d1:b2:cc:8f:46:c0:59:73:f5:02:
ba:5d:a9:7a:89:7a:7b:52:5b:bf:a5:88:eb:15:57:
81:cc:98:68:16:33:7a:da:2c:6c:85:5c:cd:7f:cc:
b9:2c:f3:cc:47:42:08:e0:04:9d:c9:cc:b4:14:69:
47:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:7B:FE:88:2B:A9:FE:FF:33:DF:5F:76:28:00:FC:4F:2A:87:B4:08
X509v3 Authority Key Identifier:
keyid:22:40:A0:71:80:FC:F3:36:35:F7:57:CC:14:49:E0:D5:DB:D4:FD:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IkCgcYD88zY191fMFEng1dvU_bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a314cc-066e-4c09-a36a-d0bd0e803fd1/1/IkCgcYD88zY191fMFEng1dvU_bg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a314cc-066e-4c09-a36a-d0bd0e803fd1/1/IkCgcYD88zY191fMFEng1dvU_bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:2a:17:e3:b2:b2:d7:6b:f8:4d:0b:67:e1:72:e0:5e:9d:e2:
de:3d:73:b4:b1:5a:5c:dd:d5:f5:d6:06:d8:75:12:c8:e4:b9:
7b:d3:91:de:75:b4:86:2e:9f:4c:c2:a4:06:5a:71:73:9f:4d:
53:f4:c2:1f:b1:9b:90:f9:c6:5f:9a:49:8b:67:48:af:6b:37:
ac:5c:20:d8:38:71:66:70:aa:44:7c:1d:4a:dc:c5:83:46:9e:
5f:14:c5:3d:b7:94:43:9a:72:82:81:89:f1:e8:a8:6b:40:a2:
fa:59:5f:50:fa:15:14:53:75:6b:6f:cb:af:c1:1e:3d:28:c0:
e0:00:da:e2:78:f6:af:25:2d:5f:8a:8c:52:5c:e9:14:84:f2:
ad:2a:57:b4:6b:1f:3d:64:9f:e7:e2:8e:2f:81:cd:ef:69:fb:
7f:58:f4:92:e2:e6:d9:eb:cd:aa:3f:dd:9f:22:cc:d9:86:1f:
c0:d8:0f:34:df:2a:50:16:eb:63:59:37:f5:7f:fc:2d:3f:be:
af:d0:19:dc:a2:45:24:90:d1:ca:2c:92:4e:69:62:e0:7a:71:
12:cb:5d:b9:59:60:a6:5d:19:b7:d1:67:e8:38:bb:e7:c4:20:
6a:df:e3:da:a0:0d:96:00:2e:a1:6a:63:86:bf:7d:3b:91:8b:
b7:73:eb:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+omjPFPjlVOixfFXwqXayBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyNDBhMDcxODBmY2YzMzYzNWY3NTdjYzE0NDllMGQ1ZGJk
NGZkYjgwHhcNMjYwNzI4MTIwMTQ1WhcNMjYwNzI5MTIwMTQ1WjAzMTEwLwYDVQQD
Eyg5YjdiZmU4ODJiYTlmZWZmMzNkZjVmNzYyODAwZmM0ZjJhODdiNDA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5AgAV94zQ3cD9ScYHG63nocfNy+l
M8cNyHujpmVBaE57SDE/iEe5znjVpMBSYj7qltVEvBgy2jSQvdvczfjd0dQAoEv9
+YwV+WlK+9ImEF+kJ2GCOOeO7rDgPnc0yHjWkQTlgYndyfZdwFUKiJAQXeKG5auh
JG5QQDkQ+Q7d+xYHoXJWsYY8/OFz3V44Rz7d+aTPPuimsm1uK0/fp2TdlUWm2niT
zz0WUG/XMlQm5oF/0TWjiSCKER0aFjEAOcBAIOGOZo/Tq9GyzI9GwFlz9QK6Xal6
iXp7Ulu/pYjrFVeBzJhoFjN62ixshVzNf8y5LPPMR0II4ASdycy0FGlHDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJt7/ogrqf7/M99fdigA/E8qh7QIMB8GA1UdIwQY
MBaAFCJAoHGA/PM2NfdXzBRJ4NXb1P24MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWtDZ2NZRDg4elkxOTFmTUZFbmcxZHZVX2JnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9hMzE0Y2MtMDY2ZS00YzA5LWEzNmEt
ZDBiZDBlODAzZmQxLzEvSWtDZ2NZRDg4elkxOTFmTUZFbmcxZHZVX2JnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9hMzE0Y2MtMDY2ZS00YzA5LWEzNmEtZDBiZDBlODAzZmQx
LzEvSWtDZ2NZRDg4elkxOTFmTUZFbmcxZHZVX2JnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeSoX47Ky
12v4TQtn4XLgXp3i3j1ztLFaXN3V9dYG2HUSyOS5e9OR3nW0hi6fTMKkBlpxc59N
U/TCH7GbkPnGX5pJi2dIr2s3rFwg2DhxZnCqRHwdStzFg0aeXxTFPbeUQ5pygoGJ
8eioa0Ci+llfUPoVFFN1a2/Lr8EePSjA4ADa4nj2ryUtX4qMUlzpFITyrSpXtGsf
PWSf5+KOL4HN72n7f1j0kuLm2evNqj/dnyLM2YYfwNgPNN8qUBbrY1k39X/8LT++
r9AZ3KJFJJDRyiySTmli4HpxEstduVlgpl0Zt9Fn6Di758Qgat/j2qANlgAuoWpj
hr99O5GLt3Prvg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:33:12 2026 by rpki-client