Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft
File: IXt6sGK8gos0jQUwbmU1R0i51tY.mft (raw, json)
Hash identifier: HTBB1+LoqwCxEUX4p+Mjo1ZEGjIyW4LBRdXUibDTX/M=
Subject key identifier: 0B:C5:FD:5B:BF:6A:E0:98:03:EF:CC:87:0B:A7:F1:3D:08:70:56:7E
Authority key identifier: 21:7B:7A:B0:62:BC:82:8B:34:8D:05:30:6E:65:35:47:48:B9:D6:D6
Certificate issuer: /CN=217b7ab062bc828b348d05306e65354748b9d6d6
Certificate serial: 019FAABED45332E376442EBDF893E21FF8A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft
Manifest number: 0D8B
Signing time: Tue 28 Jul 2026 22:01:00 +0000
Manifest this update: Tue 28 Jul 2026 22:01:00 +0000
Manifest next update: Wed 29 Jul 2026 22:01:00 +0000
Files and hashes: 1: Ha1zzuR5phsP43HrNuYV02K8JmM.roa (hash: OIS0Kv+EMSNX8skAuIawL3We9Kkncv5+iFQyWWdpmbk=)
2: IXt6sGK8gos0jQUwbmU1R0i51tY.crl (hash: OwLiubzm7swvB7Xx68ClcwXOtSu2OyKIrG4RSCdRoUY=)
3: SqHxe2uwvaoACopO4_oazg_nels.roa (hash: 9zPi+ENkqVQXBQ+5cr5nLO5x0488pkDK6RTbeEiOUlc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:d4:53:32:e3:76:44:2e:bd:f8:93:e2:1f:f8:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=217b7ab062bc828b348d05306e65354748b9d6d6
Validity
Not Before: Jul 28 22:01:00 2026 GMT
Not After : Jul 29 22:01:00 2026 GMT
Subject: CN=0bc5fd5bbf6ae09803efcc870ba7f13d0870567e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f5:c5:ac:9d:a2:16:34:f5:ef:e1:59:36:6e:
73:2f:11:cd:84:46:44:ef:31:2b:7a:35:74:53:e9:
b9:b3:1c:6a:ab:24:08:65:af:0b:15:2f:1a:25:71:
c3:5c:f7:30:ed:10:1a:7a:90:22:a4:b9:8a:9b:34:
f2:f5:7f:5d:e2:73:82:6a:5c:4d:0d:19:c7:ec:7c:
68:1a:58:10:a5:69:ef:51:4d:7d:c1:9b:96:50:62:
97:70:ce:5b:b6:71:37:71:d1:03:9b:b9:a5:ae:0d:
9c:ec:f7:75:93:f2:62:a5:68:dc:6e:79:a7:d4:e4:
6f:06:94:71:30:0f:13:af:cb:9a:36:fd:00:88:27:
df:b4:db:59:a4:90:1f:3c:02:a0:33:35:94:fb:5c:
d4:72:99:8e:a4:61:ca:23:1f:65:65:7f:c0:b6:eb:
15:b9:b3:33:62:0c:1c:ed:f9:b2:d6:30:c1:b4:a6:
e6:d3:62:d6:e9:39:04:17:33:9a:fc:49:31:93:e5:
b5:e3:38:0f:69:9e:96:e8:ac:7b:aa:85:65:d7:e1:
7b:6c:9c:e0:1a:2e:b1:ce:7c:86:5f:8d:b9:2c:22:
d3:a9:4e:2a:1f:90:12:a3:19:a5:b1:26:b1:44:18:
b1:07:13:0f:75:cb:14:67:f0:df:69:40:60:39:7a:
2b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:C5:FD:5B:BF:6A:E0:98:03:EF:CC:87:0B:A7:F1:3D:08:70:56:7E
X509v3 Authority Key Identifier:
keyid:21:7B:7A:B0:62:BC:82:8B:34:8D:05:30:6E:65:35:47:48:B9:D6:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:8a:6d:8b:2a:f8:d9:5e:5c:23:76:4e:52:c9:c1:e0:e1:4f:
33:ed:4b:e8:7a:d5:e3:88:33:26:da:f4:58:ad:34:41:7f:33:
45:03:50:26:6f:bb:58:d9:da:bf:05:36:b3:1f:e0:9c:45:9c:
91:e2:b2:88:25:00:9b:61:f5:5f:af:77:79:3b:0b:4f:d2:29:
0d:dc:7e:5f:18:bb:be:c0:fa:f8:81:a4:53:07:a6:c3:ca:93:
58:d0:48:11:52:81:9a:e7:df:e8:71:f9:be:9f:30:5f:87:df:
23:22:1e:b7:36:4f:f6:2f:ba:6b:4a:c5:3a:f7:2c:05:14:96:
d4:0d:be:b8:77:b2:94:3a:e3:9b:ec:17:f6:b3:2e:18:a2:cc:
40:9d:78:dc:b3:60:f9:e9:2d:3e:24:61:83:67:c7:1f:c5:e4:
d1:df:2a:69:32:d8:29:47:da:11:15:3c:fb:6f:3d:d0:c5:fa:
35:af:bb:2e:3a:c5:36:f9:99:08:e4:af:00:96:82:ea:13:1d:
9f:c4:ea:9f:f4:d6:b2:d7:29:c1:82:0e:09:60:bb:23:e3:8c:
6c:44:cd:04:80:69:6a:8c:59:42:cc:fd:97:36:b8:e7:88:1e:
b3:23:a7:27:0b:9c:30:fb:84:96:22:37:1e:c4:88:3b:79:6e:
f0:2d:3f:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qvtRTMuN2RC69+JPiH/inMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxN2I3YWIwNjJiYzgyOGIzNDhkMDUzMDZlNjUzNTQ3NDhi
OWQ2ZDYwHhcNMjYwNzI4MjIwMTAwWhcNMjYwNzI5MjIwMTAwWjAzMTEwLwYDVQQD
EygwYmM1ZmQ1YmJmNmFlMDk4MDNlZmNjODcwYmE3ZjEzZDA4NzA1NjdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfXFrJ2iFjT17+FZNm5zLxHNhEZE
7zErejV0U+m5sxxqqyQIZa8LFS8aJXHDXPcw7RAaepAipLmKmzTy9X9d4nOCalxN
DRnH7HxoGlgQpWnvUU19wZuWUGKXcM5btnE3cdEDm7mlrg2c7Pd1k/JipWjcbnmn
1ORvBpRxMA8Tr8uaNv0AiCfftNtZpJAfPAKgMzWU+1zUcpmOpGHKIx9lZX/AtusV
ubMzYgwc7fmy1jDBtKbm02LW6TkEFzOa/Ekxk+W14zgPaZ6W6Kx7qoVl1+F7bJzg
Gi6xznyGX425LCLTqU4qH5ASoxmlsSaxRBixBxMPdcsUZ/DfaUBgOXorOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAvF/Vu/auCYA+/Mhwun8T0IcFZ+MB8GA1UdIwQY
MBaAFCF7erBivIKLNI0FMG5lNUdIudbWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVh0NnNHSzhnb3MwalFVd2JtVTFSMGk1MXRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9hOGRhZGMtNjExYi00MDYzLWFkYjYt
NTViNjU5Y2Q4MmJiLzEvSVh0NnNHSzhnb3MwalFVd2JtVTFSMGk1MXRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9hOGRhZGMtNjExYi00MDYzLWFkYjYtNTViNjU5Y2Q4MmJi
LzEvSVh0NnNHSzhnb3MwalFVd2JtVTFSMGk1MXRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL4ptiyr4
2V5cI3ZOUsnB4OFPM+1L6HrV44gzJtr0WK00QX8zRQNQJm+7WNnavwU2sx/gnEWc
keKyiCUAm2H1X693eTsLT9IpDdx+Xxi7vsD6+IGkUwemw8qTWNBIEVKBmuff6HH5
vp8wX4ffIyIetzZP9i+6a0rFOvcsBRSW1A2+uHeylDrjm+wX9rMuGKLMQJ143LNg
+ektPiRhg2fHH8Xk0d8qaTLYKUfaERU8+2890MX6Na+7LjrFNvmZCOSvAJaC6hMd
n8Tqn/TWstcpwYIOCWC7I+OMbETNBIBpaoxZQsz9lza454gesyOnJwucMPuEliI3
HsSIO3lu8C0/Rg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 00:32:46 2026 by rpki-client