Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/I88dx_xD6BSDngDYBNPgRTEhqEI.mft
File: I88dx_xD6BSDngDYBNPgRTEhqEI.mft (raw, json)
Hash identifier: ZZ+pFOIMKSRjRpgaFrYDvYCZ1nVCLp7r9y/JnaX+tnY=
Subject key identifier: 6D:76:5B:51:12:5B:5E:5A:D1:71:EB:55:8C:30:44:C5:50:01:88:D6
Authority key identifier: 23:CF:1D:C7:FC:43:E8:14:83:9E:00:D8:04:D3:E0:45:31:21:A8:42
Certificate issuer: /CN=23cf1dc7fc43e814839e00d804d3e0453121a842
Certificate serial: 019FA899C734331A0CC542956629AE4C492B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I88dx_xD6BSDngDYBNPgRTEhqEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/I88dx_xD6BSDngDYBNPgRTEhqEI.mft
Manifest number: 4C
Signing time: Tue 28 Jul 2026 12:01:17 +0000
Manifest this update: Tue 28 Jul 2026 12:01:17 +0000
Manifest next update: Wed 29 Jul 2026 12:01:17 +0000
Files and hashes: 1: 7cEqHcHGRbaIho99m-rmegRIrYY.asa (hash: RaY2TmIELPjoBEn+00L520PCgl7eqLSDCcUK5vUU5bQ=)
2: I88dx_xD6BSDngDYBNPgRTEhqEI.crl (hash: J1d8qiXjxiDrJSvUT2NRpR3R6j/gLKS0bYOdYjQ8eZ0=)
3: I8vS97tvtkNgegC1NkyYJZ9EbQM.roa (hash: 65Bo/mCQt2n4+sp0dAv/y7zwG2eGPWv7JSdd7Q3lwQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/I88dx_xD6BSDngDYBNPgRTEhqEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/I88dx_xD6BSDngDYBNPgRTEhqEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/I88dx_xD6BSDngDYBNPgRTEhqEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:c7:34:33:1a:0c:c5:42:95:66:29:ae:4c:49:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23cf1dc7fc43e814839e00d804d3e0453121a842
Validity
Not Before: Jul 28 12:01:17 2026 GMT
Not After : Jul 29 12:01:17 2026 GMT
Subject: CN=6d765b51125b5e5ad171eb558c3044c5500188d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:90:68:ca:65:d4:03:a2:41:bb:82:74:0e:0d:
7a:1b:96:2a:31:6f:9d:62:a6:02:fa:1b:7b:92:25:
28:f5:ca:7c:b8:83:9f:33:79:13:19:b2:5b:26:d6:
44:c7:a5:2b:54:88:15:80:04:7d:b5:6f:2a:59:56:
4b:56:21:bf:ef:1b:bb:f1:4d:c9:4a:5c:c6:d1:aa:
59:07:e7:19:34:b7:5e:0b:ff:82:56:c5:df:67:9f:
5f:58:34:3c:da:f2:00:b3:64:85:ea:94:bd:26:6f:
a0:ac:7c:ec:cf:f0:9c:22:6a:ef:2a:2c:f3:fe:66:
21:a7:90:08:0a:27:ff:39:97:51:b6:c0:0f:8f:88:
89:7e:de:e0:46:c5:46:37:1b:2d:63:0b:36:09:da:
95:ea:f8:c0:65:b4:b9:7d:84:a5:fa:a3:23:cd:a2:
b6:2c:04:c5:fa:c1:4c:b5:a2:35:71:94:52:9e:5b:
bc:b7:a1:72:98:06:a7:03:b5:61:13:4e:1d:7a:c4:
10:d7:26:bc:9f:1c:e1:d2:9c:ae:6f:4e:d7:30:c1:
13:ff:57:65:2a:c9:6d:d7:10:28:92:42:f9:eb:4a:
7e:a2:c8:4c:26:6f:d8:f2:84:fc:9a:e8:ba:a8:cc:
5d:15:d8:9a:e4:c9:f1:bd:ce:eb:65:b0:bc:d9:28:
71:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:76:5B:51:12:5B:5E:5A:D1:71:EB:55:8C:30:44:C5:50:01:88:D6
X509v3 Authority Key Identifier:
keyid:23:CF:1D:C7:FC:43:E8:14:83:9E:00:D8:04:D3:E0:45:31:21:A8:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I88dx_xD6BSDngDYBNPgRTEhqEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/I88dx_xD6BSDngDYBNPgRTEhqEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/I88dx_xD6BSDngDYBNPgRTEhqEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:35:6d:3f:4c:3f:c7:b7:17:17:8d:d1:ad:a1:36:20:24:1f:
3d:62:d6:eb:80:c6:0f:89:54:59:a6:f4:de:7c:8c:54:22:b5:
0f:0d:74:25:37:3e:34:b9:31:e5:85:c0:ed:29:da:12:93:3c:
7c:5e:43:dd:ea:72:52:0c:62:0b:bf:b9:08:20:dd:e6:06:59:
2c:c4:12:35:44:5b:f2:23:bc:4b:fe:86:e0:bd:ef:5b:70:cf:
7e:19:04:27:23:bc:b9:db:3e:30:f5:48:5c:60:d6:d2:8b:76:
d8:17:86:04:bb:74:3d:6b:3e:a1:c2:c4:2e:6d:ea:ad:b4:74:
f1:68:64:3e:63:78:10:58:6f:d6:99:b9:ed:b4:ae:68:59:d4:
24:53:d5:23:9d:1e:56:4e:42:29:73:25:56:e3:b8:3e:36:8d:
e3:23:c3:6b:b7:5a:30:9f:c7:69:48:a1:95:70:77:c0:02:00:
5b:fe:50:fe:38:e1:bc:ca:c2:7d:e1:7f:b9:1c:90:6a:c8:7d:
36:7c:33:0a:c7:7b:44:1e:a5:16:ba:2a:97:8f:13:7f:03:2c:
0f:67:00:e5:d6:47:3d:b1:9e:6e:19:96:d3:8e:1b:23:f2:48:
40:93:db:b1:1f:5e:4e:93:df:77:7e:d5:0f:c7:6d:fd:a6:0e:
48:31:2f:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+omcc0MxoMxUKVZimuTEkrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzY2YxZGM3ZmM0M2U4MTQ4MzllMDBkODA0ZDNlMDQ1MzEy
MWE4NDIwHhcNMjYwNzI4MTIwMTE3WhcNMjYwNzI5MTIwMTE3WjAzMTEwLwYDVQQD
Eyg2ZDc2NWI1MTEyNWI1ZTVhZDE3MWViNTU4YzMwNDRjNTUwMDE4OGQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA25BoymXUA6JBu4J0Dg16G5YqMW+d
YqYC+ht7kiUo9cp8uIOfM3kTGbJbJtZEx6UrVIgVgAR9tW8qWVZLViG/7xu78U3J
SlzG0apZB+cZNLdeC/+CVsXfZ59fWDQ82vIAs2SF6pS9Jm+grHzsz/CcImrvKizz
/mYhp5AICif/OZdRtsAPj4iJft7gRsVGNxstYws2CdqV6vjAZbS5fYSl+qMjzaK2
LATF+sFMtaI1cZRSnlu8t6FymAanA7VhE04desQQ1ya8nxzh0pyub07XMMET/1dl
Kslt1xAokkL560p+oshMJm/Y8oT8mui6qMxdFdia5Mnxvc7rZbC82ShxIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG12W1ESW15a0XHrVYwwRMVQAYjWMB8GA1UdIwQY
MBaAFCPPHcf8Q+gUg54A2ATT4EUxIahCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTg4ZHhfeEQ2QlNEbmdEWUJOUGdSVEVocUVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi8wMDkwNzQtNjZmNi00ZDRkLTk3NGEt
ZGEyZWM4Y2ZiODg4LzEvSTg4ZHhfeEQ2QlNEbmdEWUJOUGdSVEVocUVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi8wMDkwNzQtNjZmNi00ZDRkLTk3NGEtZGEyZWM4Y2ZiODg4
LzEvSTg4ZHhfeEQ2QlNEbmdEWUJOUGdSVEVocUVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASDVtP0w/
x7cXF43RraE2ICQfPWLW64DGD4lUWab03nyMVCK1Dw10JTc+NLkx5YXA7SnaEpM8
fF5D3epyUgxiC7+5CCDd5gZZLMQSNURb8iO8S/6G4L3vW3DPfhkEJyO8uds+MPVI
XGDW0ot22BeGBLt0PWs+ocLELm3qrbR08WhkPmN4EFhv1pm57bSuaFnUJFPVI50e
Vk5CKXMlVuO4PjaN4yPDa7daMJ/HaUihlXB3wAIAW/5Q/jjhvMrCfeF/uRyQash9
NnwzCsd7RB6lFroql48TfwMsD2cA5dZHPbGebhmW044bI/JIQJPbsR9eTpPfd37V
D8dt/aYOSDEvxg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 15:39:17 2026 by rpki-client