Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.mft
File: IxMMmax6pAhscXVxFKQWP4AJAUI.mft (raw, json)
Hash identifier: Fu9D8CZ/kJam/FLmZ5MKQNQX5Fw6BVAZRblU9cOMFYo=
Subject key identifier: 30:2F:03:19:0F:B2:C8:24:8E:9C:ED:52:ED:0D:91:97:E7:1F:53:0C
Authority key identifier: 23:13:0C:99:AC:7A:A4:08:6C:71:75:71:14:A4:16:3F:80:09:01:42
Certificate issuer: /CN=23130c99ac7aa4086c71757114a4163f80090142
Certificate serial: 019EBFC8BADDCF5C797F71E83F005BF44FEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IxMMmax6pAhscXVxFKQWP4AJAUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.mft
Manifest number: 0CA3
Signing time: Sat 13 Jun 2026 07:01:03 +0000
Manifest this update: Sat 13 Jun 2026 07:01:03 +0000
Manifest next update: Sun 14 Jun 2026 07:01:03 +0000
Files and hashes: 1: IxMMmax6pAhscXVxFKQWP4AJAUI.crl (hash: +35IVvksw/MteiSzmDV1oTOpDuSwlkPfoAM/defyt2Y=)
2: M7AsOPJRuDvyqpdVNAPIyt4dy4E.roa (hash: VA2KwTkb4NGqo/O9WoJ31YAHnrH27JkWDC9odiYJKyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IxMMmax6pAhscXVxFKQWP4AJAUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 07:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:c8:ba:dd:cf:5c:79:7f:71:e8:3f:00:5b:f4:4f:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23130c99ac7aa4086c71757114a4163f80090142
Validity
Not Before: Jun 13 07:01:03 2026 GMT
Not After : Jun 14 07:01:03 2026 GMT
Subject: CN=302f03190fb2c8248e9ced52ed0d9197e71f530c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:bd:d9:7d:ea:d7:50:71:df:ed:d6:6f:0a:6c:
5f:a8:cc:bb:cf:73:9c:9f:b6:1e:4b:3e:90:e8:22:
7d:32:5d:d5:ae:79:e8:df:33:98:2d:fd:65:05:86:
d0:c8:96:7d:2e:7d:30:3a:25:fd:d9:cd:df:29:ba:
31:e7:7d:38:6b:6d:a1:6f:17:24:e1:20:ae:8a:8b:
40:67:a2:f8:9a:a2:cd:44:d6:64:97:f0:48:7a:c3:
d2:1f:bf:38:ce:b9:18:12:e8:f9:da:90:6b:5e:50:
28:52:09:02:37:9e:e5:b5:da:ff:a6:bc:64:ae:9d:
9f:53:08:d5:f6:0e:46:4a:e6:c5:c7:bd:cf:7d:e2:
4b:ad:8f:63:26:5d:6b:c4:2f:0c:5e:4a:1a:04:d6:
71:1e:fc:1e:bd:30:7d:39:c2:b1:6d:8f:cb:fb:80:
16:8e:51:57:fb:4c:2b:cf:45:69:c7:c7:91:b7:57:
1b:49:df:66:79:86:ed:56:fa:0c:0b:d6:a5:a7:4d:
4f:6b:bf:53:23:36:9a:a9:71:fd:c0:70:72:f9:92:
20:8d:8f:e5:a6:9a:50:ec:c1:4e:6f:b2:a3:b9:e6:
c9:f3:0c:13:9e:80:39:d0:b9:8e:d4:7c:ba:d7:32:
b2:45:5f:96:a0:85:3e:98:64:1e:64:eb:92:e4:be:
6f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:2F:03:19:0F:B2:C8:24:8E:9C:ED:52:ED:0D:91:97:E7:1F:53:0C
X509v3 Authority Key Identifier:
keyid:23:13:0C:99:AC:7A:A4:08:6C:71:75:71:14:A4:16:3F:80:09:01:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IxMMmax6pAhscXVxFKQWP4AJAUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:44:b3:21:92:26:17:69:a4:ee:4d:e0:fe:7e:80:c3:c9:bc:
f7:75:31:8a:15:33:14:3b:e4:15:3d:b8:c7:15:fe:8a:dc:74:
a5:39:3f:24:19:ae:70:65:69:04:cd:7b:9e:5e:5b:1e:ca:82:
84:78:dd:48:15:1b:58:dc:3b:d7:a3:65:8d:8e:dc:ce:15:af:
9f:60:1a:30:a1:1c:51:d4:a8:66:49:5e:39:31:7f:ca:f9:5e:
97:50:2a:dc:bc:bb:94:8e:fb:38:38:0c:72:e6:34:c3:a4:2d:
c1:f8:a7:78:af:cd:e6:c7:ed:d0:42:b8:c0:3f:90:8f:5a:21:
83:65:ae:e1:f0:4f:93:45:4a:0c:d7:13:21:b3:91:bb:eb:4f:
0d:ff:ef:57:a0:e8:f7:8f:73:b6:c5:6f:fd:bc:8a:82:16:8b:
d6:e1:4b:31:f2:fd:89:b8:01:4e:a4:4d:f1:af:70:4b:9b:78:
38:e8:8b:1f:eb:91:48:99:b9:ae:ad:32:2e:de:f1:4e:50:7a:
55:98:f7:c7:29:cc:95:34:b7:7d:fb:ef:da:17:14:65:83:d3:
ec:42:44:6c:03:49:b8:ad:b2:fe:b6:36:e9:64:bc:f3:59:79:
c1:2c:8a:3a:6d:3e:6a:c4:b4:66:87:08:1d:5d:8b:1e:fc:ae:
c6:a3:07:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/yLrdz1x5f3HoPwBb9E/rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzMTMwYzk5YWM3YWE0MDg2YzcxNzU3MTE0YTQxNjNmODAw
OTAxNDIwHhcNMjYwNjEzMDcwMTAzWhcNMjYwNjE0MDcwMTAzWjAzMTEwLwYDVQQD
EygzMDJmMDMxOTBmYjJjODI0OGU5Y2VkNTJlZDBkOTE5N2U3MWY1MzBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5r3ZferXUHHf7dZvCmxfqMy7z3Oc
n7YeSz6Q6CJ9Ml3Vrnno3zOYLf1lBYbQyJZ9Ln0wOiX92c3fKbox5304a22hbxck
4SCuiotAZ6L4mqLNRNZkl/BIesPSH784zrkYEuj52pBrXlAoUgkCN57ltdr/prxk
rp2fUwjV9g5GSubFx73PfeJLrY9jJl1rxC8MXkoaBNZxHvwevTB9OcKxbY/L+4AW
jlFX+0wrz0Vpx8eRt1cbSd9meYbtVvoMC9alp01Pa79TIzaaqXH9wHBy+ZIgjY/l
pppQ7MFOb7KjuebJ8wwTnoA50LmO1Hy61zKyRV+WoIU+mGQeZOuS5L5vLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDAvAxkPssgkjpztUu0NkZfnH1MMMB8GA1UdIwQY
MBaAFCMTDJmseqQIbHF1cRSkFj+ACQFCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXhNTW1heDZwQWhzY1hWeEZLUVdQNEFKQVVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy81YzNhZTYtMjkzNC00NzllLThjMmQt
OGU4ZDViM2U1NTg2LzEvSXhNTW1heDZwQWhzY1hWeEZLUVdQNEFKQVVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy81YzNhZTYtMjkzNC00NzllLThjMmQtOGU4ZDViM2U1NTg2
LzEvSXhNTW1heDZwQWhzY1hWeEZLUVdQNEFKQVVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYkSzIZIm
F2mk7k3g/n6Aw8m893UxihUzFDvkFT24xxX+itx0pTk/JBmucGVpBM17nl5bHsqC
hHjdSBUbWNw716NljY7czhWvn2AaMKEcUdSoZkleOTF/yvlel1Aq3Ly7lI77ODgM
cuY0w6QtwfineK/N5sft0EK4wD+Qj1ohg2Wu4fBPk0VKDNcTIbORu+tPDf/vV6Do
949ztsVv/byKghaL1uFLMfL9ibgBTqRN8a9wS5t4OOiLH+uRSJm5rq0yLt7xTlB6
VZj3xynMlTS3ffvv2hcUZYPT7EJEbANJuK2y/rY26WS881l5wSyKOm0+asS0ZocI
HV2LHvyuxqMHcg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 17:55:23 2026 by rpki-client