Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft
File: Igqw164Bx7p9pp1xqRRys5DNcJE.mft (raw, json)
Hash identifier: 0W47mUfQ84soYo5lQUEoPhbDl6UHI0YCLZtknMZIbpU=
Subject key identifier: A9:19:E5:26:38:79:50:06:7E:1E:E3:66:7A:6A:44:E0:C8:1E:BE:3F
Authority key identifier: 22:0A:B0:D7:AE:01:C7:BA:7D:A6:9D:71:A9:14:72:B3:90:CD:70:91
Certificate issuer: /CN=220ab0d7ae01c7ba7da69d71a91472b390cd7091
Certificate serial: 01A13CA5C0FA247E31B909B57D5C0BA945C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft
Manifest number: 077A
Signing time: Wed 14 Oct 2026 23:00:57 +0000
Manifest this update: Wed 14 Oct 2026 23:00:57 +0000
Manifest next update: Thu 15 Oct 2026 23:00:57 +0000
Files and hashes: 1: 6Vq6nX6qZxxpHxLNn7nD2R9p3vg.roa (hash: cCFRmS9OiVLkCF1BaRT3CqFY4I6S01WCAYWaFPvUJRM=)
2: Igqw164Bx7p9pp1xqRRys5DNcJE.crl (hash: MOHU9L+RYAr1yVZ8+Q3HueFWfeuQP/skIYLFjjU9zf4=)
3: mFOcu9448pkWaJxj0W6CJ5qV7oc.roa (hash: sfdgi4ysoZDcqPEECniZSAvoWWAcCc3gl1/AmNd3E4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:a5:c0:fa:24:7e:31:b9:09:b5:7d:5c:0b:a9:45:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=220ab0d7ae01c7ba7da69d71a91472b390cd7091
Validity
Not Before: Oct 14 23:00:57 2026 GMT
Not After : Oct 15 23:00:57 2026 GMT
Subject: CN=a919e526387950067e1ee3667a6a44e0c81ebe3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:fa:2e:1c:d5:c0:e0:03:2c:ef:a7:88:ed:de:
17:7c:e8:07:6f:e1:9b:03:77:a2:82:28:43:2c:cd:
0b:fe:8e:db:b1:06:c1:02:00:db:c5:ab:1c:ec:f5:
9b:ff:df:57:b4:df:64:f4:8b:81:b8:20:82:0c:f7:
1c:2e:d1:98:9c:b0:97:30:df:e0:29:80:ad:b9:94:
c5:3a:5d:60:a0:56:58:3d:27:aa:41:c8:39:f4:99:
a6:c4:11:7b:0a:dd:c0:5d:90:32:6f:97:74:49:ee:
7d:77:73:7f:13:b7:d9:49:a3:8b:2a:29:e3:d4:12:
69:22:c6:8e:6b:ea:99:48:6c:e0:54:65:30:64:7b:
6e:99:a2:fc:f1:d8:02:e8:2f:f2:3c:ae:03:b6:b6:
84:a4:c9:2d:ca:9b:b3:4a:b0:f2:f0:eb:3a:dc:93:
77:98:7d:2b:e7:a1:ac:83:04:41:4f:96:06:fe:ba:
a9:4c:4e:01:41:b5:97:58:b4:fd:d8:43:16:3f:a9:
fe:72:c4:bc:84:a0:4d:54:91:43:e1:4c:57:12:bf:
4a:1f:12:37:de:de:3d:b0:84:12:a3:96:42:ac:06:
03:0a:39:31:a0:eb:29:1a:33:50:95:0f:ad:93:cb:
91:09:e8:6d:d0:46:4a:24:fc:34:51:27:8f:19:de:
05:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:19:E5:26:38:79:50:06:7E:1E:E3:66:7A:6A:44:E0:C8:1E:BE:3F
X509v3 Authority Key Identifier:
keyid:22:0A:B0:D7:AE:01:C7:BA:7D:A6:9D:71:A9:14:72:B3:90:CD:70:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:67:77:07:9f:17:80:5e:5a:89:b5:f8:80:7c:f4:6d:fa:c0:
f0:bc:8d:02:02:ae:70:d9:76:98:60:85:86:e0:b4:2d:f9:13:
57:ae:97:27:6e:69:2f:4a:ff:70:7f:1b:82:ee:c4:aa:56:bb:
ff:a5:af:63:db:72:59:a9:87:82:9e:ef:4f:87:2c:6a:08:e2:
fd:2f:6a:3f:43:28:f2:3b:e8:0b:8d:30:dc:33:e0:9e:42:97:
b0:af:00:7c:10:99:27:d4:b7:fb:87:6b:9d:8f:27:5e:09:fe:
68:14:e8:e3:e2:08:1d:7d:72:56:80:43:78:95:3b:90:09:a9:
79:71:cb:10:f9:a9:7e:d5:38:a7:51:3c:36:67:2a:4b:22:47:
a1:e6:ca:3e:19:55:0d:c7:62:67:00:cd:0a:4d:e0:09:94:5c:
04:a5:27:9b:19:17:fb:2d:e9:23:66:d4:bd:0d:da:cb:8e:57:
3c:16:7a:5a:1e:5f:b8:8f:f9:8f:e7:bb:bc:60:6d:22:67:8b:
35:95:87:35:8a:6d:93:10:37:1c:10:f1:fb:02:40:76:d6:45:
a6:80:26:d5:ea:a4:0e:60:e2:5e:d2:5a:01:62:39:07:86:0a:
d6:d4:ac:09:d1:3d:9c:96:b9:4e:00:03:79:86:b5:f3:ee:ff:
47:99:b2:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE8pcD6JH4xuQm1fVwLqUXFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyMGFiMGQ3YWUwMWM3YmE3ZGE2OWQ3MWE5MTQ3MmIzOTBj
ZDcwOTEwHhcNMjYxMDE0MjMwMDU3WhcNMjYxMDE1MjMwMDU3WjAzMTEwLwYDVQQD
EyhhOTE5ZTUyNjM4Nzk1MDA2N2UxZWUzNjY3YTZhNDRlMGM4MWViZTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4PouHNXA4AMs76eI7d4XfOgHb+Gb
A3eigihDLM0L/o7bsQbBAgDbxasc7PWb/99XtN9k9IuBuCCCDPccLtGYnLCXMN/g
KYCtuZTFOl1goFZYPSeqQcg59JmmxBF7Ct3AXZAyb5d0Se59d3N/E7fZSaOLKinj
1BJpIsaOa+qZSGzgVGUwZHtumaL88dgC6C/yPK4DtraEpMktypuzSrDy8Os63JN3
mH0r56GsgwRBT5YG/rqpTE4BQbWXWLT92EMWP6n+csS8hKBNVJFD4UxXEr9KHxI3
3t49sIQSo5ZCrAYDCjkxoOspGjNQlQ+tk8uRCeht0EZKJPw0USePGd4FxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKkZ5SY4eVAGfh7jZnpqRODIHr4/MB8GA1UdIwQY
MBaAFCIKsNeuAce6faadcakUcrOQzXCRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWdxdzE2NEJ4N3A5cHAxeHFSUnlzNUROY0pFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9mMDQ2NTgtZmFkNy00MjNjLWJiNDIt
ODJmYTNkMjYwODY5LzEvSWdxdzE2NEJ4N3A5cHAxeHFSUnlzNUROY0pFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9mMDQ2NTgtZmFkNy00MjNjLWJiNDItODJmYTNkMjYwODY5
LzEvSWdxdzE2NEJ4N3A5cHAxeHFSUnlzNUROY0pFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXGd3B58X
gF5aibX4gHz0bfrA8LyNAgKucNl2mGCFhuC0LfkTV66XJ25pL0r/cH8bgu7Eqla7
/6WvY9tyWamHgp7vT4csagji/S9qP0Mo8jvoC40w3DPgnkKXsK8AfBCZJ9S3+4dr
nY8nXgn+aBTo4+IIHX1yVoBDeJU7kAmpeXHLEPmpftU4p1E8NmcqSyJHoebKPhlV
DcdiZwDNCk3gCZRcBKUnmxkX+y3pI2bUvQ3ay45XPBZ6Wh5fuI/5j+e7vGBtImeL
NZWHNYptkxA3HBDx+wJAdtZFpoAm1eqkDmDiXtJaAWI5B4YK1tSsCdE9nJa5TgAD
eYa18+7/R5my6A==
-----END CERTIFICATE-----
Generated at Thu Oct 15 05:32:34 2026 by rpki-client