Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft
File: Igqw164Bx7p9pp1xqRRys5DNcJE.mft (raw, json)
Hash identifier: 6FEtsdJY4UjiFEn3DX+4bCZ/7h9nnZMLr6LO1J0uoLk=
Subject key identifier: C8:C7:A1:CF:4C:6A:9A:4D:9B:1C:C2:77:B1:5D:B7:D4:DE:AF:4A:77
Authority key identifier: 22:0A:B0:D7:AE:01:C7:BA:7D:A6:9D:71:A9:14:72:B3:90:CD:70:91
Certificate issuer: /CN=220ab0d7ae01c7ba7da69d71a91472b390cd7091
Certificate serial: 019FACE39870CCE88E8AA996C061C377BEDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft
Manifest number: 06AB
Signing time: Wed 29 Jul 2026 08:00:24 +0000
Manifest this update: Wed 29 Jul 2026 08:00:24 +0000
Manifest next update: Thu 30 Jul 2026 08:00:24 +0000
Files and hashes: 1: 6Vq6nX6qZxxpHxLNn7nD2R9p3vg.roa (hash: cCFRmS9OiVLkCF1BaRT3CqFY4I6S01WCAYWaFPvUJRM=)
2: Igqw164Bx7p9pp1xqRRys5DNcJE.crl (hash: 2r8UrMSNB9tLZGcsdBtE3Em0sDNvydP3z9dqOccl22s=)
3: mFOcu9448pkWaJxj0W6CJ5qV7oc.roa (hash: sfdgi4ysoZDcqPEECniZSAvoWWAcCc3gl1/AmNd3E4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:e3:98:70:cc:e8:8e:8a:a9:96:c0:61:c3:77:be:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=220ab0d7ae01c7ba7da69d71a91472b390cd7091
Validity
Not Before: Jul 29 08:00:24 2026 GMT
Not After : Jul 30 08:00:24 2026 GMT
Subject: CN=c8c7a1cf4c6a9a4d9b1cc277b15db7d4deaf4a77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:fe:d2:6c:cc:b9:2c:f0:db:5b:52:30:75:51:
93:c4:c9:3d:d8:69:9f:16:a7:e9:27:a8:8b:f8:56:
be:d0:a0:7d:f7:0b:1b:ea:4f:27:72:62:49:4c:27:
d8:61:f5:0c:23:8a:57:88:4e:58:b6:90:9e:7c:be:
36:ea:44:be:db:ce:a4:ef:38:3c:df:13:14:c1:15:
85:58:84:24:1d:4d:a4:85:98:cc:16:4c:2b:98:6a:
8f:cd:83:bc:30:cd:2b:66:16:97:b6:be:62:99:0a:
e1:c2:a5:3b:38:e4:bd:e2:9d:4d:f0:2b:d4:d7:04:
0d:52:25:b2:e2:4d:63:24:87:0e:5d:f8:3c:3b:e1:
c3:31:a1:d4:ba:cb:4f:df:7f:cb:6b:3e:e8:f4:67:
e0:71:a0:93:48:56:a9:92:90:64:eb:0f:26:24:6c:
96:dc:95:d2:00:02:a1:5a:ee:ad:23:61:4a:37:14:
ae:72:c2:52:aa:46:a3:f9:ee:e6:ec:06:ec:63:13:
cb:05:04:77:1c:0d:f1:df:7f:5c:59:25:60:ee:7b:
f9:f5:24:f5:86:67:e6:54:83:63:b7:41:9c:51:a5:
6d:b5:18:6e:af:a0:b4:bf:af:50:56:db:2b:b7:e2:
1a:8a:91:04:a7:36:be:f3:59:53:c1:7e:62:e7:e5:
60:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:C7:A1:CF:4C:6A:9A:4D:9B:1C:C2:77:B1:5D:B7:D4:DE:AF:4A:77
X509v3 Authority Key Identifier:
keyid:22:0A:B0:D7:AE:01:C7:BA:7D:A6:9D:71:A9:14:72:B3:90:CD:70:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:f0:ad:48:c0:18:5a:f6:27:82:b1:16:14:e6:55:2a:19:e5:
09:8a:a7:58:13:bb:fc:e0:ea:de:8e:67:27:51:f2:0e:b1:3b:
2a:be:08:69:99:8b:72:42:64:0b:9e:b8:66:af:e0:d3:c6:39:
6a:04:e4:0c:bc:1f:2e:3c:b8:07:d3:1c:58:8f:f8:c5:54:dc:
58:24:cf:4e:0c:c5:14:e9:0a:d8:de:c1:c5:6e:c5:e6:61:02:
36:b5:8e:a8:91:a7:05:92:6c:6e:63:cf:34:4c:90:84:d8:f6:
05:7e:61:b0:1d:95:c5:36:56:5a:b3:98:69:4d:1d:b2:c1:a4:
5d:6b:c0:76:fd:3d:8d:fc:89:a9:a0:4f:7a:a4:55:65:11:67:
48:d6:0b:b1:57:42:9d:6b:97:d8:aa:af:7f:3d:6e:30:da:54:
68:9e:78:93:e2:9e:4d:69:7b:b9:da:d3:c6:c7:e5:c2:1a:e0:
f3:eb:3c:80:d4:1f:75:13:b5:66:31:39:f7:6d:2d:2c:46:47:
bf:0f:f1:f3:c2:13:39:59:fa:cf:7b:64:97:48:b3:15:b6:f5:
23:ba:dd:3f:9f:73:d8:35:c0:8d:01:a5:09:ae:a1:de:d8:48:
b3:8c:17:2a:8c:5a:16:f2:6e:35:17:d4:28:15:08:61:e4:d9:
69:eb:0b:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+s45hwzOiOiqmWwGHDd77aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyMGFiMGQ3YWUwMWM3YmE3ZGE2OWQ3MWE5MTQ3MmIzOTBj
ZDcwOTEwHhcNMjYwNzI5MDgwMDI0WhcNMjYwNzMwMDgwMDI0WjAzMTEwLwYDVQQD
EyhjOGM3YTFjZjRjNmE5YTRkOWIxY2MyNzdiMTVkYjdkNGRlYWY0YTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/7SbMy5LPDbW1IwdVGTxMk92Gmf
FqfpJ6iL+Fa+0KB99wsb6k8ncmJJTCfYYfUMI4pXiE5YtpCefL426kS+286k7zg8
3xMUwRWFWIQkHU2khZjMFkwrmGqPzYO8MM0rZhaXtr5imQrhwqU7OOS94p1N8CvU
1wQNUiWy4k1jJIcOXfg8O+HDMaHUustP33/Laz7o9GfgcaCTSFapkpBk6w8mJGyW
3JXSAAKhWu6tI2FKNxSucsJSqkaj+e7m7AbsYxPLBQR3HA3x339cWSVg7nv59ST1
hmfmVINjt0GcUaVttRhur6C0v69QVtsrt+IaipEEpza+81lTwX5i5+Vg6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMjHoc9MappNmxzCd7Fdt9Ter0p3MB8GA1UdIwQY
MBaAFCIKsNeuAce6faadcakUcrOQzXCRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWdxdzE2NEJ4N3A5cHAxeHFSUnlzNUROY0pFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9mMDQ2NTgtZmFkNy00MjNjLWJiNDIt
ODJmYTNkMjYwODY5LzEvSWdxdzE2NEJ4N3A5cHAxeHFSUnlzNUROY0pFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9mMDQ2NTgtZmFkNy00MjNjLWJiNDItODJmYTNkMjYwODY5
LzEvSWdxdzE2NEJ4N3A5cHAxeHFSUnlzNUROY0pFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASvCtSMAY
WvYngrEWFOZVKhnlCYqnWBO7/ODq3o5nJ1HyDrE7Kr4IaZmLckJkC564Zq/g08Y5
agTkDLwfLjy4B9McWI/4xVTcWCTPTgzFFOkK2N7BxW7F5mECNrWOqJGnBZJsbmPP
NEyQhNj2BX5hsB2VxTZWWrOYaU0dssGkXWvAdv09jfyJqaBPeqRVZRFnSNYLsVdC
nWuX2Kqvfz1uMNpUaJ54k+KeTWl7udrTxsflwhrg8+s8gNQfdRO1ZjE5920tLEZH
vw/x88ITOVn6z3tkl0izFbb1I7rdP59z2DXAjQGlCa6h3thIs4wXKoxaFvJuNRfU
KBUIYeTZaesL+A==
-----END CERTIFICATE-----
Generated at Wed Jul 29 17:04:26 2026 by rpki-client