Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft
File: IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft (raw, json)
Hash identifier: gykRBLr47m4LW/5CkOyl07mInf8i2cXIqB5FEfZ8UHQ=
Subject key identifier: 7D:B2:B4:F2:49:49:77:21:31:65:4D:E3:99:C5:16:F0:25:40:42:66
Authority key identifier: 21:60:B2:B1:C8:29:D8:89:36:B1:AD:AE:EC:97:FD:D1:B4:0D:41:E5
Certificate issuer: /CN=2160b2b1c829d88936b1adaeec97fdd1b40d41e5
Certificate serial: 019FAB2C11704BD639764FEA6D2F9FAD8DDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft
Manifest number: 1A30
Signing time: Wed 29 Jul 2026 00:00:19 +0000
Manifest this update: Wed 29 Jul 2026 00:00:19 +0000
Manifest next update: Thu 30 Jul 2026 00:00:19 +0000
Files and hashes: 1: 06efRp_YLLMigOISh9p5zbfjQsU.roa (hash: wEc6I99DrGtZKsss8jbEP0QrNOCnTgf0xe2uQcvZ3B4=)
2: 907yoKciXNACwbzosQ9EdtEnzxE.roa (hash: xy6JOgAicMUUYBfqaL/uhSj/UHERrsePLpE/jODbSog=)
3: ATnIbsnePKNaMQNlVZCM7IP2KaQ.roa (hash: wOURT7eJ1zzvXUnVWrop+Xtq40wMGTNV73AAUY+CZCE=)
4: IWCyscgp2Ik2sa2u7Jf90bQNQeU.crl (hash: z9OxJFrrhZ9dLJO6VMjqTdYj14VBlr8NVG66R4I1dbg=)
5: R7Lu4Y1fCyTXONuoklyDGrymZag.roa (hash: 5a8I6IIILgZSlU2ehvXhgeJfg0YzkicxbnbV++shmxM=)
6: YzlzcRhu-iD3ZDhfYDRmSdZddgQ.roa (hash: 753e9bkRX1Fsp5S+P9nf7VxsaR5WwPAEieFcCkQGZ4o=)
7: ikgXwMpWPgQZc8FsPHVC_slVM18.roa (hash: SUfSLegrVe2t+HnXqp8P0ZG10H96D9fqhOh+KXCzXy0=)
8: jSnPKKGvikx0YeXmgH0K8iF0JTw.roa (hash: RwJA7bMjhXX4ua2Z/JnGiMlZLMTnVTQMeqIv/GuCRps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:11:70:4b:d6:39:76:4f:ea:6d:2f:9f:ad:8d:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2160b2b1c829d88936b1adaeec97fdd1b40d41e5
Validity
Not Before: Jul 29 00:00:19 2026 GMT
Not After : Jul 30 00:00:19 2026 GMT
Subject: CN=7db2b4f24949772131654de399c516f025404266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:81:52:fe:df:eb:38:3d:42:c8:93:a6:c2:83:
a0:46:7e:5c:51:47:20:a7:c8:9f:a6:44:eb:06:36:
9e:52:1e:d4:ec:65:6d:8f:04:68:15:27:fc:db:6c:
9e:de:02:c9:79:1a:2b:40:7d:c0:aa:da:e1:63:8c:
91:6e:c2:c2:2e:ed:e8:e7:87:d8:63:fd:d8:9d:34:
d9:39:77:6a:ba:b9:40:45:8a:a8:15:2b:88:06:d2:
18:a8:4d:a3:ce:52:e9:bf:95:82:65:6e:1d:c5:5e:
c1:9e:33:9c:06:b5:ec:a5:98:58:b4:24:39:d1:2e:
47:29:0f:d0:26:f3:5a:70:57:d0:3a:c8:50:e1:7f:
17:59:1b:67:00:14:16:87:f3:54:45:bf:10:69:db:
fa:e9:60:b4:7c:2b:23:64:3f:2b:44:00:2f:39:36:
10:47:0c:65:2e:b9:dc:4c:06:9a:61:26:c8:6f:fc:
ff:4d:80:d1:76:c8:53:ef:c7:b4:65:ff:4a:e9:19:
ff:12:09:11:02:b8:88:fc:74:0b:ba:20:29:05:91:
d6:9e:5a:97:8a:96:bb:22:bc:8b:d4:2c:8a:0a:a5:
b2:ad:ab:ba:dc:00:c0:25:4b:76:45:50:6d:c8:21:
c5:41:61:8c:19:47:7b:ef:19:0d:aa:cd:4c:bc:eb:
45:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:B2:B4:F2:49:49:77:21:31:65:4D:E3:99:C5:16:F0:25:40:42:66
X509v3 Authority Key Identifier:
keyid:21:60:B2:B1:C8:29:D8:89:36:B1:AD:AE:EC:97:FD:D1:B4:0D:41:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:d4:28:17:1e:bd:3b:50:56:80:de:bf:43:56:e2:af:2e:20:
85:f3:d8:f1:6b:9a:75:c3:78:8c:8c:0c:ae:cd:c6:2a:e0:c4:
f0:3a:32:3d:14:f9:fd:4a:c0:67:6a:0e:52:de:a1:fc:8c:df:
7d:36:8b:8b:7b:08:4f:b3:e4:9f:47:2e:a0:77:5c:ee:17:8a:
fa:e3:01:f0:87:e4:2c:0d:40:b7:96:0a:4f:c5:8e:c0:71:71:
7a:48:ee:da:2e:98:d4:98:89:a4:7b:dc:79:34:44:c7:25:ec:
e2:8d:2f:7b:ee:e0:7d:ac:06:20:e1:4b:5b:b9:bc:cf:e9:3e:
71:8e:6c:28:6e:bd:b6:db:ec:20:1c:65:8a:02:9e:c1:c3:50:
53:05:13:84:fe:c9:de:07:f3:9b:db:7f:39:cb:3a:cb:41:0f:
74:8c:76:87:7c:db:81:dc:e0:70:90:70:75:f6:bd:17:30:df:
39:99:0a:df:f6:52:55:35:a1:7c:48:38:2c:4c:37:25:89:f6:
2b:1d:57:2d:0b:b0:ca:b6:5c:ac:4d:9b:4b:9b:7d:ef:42:68:
b3:8a:b7:32:39:00:fc:de:9e:73:21:0a:67:e1:ce:ce:d5:4d:
00:cd:d6:ec:93:1d:51:d1:5a:41:20:5e:9c:f7:f3:ca:be:f3:
73:fe:1d:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+rLBFwS9Y5dk/qbS+frY3bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxNjBiMmIxYzgyOWQ4ODkzNmIxYWRhZWVjOTdmZGQxYjQw
ZDQxZTUwHhcNMjYwNzI5MDAwMDE5WhcNMjYwNzMwMDAwMDE5WjAzMTEwLwYDVQQD
Eyg3ZGIyYjRmMjQ5NDk3NzIxMzE2NTRkZTM5OWM1MTZmMDI1NDA0MjY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYFS/t/rOD1CyJOmwoOgRn5cUUcg
p8ifpkTrBjaeUh7U7GVtjwRoFSf822ye3gLJeRorQH3AqtrhY4yRbsLCLu3o54fY
Y/3YnTTZOXdqurlARYqoFSuIBtIYqE2jzlLpv5WCZW4dxV7BnjOcBrXspZhYtCQ5
0S5HKQ/QJvNacFfQOshQ4X8XWRtnABQWh/NURb8Qadv66WC0fCsjZD8rRAAvOTYQ
RwxlLrncTAaaYSbIb/z/TYDRdshT78e0Zf9K6Rn/EgkRAriI/HQLuiApBZHWnlqX
ipa7IryL1CyKCqWyrau63ADAJUt2RVBtyCHFQWGMGUd77xkNqs1MvOtFpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH2ytPJJSXchMWVN45nFFvAlQEJmMB8GA1UdIwQY
MBaAFCFgsrHIKdiJNrGtruyX/dG0DUHlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVdDeXNjZ3AySWsyc2EydTdKZjkwYlFOUWVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9kYjFlMjAtZGMzNi00ODhkLTkxYTEt
M2RmN2ZhZjM1MzVkLzEvSVdDeXNjZ3AySWsyc2EydTdKZjkwYlFOUWVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9kYjFlMjAtZGMzNi00ODhkLTkxYTEtM2RmN2ZhZjM1MzVk
LzEvSVdDeXNjZ3AySWsyc2EydTdKZjkwYlFOUWVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHtQoFx69
O1BWgN6/Q1biry4ghfPY8WuadcN4jIwMrs3GKuDE8DoyPRT5/UrAZ2oOUt6h/Izf
fTaLi3sIT7Pkn0cuoHdc7heK+uMB8IfkLA1At5YKT8WOwHFxekju2i6Y1JiJpHvc
eTRExyXs4o0ve+7gfawGIOFLW7m8z+k+cY5sKG69ttvsIBxligKewcNQUwUThP7J
3gfzm9t/Ocs6y0EPdIx2h3zbgdzgcJBwdfa9FzDfOZkK3/ZSVTWhfEg4LEw3JYn2
Kx1XLQuwyrZcrE2bS5t970Jos4q3MjkA/N6ecyEKZ+HOztVNAM3W7JMdUdFaQSBe
nPfzyr7zc/4dyQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 05:24:27 2026 by rpki-client