Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.mft
File: IoNxG9erE9o9EfJbtXpPSDwfmaw.mft (raw, json)
Hash identifier: 1LAMzOszFJ0ndMsMoAM08EIGOQ/S7IgzMbDYDtBBg4Q=
Subject key identifier: 7D:FA:38:F7:2C:C1:B1:A5:F6:17:D5:C5:79:2F:20:5D:53:15:F9:50
Authority key identifier: 22:83:71:1B:D7:AB:13:DA:3D:11:F2:5B:B5:7A:4F:48:3C:1F:99:AC
Certificate issuer: /CN=2283711bd7ab13da3d11f25bb57a4f483c1f99ac
Certificate serial: 019F84C3A52573AC05B6E2288BC51293A0D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IoNxG9erE9o9EfJbtXpPSDwfmaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.mft
Manifest number: 19C1
Signing time: Tue 21 Jul 2026 13:00:42 +0000
Manifest this update: Tue 21 Jul 2026 13:00:42 +0000
Manifest next update: Wed 22 Jul 2026 13:00:42 +0000
Files and hashes: 1: IoNxG9erE9o9EfJbtXpPSDwfmaw.crl (hash: 4Rze9SGakwn+qj7PIhOttgFFPzdPgjZ4IGnux67YXko=)
2: M7U-ppZwsd4Y0hqrg3uFvL3fNF0.roa (hash: V5ZqVNY/FzC23usoRi5oNuuG/BK57r9pMG9x1bcd1BQ=)
3: ZD6ajEH0bv8mrB6nbh6DLa6EVFo.roa (hash: mzlpti+1V/oTEeIRtH/QUHo9IeJTt/iu7YBQ2fE92aA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/IoNxG9erE9o9EfJbtXpPSDwfmaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 13:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:c3:a5:25:73:ac:05:b6:e2:28:8b:c5:12:93:a0:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2283711bd7ab13da3d11f25bb57a4f483c1f99ac
Validity
Not Before: Jul 21 13:00:42 2026 GMT
Not After : Jul 22 13:00:42 2026 GMT
Subject: CN=7dfa38f72cc1b1a5f617d5c5792f205d5315f950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:98:44:ad:8d:78:71:d2:a9:96:64:fc:8a:23:
46:92:64:0b:67:c3:c3:8d:29:b5:0d:59:c7:9b:ca:
dc:cf:03:1c:78:31:74:d6:25:76:2a:5a:24:8d:24:
76:6a:e2:6c:ac:d0:29:0e:b8:2e:27:00:60:d7:28:
67:8b:ad:34:17:10:eb:6c:57:da:4a:8e:81:76:ed:
eb:51:92:7e:09:ca:08:e0:be:da:d7:9f:6f:5c:41:
2b:33:f9:d4:76:c8:04:85:12:bc:8a:1a:13:91:a4:
82:4b:80:92:b3:66:c5:67:7a:17:80:1c:d2:f7:51:
04:37:8c:99:d0:26:e8:7d:68:65:4e:66:20:df:11:
ee:c4:53:40:85:d9:98:39:04:bf:82:aa:ba:98:98:
45:b4:8c:c1:a1:9d:e4:b5:a5:1f:52:c3:77:d7:1f:
be:49:e2:f0:e0:18:f1:76:71:16:02:01:e5:ee:e8:
0e:66:28:cc:63:d8:23:4e:9e:cd:3c:50:ba:11:8a:
25:06:43:97:78:46:d4:d9:50:9c:ac:0a:6c:4a:8a:
1d:f4:55:ae:4d:cd:2a:15:f4:ae:49:9a:9e:0b:c4:
38:26:fa:37:86:22:d6:c3:74:f4:4c:52:02:95:b7:
b3:24:00:11:bc:b3:76:b8:14:b6:3c:53:3c:80:0d:
8a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:FA:38:F7:2C:C1:B1:A5:F6:17:D5:C5:79:2F:20:5D:53:15:F9:50
X509v3 Authority Key Identifier:
keyid:22:83:71:1B:D7:AB:13:DA:3D:11:F2:5B:B5:7A:4F:48:3C:1F:99:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IoNxG9erE9o9EfJbtXpPSDwfmaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:48:6f:7d:35:44:0f:0b:20:06:28:78:fc:f3:ef:d4:78:03:
73:70:45:77:e5:11:d5:a3:26:3d:fc:51:b7:09:b2:21:39:11:
e5:2d:00:2e:9a:8b:8c:a3:86:8d:63:9c:b1:4d:6d:35:d7:7c:
77:3b:13:d0:55:9d:9f:80:30:10:c9:bf:68:31:88:59:56:4c:
05:35:c5:1d:f4:5d:d2:90:87:69:45:79:09:7b:6c:91:8b:5e:
71:1d:1e:89:29:ab:96:67:99:04:57:d0:b4:49:ae:52:30:b7:
fc:a1:3b:c0:ea:a8:47:9c:c4:f1:06:ba:9f:31:b9:91:a6:4d:
14:fc:4c:88:88:72:8f:33:f1:8e:5a:ff:b0:3d:cf:2d:bf:d6:
35:eb:97:25:f3:f8:8c:08:1a:48:7e:b0:37:ab:c2:6d:f4:78:
a7:7b:db:c0:8b:cb:14:fe:25:ab:29:3f:7d:80:2b:f6:cc:7e:
ac:7b:f0:72:13:7c:65:0a:9d:f9:5d:42:71:24:70:4c:20:35:
7a:66:b1:87:8c:70:30:9f:17:21:a0:0d:35:c7:40:f3:94:a8:
74:d7:a0:5c:ca:03:64:29:9a:a1:01:3e:5e:4d:7b:5a:e5:3a:
7f:25:ba:71:7c:3e:c9:42:2e:d7:b9:c4:59:1a:47:69:2c:45:
46:96:e6:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Ew6Ulc6wFtuIoi8USk6DTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyODM3MTFiZDdhYjEzZGEzZDExZjI1YmI1N2E0ZjQ4M2Mx
Zjk5YWMwHhcNMjYwNzIxMTMwMDQyWhcNMjYwNzIyMTMwMDQyWjAzMTEwLwYDVQQD
Eyg3ZGZhMzhmNzJjYzFiMWE1ZjYxN2Q1YzU3OTJmMjA1ZDUzMTVmOTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZhErY14cdKplmT8iiNGkmQLZ8PD
jSm1DVnHm8rczwMceDF01iV2KlokjSR2auJsrNApDrguJwBg1yhni600FxDrbFfa
So6Bdu3rUZJ+CcoI4L7a159vXEErM/nUdsgEhRK8ihoTkaSCS4CSs2bFZ3oXgBzS
91EEN4yZ0CbofWhlTmYg3xHuxFNAhdmYOQS/gqq6mJhFtIzBoZ3ktaUfUsN31x++
SeLw4BjxdnEWAgHl7ugOZijMY9gjTp7NPFC6EYolBkOXeEbU2VCcrApsSood9FWu
Tc0qFfSuSZqeC8Q4Jvo3hiLWw3T0TFIClbezJAARvLN2uBS2PFM8gA2KBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH36OPcswbGl9hfVxXkvIF1TFflQMB8GA1UdIwQY
MBaAFCKDcRvXqxPaPRHyW7V6T0g8H5msMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSW9OeEc5ZXJFOW85RWZKYnRYcFBTRHdmbWF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS85Y2JlODgtM2U3NS00MmVmLWI4NzEt
NWVlNzZmMGY2NGUyLzEvSW9OeEc5ZXJFOW85RWZKYnRYcFBTRHdmbWF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS85Y2JlODgtM2U3NS00MmVmLWI4NzEtNWVlNzZmMGY2NGUy
LzEvSW9OeEc5ZXJFOW85RWZKYnRYcFBTRHdmbWF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqkhvfTVE
DwsgBih4/PPv1HgDc3BFd+UR1aMmPfxRtwmyITkR5S0ALpqLjKOGjWOcsU1tNdd8
dzsT0FWdn4AwEMm/aDGIWVZMBTXFHfRd0pCHaUV5CXtskYtecR0eiSmrlmeZBFfQ
tEmuUjC3/KE7wOqoR5zE8Qa6nzG5kaZNFPxMiIhyjzPxjlr/sD3PLb/WNeuXJfP4
jAgaSH6wN6vCbfR4p3vbwIvLFP4lqyk/fYAr9sx+rHvwchN8ZQqd+V1CcSRwTCA1
emaxh4xwMJ8XIaANNcdA85SodNegXMoDZCmaoQE+Xk17WuU6fyW6cXw+yUIu17nE
WRpHaSxFRpbmbA==
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:53:53 2026 by rpki-client