Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/98aa0b-d8b3-4109-8f8b-20e59cf92686/1/IXQgn8IZLnORZveuTf_D1MmCNUk.mft
File: IXQgn8IZLnORZveuTf_D1MmCNUk.mft (raw, json)
Hash identifier: cmj+jKAuNf4elYBKKBXo4JRlM0Xs2QtPmA/MRYx2cf8=
Subject key identifier: 02:50:C2:27:01:51:6D:19:37:39:F6:75:34:68:2A:CE:0E:70:1D:F0
Authority key identifier: 21:74:20:9F:C2:19:2E:73:91:66:F7:AE:4D:FF:C3:D4:C9:82:35:49
Certificate issuer: /CN=2174209fc2192e739166f7ae4dffc3d4c9823549
Certificate serial: 01A06D95752F7C436F392716B77872B02276
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IXQgn8IZLnORZveuTf_D1MmCNUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/98aa0b-d8b3-4109-8f8b-20e59cf92686/1/IXQgn8IZLnORZveuTf_D1MmCNUk.mft
Manifest number: B2
Signing time: Fri 04 Sep 2026 18:01:46 +0000
Manifest this update: Fri 04 Sep 2026 18:01:46 +0000
Manifest next update: Sat 05 Sep 2026 18:01:46 +0000
Files and hashes: 1: IXQgn8IZLnORZveuTf_D1MmCNUk.crl (hash: Tb344TFhaPYfmrLwJTA4duA2+QNZXR75FhedKTVQroc=)
2: VAcK6NMH8xpL2oToeLqPNjo0NLo.roa (hash: zpMhbSc5hEPY0bWxxVazj4TyRRANMBWAian/WhduIMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/98aa0b-d8b3-4109-8f8b-20e59cf92686/1/IXQgn8IZLnORZveuTf_D1MmCNUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/98aa0b-d8b3-4109-8f8b-20e59cf92686/1/IXQgn8IZLnORZveuTf_D1MmCNUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IXQgn8IZLnORZveuTf_D1MmCNUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:95:75:2f:7c:43:6f:39:27:16:b7:78:72:b0:22:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2174209fc2192e739166f7ae4dffc3d4c9823549
Validity
Not Before: Sep 4 18:01:46 2026 GMT
Not After : Sep 5 18:01:46 2026 GMT
Subject: CN=0250c22701516d193739f67534682ace0e701df0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b0:30:c7:da:18:54:c9:a2:9f:fb:6b:69:3d:
f3:5c:6e:d7:e5:76:14:50:f8:30:a2:a8:cb:5c:4f:
d3:95:b6:4a:5b:7b:d4:8c:ed:fd:b6:db:30:26:60:
6f:3d:68:df:67:55:37:98:cc:0e:ca:73:36:66:bc:
63:63:2d:81:81:5f:00:58:4d:30:49:c6:b5:57:15:
95:68:db:fd:79:e0:f4:ee:9e:79:13:1c:67:f3:f3:
03:6a:7c:8e:1d:ae:9f:7e:40:f1:cd:39:d8:50:91:
ca:f0:f7:27:0a:24:b4:8b:5a:ea:7e:4b:3c:11:00:
ba:e8:e7:78:a3:3c:dc:f3:cc:78:f3:8c:da:90:26:
f1:c3:b0:46:42:51:34:08:ec:29:8c:0e:ba:bb:4e:
9a:cf:24:dc:a0:61:81:10:73:e5:07:66:2c:fa:80:
4d:6a:ad:89:59:90:bf:ec:d2:89:69:08:45:27:9a:
11:c4:49:1a:06:27:75:49:5b:e7:07:7d:43:86:32:
bd:ce:e0:c4:dc:18:e7:99:ec:b5:7c:8d:5d:2a:1f:
08:a1:93:b6:0f:fc:fb:19:8f:aa:79:14:c5:bf:2e:
c1:8a:89:cc:db:4a:2c:ec:bf:79:9e:3f:63:9e:6c:
97:8c:22:4f:7c:71:1d:73:ed:91:9f:2b:9b:54:10:
45:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:50:C2:27:01:51:6D:19:37:39:F6:75:34:68:2A:CE:0E:70:1D:F0
X509v3 Authority Key Identifier:
keyid:21:74:20:9F:C2:19:2E:73:91:66:F7:AE:4D:FF:C3:D4:C9:82:35:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IXQgn8IZLnORZveuTf_D1MmCNUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/98aa0b-d8b3-4109-8f8b-20e59cf92686/1/IXQgn8IZLnORZveuTf_D1MmCNUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/98aa0b-d8b3-4109-8f8b-20e59cf92686/1/IXQgn8IZLnORZveuTf_D1MmCNUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:66:2d:ed:f1:ea:2d:cf:3c:6c:e3:8b:de:84:3d:fc:26:45:
6f:d9:d2:d6:50:6e:f3:42:19:30:0d:81:fa:a0:09:f6:e7:a1:
3e:1e:7b:79:b9:83:ec:ca:9c:96:76:4c:d5:f6:ed:9e:6c:2d:
c2:b4:95:20:dd:6d:09:c6:74:ae:62:0a:4b:ea:07:cf:3e:aa:
be:ba:8a:93:0a:56:98:d5:70:94:16:c7:75:16:14:cd:27:67:
d6:ed:0d:bc:7d:1d:cf:09:d6:2e:39:37:02:62:cb:9d:15:b2:
09:1d:eb:a5:b2:09:8b:98:c3:fc:bf:95:bc:fb:1c:4d:07:e0:
41:ba:9f:fa:d5:10:d6:93:cd:64:77:e8:e7:01:c5:57:e2:21:
dc:5f:ca:4f:08:44:46:b0:86:d0:44:30:b0:e6:79:2b:ec:e4:
9f:0e:10:65:5d:8c:b8:06:2f:be:80:b6:aa:83:61:ea:bf:18:
88:5c:22:f7:d0:82:92:2f:ad:70:f5:f3:2d:e7:2c:f4:c0:9d:
9a:87:01:25:2c:96:bd:2b:f6:59:af:ab:da:e7:39:02:82:d2:
91:7a:16:0e:3f:ad:78:d8:3f:e1:b1:dc:b0:a8:33:18:73:4c:
02:3f:7c:c8:ea:ba:b7:35:81:87:8d:ee:b3:51:20:76:5f:ff:
e1:fa:ab:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBtlXUvfENvOScWt3hysCJ2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxNzQyMDlmYzIxOTJlNzM5MTY2ZjdhZTRkZmZjM2Q0Yzk4
MjM1NDkwHhcNMjYwOTA0MTgwMTQ2WhcNMjYwOTA1MTgwMTQ2WjAzMTEwLwYDVQQD
EygwMjUwYzIyNzAxNTE2ZDE5MzczOWY2NzUzNDY4MmFjZTBlNzAxZGYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bAwx9oYVMmin/traT3zXG7X5XYU
UPgwoqjLXE/TlbZKW3vUjO39ttswJmBvPWjfZ1U3mMwOynM2ZrxjYy2BgV8AWE0w
Sca1VxWVaNv9eeD07p55Exxn8/MDanyOHa6ffkDxzTnYUJHK8PcnCiS0i1rqfks8
EQC66Od4ozzc88x484zakCbxw7BGQlE0COwpjA66u06azyTcoGGBEHPlB2Ys+oBN
aq2JWZC/7NKJaQhFJ5oRxEkaBid1SVvnB31DhjK9zuDE3Bjnmey1fI1dKh8IoZO2
D/z7GY+qeRTFvy7BionM20os7L95nj9jnmyXjCJPfHEdc+2RnyubVBBF7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAJQwicBUW0ZNzn2dTRoKs4OcB3wMB8GA1UdIwQY
MBaAFCF0IJ/CGS5zkWb3rk3/w9TJgjVJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVhRZ244SVpMbk9SWnZldVRmX0QxTW1DTlVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS85OGFhMGItZDhiMy00MTA5LThmOGIt
MjBlNTljZjkyNjg2LzEvSVhRZ244SVpMbk9SWnZldVRmX0QxTW1DTlVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS85OGFhMGItZDhiMy00MTA5LThmOGItMjBlNTljZjkyNjg2
LzEvSVhRZ244SVpMbk9SWnZldVRmX0QxTW1DTlVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABGYt7fHq
Lc88bOOL3oQ9/CZFb9nS1lBu80IZMA2B+qAJ9uehPh57ebmD7MqclnZM1fbtnmwt
wrSVIN1tCcZ0rmIKS+oHzz6qvrqKkwpWmNVwlBbHdRYUzSdn1u0NvH0dzwnWLjk3
AmLLnRWyCR3rpbIJi5jD/L+VvPscTQfgQbqf+tUQ1pPNZHfo5wHFV+Ih3F/KTwhE
RrCG0EQwsOZ5K+zknw4QZV2MuAYvvoC2qoNh6r8YiFwi99CCki+tcPXzLecs9MCd
mocBJSyWvSv2Wa+r2uc5AoLSkXoWDj+teNg/4bHcsKgzGHNMAj98yOq6tzWBh43u
s1Egdl//4fqrsg==
-----END CERTIFICATE-----
Generated at Sat Sep 5 02:40:41 2026 by rpki-client