Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/bb05ac-4b92-4fde-9260-d2fb0a3201b8/1/iuqCkaUdU780Tc2HYs22gp0eS8A.mft
File: iuqCkaUdU780Tc2HYs22gp0eS8A.mft (raw, json)
Hash identifier: Nj7ZrcGohbU8Fwku1dTgYSYANN1NpfxoTkUewVMoQYI=
Subject key identifier: 1C:2D:38:86:9D:72:88:9E:7E:AC:B9:32:7D:F2:76:31:4E:75:3F:7D
Authority key identifier: 8A:EA:82:91:A5:1D:53:BF:34:4D:CD:87:62:CD:B6:82:9D:1E:4B:C0
Certificate issuer: /CN=8aea8291a51d53bf344dcd8762cdb6829d1e4bc0
Certificate serial: 019F84563C1FB4A5C9E306761681E23568D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iuqCkaUdU780Tc2HYs22gp0eS8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/bb05ac-4b92-4fde-9260-d2fb0a3201b8/1/iuqCkaUdU780Tc2HYs22gp0eS8A.mft
Manifest number: E5
Signing time: Tue 21 Jul 2026 11:01:11 +0000
Manifest this update: Tue 21 Jul 2026 11:01:11 +0000
Manifest next update: Wed 22 Jul 2026 11:01:11 +0000
Files and hashes: 1: 1-HnWZOSfYzfMpkdHQKgKNZ13rPI.roa (hash: PKBAPXzgnWazEIllaNoOetp38i7rE9un2IC2xSXTZlQ=)
2: FvTUXze2cP2KDGx2hRq_w_Z-9N0.roa (hash: Gp1g8k1CPQjLn91bFZfvO5ChcN4hmVKIBnTLXnXZ2/M=)
3: iuqCkaUdU780Tc2HYs22gp0eS8A.crl (hash: t+gYoyK2FzNDNCQEeAmsHZ2qEYUcakgNCVbRLyS1JLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/bb05ac-4b92-4fde-9260-d2fb0a3201b8/1/iuqCkaUdU780Tc2HYs22gp0eS8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/bb05ac-4b92-4fde-9260-d2fb0a3201b8/1/iuqCkaUdU780Tc2HYs22gp0eS8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/iuqCkaUdU780Tc2HYs22gp0eS8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 11:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:56:3c:1f:b4:a5:c9:e3:06:76:16:81:e2:35:68:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8aea8291a51d53bf344dcd8762cdb6829d1e4bc0
Validity
Not Before: Jul 21 11:01:11 2026 GMT
Not After : Jul 22 11:01:11 2026 GMT
Subject: CN=1c2d38869d72889e7eacb9327df276314e753f7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b6:8b:d8:be:e0:9d:01:75:a7:03:0b:93:cb:
0b:dd:b2:75:c3:78:9e:6e:19:0f:5d:df:b3:43:c7:
6e:58:29:e7:c2:60:dc:e5:14:09:bd:05:0a:df:16:
fa:8c:02:09:0a:e0:42:05:3b:72:c8:7c:ca:74:08:
bc:87:6e:d1:be:90:3f:c4:3a:3a:d1:c7:16:e8:f9:
18:38:6d:84:24:e9:7b:1e:84:36:70:d1:20:33:54:
c4:81:21:61:3f:3b:f2:1d:09:f7:04:66:65:f3:cf:
84:83:3a:ec:aa:78:07:ad:cb:ee:62:0b:b6:c5:7d:
0f:08:46:40:d4:e4:bd:b6:7a:d9:42:da:0a:30:aa:
55:68:70:87:9e:61:8c:93:6b:e2:d4:a2:0c:be:e2:
aa:b4:3e:81:08:6b:73:24:39:34:21:2d:9a:39:e0:
22:8f:c1:15:62:02:14:c6:bd:26:46:82:9f:73:31:
41:3f:b9:9b:b9:7e:2d:33:01:41:b2:ae:90:c3:8c:
a1:1e:24:9c:2d:aa:1c:b9:d9:a3:e2:87:b8:9a:be:
f2:3f:36:dd:b5:77:3e:96:d6:a4:fc:4f:75:77:9c:
2e:7a:79:ba:d1:3f:96:77:65:58:7f:01:68:29:a1:
f4:dc:51:1c:d9:c9:20:9e:05:50:33:c2:26:f2:05:
63:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:2D:38:86:9D:72:88:9E:7E:AC:B9:32:7D:F2:76:31:4E:75:3F:7D
X509v3 Authority Key Identifier:
keyid:8A:EA:82:91:A5:1D:53:BF:34:4D:CD:87:62:CD:B6:82:9D:1E:4B:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iuqCkaUdU780Tc2HYs22gp0eS8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/bb05ac-4b92-4fde-9260-d2fb0a3201b8/1/iuqCkaUdU780Tc2HYs22gp0eS8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/bb05ac-4b92-4fde-9260-d2fb0a3201b8/1/iuqCkaUdU780Tc2HYs22gp0eS8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:d3:c8:5d:84:95:3a:a2:2a:c2:b6:cf:69:f4:92:ac:31:4e:
2f:ea:d2:da:92:f1:a3:25:cc:a9:e2:07:e2:d9:3b:08:31:c2:
d5:fe:c7:b3:75:c2:1c:ac:9c:35:ee:8c:72:9b:db:a3:93:35:
27:39:ef:08:eb:e4:54:ee:f2:14:6f:b6:5f:67:55:51:b6:ed:
90:15:c4:f4:ef:72:e9:96:59:a9:42:92:cf:37:9c:b9:6f:c8:
5e:22:46:fa:cf:c4:cf:d6:d9:d3:96:5d:e3:9d:0d:c9:89:0b:
4f:a0:8b:6c:7b:d6:36:5a:ee:0d:df:03:4e:3e:46:9b:82:88:
29:55:6c:50:fe:2a:4a:26:59:5f:84:0b:c9:d2:9e:4a:3c:dc:
34:c2:5c:ec:fc:1a:cc:8f:1a:05:84:4b:9a:cd:c2:eb:7e:51:
2b:35:07:33:52:32:42:46:39:14:a8:a8:ce:6f:f8:55:c9:db:
bf:14:c2:83:48:c1:72:c8:c1:40:34:b4:1f:37:48:d7:c0:ca:
49:74:74:a5:71:18:f3:b3:76:b9:c0:90:93:58:fc:96:d6:97:
d5:2b:41:f9:9d:ba:d9:6a:c0:da:33:c4:d6:70:03:17:7e:08:
ec:fa:ab:b7:80:54:9f:87:00:11:52:86:cc:a2:d6:23:6a:a0:
ce:ca:73:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+EVjwftKXJ4wZ2FoHiNWjUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhZWE4MjkxYTUxZDUzYmYzNDRkY2Q4NzYyY2RiNjgyOWQx
ZTRiYzAwHhcNMjYwNzIxMTEwMTExWhcNMjYwNzIyMTEwMTExWjAzMTEwLwYDVQQD
EygxYzJkMzg4NjlkNzI4ODllN2VhY2I5MzI3ZGYyNzYzMTRlNzUzZjdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA17aL2L7gnQF1pwMLk8sL3bJ1w3ie
bhkPXd+zQ8duWCnnwmDc5RQJvQUK3xb6jAIJCuBCBTtyyHzKdAi8h27RvpA/xDo6
0ccW6PkYOG2EJOl7HoQ2cNEgM1TEgSFhPzvyHQn3BGZl88+EgzrsqngHrcvuYgu2
xX0PCEZA1OS9tnrZQtoKMKpVaHCHnmGMk2vi1KIMvuKqtD6BCGtzJDk0IS2aOeAi
j8EVYgIUxr0mRoKfczFBP7mbuX4tMwFBsq6Qw4yhHiScLaocudmj4oe4mr7yPzbd
tXc+ltak/E91d5wuenm60T+Wd2VYfwFoKaH03FEc2ckgngVQM8Im8gVjYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBwtOIadcoiefqy5Mn3ydjFOdT99MB8GA1UdIwQY
MBaAFIrqgpGlHVO/NE3Nh2LNtoKdHkvAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXVxQ2thVWRVNzgwVGMySFlzMjJncDBlUzhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9iYjA1YWMtNGI5Mi00ZmRlLTkyNjAt
ZDJmYjBhMzIwMWI4LzEvaXVxQ2thVWRVNzgwVGMySFlzMjJncDBlUzhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9iYjA1YWMtNGI5Mi00ZmRlLTkyNjAtZDJmYjBhMzIwMWI4
LzEvaXVxQ2thVWRVNzgwVGMySFlzMjJncDBlUzhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAftPIXYSV
OqIqwrbPafSSrDFOL+rS2pLxoyXMqeIH4tk7CDHC1f7Hs3XCHKycNe6Mcpvbo5M1
JznvCOvkVO7yFG+2X2dVUbbtkBXE9O9y6ZZZqUKSzzecuW/IXiJG+s/Ez9bZ05Zd
450NyYkLT6CLbHvWNlruDd8DTj5Gm4KIKVVsUP4qSiZZX4QLydKeSjzcNMJc7Pwa
zI8aBYRLms3C635RKzUHM1IyQkY5FKiozm/4VcnbvxTCg0jBcsjBQDS0HzdI18DK
SXR0pXEY87N2ucCQk1j8ltaX1StB+Z262WrA2jPE1nADF34I7Pqrt4BUn4cAEVKG
zKLWI2qgzspzdw==
-----END CERTIFICATE-----
Generated at Tue Jul 21 17:13:40 2026 by rpki-client