Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/I1OA88jQvU73nc_B8qNk738QDTE.mft
File: I1OA88jQvU73nc_B8qNk738QDTE.mft (raw, json)
Hash identifier: xEepAtm9wmS0XKWuAemVHsBqvnZH2K7ztpiMKXx9t8k=
Subject key identifier: B0:B3:2A:CB:5E:0C:77:36:45:B8:F1:1A:23:C4:3C:78:6C:E3:FA:5E
Authority key identifier: 23:53:80:F3:C8:D0:BD:4E:F7:9D:CF:C1:F2:A3:64:EF:7F:10:0D:31
Certificate issuer: /CN=235380f3c8d0bd4ef79dcfc1f2a364ef7f100d31
Certificate serial: 019F36AA5DF140520A73E03F126A0B8F4102
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I1OA88jQvU73nc_B8qNk738QDTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/I1OA88jQvU73nc_B8qNk738QDTE.mft
Manifest number: 11
Signing time: Mon 06 Jul 2026 09:02:42 +0000
Manifest this update: Mon 06 Jul 2026 09:02:42 +0000
Manifest next update: Tue 07 Jul 2026 09:02:42 +0000
Files and hashes: 1: 2nvjaO-9QgHUIDo_0O1ylwBW6vQ.roa (hash: oiGKpPGm6qpApMCxU6UFVXeU7Do4Gkz7nDJJxifitKA=)
2: I1OA88jQvU73nc_B8qNk738QDTE.crl (hash: QVNKDacWgAzOxaaFbRyCpxma6TQwjajfU3GQCiwooZo=)
3: L3EC22kCSbgO1zCyaBa1frjR2pE.roa (hash: w8QsFoIi60jEHJ7Xofqwu1zr9PxRQqzEho5zefrGjYg=)
4: pxlXr9sUSjIqFgXbd9sR-GcE580.roa (hash: QivBnRPkhkpLbexDZpsfTuH4eBEzkCeooTxQJXFlmDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/I1OA88jQvU73nc_B8qNk738QDTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/I1OA88jQvU73nc_B8qNk738QDTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/I1OA88jQvU73nc_B8qNk738QDTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 09:02:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:36:aa:5d:f1:40:52:0a:73:e0:3f:12:6a:0b:8f:41:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=235380f3c8d0bd4ef79dcfc1f2a364ef7f100d31
Validity
Not Before: Jul 6 09:02:42 2026 GMT
Not After : Jul 7 09:02:42 2026 GMT
Subject: CN=b0b32acb5e0c773645b8f11a23c43c786ce3fa5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c1:b3:b0:5d:fa:29:e5:98:e7:48:2e:b6:11:
74:16:5d:d6:4e:af:ad:be:82:f8:7c:e8:48:2e:60:
60:8d:ec:90:d6:b5:7e:a6:ee:c6:72:2e:f2:3f:7d:
fd:03:36:40:ff:1a:72:40:45:47:46:f7:5b:8b:87:
23:8e:aa:ad:ce:a7:bf:b1:16:32:0b:cb:0f:db:0d:
a3:b4:da:ca:8d:06:ac:e0:19:84:cb:80:3a:ea:e4:
78:f0:71:d5:56:a9:90:12:f1:ee:47:70:62:67:46:
b3:65:d8:d6:8a:17:ff:2b:2e:f8:9c:e6:9a:30:96:
98:2b:1f:9b:da:de:1f:ad:eb:4c:9f:a7:83:fd:b1:
52:c9:72:0a:dd:84:df:31:4d:fc:2d:04:c8:fc:cd:
62:cc:2f:20:5c:0d:1c:fc:59:8b:91:06:07:3a:f5:
b8:51:c0:cf:bf:e9:e9:e8:17:ee:c0:82:d7:3d:d6:
ee:eb:3d:7d:2d:dd:1b:fc:e1:a7:06:76:86:db:1c:
ac:18:2e:d7:29:55:e2:a6:78:21:b2:5a:82:b5:54:
bf:84:69:1a:86:e1:65:ef:82:a4:70:7c:f7:c7:9c:
b6:34:a6:fc:1c:0a:95:e4:a1:03:c4:4c:0d:96:e8:
99:a0:d6:d9:72:10:78:94:e7:6d:cd:87:b6:58:86:
dd:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:B3:2A:CB:5E:0C:77:36:45:B8:F1:1A:23:C4:3C:78:6C:E3:FA:5E
X509v3 Authority Key Identifier:
keyid:23:53:80:F3:C8:D0:BD:4E:F7:9D:CF:C1:F2:A3:64:EF:7F:10:0D:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I1OA88jQvU73nc_B8qNk738QDTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/I1OA88jQvU73nc_B8qNk738QDTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/I1OA88jQvU73nc_B8qNk738QDTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:9c:7c:5e:ef:a4:c4:8a:7f:02:62:9b:29:74:95:b5:2c:07:
6a:90:c2:ea:77:40:ea:a3:b8:e4:29:be:9c:ff:b3:8b:b9:2b:
4a:aa:cf:d8:2e:4e:fe:a0:7f:bb:d3:cd:71:56:80:24:69:cd:
62:39:f4:0d:f1:a1:4e:09:45:a7:a1:6f:a3:41:64:fc:ea:6a:
29:86:26:c6:56:f3:b3:1a:10:aa:5e:f4:b3:cc:d2:69:2c:4f:
2a:aa:b0:df:7e:77:35:29:ae:91:46:73:06:07:f0:08:10:78:
23:e7:57:d7:1d:1f:8a:38:d7:8a:ec:0b:47:e5:11:f3:45:2f:
bf:11:30:ad:24:82:22:1b:27:30:e8:24:aa:66:db:75:2b:c9:
aa:45:f7:8e:ac:27:a9:7d:79:f1:66:8f:9f:fe:bf:07:fa:78:
6e:36:46:cb:4c:21:5f:a4:e0:dd:50:b5:19:9a:ce:e9:7a:62:
20:65:fe:70:56:82:1b:0b:69:35:98:df:ae:74:ca:be:c8:59:
23:2a:02:9d:59:3a:ed:b5:ee:1e:7a:e4:35:37:83:a7:ee:5f:
98:ed:f8:56:36:36:0e:6f:67:a2:ac:ad:f0:04:22:29:4e:ff:
6b:e1:d1:d5:8a:b6:f0:b6:4f:2c:c4:db:8b:57:9e:37:ca:67:
0c:94:b3:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ82ql3xQFIKc+A/EmoLj0ECMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzNTM4MGYzYzhkMGJkNGVmNzlkY2ZjMWYyYTM2NGVmN2Yx
MDBkMzEwHhcNMjYwNzA2MDkwMjQyWhcNMjYwNzA3MDkwMjQyWjAzMTEwLwYDVQQD
EyhiMGIzMmFjYjVlMGM3NzM2NDViOGYxMWEyM2M0M2M3ODZjZTNmYTVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMGzsF36KeWY50guthF0Fl3WTq+t
voL4fOhILmBgjeyQ1rV+pu7Gci7yP339AzZA/xpyQEVHRvdbi4cjjqqtzqe/sRYy
C8sP2w2jtNrKjQas4BmEy4A66uR48HHVVqmQEvHuR3BiZ0azZdjWihf/Ky74nOaa
MJaYKx+b2t4fretMn6eD/bFSyXIK3YTfMU38LQTI/M1izC8gXA0c/FmLkQYHOvW4
UcDPv+np6BfuwILXPdbu6z19Ld0b/OGnBnaG2xysGC7XKVXipnghslqCtVS/hGka
huFl74KkcHz3x5y2NKb8HAqV5KEDxEwNluiZoNbZchB4lOdtzYe2WIbdzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLCzKsteDHc2RbjxGiPEPHhs4/peMB8GA1UdIwQY
MBaAFCNTgPPI0L1O953PwfKjZO9/EA0xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTFPQTg4alF2VTczbmNfQjhxTms3MzhRRFRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8wNDE5NjgtMTVlYi00Mzg4LTk4NWEt
YzIzYzgyOWRiOTM3LzEvSTFPQTg4alF2VTczbmNfQjhxTms3MzhRRFRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy8wNDE5NjgtMTVlYi00Mzg4LTk4NWEtYzIzYzgyOWRiOTM3
LzEvSTFPQTg4alF2VTczbmNfQjhxTms3MzhRRFRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcZx8Xu+k
xIp/AmKbKXSVtSwHapDC6ndA6qO45Cm+nP+zi7krSqrP2C5O/qB/u9PNcVaAJGnN
Yjn0DfGhTglFp6Fvo0Fk/OpqKYYmxlbzsxoQql70s8zSaSxPKqqw3353NSmukUZz
BgfwCBB4I+dX1x0fijjXiuwLR+UR80UvvxEwrSSCIhsnMOgkqmbbdSvJqkX3jqwn
qX158WaPn/6/B/p4bjZGy0whX6Tg3VC1GZrO6XpiIGX+cFaCGwtpNZjfrnTKvshZ
IyoCnVk67bXuHnrkNTeDp+5fmO34VjY2Dm9noqyt8AQiKU7/a+HR1Yq28LZPLMTb
i1eeN8pnDJSzgg==
-----END CERTIFICATE-----
Generated at Mon Jul 6 19:05:15 2026 by rpki-client