Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft
File: IcOUybOja2n57l-JNqL1G5XqzrQ.mft (raw, json)
Hash identifier: /lOdQR1HSXEYD60iSnVAw94Z9HsAj2JCXgQmiv5rqGo=
Subject key identifier: FA:8A:53:D9:EC:66:4C:3A:0D:E8:EA:5E:40:83:A3:AE:B9:FE:F3:6E
Authority key identifier: 21:C3:94:C9:B3:A3:6B:69:F9:EE:5F:89:36:A2:F5:1B:95:EA:CE:B4
Certificate issuer: /CN=21c394c9b3a36b69f9ee5f8936a2f51b95eaceb4
Certificate serial: 019F86B274A6C5B12BD432BB29B9D10187F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IcOUybOja2n57l-JNqL1G5XqzrQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft
Manifest number: 19C6
Signing time: Tue 21 Jul 2026 22:01:09 +0000
Manifest this update: Tue 21 Jul 2026 22:01:09 +0000
Manifest next update: Wed 22 Jul 2026 22:01:09 +0000
Files and hashes: 1: 2vB0H2qYyz6SI0m9_Uc6vD9cNDE.roa (hash: nA5TN8D8VR57ajti92sbOf79Vloshs+N1jBn946xsJk=)
2: IcOUybOja2n57l-JNqL1G5XqzrQ.crl (hash: +4YN//2kMm/TEiSRDOws59s/UpQZLLy1wteqdMxC4EU=)
3: O_6FFbhc4JZemzwdUopF30jTO70.roa (hash: YpXPwTYN0lUePsEcimr/XTryk56n06KBrcCoSPFO4DM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IcOUybOja2n57l-JNqL1G5XqzrQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 15:27:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:b2:74:a6:c5:b1:2b:d4:32:bb:29:b9:d1:01:87:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21c394c9b3a36b69f9ee5f8936a2f51b95eaceb4
Validity
Not Before: Jul 21 22:01:09 2026 GMT
Not After : Jul 22 22:01:09 2026 GMT
Subject: CN=fa8a53d9ec664c3a0de8ea5e4083a3aeb9fef36e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:6b:04:4f:01:05:e6:5b:a7:0d:bc:02:51:bb:
32:f3:58:9f:55:95:a2:b0:78:5b:11:4c:34:1e:d9:
7b:02:9c:c3:62:0e:0b:0e:18:51:3e:3a:b1:78:88:
bb:dc:63:34:95:7d:c6:e4:4e:98:d7:15:69:ad:cc:
a0:d6:89:84:91:36:9b:2c:49:e9:13:36:a9:95:de:
77:12:e3:3e:ea:fe:e8:0a:95:f4:5f:c4:e1:e8:7e:
0c:48:ce:66:e0:af:f4:08:60:68:69:22:61:3a:8c:
09:c7:25:d9:da:5b:1e:6d:fa:19:25:c9:2d:81:28:
73:de:d5:45:38:c0:08:0c:e2:3c:0b:8b:12:9c:59:
aa:05:89:45:4f:1a:ea:27:1b:8f:96:8e:5d:99:b2:
b5:c2:af:94:6a:d6:d3:2c:b0:62:cd:53:78:9c:1d:
f3:3e:3b:ad:02:ec:4e:2c:24:f7:df:68:b8:73:67:
52:9d:93:0d:55:6b:99:08:f5:49:ca:90:60:09:35:
de:ea:9f:28:cb:19:b4:cc:dc:a6:5c:1a:b0:cc:04:
e1:48:fc:4f:f6:11:55:94:4b:85:d3:ce:f1:b0:b8:
fb:e0:b3:0e:11:2d:aa:5c:66:04:03:06:d4:c4:b5:
4b:2a:08:3f:ff:f2:77:ac:81:70:b6:dc:f6:96:86:
c6:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:8A:53:D9:EC:66:4C:3A:0D:E8:EA:5E:40:83:A3:AE:B9:FE:F3:6E
X509v3 Authority Key Identifier:
keyid:21:C3:94:C9:B3:A3:6B:69:F9:EE:5F:89:36:A2:F5:1B:95:EA:CE:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IcOUybOja2n57l-JNqL1G5XqzrQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:50:93:f0:b1:87:5c:60:4c:a8:e5:5c:37:15:63:0e:0d:6d:
0e:c3:fb:ab:7a:5f:bb:34:8d:1c:4f:0a:55:3f:c2:17:be:af:
5d:76:4c:88:7b:ae:c5:44:a0:b7:63:dc:5b:2c:6e:9d:fe:4f:
e7:5a:a8:be:0d:c9:8c:4a:53:6e:9d:f9:85:a5:2a:b6:57:ae:
db:19:07:2b:91:4f:a2:0a:dc:71:ae:e5:46:b7:f0:c9:93:79:
0e:42:d6:58:2d:00:6c:a8:7d:f4:2a:96:4e:71:9c:4a:bf:5f:
0d:c1:7a:ff:c2:e9:83:46:7e:fe:1c:63:f5:11:68:cb:b5:8a:
1b:31:76:8e:1a:39:ff:06:cc:b7:de:ed:74:41:2a:d2:9d:64:
6e:e8:d7:93:12:a1:aa:d3:e7:5d:9e:23:2c:95:c4:ad:a1:20:
d7:88:5e:ff:4c:2c:2a:c7:09:43:99:8e:82:04:3d:17:ee:ad:
9b:3e:0a:bc:28:98:4a:65:67:15:91:48:5c:a3:a6:5b:b2:11:
98:0c:f1:ac:0f:b2:b1:24:e4:c1:18:75:0b:f2:71:5e:6a:6f:
59:54:19:bc:3f:94:41:c7:65:2f:9c:59:15:9d:ef:90:b9:ea:
b3:af:5d:6c:5f:16:25:fb:ec:93:6a:3b:e7:05:ea:88:f8:d2:
73:b3:e0:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+GsnSmxbEr1DK7KbnRAYfwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxYzM5NGM5YjNhMzZiNjlmOWVlNWY4OTM2YTJmNTFiOTVl
YWNlYjQwHhcNMjYwNzIxMjIwMTA5WhcNMjYwNzIyMjIwMTA5WjAzMTEwLwYDVQQD
EyhmYThhNTNkOWVjNjY0YzNhMGRlOGVhNWU0MDgzYTNhZWI5ZmVmMzZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2msETwEF5lunDbwCUbsy81ifVZWi
sHhbEUw0Htl7ApzDYg4LDhhRPjqxeIi73GM0lX3G5E6Y1xVprcyg1omEkTabLEnp
Ezapld53EuM+6v7oCpX0X8Th6H4MSM5m4K/0CGBoaSJhOowJxyXZ2lsebfoZJckt
gShz3tVFOMAIDOI8C4sSnFmqBYlFTxrqJxuPlo5dmbK1wq+UatbTLLBizVN4nB3z
PjutAuxOLCT332i4c2dSnZMNVWuZCPVJypBgCTXe6p8oyxm0zNymXBqwzAThSPxP
9hFVlEuF087xsLj74LMOES2qXGYEAwbUxLVLKgg///J3rIFwttz2lobGmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPqKU9nsZkw6DejqXkCDo665/vNuMB8GA1UdIwQY
MBaAFCHDlMmzo2tp+e5fiTai9RuV6s60MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWNPVXliT2phMm41N2wtSk5xTDFHNVhxenJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC82MWZhY2MtNjY5Zi00NDU2LTk2M2Yt
MWU0MzZkY2I4NWM1LzEvSWNPVXliT2phMm41N2wtSk5xTDFHNVhxenJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC82MWZhY2MtNjY5Zi00NDU2LTk2M2YtMWU0MzZkY2I4NWM1
LzEvSWNPVXliT2phMm41N2wtSk5xTDFHNVhxenJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABlCT8LGH
XGBMqOVcNxVjDg1tDsP7q3pfuzSNHE8KVT/CF76vXXZMiHuuxUSgt2PcWyxunf5P
51qovg3JjEpTbp35haUqtleu2xkHK5FPogrcca7lRrfwyZN5DkLWWC0AbKh99CqW
TnGcSr9fDcF6/8Lpg0Z+/hxj9RFoy7WKGzF2jho5/wbMt97tdEEq0p1kbujXkxKh
qtPnXZ4jLJXEraEg14he/0wsKscJQ5mOggQ9F+6tmz4KvCiYSmVnFZFIXKOmW7IR
mAzxrA+ysSTkwRh1C/JxXmpvWVQZvD+UQcdlL5xZFZ3vkLnqs69dbF8WJfvsk2o7
5wXqiPjSc7PgCA==
-----END CERTIFICATE-----
Generated at Wed Jul 22 00:53:42 2026 by rpki-client