Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.mft
File: I02TlaK6I5y50njrWJty7VyWctE.mft (raw, json)
Hash identifier: sDFVvFa8q2GEbAbXtagPBrru1wipG3mTjVf4Q8XhAdE=
Subject key identifier: 52:23:E8:3C:AC:4D:65:FB:37:AA:28:91:76:D2:28:3C:01:ED:82:A4
Authority key identifier: 23:4D:93:95:A2:BA:23:9C:B9:D2:78:EB:58:9B:72:ED:5C:96:72:D1
Certificate issuer: /CN=234d9395a2ba239cb9d278eb589b72ed5c9672d1
Certificate serial: 019F859F9205F9A180252271DFE8F63069A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I02TlaK6I5y50njrWJty7VyWctE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.mft
Manifest number: 1409
Signing time: Tue 21 Jul 2026 17:00:55 +0000
Manifest this update: Tue 21 Jul 2026 17:00:55 +0000
Manifest next update: Wed 22 Jul 2026 17:00:55 +0000
Files and hashes: 1: 1RriZf_G6a5fiIgqSsiVHC2xloA.roa (hash: qktLxOpEQif1HcKz+YuiexbELL1xls3mW6RuMkPJWuA=)
2: I02TlaK6I5y50njrWJty7VyWctE.crl (hash: OuveZS8TNrGLmtnX37g7E+w6IKnLA27oieUTeINE0j0=)
3: wYpHa59YPrwp7w7D2dTnVQglgA8.roa (hash: BD7Ds/9U/dBV0/NTSSvHr9U29EXY5C+d+r87UR7HX3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.mft
rsync://rpki.ripe.net/repository/DEFAULT/I02TlaK6I5y50njrWJty7VyWctE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:9f:92:05:f9:a1:80:25:22:71:df:e8:f6:30:69:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234d9395a2ba239cb9d278eb589b72ed5c9672d1
Validity
Not Before: Jul 21 17:00:55 2026 GMT
Not After : Jul 22 17:00:55 2026 GMT
Subject: CN=5223e83cac4d65fb37aa289176d2283c01ed82a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7f:4f:b8:38:28:1f:7d:06:db:f4:ca:52:47:
7f:98:89:03:25:2d:bd:0e:8a:e1:aa:5d:0f:7a:a6:
1c:ce:61:a3:1a:c4:6f:a5:da:50:52:3c:25:4c:e9:
3e:a6:6d:f0:ea:00:d0:1a:39:3f:6d:89:ab:06:78:
3d:45:cc:cf:6a:c7:07:e3:e9:27:bf:98:62:f4:e2:
76:90:82:5c:bb:ee:98:82:82:e4:91:31:e8:2e:01:
f3:f6:36:e9:e3:e9:5c:23:15:8f:62:41:0b:6b:c5:
43:d4:d4:59:6f:b7:07:bf:3d:df:96:70:d6:a4:37:
81:ef:1a:97:b4:d3:82:0a:ee:36:8b:40:5a:c9:3d:
fe:51:7e:2d:b5:fd:f9:15:b9:2e:2d:1b:98:9a:05:
d0:32:40:cf:82:0a:6f:34:1b:11:0f:98:78:56:5a:
eb:a7:11:bd:f2:b5:ff:4a:a4:3a:dc:6f:b6:94:3c:
48:62:dc:0d:05:a8:0f:96:4c:ca:f4:b5:5e:55:f5:
39:e3:70:04:1c:60:7c:8a:50:04:bc:d5:8e:c1:8d:
2c:ce:ed:b5:fa:29:6e:7a:ba:35:fb:6b:8d:e2:c2:
65:a0:b1:c0:c0:d2:4e:33:ac:75:c6:a2:0b:d9:c0:
e7:fe:b4:5c:fa:2e:e3:67:98:ac:1b:86:c1:a5:54:
e2:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:23:E8:3C:AC:4D:65:FB:37:AA:28:91:76:D2:28:3C:01:ED:82:A4
X509v3 Authority Key Identifier:
keyid:23:4D:93:95:A2:BA:23:9C:B9:D2:78:EB:58:9B:72:ED:5C:96:72:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I02TlaK6I5y50njrWJty7VyWctE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:94:0a:c9:d2:cd:be:3c:72:e9:25:2f:7d:c8:e0:de:1f:d8:
40:56:09:5c:0a:3c:92:ba:e2:d5:12:12:e6:96:42:41:ee:aa:
9f:2b:8f:8c:20:9f:a0:20:34:5f:7c:1a:ab:60:df:13:7d:31:
66:57:69:02:bd:2a:57:fb:fc:73:a1:a8:44:5c:e4:b4:f3:2c:
a9:41:51:d4:a0:aa:d3:da:38:fe:d7:19:bd:75:cc:3b:f6:43:
fc:73:b3:da:25:b5:75:82:97:b3:db:81:28:b4:fb:c5:71:54:
f0:ba:57:5d:57:24:89:7b:2b:2b:c7:7d:6a:f8:4b:6b:7e:66:
62:e8:f1:e5:15:97:52:30:3b:e2:af:69:0e:7e:19:a1:11:68:
25:4d:21:bf:73:d8:87:94:c4:42:85:97:b3:4e:ee:f6:a1:d3:
b7:83:31:da:9e:51:2d:42:90:a9:f3:27:b2:87:e0:f3:79:b7:
a8:3e:e9:ff:1c:7b:2f:31:28:f6:6c:d2:b9:c7:91:92:f5:ba:
69:1b:48:ef:0e:0c:c8:2b:25:95:b3:59:f6:6d:21:f7:af:8a:
9b:32:13:6e:12:91:4b:2a:ac:ef:39:0d:9a:00:a6:33:a3:22:
2b:b2:86:49:1b:34:8d:f0:42:56:37:6a:cc:11:4b:8d:97:3b:
cb:65:cb:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Fn5IF+aGAJSJx3+j2MGmlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzNGQ5Mzk1YTJiYTIzOWNiOWQyNzhlYjU4OWI3MmVkNWM5
NjcyZDEwHhcNMjYwNzIxMTcwMDU1WhcNMjYwNzIyMTcwMDU1WjAzMTEwLwYDVQQD
Eyg1MjIzZTgzY2FjNGQ2NWZiMzdhYTI4OTE3NmQyMjgzYzAxZWQ4MmE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvH9PuDgoH30G2/TKUkd/mIkDJS29
Dorhql0PeqYczmGjGsRvpdpQUjwlTOk+pm3w6gDQGjk/bYmrBng9RczPascH4+kn
v5hi9OJ2kIJcu+6YgoLkkTHoLgHz9jbp4+lcIxWPYkELa8VD1NRZb7cHvz3flnDW
pDeB7xqXtNOCCu42i0BayT3+UX4ttf35FbkuLRuYmgXQMkDPggpvNBsRD5h4Vlrr
pxG98rX/SqQ63G+2lDxIYtwNBagPlkzK9LVeVfU543AEHGB8ilAEvNWOwY0szu21
+iluero1+2uN4sJloLHAwNJOM6x1xqIL2cDn/rRc+i7jZ5isG4bBpVTiKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFIj6DysTWX7N6ookXbSKDwB7YKkMB8GA1UdIwQY
MBaAFCNNk5WiuiOcudJ461ibcu1clnLRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTAyVGxhSzZJNXk1MG5qcldKdHk3VnlXY3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8zZGU4Y2MtZGI3OS00YTliLWI3OWEt
NGVmNDg4ZGM2ZGM0LzEvSTAyVGxhSzZJNXk1MG5qcldKdHk3VnlXY3RFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi8zZGU4Y2MtZGI3OS00YTliLWI3OWEtNGVmNDg4ZGM2ZGM0
LzEvSTAyVGxhSzZJNXk1MG5qcldKdHk3VnlXY3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD5QKydLN
vjxy6SUvfcjg3h/YQFYJXAo8krri1RIS5pZCQe6qnyuPjCCfoCA0X3waq2DfE30x
ZldpAr0qV/v8c6GoRFzktPMsqUFR1KCq09o4/tcZvXXMO/ZD/HOz2iW1dYKXs9uB
KLT7xXFU8LpXXVckiXsrK8d9avhLa35mYujx5RWXUjA74q9pDn4ZoRFoJU0hv3PY
h5TEQoWXs07u9qHTt4Mx2p5RLUKQqfMnsofg83m3qD7p/xx7LzEo9mzSuceRkvW6
aRtI7w4MyCsllbNZ9m0h96+KmzITbhKRSyqs7zkNmgCmM6MiK7KGSRs0jfBCVjdq
zBFLjZc7y2XLjQ==
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:32:46 2026 by rpki-client