Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/9e5cbd-4d5a-4ed6-b1c2-4ef9cc751517/1/IATWKTJ0OW9ajWkUhdaHagogcdk.mft
File: IATWKTJ0OW9ajWkUhdaHagogcdk.mft (raw, json)
Hash identifier: //z8Ru//LHUy7b2LTGmUY+1yykkWnHDWTUqu57z0dhY=
Subject key identifier: B1:8F:4C:3C:86:62:7A:93:4B:5A:E4:A7:79:F2:60:2C:B6:AB:A4:90
Authority key identifier: 20:04:D6:29:32:74:39:6F:5A:8D:69:14:85:D6:87:6A:0A:20:71:D9
Certificate issuer: /CN=2004d6293274396f5a8d691485d6876a0a2071d9
Certificate serial: 019FA03B158757E40A7DFF7699EBD185C843
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IATWKTJ0OW9ajWkUhdaHagogcdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/9e5cbd-4d5a-4ed6-b1c2-4ef9cc751517/1/IATWKTJ0OW9ajWkUhdaHagogcdk.mft
Manifest number: 166F
Signing time: Sun 26 Jul 2026 21:00:54 +0000
Manifest this update: Sun 26 Jul 2026 21:00:54 +0000
Manifest next update: Mon 27 Jul 2026 21:00:54 +0000
Files and hashes: 1: IATWKTJ0OW9ajWkUhdaHagogcdk.crl (hash: k/i8Z/5QTZlfQNRD/DARAad+r2LZmqzmUtsMcq/969E=)
2: hnmnA26xKXY54jFPUcSN_0PAckk.roa (hash: iZnIOMbwxqj7gdSqvCeT/1vFVrhvoJ0Z39/9nmcH68s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/9e5cbd-4d5a-4ed6-b1c2-4ef9cc751517/1/IATWKTJ0OW9ajWkUhdaHagogcdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/9e5cbd-4d5a-4ed6-b1c2-4ef9cc751517/1/IATWKTJ0OW9ajWkUhdaHagogcdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IATWKTJ0OW9ajWkUhdaHagogcdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:3b:15:87:57:e4:0a:7d:ff:76:99:eb:d1:85:c8:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2004d6293274396f5a8d691485d6876a0a2071d9
Validity
Not Before: Jul 26 21:00:54 2026 GMT
Not After : Jul 27 21:00:54 2026 GMT
Subject: CN=b18f4c3c86627a934b5ae4a779f2602cb6aba490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:76:a6:76:4f:23:45:3e:cd:d2:6e:66:7c:1c:
21:21:21:e2:c6:17:29:55:1e:ce:68:09:af:25:be:
a4:fd:d2:87:6a:88:c6:1e:9a:2a:16:e7:f3:96:39:
44:33:d4:7c:dc:a6:b2:bb:8b:99:bd:47:88:7a:50:
29:08:f6:e9:59:e9:50:81:7e:a2:f5:88:fd:97:ac:
6b:92:ed:0e:d2:1e:70:94:ef:b2:00:40:98:8a:4f:
08:04:79:24:e0:68:0a:62:c9:30:1f:76:6f:d6:a1:
37:fe:5d:4a:a8:eb:27:3c:ce:7b:53:04:80:84:0b:
19:6e:9c:d7:69:0e:4f:31:2c:19:a6:e1:fc:3f:b2:
d0:a8:97:de:b2:b5:44:24:a2:d8:e0:88:ca:e2:ff:
a3:22:34:fe:fe:eb:73:d2:24:34:2e:ce:00:04:ee:
e7:6d:1d:f0:7d:eb:46:99:1c:f2:31:b0:a7:20:e9:
0a:d9:31:7d:48:01:79:07:51:a6:ca:49:83:bf:5f:
8d:a6:82:29:97:72:ff:a7:f8:9a:4c:27:db:b4:80:
7c:cf:f5:b8:2d:9f:28:7e:a3:f6:74:86:39:9f:0b:
a9:5a:29:20:83:e6:01:73:f1:5e:14:0c:5e:56:7e:
72:fa:fc:e5:6e:5e:0b:f9:c4:9d:e9:ed:12:21:1b:
9a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:8F:4C:3C:86:62:7A:93:4B:5A:E4:A7:79:F2:60:2C:B6:AB:A4:90
X509v3 Authority Key Identifier:
keyid:20:04:D6:29:32:74:39:6F:5A:8D:69:14:85:D6:87:6A:0A:20:71:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IATWKTJ0OW9ajWkUhdaHagogcdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9e5cbd-4d5a-4ed6-b1c2-4ef9cc751517/1/IATWKTJ0OW9ajWkUhdaHagogcdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9e5cbd-4d5a-4ed6-b1c2-4ef9cc751517/1/IATWKTJ0OW9ajWkUhdaHagogcdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:ef:4b:e8:a9:0a:8d:65:df:11:db:d4:64:6f:4c:c7:3f:54:
a9:07:46:54:c2:33:15:ec:fb:09:05:3a:91:af:45:50:67:7c:
49:15:25:b6:95:09:11:72:46:bb:83:a0:de:e7:f0:97:00:ce:
3e:f2:73:85:b1:4e:87:c8:22:a3:d3:1b:ce:d6:6c:cf:3f:35:
94:c1:c9:24:3a:7d:f0:37:c9:87:90:a0:41:15:dd:ad:df:48:
43:54:92:62:5c:ea:cc:63:52:d5:ba:91:4b:35:1f:6c:fe:ea:
40:ca:31:3f:1f:78:09:34:05:de:f7:ab:bb:b7:cf:0d:03:a0:
c0:b4:c6:3e:54:5a:eb:a7:2e:4e:36:18:22:2f:c4:45:6a:40:
c6:a1:76:8e:e7:b0:c3:5f:57:e7:b5:2c:85:be:f7:f3:65:05:
40:ca:26:ed:2f:8f:60:6a:da:78:0a:ce:35:cc:43:cb:9c:85:
ea:53:25:6a:67:34:3c:bc:f6:1b:50:8b:b9:ae:be:28:e5:e9:
19:ed:14:c1:68:b0:cb:a8:14:94:f5:ef:a2:f2:0e:df:b9:ed:
91:8e:1f:d9:28:71:a6:b9:db:d4:5d:15:e4:fc:a2:fb:00:2d:
ac:61:cc:b8:3f:44:02:d3:55:e8:ae:d3:20:f0:17:eb:20:fb:
04:f0:4a:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+gOxWHV+QKff92mevRhchDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwMDRkNjI5MzI3NDM5NmY1YThkNjkxNDg1ZDY4NzZhMGEy
MDcxZDkwHhcNMjYwNzI2MjEwMDU0WhcNMjYwNzI3MjEwMDU0WjAzMTEwLwYDVQQD
EyhiMThmNGMzYzg2NjI3YTkzNGI1YWU0YTc3OWYyNjAyY2I2YWJhNDkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXamdk8jRT7N0m5mfBwhISHixhcp
VR7OaAmvJb6k/dKHaojGHpoqFufzljlEM9R83Kayu4uZvUeIelApCPbpWelQgX6i
9Yj9l6xrku0O0h5wlO+yAECYik8IBHkk4GgKYskwH3Zv1qE3/l1KqOsnPM57UwSA
hAsZbpzXaQ5PMSwZpuH8P7LQqJfesrVEJKLY4IjK4v+jIjT+/utz0iQ0Ls4ABO7n
bR3wfetGmRzyMbCnIOkK2TF9SAF5B1GmykmDv1+NpoIpl3L/p/iaTCfbtIB8z/W4
LZ8ofqP2dIY5nwupWikgg+YBc/FeFAxeVn5y+vzlbl4L+cSd6e0SIRuaUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLGPTDyGYnqTS1rkp3nyYCy2q6SQMB8GA1UdIwQY
MBaAFCAE1ikydDlvWo1pFIXWh2oKIHHZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUFUV0tUSjBPVzlhaldrVWhkYUhhZ29nY2RrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC85ZTVjYmQtNGQ1YS00ZWQ2LWIxYzIt
NGVmOWNjNzUxNTE3LzEvSUFUV0tUSjBPVzlhaldrVWhkYUhhZ29nY2RrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC85ZTVjYmQtNGQ1YS00ZWQ2LWIxYzItNGVmOWNjNzUxNTE3
LzEvSUFUV0tUSjBPVzlhaldrVWhkYUhhZ29nY2RrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo+9L6KkK
jWXfEdvUZG9Mxz9UqQdGVMIzFez7CQU6ka9FUGd8SRUltpUJEXJGu4Og3ufwlwDO
PvJzhbFOh8gio9MbztZszz81lMHJJDp98DfJh5CgQRXdrd9IQ1SSYlzqzGNS1bqR
SzUfbP7qQMoxPx94CTQF3veru7fPDQOgwLTGPlRa66cuTjYYIi/ERWpAxqF2juew
w19X57Ushb7382UFQMom7S+PYGraeArONcxDy5yF6lMlamc0PLz2G1CLua6+KOXp
Ge0UwWiwy6gUlPXvovIO37ntkY4f2Shxprnb1F0V5Pyi+wAtrGHMuD9EAtNV6K7T
IPAX6yD7BPBKbg==
-----END CERTIFICATE-----
Generated at Sun Jul 26 23:54:08 2026 by rpki-client