Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.mft
File: I_XCWFOCCEeS8TrRlyBe_dJ1LfI.mft (raw, json)
Hash identifier: ai+MEeNVDbeABHwFAgvGmiplYucdRBXYXSQbV/4ZGtU=
Subject key identifier: 4C:0A:F1:93:81:E3:A0:6E:78:B9:0E:8C:B4:86:3D:03:F0:BF:CD:40
Authority key identifier: 23:F5:C2:58:53:82:08:47:92:F1:3A:D1:97:20:5E:FD:D2:75:2D:F2
Certificate issuer: /CN=23f5c2585382084792f13ad197205efdd2752df2
Certificate serial: 019FA2292D69141548BD87D47A06F4E3CE59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.mft
Manifest number: 037D
Signing time: Mon 27 Jul 2026 06:00:35 +0000
Manifest this update: Mon 27 Jul 2026 06:00:35 +0000
Manifest next update: Tue 28 Jul 2026 06:00:35 +0000
Files and hashes: 1: I_XCWFOCCEeS8TrRlyBe_dJ1LfI.crl (hash: oiIMNF7KXCSi32gtZ99B0/bITKQQFqUBN9wAQ9ARwZk=)
2: ayEAcT6oCdclXkVG2FkLRzZ9mOw.roa (hash: 7P+K2VYLnbm0w74/RJLkFBdqeqXQaGd7I3w+dIasZpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 06:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:29:2d:69:14:15:48:bd:87:d4:7a:06:f4:e3:ce:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23f5c2585382084792f13ad197205efdd2752df2
Validity
Not Before: Jul 27 06:00:35 2026 GMT
Not After : Jul 28 06:00:35 2026 GMT
Subject: CN=4c0af19381e3a06e78b90e8cb4863d03f0bfcd40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d9:00:f1:7e:ca:f9:a4:c7:86:67:79:04:cf:
f3:5e:1e:38:b2:7c:b5:7d:9a:c8:01:69:2c:4b:35:
a8:c6:17:87:ea:3e:fa:7f:44:7c:4b:67:42:01:f7:
5e:e4:44:17:6e:be:e6:12:dd:36:ce:a4:fa:c8:87:
40:90:8c:e5:39:cb:8e:0a:24:12:3b:f7:f6:bb:5b:
f8:64:c9:68:16:88:af:de:0f:7b:43:12:3e:0e:92:
48:ee:32:1d:70:80:21:33:08:ef:24:2f:27:95:b0:
29:bf:1f:87:a1:1b:76:7c:d7:c6:81:d3:eb:32:f0:
c3:1e:5c:ed:90:d1:c8:72:b5:77:bf:a7:46:10:29:
82:c5:40:0b:6b:c6:e2:00:a2:bc:2a:85:13:64:21:
b6:b4:71:1e:25:20:de:83:85:a0:f7:10:75:e6:5c:
cd:e0:bb:74:59:3e:86:1a:16:a4:d3:ab:ee:3f:e8:
b0:ee:e3:00:fc:23:e9:92:8b:5c:20:3c:44:a8:05:
68:c6:5e:4f:f9:03:8b:9e:e6:28:23:20:da:38:97:
1c:eb:30:e1:e3:b9:0f:bc:75:57:10:62:7f:a5:66:
a7:51:60:eb:75:85:ac:eb:7a:f6:1b:d9:f8:ff:ad:
e6:91:89:13:f1:f4:fc:b4:29:88:b7:9d:d9:21:e6:
3a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:0A:F1:93:81:E3:A0:6E:78:B9:0E:8C:B4:86:3D:03:F0:BF:CD:40
X509v3 Authority Key Identifier:
keyid:23:F5:C2:58:53:82:08:47:92:F1:3A:D1:97:20:5E:FD:D2:75:2D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:2e:03:58:73:5b:68:66:73:04:97:a2:4d:e3:44:8d:d2:26:
4a:31:f8:bb:04:55:90:84:ad:91:9d:5f:b9:04:63:5e:c1:01:
a9:33:4d:4f:61:92:8d:80:af:2c:7f:ee:98:14:bb:58:34:a8:
dc:b1:ee:0d:33:13:8c:ec:4b:22:b8:fb:91:cd:92:2d:c7:c1:
7c:8d:00:44:a8:eb:a3:01:81:66:c3:18:e4:68:b0:7e:77:9c:
a6:33:1d:f5:6d:0a:e2:6e:c3:0c:ce:64:39:62:e4:b9:74:7a:
4f:a8:f7:91:fc:ff:e1:4e:e2:24:62:7b:94:56:5e:b2:64:2f:
27:d7:8e:38:4e:02:c5:4f:71:49:6a:44:ff:cd:8a:c9:e5:86:
52:cd:e7:f0:b9:3f:b7:2b:8a:bd:36:6d:f9:96:74:e9:e2:4a:
e6:05:04:0a:b8:9e:c6:69:ed:e9:f1:3b:05:e9:97:9b:ad:72:
0e:39:b2:c6:c6:f5:c6:0b:79:69:39:12:75:95:39:94:34:c0:
9e:03:c1:88:07:a4:d1:fd:14:2a:74:ad:58:95:db:c0:2b:9c:
72:a0:10:9e:1f:a7:be:b9:6c:2f:b4:b2:71:23:12:65:02:41:
26:5c:e4:8c:88:43:72:68:5d:4d:9d:94:92:19:04:89:d0:0c:
38:d0:34:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+iKS1pFBVIvYfUegb0485ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzZjVjMjU4NTM4MjA4NDc5MmYxM2FkMTk3MjA1ZWZkZDI3
NTJkZjIwHhcNMjYwNzI3MDYwMDM1WhcNMjYwNzI4MDYwMDM1WjAzMTEwLwYDVQQD
Eyg0YzBhZjE5MzgxZTNhMDZlNzhiOTBlOGNiNDg2M2QwM2YwYmZjZDQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptkA8X7K+aTHhmd5BM/zXh44sny1
fZrIAWksSzWoxheH6j76f0R8S2dCAfde5EQXbr7mEt02zqT6yIdAkIzlOcuOCiQS
O/f2u1v4ZMloFoiv3g97QxI+DpJI7jIdcIAhMwjvJC8nlbApvx+HoRt2fNfGgdPr
MvDDHlztkNHIcrV3v6dGECmCxUALa8biAKK8KoUTZCG2tHEeJSDeg4Wg9xB15lzN
4Lt0WT6GGhak06vuP+iw7uMA/CPpkotcIDxEqAVoxl5P+QOLnuYoIyDaOJcc6zDh
47kPvHVXEGJ/pWanUWDrdYWs63r2G9n4/63mkYkT8fT8tCmIt53ZIeY6qwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEwK8ZOB46BueLkOjLSGPQPwv81AMB8GA1UdIwQY
MBaAFCP1wlhTgghHkvE60ZcgXv3SdS3yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSV9YQ1dGT0NDRWVTOFRyUmx5QmVfZEoxTGZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9mODNkMDktMzQxMy00NjUxLTk2Y2Ut
OGZiNTI0NGJjMjU2LzEvSV9YQ1dGT0NDRWVTOFRyUmx5QmVfZEoxTGZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9mODNkMDktMzQxMy00NjUxLTk2Y2UtOGZiNTI0NGJjMjU2
LzEvSV9YQ1dGT0NDRWVTOFRyUmx5QmVfZEoxTGZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVS4DWHNb
aGZzBJeiTeNEjdImSjH4uwRVkIStkZ1fuQRjXsEBqTNNT2GSjYCvLH/umBS7WDSo
3LHuDTMTjOxLIrj7kc2SLcfBfI0ARKjrowGBZsMY5GiwfnecpjMd9W0K4m7DDM5k
OWLkuXR6T6j3kfz/4U7iJGJ7lFZesmQvJ9eOOE4CxU9xSWpE/82KyeWGUs3n8Lk/
tyuKvTZt+ZZ06eJK5gUECriexmnt6fE7BemXm61yDjmyxsb1xgt5aTkSdZU5lDTA
ngPBiAek0f0UKnStWJXbwCuccqAQnh+nvrlsL7SycSMSZQJBJlzkjIhDcmhdTZ2U
khkEidAMONA0WA==
-----END CERTIFICATE-----
Generated at Mon Jul 27 13:45:13 2026 by rpki-client