Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft
File: IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft (raw, json)
Hash identifier: I/k8pfl7bewRGREZdfp25QHTKUAmLFRf+yvxHiHZAO4=
Subject key identifier: 80:78:8E:82:41:53:8F:76:CD:9F:A6:25:91:61:64:AD:F4:D1:7F:C9
Authority key identifier: 20:05:85:36:1D:51:A7:2E:7B:A6:30:8C:0C:EB:16:02:44:83:11:78
Certificate issuer: /CN=200585361d51a72e7ba6308c0ceb160244831178
Certificate serial: 019F9D02DD12ADC32045545ADC883418E1B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IAWFNh1Rpy57pjCMDOsWAkSDEXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft
Manifest number: 0B00
Signing time: Sun 26 Jul 2026 06:00:38 +0000
Manifest this update: Sun 26 Jul 2026 06:00:38 +0000
Manifest next update: Mon 27 Jul 2026 06:00:38 +0000
Files and hashes: 1: 4kSC89D1AOgPjo_VC2p_1wAdyJ4.roa (hash: 49whWUdE9kNFPfnAL8tYbd6+c7MEWg0vvwt7AatABa0=)
2: IAWFNh1Rpy57pjCMDOsWAkSDEXg.crl (hash: Q8PGGyuz/VNTz/tHGvJ7e5FiICTHhLE/zHQ1F+15i+8=)
3: d32KHDz4hQyuCuhNOb9K5kOq2qY.roa (hash: Sa1ntueDsGqjR2cwqIdDg9aoAqEdJGNyLoTHBEU6HPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IAWFNh1Rpy57pjCMDOsWAkSDEXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 06:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9d:02:dd:12:ad:c3:20:45:54:5a:dc:88:34:18:e1:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=200585361d51a72e7ba6308c0ceb160244831178
Validity
Not Before: Jul 26 06:00:38 2026 GMT
Not After : Jul 27 06:00:38 2026 GMT
Subject: CN=80788e8241538f76cd9fa625916164adf4d17fc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:91:e5:93:86:2b:cf:65:4b:a6:d2:8e:e9:f7:
8a:51:5c:31:4e:12:88:9a:9a:ef:09:18:0c:6a:66:
6c:5e:61:7d:24:67:c6:e4:07:24:0f:58:f9:b3:49:
7d:08:c4:b7:7c:a4:a4:5e:35:b7:7a:d9:1d:3d:e8:
cf:51:76:c1:b9:c0:04:eb:84:46:1a:5a:01:a4:af:
7b:ff:95:86:ab:63:e0:92:72:0b:85:45:41:1c:45:
9b:d0:0f:1e:6e:1d:9b:63:c4:0a:24:39:d7:3f:8c:
63:6f:03:61:a7:c6:64:86:1e:cf:f9:4c:fa:67:65:
58:58:d2:01:30:24:28:bf:4f:c2:5b:6a:1a:c5:f1:
9e:02:68:0c:ce:f4:da:92:69:94:3d:ab:c7:20:f0:
b0:88:3d:c4:ee:68:dd:0b:2f:03:1a:70:99:cf:16:
64:7a:37:3a:69:40:3b:6f:5d:92:5e:18:79:8d:b8:
60:89:f7:6e:63:47:37:89:6c:08:fc:5e:53:05:e2:
1a:66:c3:16:dc:7d:ed:7b:e6:ac:17:ac:1e:d1:67:
04:67:c1:19:9b:37:d7:e6:2b:8d:54:ef:93:20:48:
86:7b:a2:7e:8e:fd:54:26:04:33:9e:52:10:da:91:
a9:a2:6b:e4:fc:31:0d:6c:69:12:73:17:36:bb:c6:
92:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:78:8E:82:41:53:8F:76:CD:9F:A6:25:91:61:64:AD:F4:D1:7F:C9
X509v3 Authority Key Identifier:
keyid:20:05:85:36:1D:51:A7:2E:7B:A6:30:8C:0C:EB:16:02:44:83:11:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IAWFNh1Rpy57pjCMDOsWAkSDEXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:f1:0a:a5:3b:cb:df:8e:48:c7:3b:9e:47:80:b0:16:a3:3a:
ae:8c:02:d2:a2:63:9b:b9:df:fd:2d:00:12:b8:34:6c:c2:64:
70:c0:68:6a:1b:35:7e:8b:fd:9d:9a:64:51:64:3b:f7:be:10:
b3:12:f7:2b:c5:5f:66:d3:ad:d8:bf:c6:9d:14:35:b0:ef:9c:
48:c9:77:9f:4b:dd:b1:c2:bf:b3:84:de:1b:90:21:b0:af:1d:
93:2d:4a:3b:10:46:c9:a4:c5:13:55:a5:ad:62:51:96:d0:3a:
50:20:de:98:57:b8:9f:d8:7f:ee:da:80:f3:96:7c:66:de:ef:
d3:b3:f1:8e:63:13:23:32:98:fa:74:0f:84:d7:24:f6:e3:1d:
56:de:58:2a:6e:73:b7:95:0c:65:b4:e8:c1:40:5e:32:2e:c9:
a8:21:92:05:35:2f:2c:a6:d7:a4:8f:df:da:71:d1:d5:0b:76:
c4:d0:3f:cb:63:2c:34:f4:1a:b1:2c:b0:2d:40:69:ee:e7:24:
50:d4:24:13:b3:6a:34:e3:b8:51:0f:83:a7:f7:70:59:28:01:
34:61:84:40:11:27:72:64:2c:c7:fa:42:49:98:03:5c:90:39:
a9:25:09:ac:43:e3:15:28:69:25:b4:72:b7:ca:42:46:78:39:
40:ba:48:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+dAt0SrcMgRVRa3Ig0GOGwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwMDU4NTM2MWQ1MWE3MmU3YmE2MzA4YzBjZWIxNjAyNDQ4
MzExNzgwHhcNMjYwNzI2MDYwMDM4WhcNMjYwNzI3MDYwMDM4WjAzMTEwLwYDVQQD
Eyg4MDc4OGU4MjQxNTM4Zjc2Y2Q5ZmE2MjU5MTYxNjRhZGY0ZDE3ZmM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZHlk4Yrz2VLptKO6feKUVwxThKI
mprvCRgMamZsXmF9JGfG5AckD1j5s0l9CMS3fKSkXjW3etkdPejPUXbBucAE64RG
GloBpK97/5WGq2PgknILhUVBHEWb0A8ebh2bY8QKJDnXP4xjbwNhp8Zkhh7P+Uz6
Z2VYWNIBMCQov0/CW2oaxfGeAmgMzvTakmmUPavHIPCwiD3E7mjdCy8DGnCZzxZk
ejc6aUA7b12SXhh5jbhgifduY0c3iWwI/F5TBeIaZsMW3H3te+asF6we0WcEZ8EZ
mzfX5iuNVO+TIEiGe6J+jv1UJgQznlIQ2pGpomvk/DENbGkScxc2u8aSIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIB4joJBU492zZ+mJZFhZK300X/JMB8GA1UdIwQY
MBaAFCAFhTYdUacue6YwjAzrFgJEgxF4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUFXRk5oMVJweTU3cGpDTURPc1dBa1NERVhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9kODdmOGUtNjcyMy00YjE2LTllNzEt
MzE3Nzk4NzViNGZhLzEvSUFXRk5oMVJweTU3cGpDTURPc1dBa1NERVhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9kODdmOGUtNjcyMy00YjE2LTllNzEtMzE3Nzk4NzViNGZh
LzEvSUFXRk5oMVJweTU3cGpDTURPc1dBa1NERVhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm/EKpTvL
345IxzueR4CwFqM6rowC0qJjm7nf/S0AErg0bMJkcMBoahs1fov9nZpkUWQ7974Q
sxL3K8VfZtOt2L/GnRQ1sO+cSMl3n0vdscK/s4TeG5AhsK8dky1KOxBGyaTFE1Wl
rWJRltA6UCDemFe4n9h/7tqA85Z8Zt7v07PxjmMTIzKY+nQPhNck9uMdVt5YKm5z
t5UMZbTowUBeMi7JqCGSBTUvLKbXpI/f2nHR1Qt2xNA/y2MsNPQasSywLUBp7uck
UNQkE7NqNOO4UQ+Dp/dwWSgBNGGEQBEncmQsx/pCSZgDXJA5qSUJrEPjFShpJbRy
t8pCRng5QLpIxg==
-----END CERTIFICATE-----
Generated at Sun Jul 26 15:50:09 2026 by rpki-client