Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft
File: Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft (raw, json)
Hash identifier: RhF4BDpYm1HqsvIAVgHHeU9PTLjieD6V7GrXfQ/cpxs=
Subject key identifier: 9F:09:C8:85:D0:92:FF:FF:99:F2:4A:CD:E2:96:54:E0:BB:5C:33:0D
Authority key identifier: 23:1E:28:35:9C:18:0E:A6:C4:88:A9:8C:A3:AF:77:B5:BB:79:3D:EE
Certificate issuer: /CN=231e28359c180ea6c488a98ca3af77b5bb793dee
Certificate serial: 019F0AAB7BA2733D01E2723A620E4183E216
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ix4oNZwYDqbEiKmMo693tbt5Pe4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft
Manifest number: 1981
Signing time: Sat 27 Jun 2026 20:00:38 +0000
Manifest this update: Sat 27 Jun 2026 20:00:38 +0000
Manifest next update: Sun 28 Jun 2026 20:00:38 +0000
Files and hashes: 1: Ix4oNZwYDqbEiKmMo693tbt5Pe4.crl (hash: 3OsLeKuI/umf7SIrQ5qOauFMVc+6lYDe4KWhCS5Ky4Y=)
2: eMGDdbWRH5Z7Ggcz_C-UuWgytSA.roa (hash: yeQz6KJsUVMwbssIQpUY/HsteXeV6YTAPt+B2xHK1j8=)
3: jgrgGJ7rf2LX0XINO9c30QdaUWA.roa (hash: A76RxsC50O0v/gwBJ9yUpgGn/DjKbkzrJUvq58cmXPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ix4oNZwYDqbEiKmMo693tbt5Pe4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Jun 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:0a:ab:7b:a2:73:3d:01:e2:72:3a:62:0e:41:83:e2:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=231e28359c180ea6c488a98ca3af77b5bb793dee
Validity
Not Before: Jun 27 20:00:38 2026 GMT
Not After : Jun 28 20:00:38 2026 GMT
Subject: CN=9f09c885d092ffff99f24acde29654e0bb5c330d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:95:65:6a:4a:17:eb:08:d6:98:f6:12:10:8d:
19:a3:9d:9c:0c:ba:49:cc:13:4c:62:61:ed:90:fe:
ac:24:76:54:72:1c:18:6c:76:ce:01:f3:8b:45:8b:
c6:00:3f:72:ea:00:73:a4:41:a6:2c:9f:25:19:05:
81:c4:3e:e2:26:7f:34:df:b0:f2:b7:1b:9d:a7:ed:
72:12:46:ee:32:09:df:62:94:0d:a5:f5:1f:1f:ed:
c8:c5:32:d2:03:57:6e:c3:8e:39:a9:a6:47:01:d6:
e3:40:96:4e:5b:3e:6d:73:da:a6:56:53:2a:b6:8b:
80:7f:a0:78:d9:7c:e7:d5:af:5b:16:96:c1:04:f4:
5f:ae:4e:ed:ed:dc:3e:33:91:77:19:fd:1a:37:fa:
50:a4:c9:67:ca:1a:5e:41:6c:fa:c8:05:99:1b:01:
6d:cc:ac:1b:43:e1:e3:02:f3:3d:84:6a:ef:06:df:
74:23:61:44:c0:08:91:60:c3:fa:55:8e:70:97:8d:
24:f5:07:9d:b9:ef:30:8d:68:83:68:33:66:36:6a:
ad:af:43:ff:fa:d0:2e:2d:ae:94:4e:f1:64:ee:6e:
20:6f:c8:18:2b:f5:f2:3d:f7:9e:e7:e7:f8:14:fa:
2a:bb:36:7c:36:2f:d8:38:b7:8a:35:8a:76:e8:83:
b1:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:09:C8:85:D0:92:FF:FF:99:F2:4A:CD:E2:96:54:E0:BB:5C:33:0D
X509v3 Authority Key Identifier:
keyid:23:1E:28:35:9C:18:0E:A6:C4:88:A9:8C:A3:AF:77:B5:BB:79:3D:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ix4oNZwYDqbEiKmMo693tbt5Pe4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:45:3c:d0:ff:20:56:52:27:af:99:d2:49:5c:2c:30:db:73:
93:8c:4e:53:80:f0:f5:90:4d:b5:07:24:85:ee:0f:68:92:21:
61:c0:f1:82:01:4e:51:8c:e3:9d:1d:89:55:1b:9b:57:be:12:
a2:3a:36:97:96:16:6b:ce:c7:a6:40:7b:3f:7c:79:e7:83:40:
c6:aa:a8:8b:ce:56:e9:3a:6c:b8:46:cb:48:3b:01:55:b9:0d:
aa:ff:d3:49:71:fd:c1:91:76:f5:8a:a0:f1:5d:a4:05:54:6c:
7d:98:0c:cd:96:35:f2:b9:63:8e:58:b7:db:c9:86:b6:45:db:
e4:fb:d7:d4:8c:c6:0f:6e:5b:4a:66:b8:da:77:84:00:aa:95:
b2:d4:17:6d:08:e6:ec:a7:c3:9a:0c:b6:4c:dd:0b:77:d8:a8:
38:dc:bb:79:b2:8e:fb:f6:4c:00:3e:d4:8a:22:d1:11:c6:71:
0a:68:f2:53:b7:3b:24:cc:e7:6f:82:97:ea:22:21:40:40:5f:
2d:e0:0b:56:93:f4:c6:77:c3:78:bc:fc:05:9c:71:0a:f5:fb:
b5:8f:65:9d:44:df:f3:49:d5:ea:96:ac:14:23:80:40:1f:ed:
18:a2:fc:5f:3d:36:24:f5:b2:3c:2a:75:dc:0f:d3:7b:93:05:
40:26:72:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8Kq3uicz0B4nI6Yg5Bg+IWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzMWUyODM1OWMxODBlYTZjNDg4YTk4Y2EzYWY3N2I1YmI3
OTNkZWUwHhcNMjYwNjI3MjAwMDM4WhcNMjYwNjI4MjAwMDM4WjAzMTEwLwYDVQQD
Eyg5ZjA5Yzg4NWQwOTJmZmZmOTlmMjRhY2RlMjk2NTRlMGJiNWMzMzBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZVlakoX6wjWmPYSEI0Zo52cDLpJ
zBNMYmHtkP6sJHZUchwYbHbOAfOLRYvGAD9y6gBzpEGmLJ8lGQWBxD7iJn8037Dy
txudp+1yEkbuMgnfYpQNpfUfH+3IxTLSA1duw445qaZHAdbjQJZOWz5tc9qmVlMq
touAf6B42Xzn1a9bFpbBBPRfrk7t7dw+M5F3Gf0aN/pQpMlnyhpeQWz6yAWZGwFt
zKwbQ+HjAvM9hGrvBt90I2FEwAiRYMP6VY5wl40k9Qedue8wjWiDaDNmNmqtr0P/
+tAuLa6UTvFk7m4gb8gYK/XyPfee5+f4FPoquzZ8Ni/YOLeKNYp26IOxowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ8JyIXQkv//mfJKzeKWVOC7XDMNMB8GA1UdIwQY
MBaAFCMeKDWcGA6mxIipjKOvd7W7eT3uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXg0b05ad1lEcWJFaUttTW82OTN0YnQ1UGU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS85MjQ2Y2ItZDQ2Yi00MDYyLTk4N2It
NWIzNGJjMzc4NDM2LzEvSXg0b05ad1lEcWJFaUttTW82OTN0YnQ1UGU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS85MjQ2Y2ItZDQ2Yi00MDYyLTk4N2ItNWIzNGJjMzc4NDM2
LzEvSXg0b05ad1lEcWJFaUttTW82OTN0YnQ1UGU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdkU80P8g
VlInr5nSSVwsMNtzk4xOU4Dw9ZBNtQckhe4PaJIhYcDxggFOUYzjnR2JVRubV74S
ojo2l5YWa87HpkB7P3x554NAxqqoi85W6TpsuEbLSDsBVbkNqv/TSXH9wZF29Yqg
8V2kBVRsfZgMzZY18rljjli328mGtkXb5PvX1IzGD25bSma42neEAKqVstQXbQjm
7KfDmgy2TN0Ld9ioONy7ebKO+/ZMAD7UiiLREcZxCmjyU7c7JMznb4KX6iIhQEBf
LeALVpP0xnfDeLz8BZxxCvX7tY9lnUTf80nV6pasFCOAQB/tGKL8Xz02JPWyPCp1
3A/Te5MFQCZyxw==
-----END CERTIFICATE-----
Generated at Sun Jun 28 00:33:03 2026 by rpki-client