Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/7916e5-2463-4e0e-ba6d-5314accb0612/1/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.mft
File: Iyu8b1HM4BrqrLqA8tDSZBLkf5M.mft (raw, json)
Hash identifier: czc+bKj0+PeuV57V+i7+HcntGniGEKNtsnMWWIghNio=
Subject key identifier: 0D:01:E0:F0:45:53:6C:EC:B2:2E:CA:5A:36:AF:1F:72:30:94:BB:A6
Authority key identifier: 23:2B:BC:6F:51:CC:E0:1A:EA:AC:BA:80:F2:D0:D2:64:12:E4:7F:93
Certificate issuer: /CN=232bbc6f51cce01aeaacba80f2d0d26412e47f93
Certificate serial: 019EB80EC26BE91FEF83B2840A9562090737
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/7916e5-2463-4e0e-ba6d-5314accb0612/1/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.mft
Manifest number: 0D65
Signing time: Thu 11 Jun 2026 19:00:35 +0000
Manifest this update: Thu 11 Jun 2026 19:00:35 +0000
Manifest next update: Fri 12 Jun 2026 19:00:35 +0000
Files and hashes: 1: Iyu8b1HM4BrqrLqA8tDSZBLkf5M.crl (hash: g1ETQRmfZ8L67yh7NjZ3id3NJqqslz2qKirv53omPB0=)
2: eHAcRr4T7U8ZR4oZKRXSUjv9iuw.roa (hash: VuNBMBSHOJTUsj6T7QM9bNksF6TWXe0P7LM+d85rGag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/7916e5-2463-4e0e-ba6d-5314accb0612/1/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/7916e5-2463-4e0e-ba6d-5314accb0612/1/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:0e:c2:6b:e9:1f:ef:83:b2:84:0a:95:62:09:07:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=232bbc6f51cce01aeaacba80f2d0d26412e47f93
Validity
Not Before: Jun 11 19:00:35 2026 GMT
Not After : Jun 12 19:00:35 2026 GMT
Subject: CN=0d01e0f045536cecb22eca5a36af1f723094bba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b3:84:be:d9:40:35:4c:e9:df:60:e1:7c:ff:
a3:89:65:20:cc:21:fa:cc:72:28:01:fd:dc:a2:bf:
c9:61:0f:70:46:ad:10:4d:b6:58:62:a5:c8:7d:f6:
5e:2d:17:35:65:8f:53:73:4c:92:48:9e:c1:8a:6b:
7a:d7:84:e4:11:92:fa:ac:51:60:e1:e6:6c:da:90:
7f:b8:68:7f:47:36:97:87:8a:77:23:65:39:be:cd:
fb:12:75:20:cf:fd:a6:2c:86:8c:20:b5:1b:2c:44:
99:e5:e5:b8:e2:c5:6c:4a:c6:2c:63:7a:5c:04:e3:
37:b2:14:7a:13:2b:00:8b:12:20:8b:4e:bb:d9:da:
d6:52:c3:8d:96:d6:fa:77:d8:04:a6:4b:6d:d5:58:
a3:51:dc:08:25:59:cd:fb:9a:80:88:25:5a:b3:bd:
32:d5:6a:d6:dd:1c:d2:0b:46:ef:1f:d1:9f:ee:f9:
9c:ba:ad:d2:71:51:46:17:b4:c2:b3:ae:ae:ca:62:
6a:d2:9e:24:dc:16:d4:5f:bb:b7:eb:d5:58:bc:af:
d9:14:3f:1d:b5:f1:b4:5d:b2:55:59:22:34:9b:1d:
0c:9a:79:d0:0e:64:ed:a4:9a:ab:61:dd:43:45:7b:
a1:26:03:47:cf:39:a9:67:00:b5:80:45:43:da:a9:
69:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:01:E0:F0:45:53:6C:EC:B2:2E:CA:5A:36:AF:1F:72:30:94:BB:A6
X509v3 Authority Key Identifier:
keyid:23:2B:BC:6F:51:CC:E0:1A:EA:AC:BA:80:F2:D0:D2:64:12:E4:7F:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/7916e5-2463-4e0e-ba6d-5314accb0612/1/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/7916e5-2463-4e0e-ba6d-5314accb0612/1/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:ef:7b:a5:7c:58:32:8e:6c:91:ae:60:95:bd:1c:fc:ec:2e:
bb:32:eb:75:b2:36:26:ba:38:f0:82:1e:f1:6c:94:df:c9:56:
25:91:e4:6f:1d:66:a4:23:48:e3:3b:81:d2:89:92:d0:73:3e:
f5:92:32:8f:41:c7:ef:50:83:ec:c4:3e:0c:51:dd:38:2e:4f:
2e:16:57:88:19:88:18:80:2f:ca:96:42:2f:1d:a6:95:18:4c:
c1:2c:bd:6d:bf:f4:c4:be:b7:5c:91:6a:0e:8a:27:2d:66:16:
46:ca:48:6f:18:81:3f:0f:41:99:8b:1b:b5:ab:0a:31:0c:87:
da:6c:2d:ad:3b:be:75:58:b9:50:da:c2:01:13:ad:9e:68:b6:
91:c7:e1:08:5c:ee:62:2d:7f:47:d3:f0:0f:0b:d8:a7:37:af:
dd:62:31:9f:43:97:ad:f5:5c:00:5a:76:57:b4:31:d0:dc:80:
a0:3c:8c:66:ac:6d:4d:0d:ad:29:42:b8:00:7c:6a:05:2c:00:
ef:9b:40:6f:94:6a:32:97:e9:a6:14:1e:c8:2f:2a:b9:e1:93:
32:ab:ea:5c:1d:fa:e6:43:ee:10:3f:b7:2a:83:14:b5:7d:fe:
d5:ca:2f:cd:73:3c:c9:ca:b5:a0:54:47:2b:f5:12:a5:f3:0d:
e2:f6:cf:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ64DsJr6R/vg7KECpViCQc3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzMmJiYzZmNTFjY2UwMWFlYWFjYmE4MGYyZDBkMjY0MTJl
NDdmOTMwHhcNMjYwNjExMTkwMDM1WhcNMjYwNjEyMTkwMDM1WjAzMTEwLwYDVQQD
EygwZDAxZTBmMDQ1NTM2Y2VjYjIyZWNhNWEzNmFmMWY3MjMwOTRiYmE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLOEvtlANUzp32DhfP+jiWUgzCH6
zHIoAf3cor/JYQ9wRq0QTbZYYqXIffZeLRc1ZY9Tc0ySSJ7Bimt614TkEZL6rFFg
4eZs2pB/uGh/RzaXh4p3I2U5vs37EnUgz/2mLIaMILUbLESZ5eW44sVsSsYsY3pc
BOM3shR6EysAixIgi0672drWUsONltb6d9gEpktt1VijUdwIJVnN+5qAiCVas70y
1WrW3RzSC0bvH9Gf7vmcuq3ScVFGF7TCs66uymJq0p4k3BbUX7u369VYvK/ZFD8d
tfG0XbJVWSI0mx0MmnnQDmTtpJqrYd1DRXuhJgNHzzmpZwC1gEVD2qlpLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA0B4PBFU2zssi7KWjavH3IwlLumMB8GA1UdIwQY
MBaAFCMrvG9RzOAa6qy6gPLQ0mQS5H+TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXl1OGIxSE00QnJxckxxQTh0RFNaQkxrZjVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny83OTE2ZTUtMjQ2My00ZTBlLWJhNmQt
NTMxNGFjY2IwNjEyLzEvSXl1OGIxSE00QnJxckxxQTh0RFNaQkxrZjVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny83OTE2ZTUtMjQ2My00ZTBlLWJhNmQtNTMxNGFjY2IwNjEy
LzEvSXl1OGIxSE00QnJxckxxQTh0RFNaQkxrZjVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfO97pXxY
Mo5ska5glb0c/OwuuzLrdbI2Jro48IIe8WyU38lWJZHkbx1mpCNI4zuB0omS0HM+
9ZIyj0HH71CD7MQ+DFHdOC5PLhZXiBmIGIAvypZCLx2mlRhMwSy9bb/0xL63XJFq
DoonLWYWRspIbxiBPw9BmYsbtasKMQyH2mwtrTu+dVi5UNrCAROtnmi2kcfhCFzu
Yi1/R9PwDwvYpzev3WIxn0OXrfVcAFp2V7Qx0NyAoDyMZqxtTQ2tKUK4AHxqBSwA
75tAb5RqMpfpphQeyC8queGTMqvqXB365kPuED+3KoMUtX3+1covzXM8ycq1oFRH
K/USpfMN4vbPcw==
-----END CERTIFICATE-----
Generated at Thu Jun 11 22:59:15 2026 by rpki-client