Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/079594-e401-4ed5-98a6-90d35b245ced/1/IysXeNY2I3Q-2JyH3oDCpkCToGI.mft
File: IysXeNY2I3Q-2JyH3oDCpkCToGI.mft (raw, json)
Hash identifier: OYtNOeFElKHWkYtz46y57CMmqW8gio3WycYjJF5S1uw=
Subject key identifier: 89:A9:38:61:75:D2:CF:06:6E:D2:DD:72:8E:42:3D:0B:CE:BF:C2:58
Authority key identifier: 23:2B:17:78:D6:36:23:74:3E:D8:9C:87:DE:80:C2:A6:40:93:A0:62
Certificate issuer: /CN=232b1778d63623743ed89c87de80c2a64093a062
Certificate serial: 019EB6C518444356F03EB599F346E045ABB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IysXeNY2I3Q-2JyH3oDCpkCToGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/079594-e401-4ed5-98a6-90d35b245ced/1/IysXeNY2I3Q-2JyH3oDCpkCToGI.mft
Manifest number: 0A8E
Signing time: Thu 11 Jun 2026 13:00:30 +0000
Manifest this update: Thu 11 Jun 2026 13:00:30 +0000
Manifest next update: Fri 12 Jun 2026 13:00:30 +0000
Files and hashes: 1: 6JMmxrfiQpPlC_lOumLXACWDZqM.roa (hash: J1a3qyIyAUriipjYLsphj7xq5F7o8cCyCbTPqGYHNhI=)
2: IysXeNY2I3Q-2JyH3oDCpkCToGI.crl (hash: 3cMYIFCG8zMfw0uOJ4ZRnPpqwrpVKQBB6zsqjVAwvbc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/079594-e401-4ed5-98a6-90d35b245ced/1/IysXeNY2I3Q-2JyH3oDCpkCToGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/079594-e401-4ed5-98a6-90d35b245ced/1/IysXeNY2I3Q-2JyH3oDCpkCToGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IysXeNY2I3Q-2JyH3oDCpkCToGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:c5:18:44:43:56:f0:3e:b5:99:f3:46:e0:45:ab:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=232b1778d63623743ed89c87de80c2a64093a062
Validity
Not Before: Jun 11 13:00:30 2026 GMT
Not After : Jun 12 13:00:30 2026 GMT
Subject: CN=89a9386175d2cf066ed2dd728e423d0bcebfc258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:46:28:8c:ae:7a:f9:6e:5a:a7:ce:2e:e3:98:
ce:27:55:2a:45:a8:4e:19:ac:98:4b:8c:61:15:71:
81:14:a0:35:5f:ab:a5:cd:c0:58:d2:e9:e2:39:30:
c1:41:98:db:a1:a9:f8:bb:01:d0:80:cd:d9:0e:70:
c1:26:9c:8d:49:68:e4:eb:3a:59:c6:5e:74:2a:ee:
41:4b:10:5f:15:24:1d:55:89:f5:32:61:ca:0e:79:
ea:7d:9f:f1:b5:fc:cc:6a:24:52:ad:a2:99:7d:c2:
8f:1e:64:54:73:2c:f5:2c:f9:c6:8f:62:c0:16:f3:
04:55:70:e3:63:b5:80:a4:cf:b4:bc:3e:7a:4b:c2:
fa:65:4c:36:02:d7:84:fc:86:a4:96:5d:ec:2a:04:
60:59:3b:96:3f:4c:a8:19:55:c1:b4:ff:e8:49:9a:
e8:8d:47:b0:03:c9:1e:56:c4:75:9b:cf:dd:ed:4d:
eb:e8:b6:18:4d:d6:de:b5:1a:6a:8c:c0:92:00:44:
cb:72:4f:8a:69:99:05:1c:99:74:00:4b:e5:24:0a:
64:b1:a0:d5:1f:42:21:20:f2:fd:c0:26:87:8f:9a:
d3:fb:42:52:0f:3c:d2:76:2a:3e:78:52:dc:99:32:
6f:68:dd:7b:95:d1:91:7a:f6:b2:ba:89:4d:d2:fe:
4e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:A9:38:61:75:D2:CF:06:6E:D2:DD:72:8E:42:3D:0B:CE:BF:C2:58
X509v3 Authority Key Identifier:
keyid:23:2B:17:78:D6:36:23:74:3E:D8:9C:87:DE:80:C2:A6:40:93:A0:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IysXeNY2I3Q-2JyH3oDCpkCToGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/079594-e401-4ed5-98a6-90d35b245ced/1/IysXeNY2I3Q-2JyH3oDCpkCToGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/079594-e401-4ed5-98a6-90d35b245ced/1/IysXeNY2I3Q-2JyH3oDCpkCToGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:83:0e:54:5c:14:47:ea:ca:01:9c:50:d5:10:8e:37:aa:78:
ca:f9:f0:d6:5f:86:bf:48:39:0d:63:3d:97:4f:c1:96:68:62:
92:d8:46:f5:4d:47:6f:d1:0f:45:32:1e:3d:85:03:cf:9d:6c:
fc:12:6f:30:5a:a4:d6:2d:60:42:ef:45:f6:e5:f0:b7:97:f5:
c9:c7:3b:b2:25:19:87:3e:bb:12:bb:19:20:7a:5f:5e:12:b7:
c4:95:0c:04:d3:be:db:2d:b4:29:39:ce:65:0d:b6:c7:3c:e4:
98:91:19:28:a1:01:b0:65:22:39:ad:6e:4a:34:27:52:47:73:
85:6a:da:f9:8f:04:17:59:64:59:1f:01:98:6f:dc:05:17:16:
39:ac:98:77:cd:aa:1c:a8:fd:d1:4f:b8:20:f0:3a:43:80:6f:
9b:6c:88:b1:9c:14:80:d2:1c:5f:a1:06:0e:23:6b:78:04:b1:
bf:d2:0c:dc:d4:2a:9e:9d:78:d4:ca:ea:a2:f6:7c:f0:3e:c5:
db:ef:ff:05:43:68:97:b2:0c:32:46:b7:96:4a:d7:e4:06:0d:
43:e6:65:c9:2b:e5:c7:34:12:c4:35:9c:58:22:86:c3:da:9d:
09:a0:5a:e9:d5:46:63:20:c9:f8:7b:53:dd:ca:ed:91:9f:b0:
dc:76:e5:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ62xRhEQ1bwPrWZ80bgRau4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzMmIxNzc4ZDYzNjIzNzQzZWQ4OWM4N2RlODBjMmE2NDA5
M2EwNjIwHhcNMjYwNjExMTMwMDMwWhcNMjYwNjEyMTMwMDMwWjAzMTEwLwYDVQQD
Eyg4OWE5Mzg2MTc1ZDJjZjA2NmVkMmRkNzI4ZTQyM2QwYmNlYmZjMjU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4UYojK56+W5ap84u45jOJ1UqRahO
GayYS4xhFXGBFKA1X6ulzcBY0uniOTDBQZjboan4uwHQgM3ZDnDBJpyNSWjk6zpZ
xl50Ku5BSxBfFSQdVYn1MmHKDnnqfZ/xtfzMaiRSraKZfcKPHmRUcyz1LPnGj2LA
FvMEVXDjY7WApM+0vD56S8L6ZUw2AteE/Iakll3sKgRgWTuWP0yoGVXBtP/oSZro
jUewA8keVsR1m8/d7U3r6LYYTdbetRpqjMCSAETLck+KaZkFHJl0AEvlJApksaDV
H0IhIPL9wCaHj5rT+0JSDzzSdio+eFLcmTJvaN17ldGRevayuolN0v5OHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFImpOGF10s8GbtLdco5CPQvOv8JYMB8GA1UdIwQY
MBaAFCMrF3jWNiN0Ptich96AwqZAk6BiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXlzWGVOWTJJM1EtMkp5SDNvRENwa0NUb0dJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8wNzk1OTQtZTQwMS00ZWQ1LTk4YTYt
OTBkMzViMjQ1Y2VkLzEvSXlzWGVOWTJJM1EtMkp5SDNvRENwa0NUb0dJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni8wNzk1OTQtZTQwMS00ZWQ1LTk4YTYtOTBkMzViMjQ1Y2Vk
LzEvSXlzWGVOWTJJM1EtMkp5SDNvRENwa0NUb0dJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm4MOVFwU
R+rKAZxQ1RCON6p4yvnw1l+Gv0g5DWM9l0/BlmhikthG9U1Hb9EPRTIePYUDz51s
/BJvMFqk1i1gQu9F9uXwt5f1ycc7siUZhz67ErsZIHpfXhK3xJUMBNO+2y20KTnO
ZQ22xzzkmJEZKKEBsGUiOa1uSjQnUkdzhWra+Y8EF1lkWR8BmG/cBRcWOayYd82q
HKj90U+4IPA6Q4Bvm2yIsZwUgNIcX6EGDiNreASxv9IM3NQqnp141MrqovZ88D7F
2+//BUNol7IMMka3lkrX5AYNQ+ZlySvlxzQSxDWcWCKGw9qdCaBa6dVGYyDJ+HtT
3crtkZ+w3HblWQ==
-----END CERTIFICATE-----
Generated at Thu Jun 11 18:09:56 2026 by rpki-client