Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/5e4d7e-ac21-4f02-9581-f00d92dc07b8/1/mIb0shUIFe2ng-fzz7m35Tzn2X8.mft
File: mIb0shUIFe2ng-fzz7m35Tzn2X8.mft (raw, json)
Hash identifier: nPUtmP/WtlBWEm/xA1Q5AphkrJ5u3qJoJ3vR+Leh0cI=
Subject key identifier: A6:3D:67:57:C9:45:70:57:8A:40:83:B6:31:6B:EC:AC:56:D2:D5:FA
Authority key identifier: 98:86:F4:B2:15:08:15:ED:A7:83:E7:F3:CF:B9:B7:E5:3C:E7:D9:7F
Certificate issuer: /CN=9886f4b2150815eda783e7f3cfb9b7e53ce7d97f
Certificate serial: 019F856829E8B4B174CFCF242F9D1CCEE331
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mIb0shUIFe2ng-fzz7m35Tzn2X8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/5e4d7e-ac21-4f02-9581-f00d92dc07b8/1/mIb0shUIFe2ng-fzz7m35Tzn2X8.mft
Manifest number: 9B
Signing time: Tue 21 Jul 2026 16:00:23 +0000
Manifest this update: Tue 21 Jul 2026 16:00:23 +0000
Manifest next update: Wed 22 Jul 2026 16:00:23 +0000
Files and hashes: 1: E6Emgi8OOcxRYIN6dlPoick6xdc.roa (hash: b17vqDW+cXgHkIk7rlMgxV1W0X2t1+N9MIRFO/oaFGs=)
2: cJhwzvA4MmD9szzdzlqYrmM_RIk.roa (hash: 0CQ7EyVMolzZdZkEGpCpBtQGO5aHXkTTya7T0UCv1hY=)
3: mIb0shUIFe2ng-fzz7m35Tzn2X8.crl (hash: 0l0eGws+5CkNM4GaxTBl9pZYWIbTth93ccqtG/YYQrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/5e4d7e-ac21-4f02-9581-f00d92dc07b8/1/mIb0shUIFe2ng-fzz7m35Tzn2X8.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/5e4d7e-ac21-4f02-9581-f00d92dc07b8/1/mIb0shUIFe2ng-fzz7m35Tzn2X8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mIb0shUIFe2ng-fzz7m35Tzn2X8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:68:29:e8:b4:b1:74:cf:cf:24:2f:9d:1c:ce:e3:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9886f4b2150815eda783e7f3cfb9b7e53ce7d97f
Validity
Not Before: Jul 21 16:00:23 2026 GMT
Not After : Jul 22 16:00:23 2026 GMT
Subject: CN=a63d6757c94570578a4083b6316becac56d2d5fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:74:e3:0e:17:69:53:c5:6d:d9:23:76:00:8c:
3e:da:25:a3:c9:19:37:00:03:2b:73:5c:8d:25:74:
62:ee:0c:cd:66:e9:c9:e1:fb:3a:4f:c0:8f:4c:81:
e6:9c:fd:eb:24:90:dd:f9:e9:04:b1:5d:86:a9:5f:
69:63:1c:9c:19:cb:07:29:cf:64:c8:0d:f6:7e:4c:
c7:d2:a6:e4:dc:16:f9:a6:1c:9b:55:65:31:0f:50:
41:94:fd:4c:cd:dc:92:6d:49:50:0b:5c:8c:0c:7c:
b5:cb:56:65:2f:c5:72:b3:f0:7b:9d:cf:ab:7d:48:
4d:73:68:86:a5:67:db:c2:25:7d:ac:b6:c7:6b:07:
17:6a:4f:ef:f6:1d:b1:c0:22:46:e9:c1:e2:fb:9a:
b2:c6:1e:5d:bc:f7:55:95:a9:70:19:81:b6:1c:73:
30:bf:72:34:dd:f5:6b:16:58:cc:e7:60:c0:b5:95:
11:9b:0a:06:ed:cd:75:1f:a1:72:47:67:ff:2b:4f:
ea:bf:5f:78:d0:ec:e2:d0:5d:ac:a9:d6:df:6f:08:
9d:c0:e4:ed:70:51:69:e5:1f:1f:37:70:10:5c:e0:
9b:d6:a7:f5:65:20:04:7f:43:fe:c1:47:a5:59:73:
a0:69:c1:f4:15:d6:c3:c9:35:a2:41:59:46:37:eb:
02:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:3D:67:57:C9:45:70:57:8A:40:83:B6:31:6B:EC:AC:56:D2:D5:FA
X509v3 Authority Key Identifier:
keyid:98:86:F4:B2:15:08:15:ED:A7:83:E7:F3:CF:B9:B7:E5:3C:E7:D9:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mIb0shUIFe2ng-fzz7m35Tzn2X8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/5e4d7e-ac21-4f02-9581-f00d92dc07b8/1/mIb0shUIFe2ng-fzz7m35Tzn2X8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/5e4d7e-ac21-4f02-9581-f00d92dc07b8/1/mIb0shUIFe2ng-fzz7m35Tzn2X8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:67:03:a6:20:b7:45:4a:88:e7:88:a6:e8:2e:6a:46:a6:25:
dd:8a:f6:4e:09:86:b6:07:cc:02:06:02:a7:f8:d4:85:fd:cb:
99:de:86:7b:76:c9:2d:d8:dc:98:d3:c1:a4:23:b6:d8:8f:af:
b8:75:c2:9b:36:03:c6:56:cd:94:79:fe:29:0d:cb:ea:1a:71:
42:72:b5:a8:e1:e5:7c:67:7f:4b:52:4a:93:d1:30:8e:d1:b4:
68:86:fa:7d:be:2a:f9:49:98:de:69:49:be:8e:fc:75:95:e3:
51:f0:4d:e4:dd:27:9d:d8:ff:7f:7a:84:91:82:61:8e:84:58:
b8:fa:b5:3e:a0:f9:30:68:48:25:cf:46:5d:e5:d1:20:f5:11:
e0:d6:83:4f:bc:0c:21:78:78:9d:14:f8:00:72:3f:18:d4:70:
50:e6:1c:98:f4:0a:3e:60:5d:6d:ef:c8:d9:ab:8b:e2:9c:ad:
cf:d4:dd:0c:cd:b7:bc:2a:19:2a:7e:51:dc:77:fa:cb:38:68:
33:bf:87:46:3f:44:33:23:1b:35:51:58:f3:49:06:0a:a9:38:
5c:61:07:83:f0:4e:dd:79:62:65:a2:45:33:64:c7:e0:92:c8:
0c:41:3b:25:a7:26:ee:a3:de:fd:b3:ad:c2:31:25:7d:42:54:
51:0f:6e:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+FaCnotLF0z88kL50czuMxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4ODZmNGIyMTUwODE1ZWRhNzgzZTdmM2NmYjliN2U1M2Nl
N2Q5N2YwHhcNMjYwNzIxMTYwMDIzWhcNMjYwNzIyMTYwMDIzWjAzMTEwLwYDVQQD
EyhhNjNkNjc1N2M5NDU3MDU3OGE0MDgzYjYzMTZiZWNhYzU2ZDJkNWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3TjDhdpU8Vt2SN2AIw+2iWjyRk3
AAMrc1yNJXRi7gzNZunJ4fs6T8CPTIHmnP3rJJDd+ekEsV2GqV9pYxycGcsHKc9k
yA32fkzH0qbk3Bb5phybVWUxD1BBlP1MzdySbUlQC1yMDHy1y1ZlL8Vys/B7nc+r
fUhNc2iGpWfbwiV9rLbHawcXak/v9h2xwCJG6cHi+5qyxh5dvPdVlalwGYG2HHMw
v3I03fVrFljM52DAtZURmwoG7c11H6FyR2f/K0/qv1940Ozi0F2sqdbfbwidwOTt
cFFp5R8fN3AQXOCb1qf1ZSAEf0P+wUelWXOgacH0FdbDyTWiQVlGN+sC6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKY9Z1fJRXBXikCDtjFr7KxW0tX6MB8GA1UdIwQY
MBaAFJiG9LIVCBXtp4Pn88+5t+U859l/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUliMHNoVUlGZTJuZy1meno3bTM1VHpuMlg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC81ZTRkN2UtYWMyMS00ZjAyLTk1ODEt
ZjAwZDkyZGMwN2I4LzEvbUliMHNoVUlGZTJuZy1meno3bTM1VHpuMlg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC81ZTRkN2UtYWMyMS00ZjAyLTk1ODEtZjAwZDkyZGMwN2I4
LzEvbUliMHNoVUlGZTJuZy1meno3bTM1VHpuMlg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArWcDpiC3
RUqI54im6C5qRqYl3Yr2TgmGtgfMAgYCp/jUhf3Lmd6Ge3bJLdjcmNPBpCO22I+v
uHXCmzYDxlbNlHn+KQ3L6hpxQnK1qOHlfGd/S1JKk9EwjtG0aIb6fb4q+UmY3mlJ
vo78dZXjUfBN5N0nndj/f3qEkYJhjoRYuPq1PqD5MGhIJc9GXeXRIPUR4NaDT7wM
IXh4nRT4AHI/GNRwUOYcmPQKPmBdbe/I2auL4pytz9TdDM23vCoZKn5R3Hf6yzho
M7+HRj9EMyMbNVFY80kGCqk4XGEHg/BO3XliZaJFM2TH4JLIDEE7Jacm7qPe/bOt
wjElfUJUUQ9uIw==
-----END CERTIFICATE-----
Generated at Tue Jul 21 17:11:31 2026 by rpki-client