Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/b9dbe5-4fb8-4975-a1c8-997597b2d808/1/iG3awir3vGlEuLJjKkuqxSLJIH4.mft
File: iG3awir3vGlEuLJjKkuqxSLJIH4.mft (raw, json)
Hash identifier: XHp4usJVEzh4ofzFuDkoRTpBjeNeM2vFggdrxVZ9CrA=
Subject key identifier: A7:23:47:21:15:1B:C1:66:3D:78:3F:F2:D7:CC:ED:64:E6:74:11:FB
Authority key identifier: 88:6D:DA:C2:2A:F7:BC:69:44:B8:B2:63:2A:4B:AA:C5:22:C9:20:7E
Certificate issuer: /CN=886ddac22af7bc6944b8b2632a4baac522c9207e
Certificate serial: 019FA0E095D8F54E82337D66461FF6F6BE9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iG3awir3vGlEuLJjKkuqxSLJIH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/b9dbe5-4fb8-4975-a1c8-997597b2d808/1/iG3awir3vGlEuLJjKkuqxSLJIH4.mft
Manifest number: 48
Signing time: Mon 27 Jul 2026 00:01:40 +0000
Manifest this update: Mon 27 Jul 2026 00:01:40 +0000
Manifest next update: Tue 28 Jul 2026 00:01:40 +0000
Files and hashes: 1: 1X5LpoPkiiIfqJJshC34MniOMI4.roa (hash: UQKIVsiFeFuAnLSpr7xUCS9KnEW9kjaFk6PUq4VbMUQ=)
2: iG3awir3vGlEuLJjKkuqxSLJIH4.crl (hash: a/h6T6hRbQe8hjefUsVUTo2klXXIUPC4+y64OLlWY3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/b9dbe5-4fb8-4975-a1c8-997597b2d808/1/iG3awir3vGlEuLJjKkuqxSLJIH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/b9dbe5-4fb8-4975-a1c8-997597b2d808/1/iG3awir3vGlEuLJjKkuqxSLJIH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iG3awir3vGlEuLJjKkuqxSLJIH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:e0:95:d8:f5:4e:82:33:7d:66:46:1f:f6:f6:be:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=886ddac22af7bc6944b8b2632a4baac522c9207e
Validity
Not Before: Jul 27 00:01:40 2026 GMT
Not After : Jul 28 00:01:40 2026 GMT
Subject: CN=a7234721151bc1663d783ff2d7cced64e67411fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:66:6a:5e:6c:6b:80:1a:49:78:43:0c:07:8d:
cd:db:43:df:de:d1:be:1a:8c:d8:63:31:1e:20:8f:
21:12:b7:d9:b9:6d:e6:70:39:35:0d:08:75:75:c4:
b2:b8:c1:38:5c:81:5b:3b:07:bc:d8:a7:8f:1f:10:
3d:9d:58:27:a7:bf:1f:cd:f4:26:9c:95:f5:5f:df:
f8:79:88:1c:02:c4:bc:c7:27:ca:82:70:f3:39:5d:
1d:b7:37:0e:8e:1c:b6:34:ce:fb:7d:f9:54:66:ac:
89:45:a4:23:6f:d4:90:2a:75:a8:ed:23:da:f1:09:
9f:e6:ce:98:80:8c:7d:b0:d1:4e:6f:49:9a:5e:4a:
40:b6:2b:b5:c1:4b:2c:0c:ab:f1:5e:bc:e0:68:7c:
fe:42:97:13:b4:3a:6d:81:bd:d7:99:5f:b1:19:2a:
25:11:81:37:67:a9:52:86:e8:c4:ae:89:79:2e:f0:
6a:4e:cd:7d:ea:74:ba:c2:d0:c9:20:bd:d1:20:40:
1b:e8:3d:51:b5:96:cd:b1:2c:b9:6e:23:d1:62:c9:
9e:b0:f4:da:2a:52:85:4c:75:33:81:f6:35:20:e2:
0b:6a:6c:9e:46:d8:0c:88:38:65:9e:bd:19:68:f9:
ac:43:a2:43:5c:ef:e2:04:e1:5d:49:6c:33:6e:ce:
f9:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:23:47:21:15:1B:C1:66:3D:78:3F:F2:D7:CC:ED:64:E6:74:11:FB
X509v3 Authority Key Identifier:
keyid:88:6D:DA:C2:2A:F7:BC:69:44:B8:B2:63:2A:4B:AA:C5:22:C9:20:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iG3awir3vGlEuLJjKkuqxSLJIH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b9dbe5-4fb8-4975-a1c8-997597b2d808/1/iG3awir3vGlEuLJjKkuqxSLJIH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b9dbe5-4fb8-4975-a1c8-997597b2d808/1/iG3awir3vGlEuLJjKkuqxSLJIH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:6a:fb:4b:b1:52:05:51:b1:d4:a0:49:e5:0d:dc:e4:8e:74:
8b:95:5f:ef:88:54:31:95:05:12:07:9e:5f:ef:ef:6c:fe:1f:
ce:f7:b4:17:59:00:06:bd:80:15:fd:fe:51:ff:7d:ce:11:99:
64:5f:0a:5b:36:fa:53:8b:04:e2:32:89:9d:e5:20:8d:bd:d6:
f9:2c:1f:61:35:c1:dd:2e:62:9e:f2:4c:e5:10:b9:e1:7c:dd:
d1:65:88:62:97:d5:e5:36:c1:92:6e:df:f6:50:22:2c:c6:d4:
7c:ee:d6:45:48:88:8c:24:6b:35:39:c9:ff:fc:9d:62:b0:53:
2e:1f:99:62:cf:c5:59:76:06:ae:bd:0c:dc:5e:75:90:e5:31:
7b:f2:9e:d3:1b:11:96:38:90:e3:82:64:64:ac:8c:d8:5d:40:
31:94:31:e5:93:da:d3:bb:62:39:7d:77:31:87:07:82:4e:6b:
7d:5d:9f:ac:7c:a8:ef:58:e6:99:02:9e:f2:ca:8d:7d:58:05:
74:8d:69:a0:ee:3a:6e:c2:4b:2f:a3:a5:b4:be:73:e5:64:a1:
c9:9d:2a:5a:6e:07:f1:96:b1:85:ef:4d:90:f9:c9:63:b0:50:
eb:99:49:a4:8d:81:7f:68:43:1d:6b:af:a4:e5:9a:9a:47:a8:
06:28:be:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+g4JXY9U6CM31mRh/29r6fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4NmRkYWMyMmFmN2JjNjk0NGI4YjI2MzJhNGJhYWM1MjJj
OTIwN2UwHhcNMjYwNzI3MDAwMTQwWhcNMjYwNzI4MDAwMTQwWjAzMTEwLwYDVQQD
EyhhNzIzNDcyMTE1MWJjMTY2M2Q3ODNmZjJkN2NjZWQ2NGU2NzQxMWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2ZqXmxrgBpJeEMMB43N20Pf3tG+
GozYYzEeII8hErfZuW3mcDk1DQh1dcSyuME4XIFbOwe82KePHxA9nVgnp78fzfQm
nJX1X9/4eYgcAsS8xyfKgnDzOV0dtzcOjhy2NM77fflUZqyJRaQjb9SQKnWo7SPa
8Qmf5s6YgIx9sNFOb0maXkpAtiu1wUssDKvxXrzgaHz+QpcTtDptgb3XmV+xGSol
EYE3Z6lShujErol5LvBqTs196nS6wtDJIL3RIEAb6D1RtZbNsSy5biPRYsmesPTa
KlKFTHUzgfY1IOILamyeRtgMiDhlnr0ZaPmsQ6JDXO/iBOFdSWwzbs75iwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKcjRyEVG8FmPXg/8tfM7WTmdBH7MB8GA1UdIwQY
MBaAFIht2sIq97xpRLiyYypLqsUiySB+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUczYXdpcjN2R2xFdUxKaktrdXF4U0xKSUg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9iOWRiZTUtNGZiOC00OTc1LWExYzgt
OTk3NTk3YjJkODA4LzEvaUczYXdpcjN2R2xFdUxKaktrdXF4U0xKSUg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy9iOWRiZTUtNGZiOC00OTc1LWExYzgtOTk3NTk3YjJkODA4
LzEvaUczYXdpcjN2R2xFdUxKaktrdXF4U0xKSUg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAomr7S7FS
BVGx1KBJ5Q3c5I50i5Vf74hUMZUFEgeeX+/vbP4fzve0F1kABr2AFf3+Uf99zhGZ
ZF8KWzb6U4sE4jKJneUgjb3W+SwfYTXB3S5invJM5RC54Xzd0WWIYpfV5TbBkm7f
9lAiLMbUfO7WRUiIjCRrNTnJ//ydYrBTLh+ZYs/FWXYGrr0M3F51kOUxe/Ke0xsR
ljiQ44JkZKyM2F1AMZQx5ZPa07tiOX13MYcHgk5rfV2frHyo71jmmQKe8sqNfVgF
dI1poO46bsJLL6OltL5z5WShyZ0qWm4H8Zaxhe9NkPnJY7BQ65lJpI2Bf2hDHWuv
pOWamkeoBii+OA==
-----END CERTIFICATE-----
Generated at Mon Jul 27 07:49:38 2026 by rpki-client