Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/8878d9-4f1c-426b-8a40-658120ae68e1/1/ICZNUaES0LwizqcxTLBs9aGuM-k.mft
File: ICZNUaES0LwizqcxTLBs9aGuM-k.mft (raw, json)
Hash identifier: 0+bzbkLr83e+6k1gR075hK/QfNWcB0wIvndgBWUtogY=
Subject key identifier: 35:EA:61:78:E8:C6:03:62:DB:D0:14:FE:37:7F:B9:A2:BD:26:ED:C6
Authority key identifier: 20:26:4D:51:A1:12:D0:BC:22:CE:A7:31:4C:B0:6C:F5:A1:AE:33:E9
Certificate issuer: /CN=20264d51a112d0bc22cea7314cb06cf5a1ae33e9
Certificate serial: 01A182994E62C786A0ED555D9953B0FDD4DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ICZNUaES0LwizqcxTLBs9aGuM-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/8878d9-4f1c-426b-8a40-658120ae68e1/1/ICZNUaES0LwizqcxTLBs9aGuM-k.mft
Manifest number: 1A5B
Signing time: Wed 28 Oct 2026 13:00:47 +0000
Manifest this update: Wed 28 Oct 2026 13:00:47 +0000
Manifest next update: Thu 29 Oct 2026 13:00:47 +0000
Files and hashes: 1: ICZNUaES0LwizqcxTLBs9aGuM-k.crl (hash: O6hGpksRbzLQfvpjgViLFd8uEf+/TH1p7QUziQpEtR4=)
2: TlCjshw48MI80zaCqZRdp10HXmU.roa (hash: IUaeg0F1EJZvlebFMhAdUjihSrKer72rVZfI7a/WmYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/8878d9-4f1c-426b-8a40-658120ae68e1/1/ICZNUaES0LwizqcxTLBs9aGuM-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/8878d9-4f1c-426b-8a40-658120ae68e1/1/ICZNUaES0LwizqcxTLBs9aGuM-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/ICZNUaES0LwizqcxTLBs9aGuM-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 13:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:99:4e:62:c7:86:a0:ed:55:5d:99:53:b0:fd:d4:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20264d51a112d0bc22cea7314cb06cf5a1ae33e9
Validity
Not Before: Oct 28 13:00:47 2026 GMT
Not After : Oct 29 13:00:47 2026 GMT
Subject: CN=35ea6178e8c60362dbd014fe377fb9a2bd26edc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:e1:4c:6e:f3:be:b6:cd:32:82:54:47:7a:6b:
a5:c1:cf:84:4d:a6:52:a0:e5:8f:1c:85:3c:28:08:
e9:09:50:af:16:9a:4b:95:ca:00:c4:3e:1e:8f:d9:
13:5f:4c:67:6a:fc:ab:1e:bd:2e:cf:f7:9a:11:43:
4c:33:4f:1e:9f:bf:a5:94:4f:f5:c3:c0:0d:05:c0:
ca:19:b7:fa:7d:72:ec:32:81:ce:fc:5d:1f:02:86:
ac:c6:45:0a:53:00:ae:ba:6e:cf:17:95:6b:b7:06:
1a:16:72:5a:57:a7:1b:8e:17:11:0d:d0:b4:67:85:
7c:b2:6c:d7:c4:25:a9:5e:f2:ab:1d:5e:41:31:c1:
1e:74:80:dd:48:af:6a:ee:55:52:95:6a:e2:76:35:
98:46:31:a0:77:e8:12:07:8b:18:1e:90:86:1b:7a:
d7:09:8d:d3:88:62:de:03:cd:a1:cd:e8:99:e8:35:
1d:88:c0:68:e1:5f:bf:b0:47:0a:d5:7c:bb:80:a0:
e0:5b:ef:dc:19:f2:34:37:dc:ca:63:43:2e:ed:9d:
09:d6:30:bd:d5:e3:3c:3f:74:78:93:62:db:19:12:
e1:05:35:ad:4a:85:be:6d:ed:62:05:3d:85:d5:71:
6d:a2:bc:21:18:47:97:bd:37:6c:85:09:8b:97:7e:
2f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:EA:61:78:E8:C6:03:62:DB:D0:14:FE:37:7F:B9:A2:BD:26:ED:C6
X509v3 Authority Key Identifier:
keyid:20:26:4D:51:A1:12:D0:BC:22:CE:A7:31:4C:B0:6C:F5:A1:AE:33:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ICZNUaES0LwizqcxTLBs9aGuM-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/8878d9-4f1c-426b-8a40-658120ae68e1/1/ICZNUaES0LwizqcxTLBs9aGuM-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/8878d9-4f1c-426b-8a40-658120ae68e1/1/ICZNUaES0LwizqcxTLBs9aGuM-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:ef:80:60:83:1f:fb:81:fd:e5:fe:04:1c:4e:71:9f:2e:8c:
ce:e8:d9:a9:48:3c:df:68:26:6f:c5:c7:dd:b6:25:7b:d2:a0:
af:a1:36:8b:f4:08:a4:51:24:86:0f:82:a0:bc:e4:ce:6a:c8:
ba:a0:d9:98:12:87:dc:07:32:1f:22:1a:73:c1:1f:63:9d:ce:
8d:b7:56:be:dd:e4:42:aa:29:ae:04:d5:0a:2e:b2:ac:5f:7c:
90:7d:bd:c8:bc:76:52:de:5a:07:b0:a8:ed:ea:ec:22:cc:5d:
43:13:b1:45:cd:a4:3b:85:34:a9:6b:59:42:57:bc:bd:b9:ba:
ce:33:c5:26:89:9e:d3:7e:d3:15:d2:3b:2e:df:e4:1b:ab:2d:
d4:fd:90:e4:b7:2e:83:7e:f4:c9:28:c7:65:c8:23:12:82:8b:
87:ef:de:b4:20:c6:1a:77:af:28:10:28:97:84:db:7f:d8:f0:
fb:c5:83:7c:8d:87:d0:b4:43:dc:36:39:85:62:f3:f7:a9:97:
8c:a0:5d:1b:8f:94:39:b3:7d:6d:79:a3:2c:cb:3f:16:ad:5f:
f8:9f:56:6b:e9:83:2c:f8:7a:e6:e0:51:d5:bb:db:1a:dd:21:
c5:c7:ed:1a:dd:81:8d:f3:bd:37:d4:ec:2d:d3:ef:80:4a:ab:
ca:49:e3:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGCmU5ix4ag7VVdmVOw/dTeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwMjY0ZDUxYTExMmQwYmMyMmNlYTczMTRjYjA2Y2Y1YTFh
ZTMzZTkwHhcNMjYxMDI4MTMwMDQ3WhcNMjYxMDI5MTMwMDQ3WjAzMTEwLwYDVQQD
EygzNWVhNjE3OGU4YzYwMzYyZGJkMDE0ZmUzNzdmYjlhMmJkMjZlZGM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6eFMbvO+ts0yglRHemulwc+ETaZS
oOWPHIU8KAjpCVCvFppLlcoAxD4ej9kTX0xnavyrHr0uz/eaEUNMM08en7+llE/1
w8ANBcDKGbf6fXLsMoHO/F0fAoasxkUKUwCuum7PF5VrtwYaFnJaV6cbjhcRDdC0
Z4V8smzXxCWpXvKrHV5BMcEedIDdSK9q7lVSlWridjWYRjGgd+gSB4sYHpCGG3rX
CY3TiGLeA82hzeiZ6DUdiMBo4V+/sEcK1Xy7gKDgW+/cGfI0N9zKY0Mu7Z0J1jC9
1eM8P3R4k2LbGRLhBTWtSoW+be1iBT2F1XFtorwhGEeXvTdshQmLl34vUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDXqYXjoxgNi29AU/jd/uaK9Ju3GMB8GA1UdIwQY
MBaAFCAmTVGhEtC8Is6nMUywbPWhrjPpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUNaTlVhRVMwTHdpenFjeFRMQnM5YUd1TS1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy84ODc4ZDktNGYxYy00MjZiLThhNDAt
NjU4MTIwYWU2OGUxLzEvSUNaTlVhRVMwTHdpenFjeFRMQnM5YUd1TS1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy84ODc4ZDktNGYxYy00MjZiLThhNDAtNjU4MTIwYWU2OGUx
LzEvSUNaTlVhRVMwTHdpenFjeFRMQnM5YUd1TS1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAie+AYIMf
+4H95f4EHE5xny6MzujZqUg832gmb8XH3bYle9Kgr6E2i/QIpFEkhg+CoLzkzmrI
uqDZmBKH3AcyHyIac8EfY53OjbdWvt3kQqoprgTVCi6yrF98kH29yLx2Ut5aB7Co
7ersIsxdQxOxRc2kO4U0qWtZQle8vbm6zjPFJome037TFdI7Lt/kG6st1P2Q5Lcu
g370ySjHZcgjEoKLh+/etCDGGnevKBAol4Tbf9jw+8WDfI2H0LRD3DY5hWLz96mX
jKBdG4+UObN9bXmjLMs/Fq1f+J9Wa+mDLPh65uBR1bvbGt0hxcftGt2BjfO9N9Ts
LdPvgEqryknjng==
-----END CERTIFICATE-----
Generated at Wed Oct 28 22:49:58 2026 by rpki-client