Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft
File: IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft (raw, json)
Hash identifier: URiiasPbonFIOMFRNfC38YE+Ag1U3aC45D0jKp5X6dk=
Subject key identifier: BE:14:B9:69:2C:C8:0F:AE:03:CD:50:D0:BD:B8:F4:23:68:DB:2C:E1
Authority key identifier: 20:59:45:44:3C:5B:25:E4:DC:F6:20:3F:06:1A:C0:4D:36:87:15:54
Certificate issuer: /CN=205945443c5b25e4dcf6203f061ac04d36871554
Certificate serial: 01A0032631C1461D43BAFC5B0CDACCD67B99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IFlFRDxbJeTc9iA_BhrATTaHFVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft
Manifest number: 1A05
Signing time: Sat 15 Aug 2026 02:00:29 +0000
Manifest this update: Sat 15 Aug 2026 02:00:29 +0000
Manifest next update: Sun 16 Aug 2026 02:00:29 +0000
Files and hashes: 1: GxGTOBMeu2N1blMJyGtOJ7pqxXk.roa (hash: zCml5uGaaanR/bHz+EfmHiD1+eZh00uY8Hx7W5hVHSg=)
2: IFlFRDxbJeTc9iA_BhrATTaHFVQ.crl (hash: S47oe2P6doxh+NWNlnrCKVJ3w7bKBJKNkjESoJvyX7s=)
3: YjNimSSaeGK3n8MwVhk-9Cqv_GI.asa (hash: +F1lNWpsiSJ4ZGqtn3gB2gX0yzl211t0f9qJlyvkLm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IFlFRDxbJeTc9iA_BhrATTaHFVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:03:26:31:c1:46:1d:43:ba:fc:5b:0c:da:cc:d6:7b:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=205945443c5b25e4dcf6203f061ac04d36871554
Validity
Not Before: Aug 15 02:00:29 2026 GMT
Not After : Aug 16 02:00:29 2026 GMT
Subject: CN=be14b9692cc80fae03cd50d0bdb8f42368db2ce1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fa:aa:3e:f2:f2:fb:b9:8c:05:cf:4f:28:45:
0d:65:09:5c:43:84:0c:3d:11:6e:99:f5:3c:b1:3b:
86:16:03:e3:e3:a1:22:3f:26:83:98:5c:92:c7:ee:
f4:bc:08:28:0d:ad:a1:f9:2b:f5:58:f3:c3:14:da:
18:03:f8:03:3d:5b:fd:95:08:9d:bf:63:06:95:f1:
0c:b4:c8:d1:26:85:83:fe:c4:d3:22:74:dd:e8:77:
8a:80:31:e2:5e:69:ce:44:36:90:aa:43:60:e4:5b:
44:45:9d:07:4e:b9:8f:cb:ed:3e:48:ac:50:88:be:
ac:b7:69:9a:d2:d3:dc:a7:41:0b:4b:2a:b7:0a:4c:
6c:d1:fb:22:0d:cc:c3:a8:e6:10:f8:0a:39:8b:89:
c7:84:5c:c6:0e:10:93:d4:eb:9e:8f:2e:0e:dc:fd:
55:4a:a6:b3:8c:e8:62:14:c1:5e:ee:37:57:42:97:
91:d7:0a:80:a6:2d:5a:a7:77:62:82:61:6d:71:cc:
5a:71:23:9e:c1:3d:08:08:71:74:9e:1e:e9:c9:1f:
89:d7:c3:0d:59:6c:f1:a9:b2:2c:92:5e:b4:cd:66:
50:31:a7:ce:69:41:67:c3:22:a4:cc:f3:e3:f0:78:
ff:10:4f:7d:e9:39:89:83:6c:73:9f:00:c9:99:cf:
6f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:14:B9:69:2C:C8:0F:AE:03:CD:50:D0:BD:B8:F4:23:68:DB:2C:E1
X509v3 Authority Key Identifier:
keyid:20:59:45:44:3C:5B:25:E4:DC:F6:20:3F:06:1A:C0:4D:36:87:15:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IFlFRDxbJeTc9iA_BhrATTaHFVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:b5:47:36:a1:6d:bf:c4:75:93:01:e1:c2:2f:c7:07:98:40:
2a:93:16:db:4d:c5:28:06:20:08:5a:0c:bb:1b:0d:9b:e9:db:
ab:b8:a9:db:39:df:4a:91:d8:60:5a:5b:11:73:b6:3f:ee:5f:
fd:62:1d:a9:53:5d:f4:77:af:c0:3f:73:c0:68:f0:30:97:a2:
91:8a:0d:79:cf:54:91:e1:1e:52:be:50:80:5b:ce:fd:8b:73:
a2:77:64:60:de:7b:e8:47:c8:98:d0:6e:4f:82:61:86:88:45:
b6:90:03:f0:bf:3e:82:11:7b:05:c8:ac:e2:49:8f:b1:3f:d1:
46:40:b6:68:9d:8f:7c:82:07:1c:eb:f7:4e:a1:f8:89:8d:8a:
49:e6:74:66:82:80:94:02:af:60:ae:a0:c2:e1:ec:4d:d7:a0:
4d:05:d6:79:78:94:80:68:e6:80:85:98:8d:55:8f:75:47:f2:
2c:60:c5:b7:fd:4a:48:40:6e:07:b0:e5:90:e8:69:b8:8a:a6:
e6:a5:b2:97:b2:ac:21:1a:b2:0a:25:df:b7:8c:01:0b:07:bc:
9e:4e:c6:08:4e:cd:58:8e:43:42:e2:65:3f:95:9c:17:0e:1c:
65:eb:52:8e:f2:1c:96:91:f1:37:85:f4:c8:a9:95:6c:f4:48:
51:82:e2:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaADJjHBRh1DuvxbDNrM1nuZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwNTk0NTQ0M2M1YjI1ZTRkY2Y2MjAzZjA2MWFjMDRkMzY4
NzE1NTQwHhcNMjYwODE1MDIwMDI5WhcNMjYwODE2MDIwMDI5WjAzMTEwLwYDVQQD
EyhiZTE0Yjk2OTJjYzgwZmFlMDNjZDUwZDBiZGI4ZjQyMzY4ZGIyY2UxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvqqPvLy+7mMBc9PKEUNZQlcQ4QM
PRFumfU8sTuGFgPj46EiPyaDmFySx+70vAgoDa2h+Sv1WPPDFNoYA/gDPVv9lQid
v2MGlfEMtMjRJoWD/sTTInTd6HeKgDHiXmnORDaQqkNg5FtERZ0HTrmPy+0+SKxQ
iL6st2ma0tPcp0ELSyq3Ckxs0fsiDczDqOYQ+Ao5i4nHhFzGDhCT1Ouejy4O3P1V
SqazjOhiFMFe7jdXQpeR1wqApi1ap3digmFtccxacSOewT0ICHF0nh7pyR+J18MN
WWzxqbIskl60zWZQMafOaUFnwyKkzPPj8Hj/EE996TmJg2xznwDJmc9vawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL4UuWksyA+uA81Q0L249CNo2yzhMB8GA1UdIwQY
MBaAFCBZRUQ8WyXk3PYgPwYawE02hxVUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUZsRlJEeGJKZVRjOWlBX0JockFUVGFIRlZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC85NDUzMDUtMGE2My00YzJmLWFhZmYt
Y2IyMjBiNzE5ZTc4LzEvSUZsRlJEeGJKZVRjOWlBX0JockFUVGFIRlZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC85NDUzMDUtMGE2My00YzJmLWFhZmYtY2IyMjBiNzE5ZTc4
LzEvSUZsRlJEeGJKZVRjOWlBX0JockFUVGFIRlZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZbVHNqFt
v8R1kwHhwi/HB5hAKpMW203FKAYgCFoMuxsNm+nbq7ip2znfSpHYYFpbEXO2P+5f
/WIdqVNd9HevwD9zwGjwMJeikYoNec9UkeEeUr5QgFvO/YtzondkYN576EfImNBu
T4JhhohFtpAD8L8+ghF7Bcis4kmPsT/RRkC2aJ2PfIIHHOv3TqH4iY2KSeZ0ZoKA
lAKvYK6gwuHsTdegTQXWeXiUgGjmgIWYjVWPdUfyLGDFt/1KSEBuB7DlkOhpuIqm
5qWyl7KsIRqyCiXft4wBCwe8nk7GCE7NWI5DQuJlP5WcFw4cZetSjvIclpHxN4X0
yKmVbPRIUYLiyQ==
-----END CERTIFICATE-----
Generated at Sat Aug 15 08:43:28 2026 by rpki-client