Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.mft
File: IURHLRaXNp2DK6Em5eFyMqzV9fM.mft (raw, json)
Hash identifier: efkcDkIen+/JupMjZOfDtiOLoqq7gUiYJ85O/+AZXwc=
Subject key identifier: 4F:C4:5F:FF:42:F1:28:E9:C4:AB:59:0F:F0:0B:A4:11:64:16:D2:C9
Authority key identifier: 21:44:47:2D:16:97:36:9D:83:2B:A1:26:E5:E1:72:32:AC:D5:F5:F3
Certificate issuer: /CN=2144472d1697369d832ba126e5e17232acd5f5f3
Certificate serial: 019FFA91ED1B63A389BFECF2A29A54C0FEBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IURHLRaXNp2DK6Em5eFyMqzV9fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.mft
Manifest number: 19FD
Signing time: Thu 13 Aug 2026 10:01:35 +0000
Manifest this update: Thu 13 Aug 2026 10:01:35 +0000
Manifest next update: Fri 14 Aug 2026 10:01:35 +0000
Files and hashes: 1: DGukc6480PTm8A6qHwc8DlqO2P4.roa (hash: f9ejFsVfN9O7L7m90T24ZiiptOfoC8NK6uhiGNPuCps=)
2: IURHLRaXNp2DK6Em5eFyMqzV9fM.crl (hash: pa2sj+zLBTqFRqp2kMfu+M7WVD53ojbd5Q7ZUqejz7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IURHLRaXNp2DK6Em5eFyMqzV9fM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 10:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fa:91:ed:1b:63:a3:89:bf:ec:f2:a2:9a:54:c0:fe:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2144472d1697369d832ba126e5e17232acd5f5f3
Validity
Not Before: Aug 13 10:01:35 2026 GMT
Not After : Aug 14 10:01:35 2026 GMT
Subject: CN=4fc45fff42f128e9c4ab590ff00ba4116416d2c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:bc:00:46:78:9d:33:be:52:34:63:bc:43:c1:
55:2d:fd:52:e7:48:be:09:a9:cf:d3:66:09:c6:10:
c6:e2:6b:6d:1d:51:c5:48:9a:1e:54:80:c1:a1:40:
ee:01:a5:98:de:40:d2:22:d7:30:5c:6c:9a:59:5b:
0b:62:19:5c:0f:66:62:78:a1:c8:8f:e0:22:bc:e9:
16:b5:28:ed:6e:c2:a4:e9:2c:c0:2f:36:16:c3:f6:
57:22:9d:68:1a:2f:02:57:29:a5:4d:59:d2:8d:33:
53:89:89:1c:b0:eb:68:60:79:c4:a1:e3:16:e3:00:
61:18:3b:09:ba:65:b1:26:c8:f4:b3:a7:96:e1:96:
11:b4:51:62:09:bc:f0:85:2f:1b:fd:bc:a8:ab:27:
e5:93:fa:2f:17:ce:00:b8:3c:37:42:1d:c8:27:3e:
5a:ee:9f:b7:e2:f3:ef:ad:1f:9b:b4:ec:d9:f7:4d:
14:3d:b7:9d:61:06:ad:ac:49:a0:8b:1b:88:7b:80:
36:b7:67:48:f5:96:9f:c7:c8:10:cc:04:e6:6b:53:
db:65:44:6c:7c:26:96:e4:80:a2:ce:5d:4f:39:20:
23:31:e8:bf:ff:20:9b:85:f9:fd:f1:e1:72:93:e9:
38:95:f5:f7:4f:05:80:e5:4b:ed:09:9b:9d:7e:8e:
56:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:C4:5F:FF:42:F1:28:E9:C4:AB:59:0F:F0:0B:A4:11:64:16:D2:C9
X509v3 Authority Key Identifier:
keyid:21:44:47:2D:16:97:36:9D:83:2B:A1:26:E5:E1:72:32:AC:D5:F5:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IURHLRaXNp2DK6Em5eFyMqzV9fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:46:8d:2d:d2:94:96:99:46:d5:50:0a:e4:41:74:38:b9:fd:
da:ab:a1:00:c9:b0:c8:63:ea:1c:06:b6:58:39:fc:b6:9c:87:
cd:ec:d2:96:77:87:5d:76:9b:70:dc:f3:f5:2d:ea:7c:47:ba:
dc:c4:53:41:04:93:02:ec:6d:9a:24:60:e6:a7:c0:78:c5:bc:
3a:c5:43:68:38:a1:2d:4b:ee:13:2d:9f:1b:5f:83:39:20:0c:
89:60:2e:44:c6:10:b1:c0:ab:5c:11:f6:53:c5:b7:df:4b:55:
fe:6f:72:ff:63:f0:18:5c:2f:ce:8c:45:b1:02:a5:e0:c7:57:
3e:03:3a:bc:9c:36:ab:0f:12:5a:98:35:2d:cd:23:71:70:cb:
5b:ec:2f:3d:d0:6e:3a:ad:3c:fe:bf:74:0c:35:5a:cb:29:7c:
1b:1a:d3:cf:b1:cf:82:00:52:94:42:9e:bf:88:27:46:b8:4d:
b8:5b:3a:34:90:7a:d0:6c:d1:1b:38:39:3d:d2:50:b4:ca:39:
f1:63:3b:48:48:16:1f:da:d3:a7:93:bf:e4:f6:7a:7c:53:fd:
5f:73:3c:8a:89:32:56:28:6e:a6:5c:d1:ee:e2:1b:38:ed:23:
90:12:94:a4:0a:c6:0d:99:4d:bc:5a:8d:c2:29:ac:eb:96:07:
f4:8d:0c:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/6ke0bY6OJv+zyoppUwP67MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxNDQ0NzJkMTY5NzM2OWQ4MzJiYTEyNmU1ZTE3MjMyYWNk
NWY1ZjMwHhcNMjYwODEzMTAwMTM1WhcNMjYwODE0MTAwMTM1WjAzMTEwLwYDVQQD
Eyg0ZmM0NWZmZjQyZjEyOGU5YzRhYjU5MGZmMDBiYTQxMTY0MTZkMmM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3bwARnidM75SNGO8Q8FVLf1S50i+
CanP02YJxhDG4mttHVHFSJoeVIDBoUDuAaWY3kDSItcwXGyaWVsLYhlcD2ZieKHI
j+AivOkWtSjtbsKk6SzALzYWw/ZXIp1oGi8CVymlTVnSjTNTiYkcsOtoYHnEoeMW
4wBhGDsJumWxJsj0s6eW4ZYRtFFiCbzwhS8b/byoqyflk/ovF84AuDw3Qh3IJz5a
7p+34vPvrR+btOzZ900UPbedYQatrEmgixuIe4A2t2dI9Zafx8gQzATma1PbZURs
fCaW5ICizl1POSAjMei//yCbhfn98eFyk+k4lfX3TwWA5UvtCZudfo5WJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE/EX/9C8SjpxKtZD/ALpBFkFtLJMB8GA1UdIwQY
MBaAFCFERy0WlzadgyuhJuXhcjKs1fXzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVVSSExSYVhOcDJESzZFbTVlRnlNcXpWOWZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9kYzIwNWItYWY1ZC00ZGZmLTg1MmEt
ODc3ZDMxYzE2MWMzLzEvSVVSSExSYVhOcDJESzZFbTVlRnlNcXpWOWZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi9kYzIwNWItYWY1ZC00ZGZmLTg1MmEtODc3ZDMxYzE2MWMz
LzEvSVVSSExSYVhOcDJESzZFbTVlRnlNcXpWOWZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWUaNLdKU
lplG1VAK5EF0OLn92quhAMmwyGPqHAa2WDn8tpyHzezSlneHXXabcNzz9S3qfEe6
3MRTQQSTAuxtmiRg5qfAeMW8OsVDaDihLUvuEy2fG1+DOSAMiWAuRMYQscCrXBH2
U8W330tV/m9y/2PwGFwvzoxFsQKl4MdXPgM6vJw2qw8SWpg1Lc0jcXDLW+wvPdBu
Oq08/r90DDVayyl8GxrTz7HPggBSlEKev4gnRrhNuFs6NJB60GzRGzg5PdJQtMo5
8WM7SEgWH9rTp5O/5PZ6fFP9X3M8iokyVihuplzR7uIbOO0jkBKUpArGDZlNvFqN
wims65YH9I0MhQ==
-----END CERTIFICATE-----
Generated at Thu Aug 13 13:59:56 2026 by rpki-client