
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/bb8b5c-4964-442d-aa7f-3fc54a76ced5/1/I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.mft
File: I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.mft (raw, json)
Hash identifier: ubkMQgmBrY7Aftcj2G/J2qqBgeMz72kEbryy3hoEr4w=
Subject key identifier: 96:84:7A:AB:D8:2A:1F:E5:8B:9A:73:0E:EF:22:98:5C:2A:AB:09:B5
Authority key identifier: 23:FD:1A:A1:9E:59:32:F2:4C:27:77:E7:EC:18:D8:A6:CA:92:4C:5E
Certificate issuer: /CN=23fd1aa19e5932f24c2777e7ec18d8a6ca924c5e
Certificate serial: 019FF8DA567D537918667E3D3C1A04E3AF3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/bb8b5c-4964-442d-aa7f-3fc54a76ced5/1/I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.mft
Manifest number: 019D
Signing time: Thu 13 Aug 2026 02:01:26 +0000
Manifest this update: Thu 13 Aug 2026 02:01:26 +0000
Manifest next update: Fri 14 Aug 2026 02:01:26 +0000
Files and hashes: 1: I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.crl (hash: IjJLPc/Qp0Gch1o7MLwrhaAtPanguV1J973Sum8ue0I=)
2: M_CYpRI8SqN2pbVtKePdOnYWUSE.asa (hash: M0fsFeA37g+aMXBHQ8+8jEtPr1DuQjy82Sio4c1x2i4=)
3: b1swFPJJREwO7cx297uALIQsAqo.roa (hash: OKc3LjMWMxGzGg+rjr90PHIdb2q9ia63zVSKKzhRN5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/bb8b5c-4964-442d-aa7f-3fc54a76ced5/1/I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/bb8b5c-4964-442d-aa7f-3fc54a76ced5/1/I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f8:da:56:7d:53:79:18:66:7e:3d:3c:1a:04:e3:af:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23fd1aa19e5932f24c2777e7ec18d8a6ca924c5e
Validity
Not Before: Aug 13 02:01:26 2026 GMT
Not After : Aug 14 02:01:26 2026 GMT
Subject: CN=96847aabd82a1fe58b9a730eef22985c2aab09b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:bb:96:13:03:f3:f1:01:67:fc:82:d9:69:2d:
70:54:8c:d6:dc:9a:b9:25:c5:3d:be:1b:5f:c7:a1:
33:14:31:d7:c4:fd:13:49:fa:cf:a3:2b:50:32:3b:
08:2a:e7:fe:f9:8f:b0:ee:02:6a:71:dd:4f:3d:57:
a4:86:a9:5c:34:c9:3a:d4:ad:86:11:98:b8:b6:d5:
27:56:5d:ec:40:f4:5c:af:6f:24:16:d3:d4:a0:1a:
50:69:28:05:f0:9c:23:9a:e1:d7:df:4b:da:83:69:
f7:3b:e8:1d:fb:ad:c4:91:77:03:3a:ee:84:e0:ce:
d3:7c:dd:6d:01:f5:36:72:4a:4d:d0:d7:c5:4c:01:
53:8c:93:26:09:68:76:00:50:fb:98:d0:60:85:d2:
75:dc:94:3f:97:28:fa:ab:c7:e8:a1:ae:d8:3d:fb:
74:c2:47:b7:52:0d:6f:81:b1:b7:7b:89:61:8b:38:
36:1e:32:48:19:7a:91:79:62:b8:d0:6a:b5:31:1c:
1d:15:ab:95:46:1c:26:34:67:cf:6b:f7:92:65:3e:
ad:60:5a:95:d7:58:49:49:5d:5f:1a:88:fe:a1:10:
6b:a0:9d:03:38:4b:b8:00:b1:91:d6:39:59:af:5e:
35:a6:53:eb:54:53:62:b0:54:16:7e:4d:43:6e:59:
40:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:84:7A:AB:D8:2A:1F:E5:8B:9A:73:0E:EF:22:98:5C:2A:AB:09:B5
X509v3 Authority Key Identifier:
keyid:23:FD:1A:A1:9E:59:32:F2:4C:27:77:E7:EC:18:D8:A6:CA:92:4C:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bb8b5c-4964-442d-aa7f-3fc54a76ced5/1/I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bb8b5c-4964-442d-aa7f-3fc54a76ced5/1/I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:86:b6:3f:89:01:cb:bf:9d:42:f7:e8:37:72:f5:5b:3d:0f:
cb:19:cb:5d:85:42:ca:9c:b3:4a:45:35:56:3a:89:36:1c:03:
59:86:90:17:17:5e:c0:f5:9b:f8:dd:d9:fb:14:70:91:dd:24:
21:90:fc:02:25:16:ab:0d:f8:bd:3b:5c:86:7a:63:16:61:d5:
36:b8:7b:b3:92:0a:7f:9c:5b:ec:f0:01:a9:cd:da:dc:1b:56:
17:e0:f3:c8:de:8e:a0:0f:2c:fd:34:14:d5:40:f2:93:91:e7:
a4:04:e2:96:c3:64:00:b3:ed:09:9e:7b:3c:9c:ba:78:4d:0f:
47:fe:1f:a7:12:0b:94:1d:7b:6c:1d:d8:ec:13:20:5b:1a:89:
5f:ce:71:24:f9:58:5c:1b:57:d5:68:df:ac:84:17:71:c9:cf:
4d:21:7f:1e:01:15:7b:fc:03:d1:9e:1e:4b:22:3d:85:15:25:
dd:ca:63:73:44:c4:44:d8:8a:1d:4c:17:e0:e1:cf:6f:db:01:
ed:04:82:8c:45:ef:73:5b:b0:69:24:bc:3a:45:4f:ef:5f:a6:
95:5f:ae:85:45:db:7c:38:43:94:9b:76:86:6c:9c:6b:ec:f6:
70:a1:b3:04:27:24:81:34:d5:28:f7:36:11:9b:7a:ef:7a:82:
e6:a6:c6:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/42lZ9U3kYZn49PBoE4688MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzZmQxYWExOWU1OTMyZjI0YzI3NzdlN2VjMThkOGE2Y2E5
MjRjNWUwHhcNMjYwODEzMDIwMTI2WhcNMjYwODE0MDIwMTI2WjAzMTEwLwYDVQQD
Eyg5Njg0N2FhYmQ4MmExZmU1OGI5YTczMGVlZjIyOTg1YzJhYWIwOWI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA17uWEwPz8QFn/ILZaS1wVIzW3Jq5
JcU9vhtfx6EzFDHXxP0TSfrPoytQMjsIKuf++Y+w7gJqcd1PPVekhqlcNMk61K2G
EZi4ttUnVl3sQPRcr28kFtPUoBpQaSgF8JwjmuHX30vag2n3O+gd+63EkXcDOu6E
4M7TfN1tAfU2ckpN0NfFTAFTjJMmCWh2AFD7mNBghdJ13JQ/lyj6q8fooa7YPft0
wke3Ug1vgbG3e4lhizg2HjJIGXqReWK40Gq1MRwdFauVRhwmNGfPa/eSZT6tYFqV
11hJSV1fGoj+oRBroJ0DOEu4ALGR1jlZr141plPrVFNisFQWfk1DbllAjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJaEeqvYKh/li5pzDu8imFwqqwm1MB8GA1UdIwQY
MBaAFCP9GqGeWTLyTCd35+wY2KbKkkxeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSV8wYW9aNVpNdkpNSjNmbjdCallwc3FTVEY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9iYjhiNWMtNDk2NC00NDJkLWFhN2Yt
M2ZjNTRhNzZjZWQ1LzEvSV8wYW9aNVpNdkpNSjNmbjdCallwc3FTVEY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC9iYjhiNWMtNDk2NC00NDJkLWFhN2YtM2ZjNTRhNzZjZWQ1
LzEvSV8wYW9aNVpNdkpNSjNmbjdCallwc3FTVEY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM4a2P4kB
y7+dQvfoN3L1Wz0PyxnLXYVCypyzSkU1VjqJNhwDWYaQFxdewPWb+N3Z+xRwkd0k
IZD8AiUWqw34vTtchnpjFmHVNrh7s5IKf5xb7PABqc3a3BtWF+DzyN6OoA8s/TQU
1UDyk5HnpATilsNkALPtCZ57PJy6eE0PR/4fpxILlB17bB3Y7BMgWxqJX85xJPlY
XBtX1WjfrIQXccnPTSF/HgEVe/wD0Z4eSyI9hRUl3cpjc0TERNiKHUwX4OHPb9sB
7QSCjEXvc1uwaSS8OkVP71+mlV+uhUXbfDhDlJt2hmyca+z2cKGzBCckgTTVKPc2
EZt673qC5qbG+A==
-----END CERTIFICATE-----
Generated at Thu Aug 13 08:02:33 2026 by rpki-client