Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.mft
File: iiQuCntgz9644OA_-a7DPlq30sg.mft (raw, json)
Hash identifier: AaJlSfZX0kU/KOHz6hyEaW6mFmBJkUtyf99ZofUQAEE=
Subject key identifier: 36:61:86:9E:B6:BB:31:7C:4A:02:13:08:D8:86:D9:BE:87:80:70:C7
Authority key identifier: 8A:24:2E:0A:7B:60:CF:DE:B8:E0:E0:3F:F9:AE:C3:3E:5A:B7:D2:C8
Certificate issuer: /CN=8a242e0a7b60cfdeb8e0e03ff9aec33e5ab7d2c8
Certificate serial: 019F856803D4A0170A7EC4BB10B968635437
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iiQuCntgz9644OA_-a7DPlq30sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.mft
Manifest number: 0DCE
Signing time: Tue 21 Jul 2026 16:00:14 +0000
Manifest this update: Tue 21 Jul 2026 16:00:14 +0000
Manifest next update: Wed 22 Jul 2026 16:00:14 +0000
Files and hashes: 1: N08gX0rBlpOIRQrDxiJzV-0xqPE.roa (hash: a6M35q6nyj43xguydpClcKSfRGhKfnGhjLVr56fUpSE=)
2: iiQuCntgz9644OA_-a7DPlq30sg.crl (hash: g15FAKzXFWaHs2mduRQ5u5/YBfbbwH4WpZAyOK+tBwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iiQuCntgz9644OA_-a7DPlq30sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 15:27:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:68:03:d4:a0:17:0a:7e:c4:bb:10:b9:68:63:54:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a242e0a7b60cfdeb8e0e03ff9aec33e5ab7d2c8
Validity
Not Before: Jul 21 16:00:14 2026 GMT
Not After : Jul 22 16:00:14 2026 GMT
Subject: CN=3661869eb6bb317c4a021308d886d9be878070c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:13:9e:fa:1a:bb:e7:dd:b6:f9:80:0f:d9:f2:
22:c9:d3:a8:fe:fc:e2:a3:16:ac:d1:fd:16:1e:41:
b8:23:42:73:ca:9c:98:5e:40:6b:d8:53:2f:f1:26:
05:fb:37:e8:24:b5:47:8b:b5:c9:c8:c3:3c:12:da:
f3:39:6b:50:e6:4d:0e:15:df:05:e5:6f:3e:32:cc:
8a:9b:91:43:fc:12:d5:f4:86:82:68:fd:40:20:bb:
c4:24:17:52:e7:f8:c9:16:21:cb:37:d3:82:09:8f:
8e:b4:4e:3d:47:4d:2c:d1:1f:29:5e:63:27:d9:a8:
20:e9:04:0c:6c:2a:a8:67:e5:3c:e5:f2:67:8f:96:
91:af:bb:d7:3c:85:da:33:34:8b:64:6a:e8:8c:76:
2a:7e:69:7d:6c:e8:39:1c:c8:bf:80:7c:06:39:5d:
e9:87:b2:ba:e0:35:bc:50:f1:a4:3d:18:ff:62:0b:
52:bb:72:1c:c8:30:0c:07:2e:22:c5:92:c2:02:44:
90:f8:a7:4c:c4:99:59:3c:4b:8d:88:93:fc:49:99:
8d:b4:e1:f8:61:80:4e:3b:2b:25:58:b8:78:61:e0:
ba:a6:15:37:49:13:65:9c:cf:3b:42:ed:46:d2:58:
e8:4e:86:b8:28:cc:06:af:9e:0b:9b:1c:47:2f:23:
76:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:61:86:9E:B6:BB:31:7C:4A:02:13:08:D8:86:D9:BE:87:80:70:C7
X509v3 Authority Key Identifier:
keyid:8A:24:2E:0A:7B:60:CF:DE:B8:E0:E0:3F:F9:AE:C3:3E:5A:B7:D2:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iiQuCntgz9644OA_-a7DPlq30sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:31:d4:15:3d:27:53:4a:73:b0:d7:50:3c:02:39:74:10:00:
c6:8d:78:92:ad:76:dc:cd:28:a6:80:f1:c4:e9:ab:b1:7f:6b:
18:6d:39:e3:e6:02:19:a5:37:0b:96:3f:de:0a:f0:ed:7f:c3:
4a:b6:da:83:74:85:5c:45:39:e1:bb:c5:24:ff:ac:85:13:60:
cc:cf:af:cd:35:ee:78:06:94:13:ae:ea:07:db:17:1e:ca:8c:
09:68:55:4e:0c:ef:bb:09:c2:b8:83:6b:98:e5:82:ab:2f:c4:
c4:cf:a7:ef:34:82:cf:c2:5e:ca:a2:61:36:a0:c9:56:10:26:
61:49:26:b5:61:b8:a2:12:91:3c:a1:ec:6d:72:34:02:98:6f:
15:67:34:ed:c4:79:28:62:29:bc:3d:fa:5a:7f:f0:87:4b:f3:
40:33:1c:a3:2d:a3:26:33:3a:b1:9a:c9:9f:b6:c2:d6:65:4d:
74:e6:95:f1:90:f9:a4:60:a9:94:08:3b:b5:cf:92:b2:39:44:
19:d7:e0:c9:e4:32:1b:f1:ed:a6:06:4d:3a:5e:49:35:a7:fd:
95:17:2c:00:e3:c4:c9:30:74:07:15:f7:b4:84:3c:ae:26:96:
bd:42:80:57:e0:1c:0e:5f:ac:90:57:71:da:30:75:c8:9e:0a:
82:3e:e0:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+FaAPUoBcKfsS7ELloY1Q3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhMjQyZTBhN2I2MGNmZGViOGUwZTAzZmY5YWVjMzNlNWFi
N2QyYzgwHhcNMjYwNzIxMTYwMDE0WhcNMjYwNzIyMTYwMDE0WjAzMTEwLwYDVQQD
EygzNjYxODY5ZWI2YmIzMTdjNGEwMjEzMDhkODg2ZDliZTg3ODA3MGM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhOe+hq75922+YAP2fIiydOo/vzi
oxas0f0WHkG4I0JzypyYXkBr2FMv8SYF+zfoJLVHi7XJyMM8EtrzOWtQ5k0OFd8F
5W8+MsyKm5FD/BLV9IaCaP1AILvEJBdS5/jJFiHLN9OCCY+OtE49R00s0R8pXmMn
2agg6QQMbCqoZ+U85fJnj5aRr7vXPIXaMzSLZGrojHYqfml9bOg5HMi/gHwGOV3p
h7K64DW8UPGkPRj/YgtSu3IcyDAMBy4ixZLCAkSQ+KdMxJlZPEuNiJP8SZmNtOH4
YYBOOyslWLh4YeC6phU3SRNlnM87Qu1G0ljoToa4KMwGr54LmxxHLyN2QwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDZhhp62uzF8SgITCNiG2b6HgHDHMB8GA1UdIwQY
MBaAFIokLgp7YM/euODgP/muwz5at9LIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWlRdUNudGd6OTY0NE9BXy1hN0RQbHEzMHNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi83YmQwZTktYWJlMS00YTc0LTg5NTUt
OGE4ZDRjNjkxOGI0LzEvaWlRdUNudGd6OTY0NE9BXy1hN0RQbHEzMHNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi83YmQwZTktYWJlMS00YTc0LTg5NTUtOGE4ZDRjNjkxOGI0
LzEvaWlRdUNudGd6OTY0NE9BXy1hN0RQbHEzMHNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXDHUFT0n
U0pzsNdQPAI5dBAAxo14kq123M0opoDxxOmrsX9rGG054+YCGaU3C5Y/3grw7X/D
Srbag3SFXEU54bvFJP+shRNgzM+vzTXueAaUE67qB9sXHsqMCWhVTgzvuwnCuINr
mOWCqy/ExM+n7zSCz8JeyqJhNqDJVhAmYUkmtWG4ohKRPKHsbXI0AphvFWc07cR5
KGIpvD36Wn/wh0vzQDMcoy2jJjM6sZrJn7bC1mVNdOaV8ZD5pGCplAg7tc+SsjlE
GdfgyeQyG/HtpgZNOl5JNaf9lRcsAOPEyTB0BxX3tIQ8riaWvUKAV+AcDl+skFdx
2jB1yJ4Kgj7ggw==
-----END CERTIFICATE-----
Generated at Wed Jul 22 00:08:11 2026 by rpki-client