Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft
File: IXt6sGK8gos0jQUwbmU1R0i51tY.mft (raw, json)
Hash identifier: 6V+JGFZu0HDa86u2a15sZA94O+bAPNR5+gNIGWcYVVI=
Subject key identifier: 8A:11:E6:B3:F2:2B:24:7D:C4:53:33:64:2A:1F:E5:2C:11:63:C5:8A
Authority key identifier: 21:7B:7A:B0:62:BC:82:8B:34:8D:05:30:6E:65:35:47:48:B9:D6:D6
Certificate issuer: /CN=217b7ab062bc828b348d05306e65354748b9d6d6
Certificate serial: 019F0A7544E9EF06732EEFB00B9B5B7AF3B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft
Manifest number: 0D38
Signing time: Sat 27 Jun 2026 19:01:25 +0000
Manifest this update: Sat 27 Jun 2026 19:01:25 +0000
Manifest next update: Sun 28 Jun 2026 19:01:25 +0000
Files and hashes: 1: Ha1zzuR5phsP43HrNuYV02K8JmM.roa (hash: OIS0Kv+EMSNX8skAuIawL3We9Kkncv5+iFQyWWdpmbk=)
2: IXt6sGK8gos0jQUwbmU1R0i51tY.crl (hash: f9uAXxk7mk+fEZdmlqJvuzx9hZanfcHeXo/xl4+JS+w=)
3: SqHxe2uwvaoACopO4_oazg_nels.roa (hash: 9zPi+ENkqVQXBQ+5cr5nLO5x0488pkDK6RTbeEiOUlc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Jun 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:0a:75:44:e9:ef:06:73:2e:ef:b0:0b:9b:5b:7a:f3:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=217b7ab062bc828b348d05306e65354748b9d6d6
Validity
Not Before: Jun 27 19:01:25 2026 GMT
Not After : Jun 28 19:01:25 2026 GMT
Subject: CN=8a11e6b3f22b247dc45333642a1fe52c1163c58a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d9:45:fd:dc:70:44:56:b5:f8:45:f9:6d:5d:
3f:77:41:27:db:94:23:ef:35:9b:a2:0e:8d:d8:d4:
48:53:e6:69:40:73:7e:6b:bb:f2:6f:79:fa:28:32:
49:9b:15:9c:e8:a2:b8:45:20:11:de:d8:2d:e9:57:
5e:a8:70:0d:f7:23:4f:6b:c5:2f:11:84:5b:3e:ae:
3b:b0:ad:d5:38:3a:38:b7:6a:1f:2a:9b:22:fa:c6:
bb:b0:d3:c7:bc:f3:61:3c:d8:b0:47:4a:57:22:50:
87:2e:76:f2:89:9b:49:fb:86:13:55:99:0a:03:f8:
c6:85:a3:e1:9f:a3:98:f4:82:47:88:bf:e6:66:30:
d1:cd:af:63:8e:44:eb:b4:c9:ee:98:1d:48:86:20:
60:78:03:15:e2:d1:24:13:f8:7d:37:9c:89:ca:45:
33:05:eb:30:e6:8b:12:79:99:fb:9e:97:94:54:67:
fa:55:72:c5:cc:05:6b:33:05:7e:ba:8a:b1:eb:de:
30:ee:ee:d6:44:9a:43:06:ee:b2:5e:6e:bf:49:3d:
04:e2:98:5b:70:0b:b4:82:37:9e:a5:f0:4d:1c:78:
83:45:94:ab:78:d8:b4:18:20:9c:c6:24:e3:a1:26:
23:10:70:d9:04:f6:ed:51:42:0d:73:32:78:4f:01:
5d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:11:E6:B3:F2:2B:24:7D:C4:53:33:64:2A:1F:E5:2C:11:63:C5:8A
X509v3 Authority Key Identifier:
keyid:21:7B:7A:B0:62:BC:82:8B:34:8D:05:30:6E:65:35:47:48:B9:D6:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:06:c5:95:d2:03:23:69:a8:32:d8:a9:f4:f1:5c:53:92:45:
9b:0a:f6:3b:02:19:6f:76:5a:f1:29:0d:8a:9f:3f:bf:b8:77:
c4:65:a5:92:3c:ac:37:81:6a:72:7f:a9:1d:59:f4:7a:b0:ae:
d1:43:c3:84:4f:0b:0d:b9:5e:51:f8:cd:de:75:be:b5:43:da:
28:23:71:08:bd:be:93:ba:19:04:50:59:e0:bb:33:2d:01:5c:
62:64:e3:9a:b9:ac:e6:25:64:57:c6:b1:66:ba:87:9f:8f:89:
77:db:b8:5b:ee:57:48:4c:ff:02:6d:3a:7f:d0:66:2d:ed:3f:
31:e1:7c:a9:93:74:fe:d0:17:b6:70:a7:3b:98:9b:a6:ec:7b:
7b:e0:95:c6:16:fd:60:20:e7:5f:2c:fa:37:fe:d8:8e:a2:a9:
d6:e6:4b:61:b5:5c:8b:a5:fd:a6:a3:4c:0d:53:37:8a:b1:c8:
33:29:6d:dc:51:08:36:96:3e:b9:36:5b:fb:c4:69:d7:99:89:
f0:04:16:2c:63:05:76:99:44:67:6f:b5:9c:da:d8:f5:39:cc:
1f:0e:b3:91:cc:b0:78:57:76:67:8d:f2:5a:a0:da:ec:2c:5c:
1d:d2:2f:34:fe:c3:3f:c4:04:e8:27:4d:8e:92:2c:86:7c:e1:
3e:ed:dd:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8KdUTp7wZzLu+wC5tbevOwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxN2I3YWIwNjJiYzgyOGIzNDhkMDUzMDZlNjUzNTQ3NDhi
OWQ2ZDYwHhcNMjYwNjI3MTkwMTI1WhcNMjYwNjI4MTkwMTI1WjAzMTEwLwYDVQQD
Eyg4YTExZTZiM2YyMmIyNDdkYzQ1MzMzNjQyYTFmZTUyYzExNjNjNThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtlF/dxwRFa1+EX5bV0/d0En25Qj
7zWbog6N2NRIU+ZpQHN+a7vyb3n6KDJJmxWc6KK4RSAR3tgt6VdeqHAN9yNPa8Uv
EYRbPq47sK3VODo4t2ofKpsi+sa7sNPHvPNhPNiwR0pXIlCHLnbyiZtJ+4YTVZkK
A/jGhaPhn6OY9IJHiL/mZjDRza9jjkTrtMnumB1IhiBgeAMV4tEkE/h9N5yJykUz
Besw5osSeZn7npeUVGf6VXLFzAVrMwV+uoqx694w7u7WRJpDBu6yXm6/ST0E4phb
cAu0gjeepfBNHHiDRZSreNi0GCCcxiTjoSYjEHDZBPbtUUINczJ4TwFdJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIoR5rPyKyR9xFMzZCof5SwRY8WKMB8GA1UdIwQY
MBaAFCF7erBivIKLNI0FMG5lNUdIudbWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVh0NnNHSzhnb3MwalFVd2JtVTFSMGk1MXRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9hOGRhZGMtNjExYi00MDYzLWFkYjYt
NTViNjU5Y2Q4MmJiLzEvSVh0NnNHSzhnb3MwalFVd2JtVTFSMGk1MXRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9hOGRhZGMtNjExYi00MDYzLWFkYjYtNTViNjU5Y2Q4MmJi
LzEvSVh0NnNHSzhnb3MwalFVd2JtVTFSMGk1MXRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADwbFldID
I2moMtip9PFcU5JFmwr2OwIZb3Za8SkNip8/v7h3xGWlkjysN4Fqcn+pHVn0erCu
0UPDhE8LDbleUfjN3nW+tUPaKCNxCL2+k7oZBFBZ4LszLQFcYmTjmrms5iVkV8ax
ZrqHn4+Jd9u4W+5XSEz/Am06f9BmLe0/MeF8qZN0/tAXtnCnO5ibpux7e+CVxhb9
YCDnXyz6N/7YjqKp1uZLYbVci6X9pqNMDVM3irHIMylt3FEINpY+uTZb+8Rp15mJ
8AQWLGMFdplEZ2+1nNrY9TnMHw6zkcyweFd2Z43yWqDa7CxcHdIvNP7DP8QE6CdN
jpIshnzhPu3dPQ==
-----END CERTIFICATE-----
Generated at Sat Jun 27 22:54:07 2026 by rpki-client