Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a02c08-f31b-48c5-ad47-f83b8d04087c/1/iFwJUi9jX8r6KbzrrHLIlOT_7tI.mft
File: iFwJUi9jX8r6KbzrrHLIlOT_7tI.mft (raw, json)
Hash identifier: CA640qpkzvQjSm/gygHZat4/I4cU+Q5rBkD3JKE3ijc=
Subject key identifier: AC:2E:3B:18:6F:C0:02:18:58:98:32:1D:AC:D4:A2:F6:33:7B:DD:DF
Authority key identifier: 88:5C:09:52:2F:63:5F:CA:FA:29:BC:EB:AC:72:C8:94:E4:FF:EE:D2
Certificate issuer: /CN=885c09522f635fcafa29bcebac72c894e4ffeed2
Certificate serial: 019F85D7183362C09E4B0056AB93527168B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFwJUi9jX8r6KbzrrHLIlOT_7tI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a02c08-f31b-48c5-ad47-f83b8d04087c/1/iFwJUi9jX8r6KbzrrHLIlOT_7tI.mft
Manifest number: 0474
Signing time: Tue 21 Jul 2026 18:01:33 +0000
Manifest this update: Tue 21 Jul 2026 18:01:33 +0000
Manifest next update: Wed 22 Jul 2026 18:01:33 +0000
Files and hashes: 1: 3IMviFqKeTkgcM4hJ3DCovEJPT4.roa (hash: PJ8bbhBGDwD8QZsH/L9/+WbI+Jn53tual+W0DILWDvw=)
2: iFwJUi9jX8r6KbzrrHLIlOT_7tI.crl (hash: eqkRouE3NDuq5AB+20fNZkFfHC1pMLg8m55AB9aUL+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a02c08-f31b-48c5-ad47-f83b8d04087c/1/iFwJUi9jX8r6KbzrrHLIlOT_7tI.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/a02c08-f31b-48c5-ad47-f83b8d04087c/1/iFwJUi9jX8r6KbzrrHLIlOT_7tI.mft
rsync://rpki.ripe.net/repository/DEFAULT/iFwJUi9jX8r6KbzrrHLIlOT_7tI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:d7:18:33:62:c0:9e:4b:00:56:ab:93:52:71:68:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885c09522f635fcafa29bcebac72c894e4ffeed2
Validity
Not Before: Jul 21 18:01:33 2026 GMT
Not After : Jul 22 18:01:33 2026 GMT
Subject: CN=ac2e3b186fc002185898321dacd4a2f6337bdddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:61:40:80:d2:e3:8b:a5:8e:9c:a3:7a:e8:3e:
29:23:9b:47:da:79:eb:ed:45:9d:b6:2e:33:49:eb:
38:7d:36:3e:2e:d2:45:8f:17:8b:db:94:01:48:1a:
b8:94:a0:ec:18:cf:1f:c8:a0:38:ab:da:10:86:fd:
5e:b1:7c:40:89:e2:e6:6e:45:cf:75:0d:29:ad:c0:
73:50:86:85:e7:73:4a:6a:49:02:02:23:44:20:72:
ea:03:74:f5:9a:40:62:73:94:f9:87:41:26:e8:1f:
93:25:f7:d7:50:0a:4e:cd:a8:a0:8e:f1:c2:7e:0e:
ca:ec:cd:82:7d:3c:2c:83:b1:55:6e:b7:b7:d7:36:
b7:c6:be:0f:97:6a:c9:56:75:73:fd:bc:ea:18:bb:
40:21:56:c1:d0:2c:3f:df:6b:38:3a:5f:74:87:5f:
60:b8:14:d1:71:68:6f:7c:23:01:e2:87:27:27:9c:
d8:1c:a4:32:de:59:ec:fe:46:3d:9f:02:cb:8e:be:
2d:85:f0:20:6c:7c:cd:98:07:57:58:36:e6:da:c5:
96:eb:09:b9:03:ff:0a:7c:c0:b0:43:c7:16:76:aa:
7f:6d:70:42:1f:d6:ba:fa:61:52:70:69:ff:0f:75:
84:e7:ba:a9:7e:fc:c6:6e:5d:9b:a9:fc:54:28:8a:
21:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:2E:3B:18:6F:C0:02:18:58:98:32:1D:AC:D4:A2:F6:33:7B:DD:DF
X509v3 Authority Key Identifier:
keyid:88:5C:09:52:2F:63:5F:CA:FA:29:BC:EB:AC:72:C8:94:E4:FF:EE:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFwJUi9jX8r6KbzrrHLIlOT_7tI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a02c08-f31b-48c5-ad47-f83b8d04087c/1/iFwJUi9jX8r6KbzrrHLIlOT_7tI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a02c08-f31b-48c5-ad47-f83b8d04087c/1/iFwJUi9jX8r6KbzrrHLIlOT_7tI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:9a:19:53:93:21:b3:68:e1:60:3f:89:b0:3b:49:92:71:6f:
2d:45:5a:14:8b:1c:81:08:b7:8c:45:58:12:eb:dd:5b:57:56:
2f:58:7c:03:97:f9:4e:6d:91:2e:88:b4:b0:73:c7:45:a0:b1:
68:30:ce:d9:d8:21:25:17:43:93:73:40:6b:fd:e9:4b:3d:6c:
58:41:d8:10:9e:44:e4:94:bd:e2:fc:3a:88:6c:f6:4b:43:1d:
ff:08:8c:32:6c:2e:09:1c:7f:7e:e8:05:4d:1d:20:22:cd:16:
b3:4e:e3:9c:88:e9:36:dd:29:ee:66:d8:84:bf:86:cb:ba:09:
91:d8:cb:46:ba:c8:d4:8a:b0:97:92:7e:18:08:31:3a:66:76:
47:44:10:0d:88:28:de:bd:81:69:9f:31:b3:45:63:a5:d4:04:
fb:68:a3:5c:54:dc:e6:8e:f8:73:7c:3a:f9:92:4d:d7:31:b3:
79:cf:df:4f:1c:9d:26:e9:dc:c3:29:e0:2d:67:da:49:4a:fd:
f2:da:51:39:ff:38:e8:7d:36:ef:65:1a:c1:55:34:8b:75:af:
e4:e6:a4:8e:ca:c7:af:76:4e:af:87:b1:69:ce:e6:60:d2:72:
8d:b6:e7:fb:c1:2e:7e:3d:6a:9d:1a:63:0a:a0:44:b7:c0:1f:
16:ac:7a:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+F1xgzYsCeSwBWq5NScWixMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4NWMwOTUyMmY2MzVmY2FmYTI5YmNlYmFjNzJjODk0ZTRm
ZmVlZDIwHhcNMjYwNzIxMTgwMTMzWhcNMjYwNzIyMTgwMTMzWjAzMTEwLwYDVQQD
EyhhYzJlM2IxODZmYzAwMjE4NTg5ODMyMWRhY2Q0YTJmNjMzN2JkZGRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1mFAgNLji6WOnKN66D4pI5tH2nnr
7UWdti4zSes4fTY+LtJFjxeL25QBSBq4lKDsGM8fyKA4q9oQhv1esXxAieLmbkXP
dQ0prcBzUIaF53NKakkCAiNEIHLqA3T1mkBic5T5h0Em6B+TJffXUApOzaigjvHC
fg7K7M2CfTwsg7FVbre31za3xr4Pl2rJVnVz/bzqGLtAIVbB0Cw/32s4Ol90h19g
uBTRcWhvfCMB4ocnJ5zYHKQy3lns/kY9nwLLjr4thfAgbHzNmAdXWDbm2sWW6wm5
A/8KfMCwQ8cWdqp/bXBCH9a6+mFScGn/D3WE57qpfvzGbl2bqfxUKIohFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKwuOxhvwAIYWJgyHazUovYze93fMB8GA1UdIwQY
MBaAFIhcCVIvY1/K+im866xyyJTk/+7SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUZ3SlVpOWpYOHI2S2J6cnJITElsT1RfN3RJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hMDJjMDgtZjMxYi00OGM1LWFkNDct
ZjgzYjhkMDQwODdjLzEvaUZ3SlVpOWpYOHI2S2J6cnJITElsT1RfN3RJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9hMDJjMDgtZjMxYi00OGM1LWFkNDctZjgzYjhkMDQwODdj
LzEvaUZ3SlVpOWpYOHI2S2J6cnJITElsT1RfN3RJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv5oZU5Mh
s2jhYD+JsDtJknFvLUVaFIscgQi3jEVYEuvdW1dWL1h8A5f5Tm2RLoi0sHPHRaCx
aDDO2dghJRdDk3NAa/3pSz1sWEHYEJ5E5JS94vw6iGz2S0Md/wiMMmwuCRx/fugF
TR0gIs0Ws07jnIjpNt0p7mbYhL+Gy7oJkdjLRrrI1Iqwl5J+GAgxOmZ2R0QQDYgo
3r2BaZ8xs0VjpdQE+2ijXFTc5o74c3w6+ZJN1zGzec/fTxydJuncwyngLWfaSUr9
8tpROf846H0272UawVU0i3Wv5OakjsrHr3ZOr4exac7mYNJyjbbn+8Eufj1qnRpj
CqBEt8AfFqx6rA==
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:51:05 2026 by rpki-client