Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.mft
File: IxMMmax6pAhscXVxFKQWP4AJAUI.mft (raw, json)
Hash identifier: hs7fmh/WVzFF2/1M3JxcJeNPC6NZ0M/O6MRDLSA7mKs=
Subject key identifier: CB:8E:2A:3A:28:F4:96:5D:59:D7:3C:9A:74:92:0E:4D:9E:5C:CC:03
Authority key identifier: 23:13:0C:99:AC:7A:A4:08:6C:71:75:71:14:A4:16:3F:80:09:01:42
Certificate issuer: /CN=23130c99ac7aa4086c71757114a4163f80090142
Certificate serial: 01A026FBF958B12ED3D3D7A47E0AF26C8530
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IxMMmax6pAhscXVxFKQWP4AJAUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.mft
Manifest number: 0D5D
Signing time: Sat 22 Aug 2026 01:00:42 +0000
Manifest this update: Sat 22 Aug 2026 01:00:42 +0000
Manifest next update: Sun 23 Aug 2026 01:00:42 +0000
Files and hashes: 1: IxMMmax6pAhscXVxFKQWP4AJAUI.crl (hash: 4QPvumKQCS676mRia31HVRWctunUK2s++C0KaYNYmo0=)
2: M7AsOPJRuDvyqpdVNAPIyt4dy4E.roa (hash: VA2KwTkb4NGqo/O9WoJ31YAHnrH27JkWDC9odiYJKyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IxMMmax6pAhscXVxFKQWP4AJAUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Aug 2026 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:26:fb:f9:58:b1:2e:d3:d3:d7:a4:7e:0a:f2:6c:85:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23130c99ac7aa4086c71757114a4163f80090142
Validity
Not Before: Aug 22 01:00:42 2026 GMT
Not After : Aug 23 01:00:42 2026 GMT
Subject: CN=cb8e2a3a28f4965d59d73c9a74920e4d9e5ccc03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0b:79:f3:24:18:f7:83:e5:f7:34:8f:02:1a:
cb:a3:81:03:da:dc:6a:93:72:27:f4:b3:ac:b8:3e:
d5:31:de:9e:73:6f:88:19:f4:cb:7c:bb:e2:64:d0:
e3:af:15:2d:92:f0:db:07:0b:5a:d8:2e:7c:14:55:
e9:88:80:ea:f1:8b:15:cf:25:3a:2b:3f:be:07:e4:
b7:4e:f8:a7:fd:75:e9:1f:cc:0c:cb:e1:51:91:9a:
2a:bf:d5:03:8c:92:7c:17:cd:6e:21:a7:fb:a3:4e:
6e:6e:b3:1e:a1:f5:e5:bc:df:43:25:28:ca:3d:37:
0e:9a:0b:40:67:60:fa:29:77:a8:b1:3f:bf:0c:f6:
8c:8a:ba:ee:fd:cb:2d:89:0c:f9:75:ae:f3:d2:ed:
a7:a8:83:49:82:3d:7f:41:22:90:ee:c6:7f:24:5e:
5f:b5:23:f8:60:b0:87:fd:69:a9:3d:bb:26:53:d4:
62:f8:2f:d9:28:2a:b4:fb:d8:2c:d2:4b:43:4d:e4:
77:71:21:81:3d:b3:34:34:83:9e:ea:4d:8d:76:d4:
a8:2c:8d:f7:f5:86:45:81:c5:98:b7:8f:ed:b4:8f:
b5:e8:51:2c:c0:8a:ff:e4:38:4b:06:4f:43:89:57:
ba:b6:41:3e:49:4f:99:24:18:9c:35:1f:29:fe:0d:
87:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:8E:2A:3A:28:F4:96:5D:59:D7:3C:9A:74:92:0E:4D:9E:5C:CC:03
X509v3 Authority Key Identifier:
keyid:23:13:0C:99:AC:7A:A4:08:6C:71:75:71:14:A4:16:3F:80:09:01:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IxMMmax6pAhscXVxFKQWP4AJAUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:f7:e7:ec:ca:ca:16:73:c3:94:db:43:ce:af:3f:80:57:df:
2b:51:49:c9:89:05:97:85:8d:f1:35:6e:a0:bf:f9:38:45:e2:
48:8a:2b:7a:1b:f7:e6:90:f5:2c:2c:5c:26:f4:a5:06:75:bc:
e8:c5:b7:5a:56:e8:4f:90:ab:1e:26:05:db:76:16:b3:62:87:
66:9a:3f:8e:7b:af:16:0c:66:10:ba:09:b6:f7:28:2d:49:15:
ee:1e:5d:e9:d2:44:28:b6:6e:29:a8:0a:04:59:d8:e8:e9:da:
9d:17:27:62:22:af:fc:40:1b:e2:3c:6b:09:93:be:ee:1e:29:
86:51:67:ad:cb:5b:f8:b7:ad:a8:e9:47:c8:62:02:b4:62:71:
4c:a9:1f:44:c9:b6:a1:7e:3c:57:17:84:b6:5c:37:2a:90:aa:
70:fc:68:a2:8c:64:9c:d6:df:f3:d9:5f:f8:e7:bc:d9:cc:65:
8f:c4:20:ce:1c:cd:6a:27:0a:48:5c:01:55:0c:6e:9d:18:57:
af:fb:ae:6a:b7:e0:d4:30:2d:fd:b5:bd:90:ae:4f:0f:b1:4d:
44:5b:eb:c1:70:d9:53:24:1d:65:e6:eb:a4:77:4b:8c:2f:d5:
5e:04:4e:f3:be:7a:e8:17:a5:dd:dd:a4:16:35:bd:94:c6:db:
6a:41:03:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAm+/lYsS7T09ekfgrybIUwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzMTMwYzk5YWM3YWE0MDg2YzcxNzU3MTE0YTQxNjNmODAw
OTAxNDIwHhcNMjYwODIyMDEwMDQyWhcNMjYwODIzMDEwMDQyWjAzMTEwLwYDVQQD
EyhjYjhlMmEzYTI4ZjQ5NjVkNTlkNzNjOWE3NDkyMGU0ZDllNWNjYzAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQt58yQY94Pl9zSPAhrLo4ED2txq
k3In9LOsuD7VMd6ec2+IGfTLfLviZNDjrxUtkvDbBwta2C58FFXpiIDq8YsVzyU6
Kz++B+S3Tvin/XXpH8wMy+FRkZoqv9UDjJJ8F81uIaf7o05ubrMeofXlvN9DJSjK
PTcOmgtAZ2D6KXeosT+/DPaMirru/cstiQz5da7z0u2nqINJgj1/QSKQ7sZ/JF5f
tSP4YLCH/WmpPbsmU9Ri+C/ZKCq0+9gs0ktDTeR3cSGBPbM0NIOe6k2NdtSoLI33
9YZFgcWYt4/ttI+16FEswIr/5DhLBk9DiVe6tkE+SU+ZJBicNR8p/g2HWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMuOKjoo9JZdWdc8mnSSDk2eXMwDMB8GA1UdIwQY
MBaAFCMTDJmseqQIbHF1cRSkFj+ACQFCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXhNTW1heDZwQWhzY1hWeEZLUVdQNEFKQVVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy81YzNhZTYtMjkzNC00NzllLThjMmQt
OGU4ZDViM2U1NTg2LzEvSXhNTW1heDZwQWhzY1hWeEZLUVdQNEFKQVVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy81YzNhZTYtMjkzNC00NzllLThjMmQtOGU4ZDViM2U1NTg2
LzEvSXhNTW1heDZwQWhzY1hWeEZLUVdQNEFKQVVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsvfn7MrK
FnPDlNtDzq8/gFffK1FJyYkFl4WN8TVuoL/5OEXiSIorehv35pD1LCxcJvSlBnW8
6MW3WlboT5CrHiYF23YWs2KHZpo/jnuvFgxmELoJtvcoLUkV7h5d6dJEKLZuKagK
BFnY6OnanRcnYiKv/EAb4jxrCZO+7h4phlFnrctb+LetqOlHyGICtGJxTKkfRMm2
oX48VxeEtlw3KpCqcPxoooxknNbf89lf+Oe82cxlj8QgzhzNaicKSFwBVQxunRhX
r/uuarfg1DAt/bW9kK5PD7FNRFvrwXDZUyQdZebrpHdLjC/VXgRO87566Bel3d2k
FjW9lMbbakED2g==
-----END CERTIFICATE-----
Generated at Sat Aug 22 07:02:22 2026 by rpki-client