Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/bb05ac-4b92-4fde-9260-d2fb0a3201b8/1/iuqCkaUdU780Tc2HYs22gp0eS8A.mft
File: iuqCkaUdU780Tc2HYs22gp0eS8A.mft (raw, json)
Hash identifier: UolBCPME4FzmnaRFl+CUlkqBLaywLAasqOzgddCB88c=
Subject key identifier: 7D:A1:67:31:AF:B6:3C:00:4B:2C:B3:D8:9C:67:FB:50:6C:78:81:90
Authority key identifier: 8A:EA:82:91:A5:1D:53:BF:34:4D:CD:87:62:CD:B6:82:9D:1E:4B:C0
Certificate issuer: /CN=8aea8291a51d53bf344dcd8762cdb6829d1e4bc0
Certificate serial: 019F93C9004A40682B146E1E526F434AF8EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iuqCkaUdU780Tc2HYs22gp0eS8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/bb05ac-4b92-4fde-9260-d2fb0a3201b8/1/iuqCkaUdU780Tc2HYs22gp0eS8A.mft
Manifest number: ED
Signing time: Fri 24 Jul 2026 11:00:51 +0000
Manifest this update: Fri 24 Jul 2026 11:00:51 +0000
Manifest next update: Sat 25 Jul 2026 11:00:51 +0000
Files and hashes: 1: 1-HnWZOSfYzfMpkdHQKgKNZ13rPI.roa (hash: PKBAPXzgnWazEIllaNoOetp38i7rE9un2IC2xSXTZlQ=)
2: FvTUXze2cP2KDGx2hRq_w_Z-9N0.roa (hash: Gp1g8k1CPQjLn91bFZfvO5ChcN4hmVKIBnTLXnXZ2/M=)
3: iuqCkaUdU780Tc2HYs22gp0eS8A.crl (hash: LgSDeuxzRHgfYLY6pD7JL1unYngigTslOHkrbdgRZp4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/bb05ac-4b92-4fde-9260-d2fb0a3201b8/1/iuqCkaUdU780Tc2HYs22gp0eS8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/bb05ac-4b92-4fde-9260-d2fb0a3201b8/1/iuqCkaUdU780Tc2HYs22gp0eS8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/iuqCkaUdU780Tc2HYs22gp0eS8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c9:00:4a:40:68:2b:14:6e:1e:52:6f:43:4a:f8:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8aea8291a51d53bf344dcd8762cdb6829d1e4bc0
Validity
Not Before: Jul 24 11:00:51 2026 GMT
Not After : Jul 25 11:00:51 2026 GMT
Subject: CN=7da16731afb63c004b2cb3d89c67fb506c788190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a1:99:27:77:34:86:9a:c0:d0:68:f5:33:64:
af:a0:6a:eb:72:1b:a3:20:bc:24:76:a1:ef:4f:b9:
07:07:0c:9e:26:31:46:f6:73:71:39:1f:8c:59:4e:
aa:71:07:db:33:a9:69:a0:c8:69:b7:93:bc:a7:6f:
d9:cd:be:2f:00:d2:9d:b8:fd:38:ba:1b:46:98:cb:
74:0a:f1:5a:ba:f9:c0:b5:66:70:e9:cd:f0:fb:ad:
69:c8:63:1f:0c:e5:27:8f:02:5f:43:04:24:ff:a3:
c3:96:fd:b3:a2:72:e9:a9:81:e7:83:59:f1:30:9a:
8a:79:71:02:43:e7:37:5e:a9:b6:ae:d9:02:3b:7e:
d1:51:9c:75:e3:66:d5:3f:33:b3:32:14:b0:d6:99:
06:f8:bf:65:72:46:96:1a:f8:79:41:2f:e3:bf:6d:
57:80:60:fe:ac:d0:26:a1:01:7c:ad:a4:db:36:42:
70:23:2b:42:06:51:fa:d3:8c:78:79:bb:8d:c4:70:
61:57:ca:f6:df:ab:ce:cc:5f:b2:fb:a1:84:58:50:
ae:4a:17:c5:bd:a6:f8:65:5b:a7:53:15:87:6a:ab:
b4:9a:54:6b:8f:f9:61:de:c1:f1:e6:0b:63:ba:90:
08:66:16:bb:17:2e:c2:96:71:67:c6:2f:cb:17:a2:
45:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:A1:67:31:AF:B6:3C:00:4B:2C:B3:D8:9C:67:FB:50:6C:78:81:90
X509v3 Authority Key Identifier:
keyid:8A:EA:82:91:A5:1D:53:BF:34:4D:CD:87:62:CD:B6:82:9D:1E:4B:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iuqCkaUdU780Tc2HYs22gp0eS8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/bb05ac-4b92-4fde-9260-d2fb0a3201b8/1/iuqCkaUdU780Tc2HYs22gp0eS8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/bb05ac-4b92-4fde-9260-d2fb0a3201b8/1/iuqCkaUdU780Tc2HYs22gp0eS8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:dc:04:1c:8d:06:92:f2:0c:37:5e:40:bb:bf:26:92:75:10:
e4:0d:38:5a:03:b3:67:e8:84:7e:4c:19:2e:af:3b:69:ec:49:
a7:30:20:8b:df:9c:61:80:a2:83:32:7d:50:3a:25:ca:b5:5b:
b2:2d:2f:33:d4:86:e9:c3:ab:af:94:63:bf:10:62:3a:f7:c9:
44:1e:dd:c1:3b:09:44:10:f7:62:96:a0:dc:31:e4:4a:39:51:
d3:9a:9e:dd:14:fe:3f:d8:cf:6c:9d:b3:83:2e:7b:a5:e7:9c:
a4:49:7d:e1:5f:ba:f8:fd:7d:1c:b1:94:de:dd:3b:6f:33:00:
8b:a2:29:3a:1b:91:07:fd:a3:37:f8:5c:3e:b0:2c:19:ca:ee:
fc:10:10:ad:4f:73:05:de:ed:66:d4:aa:0a:e6:1c:f9:2c:10:
ca:f2:99:ab:c8:32:13:94:4a:cc:d7:d8:58:a4:2a:fb:20:7a:
51:12:f0:16:9b:81:55:01:57:db:f0:84:b7:f0:3b:48:37:51:
98:2a:d0:c3:2e:15:82:4c:d1:9e:22:0f:4b:78:a6:1b:c3:8d:
e7:80:24:d1:85:8d:0c:65:38:f3:b4:37:bb:54:ab:9b:52:3c:
a7:f0:b9:00:8d:b1:8c:54:54:71:3a:78:3e:5d:d3:b6:03:5a:
66:d2:6b:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TyQBKQGgrFG4eUm9DSvjuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhZWE4MjkxYTUxZDUzYmYzNDRkY2Q4NzYyY2RiNjgyOWQx
ZTRiYzAwHhcNMjYwNzI0MTEwMDUxWhcNMjYwNzI1MTEwMDUxWjAzMTEwLwYDVQQD
Eyg3ZGExNjczMWFmYjYzYzAwNGIyY2IzZDg5YzY3ZmI1MDZjNzg4MTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6GZJ3c0hprA0Gj1M2SvoGrrchuj
ILwkdqHvT7kHBwyeJjFG9nNxOR+MWU6qcQfbM6lpoMhpt5O8p2/Zzb4vANKduP04
uhtGmMt0CvFauvnAtWZw6c3w+61pyGMfDOUnjwJfQwQk/6PDlv2zonLpqYHng1nx
MJqKeXECQ+c3Xqm2rtkCO37RUZx142bVPzOzMhSw1pkG+L9lckaWGvh5QS/jv21X
gGD+rNAmoQF8raTbNkJwIytCBlH604x4ebuNxHBhV8r236vOzF+y+6GEWFCuShfF
vab4ZVunUxWHaqu0mlRrj/lh3sHx5gtjupAIZha7Fy7ClnFnxi/LF6JFfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH2hZzGvtjwASyyz2Jxn+1BseIGQMB8GA1UdIwQY
MBaAFIrqgpGlHVO/NE3Nh2LNtoKdHkvAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXVxQ2thVWRVNzgwVGMySFlzMjJncDBlUzhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9iYjA1YWMtNGI5Mi00ZmRlLTkyNjAt
ZDJmYjBhMzIwMWI4LzEvaXVxQ2thVWRVNzgwVGMySFlzMjJncDBlUzhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9iYjA1YWMtNGI5Mi00ZmRlLTkyNjAtZDJmYjBhMzIwMWI4
LzEvaXVxQ2thVWRVNzgwVGMySFlzMjJncDBlUzhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFNwEHI0G
kvIMN15Au78mknUQ5A04WgOzZ+iEfkwZLq87aexJpzAgi9+cYYCigzJ9UDolyrVb
si0vM9SG6cOrr5RjvxBiOvfJRB7dwTsJRBD3Ypag3DHkSjlR05qe3RT+P9jPbJ2z
gy57peecpEl94V+6+P19HLGU3t07bzMAi6IpOhuRB/2jN/hcPrAsGcru/BAQrU9z
Bd7tZtSqCuYc+SwQyvKZq8gyE5RKzNfYWKQq+yB6URLwFpuBVQFX2/CEt/A7SDdR
mCrQwy4VgkzRniIPS3imG8ON54Ak0YWNDGU487Q3u1Srm1I8p/C5AI2xjFRUcTp4
Pl3TtgNaZtJrGg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 15:05:28 2026 by rpki-client