Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft
File: iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft (raw, json)
Hash identifier: A+FHaqdcqkM4F2zUboYWOthjSNlpMjfT1FeRsF299h0=
Subject key identifier: 85:93:93:57:F5:CC:02:1E:96:0C:E8:68:0E:2C:A3:AA:E9:AC:E7:4D
Authority key identifier: 8B:0C:8D:35:DD:66:65:7B:FF:C9:0B:6A:C4:16:00:FF:A6:23:D5:B8
Certificate issuer: /CN=8b0c8d35dd66657bffc90b6ac41600ffa623d5b8
Certificate serial: 019F93C94414C3E5FCC26A254A6D7E65B8B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft
Manifest number: 19D2
Signing time: Fri 24 Jul 2026 11:01:08 +0000
Manifest this update: Fri 24 Jul 2026 11:01:08 +0000
Manifest next update: Sat 25 Jul 2026 11:01:08 +0000
Files and hashes: 1: iwyNNd1mZXv_yQtqxBYA_6Yj1bg.crl (hash: nDMMxgG+RMxLxnm+YyRfn5OhsTNjxp1/l0QtutnybE8=)
2: sviolDtkALX237AgHdJy3qGm9E8.roa (hash: UBbw3ecAl6K7Vc8agYWaL992jebVFcU3FnvRCH5/x3w=)
3: zCmHEUDwxreVgjHT33MieHTkvHo.roa (hash: GOn7Ax5ilTDC4mIkf7WnEWeisHxiQ0BYABkeo+vnpp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 11:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c9:44:14:c3:e5:fc:c2:6a:25:4a:6d:7e:65:b8:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b0c8d35dd66657bffc90b6ac41600ffa623d5b8
Validity
Not Before: Jul 24 11:01:08 2026 GMT
Not After : Jul 25 11:01:08 2026 GMT
Subject: CN=85939357f5cc021e960ce8680e2ca3aae9ace74d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:5e:44:59:18:25:cb:39:55:30:b9:3c:cd:4b:
85:34:4c:72:67:24:82:c0:5f:be:73:00:0a:25:28:
77:eb:37:1c:de:4e:5d:fe:09:fb:00:58:1d:c0:76:
24:c7:04:61:13:eb:c2:b0:52:83:c4:3d:af:7a:7c:
23:e1:8b:55:05:cc:4b:50:a3:4c:9a:fb:35:05:96:
3a:bd:30:84:3c:12:26:2a:21:58:f0:87:60:26:69:
4f:df:70:aa:aa:12:70:2a:91:0f:6c:38:c7:57:ab:
c6:e7:6f:3c:76:d4:fb:ee:01:15:fb:e4:fd:69:cd:
ea:6d:7c:e0:88:e5:af:3e:d6:7a:1f:ce:31:d7:a1:
4d:1c:6e:d0:67:1c:a2:8d:7d:c3:c5:c6:88:e6:9b:
d5:69:5e:7d:cb:55:e4:96:6c:9e:c9:69:58:9d:eb:
cc:20:9f:d6:23:28:09:66:eb:dc:6e:c0:d1:ac:32:
47:1c:30:7e:ad:e4:aa:10:e0:12:bf:e8:8b:b1:0f:
98:8f:82:c6:a9:56:3b:72:c7:5a:ed:07:60:b7:44:
b6:ce:7d:24:d3:f3:0f:bd:98:7d:30:4b:d8:d0:d4:
11:0b:23:a4:22:3d:d2:49:d3:b3:0a:9b:76:52:95:
03:99:55:39:cf:e1:dc:a4:ea:a6:0d:1c:af:ec:e2:
ff:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:93:93:57:F5:CC:02:1E:96:0C:E8:68:0E:2C:A3:AA:E9:AC:E7:4D
X509v3 Authority Key Identifier:
keyid:8B:0C:8D:35:DD:66:65:7B:FF:C9:0B:6A:C4:16:00:FF:A6:23:D5:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:a1:ad:7d:e2:b6:fd:ad:e4:ff:00:7f:65:6c:4a:2f:82:8b:
dc:b1:7f:e2:8d:82:de:32:0a:82:9c:cb:a2:92:4a:85:95:49:
da:d5:a9:cd:05:c1:6b:8a:17:b9:72:ea:2a:a5:c7:45:55:b8:
ca:1d:c3:34:bc:f8:11:39:08:a8:65:3b:71:7c:66:d4:0f:41:
2e:17:7f:a8:d6:86:26:a9:f2:aa:b2:2a:83:7d:65:6c:2d:e0:
85:c4:5c:f1:e3:73:ba:03:5d:aa:ae:31:85:7e:9f:b3:d5:ff:
c7:8f:f8:e5:27:c4:2c:81:31:03:3f:2f:89:7e:d9:e5:d2:8a:
2e:69:6f:f6:42:1e:9f:9c:39:46:5e:df:98:42:12:b3:55:a6:
0a:e8:b5:8d:ad:6b:f4:b0:6b:90:ff:5c:1c:09:b1:92:7e:8a:
aa:57:1f:1d:1c:a3:64:a9:e3:20:e2:8e:2c:ed:82:b4:64:fc:
44:1d:8b:2c:c8:0b:eb:d5:35:d0:35:32:ee:fe:a2:e3:e6:11:
d3:ce:af:c3:ed:96:9f:35:17:8e:d3:d0:62:d8:13:bb:3b:7d:
ba:0a:33:0d:01:1d:16:27:32:35:7e:94:62:b3:53:8f:48:16:
5a:10:41:6b:d7:7d:70:bc:40:2f:bf:ac:48:f1:8c:65:b3:e2:
cf:59:48:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TyUQUw+X8wmolSm1+Zbi1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiMGM4ZDM1ZGQ2NjY1N2JmZmM5MGI2YWM0MTYwMGZmYTYy
M2Q1YjgwHhcNMjYwNzI0MTEwMTA4WhcNMjYwNzI1MTEwMTA4WjAzMTEwLwYDVQQD
Eyg4NTkzOTM1N2Y1Y2MwMjFlOTYwY2U4NjgwZTJjYTNhYWU5YWNlNzRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA115EWRglyzlVMLk8zUuFNExyZySC
wF++cwAKJSh36zcc3k5d/gn7AFgdwHYkxwRhE+vCsFKDxD2venwj4YtVBcxLUKNM
mvs1BZY6vTCEPBImKiFY8IdgJmlP33CqqhJwKpEPbDjHV6vG5288dtT77gEV++T9
ac3qbXzgiOWvPtZ6H84x16FNHG7QZxyijX3DxcaI5pvVaV59y1XklmyeyWlYnevM
IJ/WIygJZuvcbsDRrDJHHDB+reSqEOASv+iLsQ+Yj4LGqVY7csda7Qdgt0S2zn0k
0/MPvZh9MEvY0NQRCyOkIj3SSdOzCpt2UpUDmVU5z+HcpOqmDRyv7OL/BQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIWTk1f1zAIelgzoaA4so6rprOdNMB8GA1UdIwQY
MBaAFIsMjTXdZmV7/8kLasQWAP+mI9W4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXd5Tk5kMW1aWHZfeVF0cXhCWUFfNllqMWJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9kMjhmZDQtYzM2OC00NmIzLWExN2Qt
NDMxODdlMjliMGUzLzEvaXd5Tk5kMW1aWHZfeVF0cXhCWUFfNllqMWJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS9kMjhmZDQtYzM2OC00NmIzLWExN2QtNDMxODdlMjliMGUz
LzEvaXd5Tk5kMW1aWHZfeVF0cXhCWUFfNllqMWJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVaGtfeK2
/a3k/wB/ZWxKL4KL3LF/4o2C3jIKgpzLopJKhZVJ2tWpzQXBa4oXuXLqKqXHRVW4
yh3DNLz4ETkIqGU7cXxm1A9BLhd/qNaGJqnyqrIqg31lbC3ghcRc8eNzugNdqq4x
hX6fs9X/x4/45SfELIExAz8viX7Z5dKKLmlv9kIen5w5Rl7fmEISs1WmCui1ja1r
9LBrkP9cHAmxkn6KqlcfHRyjZKnjIOKOLO2CtGT8RB2LLMgL69U10DUy7v6i4+YR
086vw+2WnzUXjtPQYtgTuzt9ugozDQEdFicyNX6UYrNTj0gWWhBBa9d9cLxAL7+s
SPGMZbPiz1lImg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 20:07:58 2026 by rpki-client