Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
File: Ib-nezzXgpM-XyVURdQorfvcoOE.mft (raw, json)
Hash identifier: 6luB9HBiyx1ew2P2fZhimxh37b3kuWbmZp2ztxWMeTo=
Subject key identifier: 46:B5:18:F3:C2:07:EF:D5:5A:00:07:9B:0A:83:22:9E:D9:C9:33:49
Authority key identifier: 21:BF:A7:7B:3C:D7:82:93:3E:5F:25:54:45:D4:28:AD:FB:DC:A0:E1
Certificate issuer: /CN=21bfa77b3cd782933e5f255445d428adfbdca0e1
Certificate serial: 019F9391CECE98655ADFF59756C33CF6D280
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ib-nezzXgpM-XyVURdQorfvcoOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 10:00:34 +0000
Manifest this update: Fri 24 Jul 2026 10:00:34 +0000
Manifest next update: Sat 25 Jul 2026 10:00:34 +0000
Files and hashes: 1: Ib-nezzXgpM-XyVURdQorfvcoOE.crl (hash: 8EaNRvkV2wyu5gRVgKkfAZvLIfX+NO9UOEjXXAZJeww=)
2: tVC2csu9UGG1-01gEwc1t4LJEVg.roa (hash: F7t5gXl+oY8MHELP0QCMp2iMpD0P8eAkfXVgIusmD4c=)
3: veTOQGnBK7iaYhGL3G7GNS69oDU.roa (hash: O4MK7Gc8l+4Xx+SJNgVyYVCnc4Eq4VWeh1FutcFXWtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ib-nezzXgpM-XyVURdQorfvcoOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:91:ce:ce:98:65:5a:df:f5:97:56:c3:3c:f6:d2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21bfa77b3cd782933e5f255445d428adfbdca0e1
Validity
Not Before: Jul 24 10:00:34 2026 GMT
Not After : Jul 25 10:00:34 2026 GMT
Subject: CN=46b518f3c207efd55a00079b0a83229ed9c93349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bf:4e:d8:c8:41:e5:9d:da:ee:f0:8c:0c:52:
b1:6e:9a:7f:81:a5:d5:8d:56:e0:17:e3:b1:4f:75:
94:52:c7:48:28:b1:10:f5:2d:04:bb:ae:68:08:03:
1e:1b:ed:0a:8e:c4:ed:81:7f:24:61:a9:13:71:8a:
03:fe:34:4d:24:06:48:d2:2f:d2:22:2f:b8:29:5b:
7f:9c:42:11:53:e9:9a:45:e3:ad:02:e6:fe:db:e2:
32:39:ce:45:ca:da:16:77:f9:85:5f:4b:c8:22:55:
a0:50:6b:6e:a1:c0:ff:b4:14:3d:2a:b2:de:30:32:
43:2e:9c:10:17:f4:a2:42:2e:6b:52:9d:2a:89:05:
4a:c9:7b:0d:e9:80:c3:c3:1c:4b:0c:70:cf:d3:d1:
c1:15:b5:27:5d:ce:42:c4:f4:c5:70:9b:e4:e4:6d:
c0:29:01:02:f3:2c:11:07:28:b5:92:3b:31:f3:09:
02:d0:26:fb:00:09:12:9a:8f:5a:02:4d:99:a0:4c:
68:69:e5:46:5d:e9:06:a6:d9:4b:90:42:4f:1a:33:
b7:04:9e:47:5e:5d:a6:c1:bf:4a:87:89:bf:19:a7:
ea:77:07:4f:56:cf:3e:1b:f3:d9:03:42:36:63:fa:
2d:dd:f2:49:5a:10:72:90:c3:d1:28:c2:8f:38:cb:
97:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:B5:18:F3:C2:07:EF:D5:5A:00:07:9B:0A:83:22:9E:D9:C9:33:49
X509v3 Authority Key Identifier:
keyid:21:BF:A7:7B:3C:D7:82:93:3E:5F:25:54:45:D4:28:AD:FB:DC:A0:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ib-nezzXgpM-XyVURdQorfvcoOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:b2:50:3f:0f:68:ba:e2:99:ff:bf:e3:64:8d:e5:96:69:46:
08:54:47:86:8c:20:d8:12:95:3a:4d:dc:48:ae:8f:e3:8e:31:
e8:ba:5a:48:e1:d6:5b:48:ae:47:14:5f:0c:d4:2b:f1:47:d4:
85:ec:a2:3a:83:c8:d6:56:95:95:66:07:74:38:7c:1d:fb:0f:
67:ea:c0:7b:8b:10:43:bd:36:31:86:f9:fc:82:36:ff:4c:be:
35:5a:3d:2e:b2:e9:07:03:37:06:3c:6b:51:b0:65:d9:20:44:
5b:44:9e:d5:06:84:dd:46:71:bf:fd:48:4e:65:7c:be:82:44:
49:4f:f6:e7:d1:3c:94:cd:48:60:a6:98:2c:d2:85:94:c9:68:
c5:de:20:e3:f0:53:29:2b:45:b1:69:9a:cb:40:2e:53:fd:ee:
7e:95:a1:4b:03:a8:72:23:b6:72:3b:02:51:01:26:47:9c:22:
0e:58:82:c7:aa:a5:7f:e9:c9:49:5e:89:64:3c:34:cc:70:c8:
75:0d:49:b3:b3:f1:42:9c:66:f3:b6:5d:07:23:3a:8c:11:30:
e5:df:ed:89:19:9c:64:24:1f:8f:90:8f:89:e3:48:c9:f5:71:
e1:6d:ae:15:f6:94:8c:0a:11:97:88:ad:2a:18:6c:dd:18:4e:
5e:f4:6e:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Tkc7OmGVa3/WXVsM89tKAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxYmZhNzdiM2NkNzgyOTMzZTVmMjU1NDQ1ZDQyOGFkZmJk
Y2EwZTEwHhcNMjYwNzI0MTAwMDM0WhcNMjYwNzI1MTAwMDM0WjAzMTEwLwYDVQQD
Eyg0NmI1MThmM2MyMDdlZmQ1NWEwMDA3OWIwYTgzMjI5ZWQ5YzkzMzQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr79O2MhB5Z3a7vCMDFKxbpp/gaXV
jVbgF+OxT3WUUsdIKLEQ9S0Eu65oCAMeG+0KjsTtgX8kYakTcYoD/jRNJAZI0i/S
Ii+4KVt/nEIRU+maReOtAub+2+IyOc5FytoWd/mFX0vIIlWgUGtuocD/tBQ9KrLe
MDJDLpwQF/SiQi5rUp0qiQVKyXsN6YDDwxxLDHDP09HBFbUnXc5CxPTFcJvk5G3A
KQEC8ywRByi1kjsx8wkC0Cb7AAkSmo9aAk2ZoExoaeVGXekGptlLkEJPGjO3BJ5H
Xl2mwb9Kh4m/GafqdwdPVs8+G/PZA0I2Y/ot3fJJWhBykMPRKMKPOMuXjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEa1GPPCB+/VWgAHmwqDIp7ZyTNJMB8GA1UdIwQY
MBaAFCG/p3s814KTPl8lVEXUKK373KDhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWItbmV6elhncE0tWHlWVVJkUW9yZnZjb09FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC85YzdhZmYtZDgzZS00ZjUxLTliOTYt
NTQ4NGMzOWIyZDRlLzEvSWItbmV6elhncE0tWHlWVVJkUW9yZnZjb09FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC85YzdhZmYtZDgzZS00ZjUxLTliOTYtNTQ4NGMzOWIyZDRl
LzEvSWItbmV6elhncE0tWHlWVVJkUW9yZnZjb09FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAorJQPw9o
uuKZ/7/jZI3llmlGCFRHhowg2BKVOk3cSK6P444x6LpaSOHWW0iuRxRfDNQr8UfU
heyiOoPI1laVlWYHdDh8HfsPZ+rAe4sQQ702MYb5/II2/0y+NVo9LrLpBwM3Bjxr
UbBl2SBEW0Se1QaE3UZxv/1ITmV8voJESU/259E8lM1IYKaYLNKFlMloxd4g4/BT
KStFsWmay0AuU/3ufpWhSwOociO2cjsCUQEmR5wiDliCx6qlf+nJSV6JZDw0zHDI
dQ1Js7PxQpxm87ZdByM6jBEw5d/tiRmcZCQfj5CPieNIyfVx4W2uFfaUjAoRl4it
Khhs3RhOXvRu2w==
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:56:09 2026 by rpki-client