Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.mft
File: izGWcRDKvuxKZreAN-Uqh7K8j10.mft (raw, json)
Hash identifier: hPC57i2oMFNfCOKltq4QUtLPm0RPQoFbMUs8lkU1xIQ=
Subject key identifier: BE:FD:2D:6D:7F:9D:77:7D:E0:14:F2:05:50:0F:D2:DD:CF:A8:A7:84
Authority key identifier: 8B:31:96:71:10:CA:BE:EC:4A:66:B7:80:37:E5:2A:87:B2:BC:8F:5D
Certificate issuer: /CN=8b31967110cabeec4a66b78037e52a87b2bc8f5d
Certificate serial: 01A13290F095BDF59D7F39637FDCCF53F3AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izGWcRDKvuxKZreAN-Uqh7K8j10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.mft
Manifest number: 179A
Signing time: Tue 13 Oct 2026 00:02:01 +0000
Manifest this update: Tue 13 Oct 2026 00:02:01 +0000
Manifest next update: Wed 14 Oct 2026 00:02:01 +0000
Files and hashes: 1: 96n2FzRjkBX11HWVM9i_vNB-31E.roa (hash: 9OIDnPnlJZEwGjTFAXCdBpYg5ywi9zAXI41Z4fWCG4k=)
2: izGWcRDKvuxKZreAN-Uqh7K8j10.crl (hash: 2zkIX5k5c0eGXU3OZsTBE53hm6t1OgJx/Dr2nJGzbmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.mft
rsync://rpki.ripe.net/repository/DEFAULT/izGWcRDKvuxKZreAN-Uqh7K8j10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 23:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:32:90:f0:95:bd:f5:9d:7f:39:63:7f:dc:cf:53:f3:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b31967110cabeec4a66b78037e52a87b2bc8f5d
Validity
Not Before: Oct 13 00:02:01 2026 GMT
Not After : Oct 14 00:02:01 2026 GMT
Subject: CN=befd2d6d7f9d777de014f205500fd2ddcfa8a784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:63:d9:72:dc:2c:7b:16:2c:47:e7:d0:e3:9a:
27:28:a7:36:06:cf:64:0e:7c:c8:0b:d2:ca:97:4b:
f0:52:bf:cd:de:90:c1:55:96:3c:20:92:28:06:99:
79:ab:5f:2e:3b:d5:86:ca:e6:49:bf:84:60:63:0c:
35:4b:c8:d3:37:ba:0b:84:0d:89:13:7b:e9:f4:be:
ba:7f:5e:58:df:5c:54:c4:55:43:dc:f2:7a:63:0f:
09:55:2c:4d:49:3a:11:76:35:0a:2d:3b:3c:20:b4:
b2:fb:4e:ee:32:b3:f8:2f:8f:68:89:cc:35:37:b7:
d6:93:7a:4d:53:24:0c:f0:70:26:0a:46:2c:d3:1e:
aa:7f:36:63:83:6a:c8:67:5f:f6:67:91:2e:43:37:
f8:3c:45:d7:56:37:84:a2:6c:6e:a3:96:f4:c5:5c:
f6:12:a8:0e:4f:86:b9:1a:0a:f4:0e:81:2c:f9:dc:
10:d9:6a:88:e2:58:dd:73:58:73:e3:67:79:ab:b4:
3f:d8:ed:0e:eb:ef:b1:d5:3e:6b:f5:21:42:ad:1d:
54:b1:42:32:06:3d:a6:95:92:90:45:75:d4:7f:c6:
9e:84:37:5c:2a:f2:bc:67:9c:62:cd:fa:43:3c:5a:
d2:ee:07:3e:64:25:0d:a4:82:9c:6e:fc:e5:ac:bd:
2f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:FD:2D:6D:7F:9D:77:7D:E0:14:F2:05:50:0F:D2:DD:CF:A8:A7:84
X509v3 Authority Key Identifier:
keyid:8B:31:96:71:10:CA:BE:EC:4A:66:B7:80:37:E5:2A:87:B2:BC:8F:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izGWcRDKvuxKZreAN-Uqh7K8j10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:ed:6f:e8:a8:b2:a9:2b:f8:8c:3d:5f:19:5e:74:e3:13:8c:
5e:62:39:9c:e8:55:a9:eb:08:85:c5:99:6a:4c:f4:86:2a:27:
5a:f5:3a:e7:bf:35:24:60:81:81:e9:45:ad:7a:a0:b4:52:b2:
cc:a5:96:73:ed:7c:1d:22:19:cd:ed:5b:b2:47:a9:33:bf:4d:
dc:52:05:c2:e5:35:ec:c2:20:ef:a3:20:85:35:f5:43:d3:31:
68:ed:ed:2b:0a:d5:c2:ea:dc:78:7c:14:0c:87:7b:4a:21:ca:
25:1d:c4:10:f6:2a:01:af:e0:1d:74:b9:b1:a7:00:a9:8a:6a:
d9:54:d0:05:aa:13:99:82:78:85:2b:62:2a:ec:40:30:84:58:
cc:a2:a3:3c:67:fb:9c:70:c4:93:df:70:dd:65:58:0d:74:35:
73:8c:0b:90:3e:6d:3a:d6:41:16:93:65:2a:1d:84:88:e7:2b:
3e:a8:1d:79:6b:e8:a6:89:73:43:7b:bd:76:4d:b9:31:9d:ec:
66:69:34:dd:95:7f:e6:2e:c8:88:b4:9b:04:5c:7d:ae:6b:94:
c1:ac:de:15:75:26:37:3e:e4:5d:a1:04:44:97:2a:c8:66:43:
6d:a7:c3:cb:c8:70:dd:f7:22:26:96:dd:62:00:9f:5f:67:81:
d0:61:ca:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEykPCVvfWdfzljf9zPU/OtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiMzE5NjcxMTBjYWJlZWM0YTY2Yjc4MDM3ZTUyYTg3YjJi
YzhmNWQwHhcNMjYxMDEzMDAwMjAxWhcNMjYxMDE0MDAwMjAxWjAzMTEwLwYDVQQD
EyhiZWZkMmQ2ZDdmOWQ3NzdkZTAxNGYyMDU1MDBmZDJkZGNmYThhNzg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6GPZctwsexYsR+fQ45onKKc2Bs9k
DnzIC9LKl0vwUr/N3pDBVZY8IJIoBpl5q18uO9WGyuZJv4RgYww1S8jTN7oLhA2J
E3vp9L66f15Y31xUxFVD3PJ6Yw8JVSxNSToRdjUKLTs8ILSy+07uMrP4L49oicw1
N7fWk3pNUyQM8HAmCkYs0x6qfzZjg2rIZ1/2Z5EuQzf4PEXXVjeEomxuo5b0xVz2
EqgOT4a5Ggr0DoEs+dwQ2WqI4ljdc1hz42d5q7Q/2O0O6++x1T5r9SFCrR1UsUIy
Bj2mlZKQRXXUf8aehDdcKvK8Z5xizfpDPFrS7gc+ZCUNpIKcbvzlrL0vvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL79LW1/nXd94BTyBVAP0t3PqKeEMB8GA1UdIwQY
MBaAFIsxlnEQyr7sSma3gDflKoeyvI9dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXpHV2NSREt2dXhLWnJlQU4tVXFoN0s4ajEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8zMWRmMDctZGNiNS00YTUwLWE3MDQt
YTAxN2MzNjg0NjZkLzEvaXpHV2NSREt2dXhLWnJlQU4tVXFoN0s4ajEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8zMWRmMDctZGNiNS00YTUwLWE3MDQtYTAxN2MzNjg0NjZk
LzEvaXpHV2NSREt2dXhLWnJlQU4tVXFoN0s4ajEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAme1v6Kiy
qSv4jD1fGV504xOMXmI5nOhVqesIhcWZakz0hionWvU65781JGCBgelFrXqgtFKy
zKWWc+18HSIZze1bskepM79N3FIFwuU17MIg76MghTX1Q9MxaO3tKwrVwurceHwU
DId7SiHKJR3EEPYqAa/gHXS5sacAqYpq2VTQBaoTmYJ4hStiKuxAMIRYzKKjPGf7
nHDEk99w3WVYDXQ1c4wLkD5tOtZBFpNlKh2EiOcrPqgdeWvopolzQ3u9dk25MZ3s
Zmk03ZV/5i7IiLSbBFx9rmuUwazeFXUmNz7kXaEERJcqyGZDbafDy8hw3fciJpbd
YgCfX2eB0GHKyQ==
-----END CERTIFICATE-----
Generated at Tue Oct 13 08:42:34 2026 by rpki-client