Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.mft
File: I02TlaK6I5y50njrWJty7VyWctE.mft (raw, json)
Hash identifier: KWFfc7z48H+NME4gD3JrYOLVjDpGqPZ3qdh7milPu+E=
Subject key identifier: 5A:FC:12:9D:0B:A4:A1:4C:70:20:97:91:6D:AD:EE:4C:2A:71:01:CE
Authority key identifier: 23:4D:93:95:A2:BA:23:9C:B9:D2:78:EB:58:9B:72:ED:5C:96:72:D1
Certificate issuer: /CN=234d9395a2ba239cb9d278eb589b72ed5c9672d1
Certificate serial: 019F913548D6A92C7879032117DAF77295A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I02TlaK6I5y50njrWJty7VyWctE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.mft
Manifest number: 140F
Signing time: Thu 23 Jul 2026 23:00:16 +0000
Manifest this update: Thu 23 Jul 2026 23:00:16 +0000
Manifest next update: Fri 24 Jul 2026 23:00:16 +0000
Files and hashes: 1: 1RriZf_G6a5fiIgqSsiVHC2xloA.roa (hash: qktLxOpEQif1HcKz+YuiexbELL1xls3mW6RuMkPJWuA=)
2: I02TlaK6I5y50njrWJty7VyWctE.crl (hash: vhvvwl0p71ImZUuJGvQm7ZMYWbnXS8nal40Py1NH4DU=)
3: wYpHa59YPrwp7w7D2dTnVQglgA8.roa (hash: BD7Ds/9U/dBV0/NTSSvHr9U29EXY5C+d+r87UR7HX3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.mft
rsync://rpki.ripe.net/repository/DEFAULT/I02TlaK6I5y50njrWJty7VyWctE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:48:d6:a9:2c:78:79:03:21:17:da:f7:72:95:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234d9395a2ba239cb9d278eb589b72ed5c9672d1
Validity
Not Before: Jul 23 23:00:16 2026 GMT
Not After : Jul 24 23:00:16 2026 GMT
Subject: CN=5afc129d0ba4a14c702097916dadee4c2a7101ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e4:ee:f8:70:b7:cd:4d:28:5d:27:7d:91:50:
3f:82:19:c7:4f:a1:b5:e6:30:e1:9c:26:84:78:0e:
b5:c6:75:c8:08:9b:9f:e6:57:92:ba:54:b7:a9:cc:
4a:f6:99:02:e8:14:e3:62:55:d2:9d:ff:81:38:18:
36:be:c3:56:08:ab:f8:04:b6:8f:9d:04:9e:8a:07:
71:f2:6f:ef:d9:07:77:39:3b:16:b0:87:81:08:5a:
9f:c5:73:c5:80:93:96:3e:11:c3:d2:56:47:51:c3:
70:39:12:6d:bf:39:da:0b:5e:c9:d9:ae:d4:f0:39:
f1:2e:42:a6:1e:af:28:e0:e1:9f:67:88:87:bf:a8:
90:f7:48:11:51:f8:07:17:66:3a:22:51:fe:a8:05:
a6:f8:dd:b8:8a:f2:be:9e:39:82:f9:56:38:16:5e:
31:30:ed:0c:87:56:45:a9:a2:67:2a:01:da:dd:12:
50:7a:d7:85:f2:f5:eb:47:e3:0c:61:52:34:bb:5f:
ad:58:2e:ee:13:1e:83:28:3a:59:08:88:54:14:95:
16:cb:23:9c:72:6a:72:c5:35:9c:3f:48:b4:1c:a3:
04:2e:1b:eb:b8:4d:4f:27:43:af:b2:a9:c1:05:a7:
9c:c9:1c:73:6d:20:8a:33:df:b2:9b:c3:22:ed:58:
3f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:FC:12:9D:0B:A4:A1:4C:70:20:97:91:6D:AD:EE:4C:2A:71:01:CE
X509v3 Authority Key Identifier:
keyid:23:4D:93:95:A2:BA:23:9C:B9:D2:78:EB:58:9B:72:ED:5C:96:72:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I02TlaK6I5y50njrWJty7VyWctE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:fc:ec:b6:23:20:21:e8:7e:68:bc:70:66:a3:98:28:03:5d:
77:d1:19:bf:83:35:bf:f6:2f:5d:88:86:7d:8f:b6:9e:94:58:
28:1b:26:ca:dd:e7:c9:21:fc:ba:f0:b9:ce:d3:85:72:dd:f0:
3c:40:0e:9e:0e:67:c2:55:b7:ef:35:b8:7e:c4:1f:97:41:27:
b3:3b:e6:80:8f:8f:37:93:f1:9b:68:00:91:d5:6f:9d:96:f8:
09:3e:24:1d:4e:12:ce:86:5b:cf:91:98:dc:0d:b1:fc:5b:31:
ce:a3:0e:7f:0f:0b:fb:c5:68:da:f3:56:46:ad:a7:d9:1c:30:
1d:c3:ac:56:76:f7:d9:26:f9:06:3b:17:2b:f6:13:42:93:57:
8b:57:29:37:3e:69:33:e5:42:25:08:8f:d0:48:24:a9:e9:c2:
3d:0f:7b:9a:63:41:27:24:45:d3:6b:e2:c1:3c:6f:07:de:3d:
39:50:e3:1c:c7:9e:cc:7e:2f:69:73:0c:57:10:d2:f6:02:36:
b7:1a:31:de:06:2b:ce:7c:a1:6f:e9:42:06:ad:cd:5a:e7:69:
bb:40:ab:9a:56:5d:7c:4a:7c:dd:26:ff:17:e8:b3:c2:36:52:
29:8f:1d:ce:95:17:cd:56:95:06:43:22:b7:19:c7:f2:da:23:
5a:5e:f4:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RNUjWqSx4eQMhF9r3cpWkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzNGQ5Mzk1YTJiYTIzOWNiOWQyNzhlYjU4OWI3MmVkNWM5
NjcyZDEwHhcNMjYwNzIzMjMwMDE2WhcNMjYwNzI0MjMwMDE2WjAzMTEwLwYDVQQD
Eyg1YWZjMTI5ZDBiYTRhMTRjNzAyMDk3OTE2ZGFkZWU0YzJhNzEwMWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+Tu+HC3zU0oXSd9kVA/ghnHT6G1
5jDhnCaEeA61xnXICJuf5leSulS3qcxK9pkC6BTjYlXSnf+BOBg2vsNWCKv4BLaP
nQSeigdx8m/v2Qd3OTsWsIeBCFqfxXPFgJOWPhHD0lZHUcNwORJtvznaC17J2a7U
8DnxLkKmHq8o4OGfZ4iHv6iQ90gRUfgHF2Y6IlH+qAWm+N24ivK+njmC+VY4Fl4x
MO0Mh1ZFqaJnKgHa3RJQeteF8vXrR+MMYVI0u1+tWC7uEx6DKDpZCIhUFJUWyyOc
cmpyxTWcP0i0HKMELhvruE1PJ0OvsqnBBaecyRxzbSCKM9+ym8Mi7Vg/IQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFr8Ep0LpKFMcCCXkW2t7kwqcQHOMB8GA1UdIwQY
MBaAFCNNk5WiuiOcudJ461ibcu1clnLRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTAyVGxhSzZJNXk1MG5qcldKdHk3VnlXY3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8zZGU4Y2MtZGI3OS00YTliLWI3OWEt
NGVmNDg4ZGM2ZGM0LzEvSTAyVGxhSzZJNXk1MG5qcldKdHk3VnlXY3RFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi8zZGU4Y2MtZGI3OS00YTliLWI3OWEtNGVmNDg4ZGM2ZGM0
LzEvSTAyVGxhSzZJNXk1MG5qcldKdHk3VnlXY3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgfzstiMg
Ieh+aLxwZqOYKANdd9EZv4M1v/YvXYiGfY+2npRYKBsmyt3nySH8uvC5ztOFct3w
PEAOng5nwlW37zW4fsQfl0EnszvmgI+PN5Pxm2gAkdVvnZb4CT4kHU4SzoZbz5GY
3A2x/FsxzqMOfw8L+8Vo2vNWRq2n2RwwHcOsVnb32Sb5BjsXK/YTQpNXi1cpNz5p
M+VCJQiP0EgkqenCPQ97mmNBJyRF02viwTxvB949OVDjHMeezH4vaXMMVxDS9gI2
txox3gYrznyhb+lCBq3NWudpu0CrmlZdfEp83Sb/F+izwjZSKY8dzpUXzVaVBkMi
txnH8tojWl703A==
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:55:16 2026 by rpki-client