Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft
File: Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft (raw, json)
Hash identifier: NgVt2ssAdvyk626laTVvLKIx1+Rv0tI7l1HCopWD2bM=
Subject key identifier: 8C:7C:73:DC:85:87:3F:1A:57:BA:8F:55:54:2E:05:72:4D:5F:7B:13
Authority key identifier: 22:A7:76:A6:95:5C:01:63:C9:CF:1A:83:8C:41:DF:EE:5D:A9:DB:3D
Certificate issuer: /CN=22a776a6955c0163c9cf1a838c41dfee5da9db3d
Certificate serial: 019F90C76AD09C647C37896EC6C02FD52BC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft
Manifest number: 14A9
Signing time: Thu 23 Jul 2026 21:00:15 +0000
Manifest this update: Thu 23 Jul 2026 21:00:15 +0000
Manifest next update: Fri 24 Jul 2026 21:00:15 +0000
Files and hashes: 1: Iqd2ppVcAWPJzxqDjEHf7l2p2z0.crl (hash: Z79VgnZjOMG4r9+6CDxl7ESIOPJHhWIaiqLwmW6jxi0=)
2: _NXhURzxEgUQOx1t27VNmnsADf8.roa (hash: kmT3XzeKsZmAbDA1dijKJM9ptJsrZrB5WHGBEuWYsf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:6a:d0:9c:64:7c:37:89:6e:c6:c0:2f:d5:2b:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a776a6955c0163c9cf1a838c41dfee5da9db3d
Validity
Not Before: Jul 23 21:00:15 2026 GMT
Not After : Jul 24 21:00:15 2026 GMT
Subject: CN=8c7c73dc85873f1a57ba8f55542e05724d5f7b13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:90:f6:3c:16:c5:41:2e:ae:2c:d3:18:5d:0e:
c9:75:aa:a4:76:35:21:15:aa:95:6e:3f:5f:a1:e8:
f3:e5:13:f8:a1:ae:92:93:82:d0:9d:c9:00:26:e4:
5c:bb:bd:3a:14:ca:b3:ab:72:5d:7c:c0:4c:76:e5:
a0:a5:05:cb:7f:90:3b:3c:b8:e8:99:33:b6:ce:8d:
4b:92:74:cb:33:2a:b3:2c:35:b0:82:fd:0a:1d:ca:
28:74:2a:5f:c3:29:53:85:3a:80:72:c6:35:49:f5:
a6:87:d8:66:41:03:8d:95:89:ed:95:95:cc:54:f4:
d2:0e:e1:29:e2:b9:1f:b0:52:91:48:b2:18:a2:4c:
32:d2:35:34:c4:09:a7:2a:c1:18:9d:9c:a2:41:e5:
ce:0f:f4:14:58:a4:59:ca:f0:a6:5e:60:01:3c:46:
20:cc:31:8f:5d:89:12:60:ad:83:82:1c:67:4f:10:
86:07:15:36:b0:72:3f:bd:f9:42:35:1d:70:2f:df:
df:a6:c2:aa:a1:5b:15:c4:32:c9:ec:61:6f:dd:43:
11:a5:63:6d:08:89:04:2c:6c:40:cf:18:07:fe:ed:
95:a1:33:cf:39:20:ea:ff:7d:40:38:00:5d:fc:a6:
f8:f9:1f:bb:1f:3e:3a:41:d5:bf:da:36:3b:a4:43:
2f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:7C:73:DC:85:87:3F:1A:57:BA:8F:55:54:2E:05:72:4D:5F:7B:13
X509v3 Authority Key Identifier:
keyid:22:A7:76:A6:95:5C:01:63:C9:CF:1A:83:8C:41:DF:EE:5D:A9:DB:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:65:1c:29:03:de:ca:96:df:2c:9e:f3:8c:3a:65:ff:f7:f3:
82:cf:f8:60:eb:a1:e9:a4:81:96:55:f9:2d:81:8e:0c:f4:4b:
d7:78:d4:e5:0b:74:cf:14:86:8a:5e:7f:74:65:44:6e:da:46:
c3:86:dc:56:8f:ff:26:4d:c9:5f:6a:02:91:44:4d:42:70:ee:
2d:fc:d5:a5:32:4d:d1:9b:15:1e:78:ab:cd:7d:ff:33:b2:41:
ab:85:3d:34:a9:2d:0e:52:fb:86:85:6c:ec:45:5e:d4:85:3b:
73:31:47:9b:29:9b:9b:34:0d:23:e1:79:58:f9:b5:ee:f9:05:
6c:a2:bf:7b:b1:37:e1:00:b2:69:68:76:fa:a1:b6:4f:51:74:
91:5c:58:7f:2a:5d:e8:7a:b8:17:86:cf:f1:ae:37:f9:d1:b5:
c0:2f:15:25:55:3b:58:34:95:56:24:8f:41:b1:02:df:1e:bc:
42:dd:2b:d3:7e:85:18:6f:b5:f7:e5:78:df:ca:29:e6:b1:a2:
9f:e1:09:ca:0d:2a:f9:c0:30:a1:6a:f9:bf:aa:f4:66:54:5e:
be:f6:d5:0b:0e:e2:1a:95:4c:04:90:bf:ba:b9:51:ff:56:2a:
ac:fa:91:b1:6b:eb:f4:1a:69:20:3b:c0:64:88:30:c3:0a:cc:
99:59:ef:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Qx2rQnGR8N4luxsAv1SvIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYTc3NmE2OTU1YzAxNjNjOWNmMWE4MzhjNDFkZmVlNWRh
OWRiM2QwHhcNMjYwNzIzMjEwMDE1WhcNMjYwNzI0MjEwMDE1WjAzMTEwLwYDVQQD
Eyg4YzdjNzNkYzg1ODczZjFhNTdiYThmNTU1NDJlMDU3MjRkNWY3YjEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJD2PBbFQS6uLNMYXQ7JdaqkdjUh
FaqVbj9foejz5RP4oa6Sk4LQnckAJuRcu706FMqzq3JdfMBMduWgpQXLf5A7PLjo
mTO2zo1LknTLMyqzLDWwgv0KHcoodCpfwylThTqAcsY1SfWmh9hmQQONlYntlZXM
VPTSDuEp4rkfsFKRSLIYokwy0jU0xAmnKsEYnZyiQeXOD/QUWKRZyvCmXmABPEYg
zDGPXYkSYK2DghxnTxCGBxU2sHI/vflCNR1wL9/fpsKqoVsVxDLJ7GFv3UMRpWNt
CIkELGxAzxgH/u2VoTPPOSDq/31AOABd/Kb4+R+7Hz46QdW/2jY7pEMv7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIx8c9yFhz8aV7qPVVQuBXJNX3sTMB8GA1UdIwQY
MBaAFCKndqaVXAFjyc8ag4xB3+5dqds9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXFkMnBwVmNBV1BKenhxRGpFSGY3bDJwMnowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS81Y2VkOGYtZDAyNC00NWJiLTkyMmMt
YWYxZGUzZDBmMjE3LzEvSXFkMnBwVmNBV1BKenhxRGpFSGY3bDJwMnowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS81Y2VkOGYtZDAyNC00NWJiLTkyMmMtYWYxZGUzZDBmMjE3
LzEvSXFkMnBwVmNBV1BKenhxRGpFSGY3bDJwMnowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl2UcKQPe
ypbfLJ7zjDpl//fzgs/4YOuh6aSBllX5LYGODPRL13jU5Qt0zxSGil5/dGVEbtpG
w4bcVo//Jk3JX2oCkURNQnDuLfzVpTJN0ZsVHnirzX3/M7JBq4U9NKktDlL7hoVs
7EVe1IU7czFHmymbmzQNI+F5WPm17vkFbKK/e7E34QCyaWh2+qG2T1F0kVxYfypd
6Hq4F4bP8a43+dG1wC8VJVU7WDSVViSPQbEC3x68Qt0r036FGG+19+V438op5rGi
n+EJyg0q+cAwoWr5v6r0ZlRevvbVCw7iGpVMBJC/urlR/1YqrPqRsWvr9BppIDvA
ZIgwwwrMmVnv0g==
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:14:00 2026 by rpki-client