Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/IMz236cJVzqCG2PEy2lWBf0maAs.mft
File: IMz236cJVzqCG2PEy2lWBf0maAs.mft (raw, json)
Hash identifier: 4UaRPM+8RnR5H6QWpl1FgL8eBURovdc1hHbXxqW70sg=
Subject key identifier: 79:4E:A4:F8:19:6A:10:EB:EA:1E:60:E3:66:02:96:B0:C8:5C:3F:40
Authority key identifier: 20:CC:F6:DF:A7:09:57:3A:82:1B:63:C4:CB:69:56:05:FD:26:68:0B
Certificate issuer: /CN=20ccf6dfa709573a821b63c4cb695605fd26680b
Certificate serial: 019F94DB8F367C105C7387FDD23E5E0D7797
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMz236cJVzqCG2PEy2lWBf0maAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/IMz236cJVzqCG2PEy2lWBf0maAs.mft
Manifest number: 06CF
Signing time: Fri 24 Jul 2026 16:00:44 +0000
Manifest this update: Fri 24 Jul 2026 16:00:44 +0000
Manifest next update: Sat 25 Jul 2026 16:00:44 +0000
Files and hashes: 1: IMz236cJVzqCG2PEy2lWBf0maAs.crl (hash: di2GEjaQxgs4W3NapMBaQ5/WfFAj6o5BA5Y95Fu+N2A=)
2: oMG6eFlW3TWb4IPEiHtaBvrTrd0.roa (hash: aj4kc+qI+NMwreXFfxOIle+v6Tq05n/0VxwaETeuQY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/IMz236cJVzqCG2PEy2lWBf0maAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/IMz236cJVzqCG2PEy2lWBf0maAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/IMz236cJVzqCG2PEy2lWBf0maAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:db:8f:36:7c:10:5c:73:87:fd:d2:3e:5e:0d:77:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20ccf6dfa709573a821b63c4cb695605fd26680b
Validity
Not Before: Jul 24 16:00:44 2026 GMT
Not After : Jul 25 16:00:44 2026 GMT
Subject: CN=794ea4f8196a10ebea1e60e3660296b0c85c3f40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ff:fd:0b:16:77:a5:2b:ed:ee:0b:c1:ef:88:
48:2f:7c:f0:b8:d4:8c:5a:ed:ce:8a:6b:2b:f7:c0:
d7:02:03:eb:0c:14:e0:ab:9a:f2:a6:9e:9b:51:c7:
88:79:19:c5:48:61:73:57:92:da:a6:f5:05:b7:49:
fa:f5:4c:81:67:70:34:15:7b:50:c7:06:86:46:88:
df:4d:f9:e0:a7:c7:c3:06:3d:ab:6e:0f:d5:5c:51:
83:63:32:36:c9:b9:d0:a0:0c:be:c0:04:bc:29:96:
5b:4d:fa:2d:cc:58:4e:ae:06:70:e7:89:9a:24:a3:
fc:30:44:1a:d8:4b:a9:47:9d:1d:e9:15:62:b4:00:
5d:3a:72:66:31:e5:00:5c:cb:bd:f4:c9:b5:42:fd:
d1:b2:bc:4f:90:f2:a9:f5:b1:33:10:65:54:45:71:
d0:b4:3c:26:36:60:4b:4c:78:0a:2d:a6:99:dc:4d:
9e:b9:07:82:3b:d1:23:a6:ca:e3:35:68:9a:26:e4:
c9:d2:3d:f0:48:26:c6:8b:5a:a3:57:ca:43:19:8d:
61:5a:fe:b9:e2:d1:b1:37:47:29:77:8b:26:de:05:
a6:53:36:73:37:5f:8f:48:05:b3:00:b1:64:6c:d3:
6d:85:ca:21:2a:4c:07:59:3c:1a:af:2a:ed:70:e6:
37:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:4E:A4:F8:19:6A:10:EB:EA:1E:60:E3:66:02:96:B0:C8:5C:3F:40
X509v3 Authority Key Identifier:
keyid:20:CC:F6:DF:A7:09:57:3A:82:1B:63:C4:CB:69:56:05:FD:26:68:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMz236cJVzqCG2PEy2lWBf0maAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/IMz236cJVzqCG2PEy2lWBf0maAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/IMz236cJVzqCG2PEy2lWBf0maAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:75:e8:be:b8:70:53:e4:e0:4f:e1:c4:37:b5:f8:c8:59:bb:
24:b3:b3:d6:f2:01:89:af:ba:8f:06:2c:20:5b:ad:4f:e4:ab:
10:db:99:b8:92:77:2a:a0:60:3a:a1:fa:17:8e:df:7b:d9:24:
c8:b2:08:92:ab:35:1c:cf:a8:d1:a3:2b:99:c9:06:6b:c9:4c:
9d:9f:f4:ce:13:e7:c0:5b:8d:5e:f9:30:e2:93:1d:a0:dd:99:
cd:7b:58:e1:4c:c6:90:5d:71:7c:99:73:61:7e:93:4e:86:9c:
ef:95:6c:97:ea:05:e4:ab:3b:0c:f6:08:db:02:86:28:53:64:
49:41:5f:ac:e3:fe:ba:06:a3:7d:f5:0c:5a:d7:33:df:bd:64:
50:d3:d3:bc:f8:10:06:2c:a7:3f:27:cd:52:0c:d6:02:00:c8:
b9:db:2a:53:34:94:ec:62:6a:95:ea:71:d3:88:d8:f3:a4:f9:
bb:50:f4:d3:7c:5c:1f:7d:d4:22:b7:11:1e:21:57:a7:5b:66:
56:f5:fc:ea:f8:0c:a6:df:77:64:f9:01:d3:f5:46:07:90:8a:
62:d9:ee:a7:d9:13:a7:6c:78:78:2c:8d:69:eb:82:d5:12:0c:
9f:93:a3:05:90:8c:22:f9:be:9a:5a:3d:7a:ee:bc:c4:64:36:
b8:6e:00:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+U2482fBBcc4f90j5eDXeXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwY2NmNmRmYTcwOTU3M2E4MjFiNjNjNGNiNjk1NjA1ZmQy
NjY4MGIwHhcNMjYwNzI0MTYwMDQ0WhcNMjYwNzI1MTYwMDQ0WjAzMTEwLwYDVQQD
Eyg3OTRlYTRmODE5NmExMGViZWExZTYwZTM2NjAyOTZiMGM4NWMzZjQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq//9CxZ3pSvt7gvB74hIL3zwuNSM
Wu3Oimsr98DXAgPrDBTgq5rypp6bUceIeRnFSGFzV5LapvUFt0n69UyBZ3A0FXtQ
xwaGRojfTfngp8fDBj2rbg/VXFGDYzI2ybnQoAy+wAS8KZZbTfotzFhOrgZw54ma
JKP8MEQa2EupR50d6RVitABdOnJmMeUAXMu99Mm1Qv3RsrxPkPKp9bEzEGVURXHQ
tDwmNmBLTHgKLaaZ3E2euQeCO9EjpsrjNWiaJuTJ0j3wSCbGi1qjV8pDGY1hWv65
4tGxN0cpd4sm3gWmUzZzN1+PSAWzALFkbNNthcohKkwHWTwaryrtcOY3eQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHlOpPgZahDr6h5g42YClrDIXD9AMB8GA1UdIwQY
MBaAFCDM9t+nCVc6ghtjxMtpVgX9JmgLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSU16MjM2Y0pWenFDRzJQRXkybFdCZjBtYUFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8xOTI2OWMtOWQ1Yi00ZjA5LTk3ZWIt
M2EyOGY4YTljNzA3LzEvSU16MjM2Y0pWenFDRzJQRXkybFdCZjBtYUFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi8xOTI2OWMtOWQ1Yi00ZjA5LTk3ZWItM2EyOGY4YTljNzA3
LzEvSU16MjM2Y0pWenFDRzJQRXkybFdCZjBtYUFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFHXovrhw
U+TgT+HEN7X4yFm7JLOz1vIBia+6jwYsIFutT+SrENuZuJJ3KqBgOqH6F47fe9kk
yLIIkqs1HM+o0aMrmckGa8lMnZ/0zhPnwFuNXvkw4pMdoN2ZzXtY4UzGkF1xfJlz
YX6TToac75Vsl+oF5Ks7DPYI2wKGKFNkSUFfrOP+ugajffUMWtcz371kUNPTvPgQ
BiynPyfNUgzWAgDIudsqUzSU7GJqlepx04jY86T5u1D003xcH33UIrcRHiFXp1tm
VvX86vgMpt93ZPkB0/VGB5CKYtnup9kTp2x4eCyNaeuC1RIMn5OjBZCMIvm+mlo9
eu68xGQ2uG4Ahg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 23:06:40 2026 by rpki-client