Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.mft
File: Iw6axkUQ-jkYRrsTmrUrgAHVgDg.mft (raw, json)
Hash identifier: iN1kagsWzlC/2jM3f/7H1q1NCSQm4qFkgsUWbkTC6Fk=
Subject key identifier: EF:9C:02:72:A2:98:04:8C:11:E8:D2:C8:7A:B2:FA:97:B8:87:7F:C3
Authority key identifier: 23:0E:9A:C6:45:10:FA:39:18:46:BB:13:9A:B5:2B:80:01:D5:80:38
Certificate issuer: /CN=230e9ac64510fa391846bb139ab52b8001d58038
Certificate serial: 019F924908D4C3B9A584200E1479DFFD843D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.mft
Manifest number: 165C
Signing time: Fri 24 Jul 2026 04:01:27 +0000
Manifest this update: Fri 24 Jul 2026 04:01:27 +0000
Manifest next update: Sat 25 Jul 2026 04:01:27 +0000
Files and hashes: 1: Iw6axkUQ-jkYRrsTmrUrgAHVgDg.crl (hash: 9359TILzUy7hIE9Ppv2zIunO2MA43+v+Ufbo9KIlEC4=)
2: Jc3bkiFIpTCnI7iepJAdAbekabs.roa (hash: NwsftHfqSo5igUnmJFDaLhMgga9JlSbY/WwsognqQyI=)
3: e3q1V2fD2QBr302Nmb_jtOVn5-M.roa (hash: kNGhLH15D9N/CBFSD4P6hJtpDjbOe8kg0SMmM1H5/j0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:49:08:d4:c3:b9:a5:84:20:0e:14:79:df:fd:84:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=230e9ac64510fa391846bb139ab52b8001d58038
Validity
Not Before: Jul 24 04:01:27 2026 GMT
Not After : Jul 25 04:01:27 2026 GMT
Subject: CN=ef9c0272a298048c11e8d2c87ab2fa97b8877fc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a7:17:a2:eb:3f:b3:19:7f:69:d8:4f:41:da:
cf:d3:7c:17:09:c1:19:57:d8:46:12:99:85:72:03:
95:5a:94:0b:50:c3:57:71:ad:40:ec:f1:74:f7:84:
f4:32:d3:f7:d0:ad:ba:56:7c:21:00:b1:33:63:c9:
18:15:88:33:54:75:46:07:9c:ff:d8:58:d8:87:b3:
53:44:87:b8:13:9a:cd:22:57:d9:c8:c6:81:46:19:
22:3d:45:aa:e4:36:0e:25:18:21:fc:74:3c:36:2f:
bd:e5:5e:ac:af:0a:da:5b:49:65:c6:01:6e:dd:e7:
2a:fd:96:1a:e6:bb:66:a7:60:5f:e9:45:47:20:c6:
b9:16:8d:f4:70:69:15:b1:c3:8c:86:86:42:24:d6:
fa:24:2a:d2:08:d2:eb:e7:60:1c:a3:fc:71:99:96:
43:c9:52:32:9d:85:3e:ff:13:aa:b4:50:4a:8c:0d:
2d:d5:62:e2:e5:2e:4c:53:8a:c9:a1:09:97:4e:87:
c2:dc:e4:47:04:0b:bb:dd:dd:bf:8e:27:01:54:65:
72:de:ea:f1:8e:70:b3:9a:9e:0a:95:f8:81:14:b5:
b6:0c:ae:b4:72:55:1b:38:cb:d4:a4:2e:e6:5c:05:
0b:00:81:36:d0:34:2b:3b:69:98:b8:9c:e6:d9:f9:
82:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:9C:02:72:A2:98:04:8C:11:E8:D2:C8:7A:B2:FA:97:B8:87:7F:C3
X509v3 Authority Key Identifier:
keyid:23:0E:9A:C6:45:10:FA:39:18:46:BB:13:9A:B5:2B:80:01:D5:80:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:79:7f:4b:36:94:9b:b6:b5:41:83:2a:61:12:3c:a9:4d:cf:
36:95:9e:67:ce:4e:ec:4b:b8:fe:86:10:0b:3b:09:b5:91:e5:
e7:8d:3e:aa:bd:77:d5:44:ac:c0:ff:f6:78:21:6b:6f:80:5f:
80:ee:bf:75:36:b6:fb:ce:5e:1b:b7:11:13:da:ec:da:72:8a:
3d:0d:18:8a:7f:12:74:5e:99:96:ca:ce:5f:59:b6:b1:56:6e:
1b:d1:87:db:8d:8a:e0:99:04:ab:0a:75:ab:28:ac:67:5e:11:
07:80:38:3c:9a:66:8c:9c:41:55:a1:30:6b:4a:7a:bf:f1:73:
2a:a7:b8:0d:14:fd:5a:a5:c9:c1:63:90:c7:e4:5b:e7:07:af:
17:f5:f8:45:91:d1:76:e7:48:1d:58:d3:3c:15:02:be:cd:e1:
8e:16:00:62:ee:cc:28:87:0d:d9:ea:e5:f8:86:00:45:ab:ad:
66:c5:12:10:2c:5f:ee:90:65:23:87:ea:0d:78:27:e0:5a:62:
71:e9:08:b9:11:be:35:b2:52:71:7a:83:f1:e6:ae:0e:58:83:
e1:a8:7d:26:d4:2f:be:64:af:ae:4f:d3:22:46:f4:79:1e:fe:
95:05:4d:c7:82:6d:f8:b8:c5:50:67:f0:30:60:e9:fa:86:de:
0b:0a:cb:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SSQjUw7mlhCAOFHnf/YQ9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzMGU5YWM2NDUxMGZhMzkxODQ2YmIxMzlhYjUyYjgwMDFk
NTgwMzgwHhcNMjYwNzI0MDQwMTI3WhcNMjYwNzI1MDQwMTI3WjAzMTEwLwYDVQQD
EyhlZjljMDI3MmEyOTgwNDhjMTFlOGQyYzg3YWIyZmE5N2I4ODc3ZmMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKcXous/sxl/adhPQdrP03wXCcEZ
V9hGEpmFcgOVWpQLUMNXca1A7PF094T0MtP30K26VnwhALEzY8kYFYgzVHVGB5z/
2FjYh7NTRIe4E5rNIlfZyMaBRhkiPUWq5DYOJRgh/HQ8Ni+95V6srwraW0llxgFu
3ecq/ZYa5rtmp2Bf6UVHIMa5Fo30cGkVscOMhoZCJNb6JCrSCNLr52Aco/xxmZZD
yVIynYU+/xOqtFBKjA0t1WLi5S5MU4rJoQmXTofC3ORHBAu73d2/jicBVGVy3urx
jnCzmp4KlfiBFLW2DK60clUbOMvUpC7mXAULAIE20DQrO2mYuJzm2fmCFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO+cAnKimASMEejSyHqy+pe4h3/DMB8GA1UdIwQY
MBaAFCMOmsZFEPo5GEa7E5q1K4AB1YA4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXc2YXhrVVEtamtZUnJzVG1yVXJnQUhWZ0RnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9jYTY4ZTgtNTE1Ny00NmI2LWI1ODQt
ZWE5MmQ4MGFiMTg4LzEvSXc2YXhrVVEtamtZUnJzVG1yVXJnQUhWZ0RnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9jYTY4ZTgtNTE1Ny00NmI2LWI1ODQtZWE5MmQ4MGFiMTg4
LzEvSXc2YXhrVVEtamtZUnJzVG1yVXJnQUhWZ0RnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwHl/SzaU
m7a1QYMqYRI8qU3PNpWeZ85O7Eu4/oYQCzsJtZHl540+qr131USswP/2eCFrb4Bf
gO6/dTa2+85eG7cRE9rs2nKKPQ0Yin8SdF6ZlsrOX1m2sVZuG9GH242K4JkEqwp1
qyisZ14RB4A4PJpmjJxBVaEwa0p6v/FzKqe4DRT9WqXJwWOQx+Rb5wevF/X4RZHR
dudIHVjTPBUCvs3hjhYAYu7MKIcN2erl+IYARautZsUSECxf7pBlI4fqDXgn4Fpi
cekIuRG+NbJScXqD8eauDliD4ah9JtQvvmSvrk/TIkb0eR7+lQVNx4Jt+LjFUGfw
MGDp+obeCwrLUg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:37:34 2026 by rpki-client