Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft
File: IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft (raw, json)
Hash identifier: rfVCPFT8bIIzITgLo8+lmVF5vyks6kuVPt4dzctwJqg=
Subject key identifier: B1:60:6E:9B:7D:FF:4E:5F:01:E8:F5:81:C1:C2:1C:F7:FF:89:20:2D
Authority key identifier: 20:05:85:36:1D:51:A7:2E:7B:A6:30:8C:0C:EB:16:02:44:83:11:78
Certificate issuer: /CN=200585361d51a72e7ba6308c0ceb160244831178
Certificate serial: 019F916C6059EE3212E95AD994AF756F4A62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IAWFNh1Rpy57pjCMDOsWAkSDEXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft
Manifest number: 0AFA
Signing time: Fri 24 Jul 2026 00:00:26 +0000
Manifest this update: Fri 24 Jul 2026 00:00:26 +0000
Manifest next update: Sat 25 Jul 2026 00:00:26 +0000
Files and hashes: 1: 4kSC89D1AOgPjo_VC2p_1wAdyJ4.roa (hash: 49whWUdE9kNFPfnAL8tYbd6+c7MEWg0vvwt7AatABa0=)
2: IAWFNh1Rpy57pjCMDOsWAkSDEXg.crl (hash: 9Xlo4JhvJJLIV0RrSlHoMg33/TWYseL1tDIvJIn2aV4=)
3: d32KHDz4hQyuCuhNOb9K5kOq2qY.roa (hash: Sa1ntueDsGqjR2cwqIdDg9aoAqEdJGNyLoTHBEU6HPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IAWFNh1Rpy57pjCMDOsWAkSDEXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:60:59:ee:32:12:e9:5a:d9:94:af:75:6f:4a:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=200585361d51a72e7ba6308c0ceb160244831178
Validity
Not Before: Jul 24 00:00:26 2026 GMT
Not After : Jul 25 00:00:26 2026 GMT
Subject: CN=b1606e9b7dff4e5f01e8f581c1c21cf7ff89202d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3b:cd:b5:67:04:12:ac:98:4e:fc:d7:ed:57:
8b:69:85:30:75:8f:cf:2e:8b:06:d5:85:e5:f1:0e:
fd:49:93:b9:10:04:b3:da:7f:87:a2:32:18:c9:ba:
44:a7:e1:a9:ba:c7:94:e8:1e:0f:b6:ce:ae:ee:66:
b8:d0:9c:b8:f1:62:20:9d:80:ae:52:33:0a:1b:6e:
4b:7e:6f:26:de:f4:f1:ae:9f:c0:4c:de:e5:c6:04:
88:6b:54:45:d9:d0:33:2e:6a:ea:0c:7f:d1:70:b7:
bd:65:81:9d:cf:bb:29:33:58:65:69:a0:b7:80:e3:
af:6a:6a:a9:18:15:78:56:10:73:2e:b3:3b:05:06:
37:a1:a1:96:0b:e2:77:23:e7:46:d6:c2:5e:dc:27:
83:d4:e1:dd:54:a1:f4:6b:68:39:f8:c7:0d:83:0c:
c0:16:36:98:f1:4c:d3:7f:88:55:ff:24:ca:7d:4d:
0d:30:db:28:42:77:74:03:35:94:cc:6b:b1:7b:5e:
a9:49:51:49:9f:35:58:8b:55:b1:1c:67:e9:b9:69:
72:b3:48:d7:f0:25:e3:70:80:79:0d:f0:99:b1:3c:
ca:08:3f:51:b9:70:60:bc:50:5c:b6:79:8f:2c:d4:
ce:81:71:2f:dc:43:ee:1e:f3:75:33:9c:c2:88:e1:
32:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:60:6E:9B:7D:FF:4E:5F:01:E8:F5:81:C1:C2:1C:F7:FF:89:20:2D
X509v3 Authority Key Identifier:
keyid:20:05:85:36:1D:51:A7:2E:7B:A6:30:8C:0C:EB:16:02:44:83:11:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IAWFNh1Rpy57pjCMDOsWAkSDEXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:86:59:97:b3:c1:20:45:87:ca:a3:4b:54:65:41:80:ed:98:
f1:39:5b:b2:f6:90:58:13:fd:86:a6:cf:a8:e6:c7:a8:cd:8a:
9b:75:8b:3c:65:63:d2:ea:73:8a:4c:32:29:24:64:51:21:20:
af:a8:b5:ac:93:c4:05:66:bf:9d:75:d6:9c:26:0b:e6:14:1c:
f6:15:40:65:a2:47:97:4e:47:bc:e7:39:7a:98:55:7a:7b:32:
cf:49:95:81:8a:6a:2a:79:a9:ff:70:b6:18:4b:8c:2f:53:80:
91:56:be:c9:11:a9:27:7c:16:f3:e8:a5:c6:98:14:2b:aa:59:
87:35:91:9d:52:e4:6a:42:75:3e:eb:23:2f:4a:8a:f3:dd:5c:
b3:bb:25:27:b8:71:6a:cb:45:0f:af:e3:24:98:dd:4c:b8:37:
59:69:08:62:14:6a:5f:7d:de:4e:c6:79:cc:0a:07:09:0c:01:
b2:c3:60:7d:b8:8e:7c:d0:92:fb:68:32:79:2c:2d:93:c3:d3:
46:e8:dc:4d:70:dc:78:8b:cd:6f:47:46:75:e4:17:24:37:1e:
d6:e2:3a:ad:09:2f:9b:3f:19:55:d2:53:a3:bc:75:51:59:31:
36:df:c3:96:d0:f4:10:48:62:47:7c:ec:75:0a:d0:5a:02:a9:
77:7a:5c:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RbGBZ7jIS6VrZlK91b0piMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwMDU4NTM2MWQ1MWE3MmU3YmE2MzA4YzBjZWIxNjAyNDQ4
MzExNzgwHhcNMjYwNzI0MDAwMDI2WhcNMjYwNzI1MDAwMDI2WjAzMTEwLwYDVQQD
EyhiMTYwNmU5YjdkZmY0ZTVmMDFlOGY1ODFjMWMyMWNmN2ZmODkyMDJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozvNtWcEEqyYTvzX7VeLaYUwdY/P
LosG1YXl8Q79SZO5EASz2n+HojIYybpEp+GpuseU6B4Pts6u7ma40Jy48WIgnYCu
UjMKG25Lfm8m3vTxrp/ATN7lxgSIa1RF2dAzLmrqDH/RcLe9ZYGdz7spM1hlaaC3
gOOvamqpGBV4VhBzLrM7BQY3oaGWC+J3I+dG1sJe3CeD1OHdVKH0a2g5+McNgwzA
FjaY8UzTf4hV/yTKfU0NMNsoQnd0AzWUzGuxe16pSVFJnzVYi1WxHGfpuWlys0jX
8CXjcIB5DfCZsTzKCD9RuXBgvFBctnmPLNTOgXEv3EPuHvN1M5zCiOEyLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLFgbpt9/05fAej1gcHCHPf/iSAtMB8GA1UdIwQY
MBaAFCAFhTYdUacue6YwjAzrFgJEgxF4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUFXRk5oMVJweTU3cGpDTURPc1dBa1NERVhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9kODdmOGUtNjcyMy00YjE2LTllNzEt
MzE3Nzk4NzViNGZhLzEvSUFXRk5oMVJweTU3cGpDTURPc1dBa1NERVhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9kODdmOGUtNjcyMy00YjE2LTllNzEtMzE3Nzk4NzViNGZh
LzEvSUFXRk5oMVJweTU3cGpDTURPc1dBa1NERVhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkoZZl7PB
IEWHyqNLVGVBgO2Y8TlbsvaQWBP9hqbPqObHqM2Km3WLPGVj0upzikwyKSRkUSEg
r6i1rJPEBWa/nXXWnCYL5hQc9hVAZaJHl05HvOc5ephVensyz0mVgYpqKnmp/3C2
GEuML1OAkVa+yRGpJ3wW8+ilxpgUK6pZhzWRnVLkakJ1PusjL0qK891cs7slJ7hx
astFD6/jJJjdTLg3WWkIYhRqX33eTsZ5zAoHCQwBssNgfbiOfNCS+2gyeSwtk8PT
RujcTXDceIvNb0dGdeQXJDce1uI6rQkvmz8ZVdJTo7x1UVkxNt/DltD0EEhiR3zs
dQrQWgKpd3pc+A==
-----END CERTIFICATE-----
Generated at Fri Jul 24 09:56:34 2026 by rpki-client