Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/1IVR4mFps7PhJPaWTicC6VdoJT4.mft
File: 1IVR4mFps7PhJPaWTicC6VdoJT4.mft (raw, json)
Hash identifier: 4YiMwHCjURK8WFbs4K/vbnvquj5WhDS+UtLAq72jDFQ=
Subject key identifier: 1A:69:A6:F3:26:CA:D9:5C:F0:DC:CE:94:54:F0:63:CB:66:76:A6:50
Authority key identifier: D4:85:51:E2:61:69:B3:B3:E1:24:F6:96:4E:27:02:E9:57:68:25:3E
Certificate issuer: /CN=d48551e26169b3b3e124f6964e2702e95768253e
Certificate serial: 019F8FEBF95DFB469013EE652EF2DE22F0D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1IVR4mFps7PhJPaWTicC6VdoJT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/1IVR4mFps7PhJPaWTicC6VdoJT4.mft
Manifest number: 09E2
Signing time: Thu 23 Jul 2026 17:00:34 +0000
Manifest this update: Thu 23 Jul 2026 17:00:34 +0000
Manifest next update: Fri 24 Jul 2026 17:00:34 +0000
Files and hashes: 1: 1IVR4mFps7PhJPaWTicC6VdoJT4.crl (hash: OaGesvjyANG3KVH//Zz1RhUm3mENKREKXlUkM6f7ia8=)
2: dUE7B1BI2eY5vxH0sjXn_eEtdiE.roa (hash: Td10cn+TUBgy7bh+w4UsjfRQk/m+lGjAwnzc4Ms7SgE=)
3: koyfl1fbRQ7wL_4CDR4bR8SUJ6w.roa (hash: +ihoHt66MtdHz9TjemIYSdtViPsR/B1PabBEU1L+tYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/1IVR4mFps7PhJPaWTicC6VdoJT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/1IVR4mFps7PhJPaWTicC6VdoJT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1IVR4mFps7PhJPaWTicC6VdoJT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:eb:f9:5d:fb:46:90:13:ee:65:2e:f2:de:22:f0:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48551e26169b3b3e124f6964e2702e95768253e
Validity
Not Before: Jul 23 17:00:34 2026 GMT
Not After : Jul 24 17:00:34 2026 GMT
Subject: CN=1a69a6f326cad95cf0dcce9454f063cb6676a650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b2:ff:a7:d8:93:42:e0:2f:64:8b:0c:34:62:
e4:92:e3:02:ae:87:0a:78:ee:c0:9a:e1:e3:3e:59:
d0:48:32:10:68:2f:d4:44:8e:2d:86:e6:2c:a9:84:
63:da:01:8c:82:37:86:92:1e:c2:ed:34:b6:14:be:
14:b7:35:1b:c3:4d:0d:8c:07:22:5a:8f:a9:97:9b:
1e:97:90:b5:14:57:5d:e2:fe:24:47:f8:f0:da:2b:
93:3d:8b:e7:25:46:f4:36:e3:75:fc:7e:81:e4:c5:
6a:3c:31:32:37:47:91:53:7b:2b:19:d8:d8:7d:46:
51:a2:0e:bb:c7:c4:b7:1c:da:76:96:d2:b0:32:fe:
a2:ac:ee:e2:ea:7d:a6:4f:25:46:19:11:e0:f6:54:
8d:52:e6:14:76:64:8a:16:1e:64:a4:41:25:0a:ed:
75:3a:49:90:2e:45:51:e9:3c:04:da:b7:d7:d9:c9:
ff:dc:93:ba:3f:a3:d2:6e:b4:f7:21:1b:08:77:cd:
02:e4:09:33:47:cb:e7:ea:f8:02:13:11:ac:97:f0:
d1:ab:31:7d:dc:e7:98:32:ed:05:38:42:4b:8b:da:
73:de:02:a2:cb:aa:4a:29:56:21:7e:f2:44:a0:91:
24:38:e1:b2:d3:71:65:c5:32:ef:21:d2:83:74:05:
86:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:69:A6:F3:26:CA:D9:5C:F0:DC:CE:94:54:F0:63:CB:66:76:A6:50
X509v3 Authority Key Identifier:
keyid:D4:85:51:E2:61:69:B3:B3:E1:24:F6:96:4E:27:02:E9:57:68:25:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IVR4mFps7PhJPaWTicC6VdoJT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/1IVR4mFps7PhJPaWTicC6VdoJT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/1IVR4mFps7PhJPaWTicC6VdoJT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:27:f4:23:d4:77:a3:f9:25:e6:d1:0b:c2:36:02:ad:48:c8:
0c:73:81:b8:74:d7:22:5d:42:33:e2:d5:82:d5:e3:f5:54:f8:
8c:a8:01:d8:7b:b6:32:82:dd:89:64:70:7b:2c:f7:b0:ff:b6:
a4:ca:5f:34:ff:96:cf:c9:b6:d8:8c:1d:8d:8e:e0:1c:15:2a:
9a:d7:6d:78:e4:6b:c6:1a:53:b0:36:78:9e:ce:e1:1c:ea:5f:
81:12:71:18:4d:f4:42:cc:b8:15:75:be:a8:c6:ae:86:e4:17:
e2:9a:eb:ff:a6:f3:4c:fb:66:a3:cd:9c:52:af:14:9d:ae:85:
f1:f4:a5:1c:fc:f8:80:74:e2:54:43:a4:55:80:bb:b3:36:39:
5d:d7:ee:77:55:ce:67:93:4a:22:e3:88:64:57:bb:ab:9c:6e:
9e:47:3c:45:73:1b:1f:62:d2:b7:47:76:12:65:19:ba:74:98:
c2:76:c1:9f:6b:82:f1:d1:78:be:a6:ee:e5:f7:48:13:23:c4:
d3:76:87:f9:f4:37:31:2c:96:c6:56:d5:c3:a4:7c:86:1b:00:
72:be:a4:f2:74:0a:c8:e6:0c:aa:6a:95:b9:ef:96:bc:5b:ab:
d5:cc:05:06:04:bb:2a:45:28:22:67:09:e4:a7:8d:ec:ab:59:
f8:02:92:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+P6/ld+0aQE+5lLvLeIvDZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0ODU1MWUyNjE2OWIzYjNlMTI0ZjY5NjRlMjcwMmU5NTc2
ODI1M2UwHhcNMjYwNzIzMTcwMDM0WhcNMjYwNzI0MTcwMDM0WjAzMTEwLwYDVQQD
EygxYTY5YTZmMzI2Y2FkOTVjZjBkY2NlOTQ1NGYwNjNjYjY2NzZhNjUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLL/p9iTQuAvZIsMNGLkkuMCrocK
eO7AmuHjPlnQSDIQaC/URI4thuYsqYRj2gGMgjeGkh7C7TS2FL4UtzUbw00NjAci
Wo+pl5sel5C1FFdd4v4kR/jw2iuTPYvnJUb0NuN1/H6B5MVqPDEyN0eRU3srGdjY
fUZRog67x8S3HNp2ltKwMv6irO7i6n2mTyVGGRHg9lSNUuYUdmSKFh5kpEElCu11
OkmQLkVR6TwE2rfX2cn/3JO6P6PSbrT3IRsId80C5AkzR8vn6vgCExGsl/DRqzF9
3OeYMu0FOEJLi9pz3gKiy6pKKVYhfvJEoJEkOOGy03FlxTLvIdKDdAWGSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBpppvMmytlc8NzOlFTwY8tmdqZQMB8GA1UdIwQY
MBaAFNSFUeJhabOz4ST2lk4nAulXaCU+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUlWUjRtRnBzN1BoSlBhV1RpY0M2VmRvSlQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9lYWQyNzctODRjOS00YjhlLTg3OWUt
NWY3MzI2NzEwMmE2LzEvMUlWUjRtRnBzN1BoSlBhV1RpY0M2VmRvSlQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9lYWQyNzctODRjOS00YjhlLTg3OWUtNWY3MzI2NzEwMmE2
LzEvMUlWUjRtRnBzN1BoSlBhV1RpY0M2VmRvSlQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADSf0I9R3
o/kl5tELwjYCrUjIDHOBuHTXIl1CM+LVgtXj9VT4jKgB2Hu2MoLdiWRweyz3sP+2
pMpfNP+Wz8m22IwdjY7gHBUqmtdteORrxhpTsDZ4ns7hHOpfgRJxGE30Qsy4FXW+
qMauhuQX4prr/6bzTPtmo82cUq8Una6F8fSlHPz4gHTiVEOkVYC7szY5Xdfud1XO
Z5NKIuOIZFe7q5xunkc8RXMbH2LSt0d2EmUZunSYwnbBn2uC8dF4vqbu5fdIEyPE
03aH+fQ3MSyWxlbVw6R8hhsAcr6k8nQKyOYMqmqVue+WvFur1cwFBgS7KkUoImcJ
5KeN7KtZ+AKSRA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:12:43 2026 by rpki-client