Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft
File: IQ2p568B3nVEj0kGqsQb0pZOiEc.mft (raw, json)
Hash identifier: IMgUwCyTJvOCtjBV8sds7cISNBDK60XKJ9gbwJbjzOg=
Subject key identifier: C7:D2:9D:0E:59:C3:5E:BE:58:BB:FE:1A:3D:1C:9F:14:BE:E1:60:A9
Authority key identifier: 21:0D:A9:E7:AF:01:DE:75:44:8F:49:06:AA:C4:1B:D2:96:4E:88:47
Certificate issuer: /CN=210da9e7af01de75448f4906aac41bd2964e8847
Certificate serial: 019F965B9DACF63FAF6BEF4FEF0565C194CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQ2p568B3nVEj0kGqsQb0pZOiEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft
Manifest number: 19D1
Signing time: Fri 24 Jul 2026 23:00:14 +0000
Manifest this update: Fri 24 Jul 2026 23:00:14 +0000
Manifest next update: Sat 25 Jul 2026 23:00:14 +0000
Files and hashes: 1: 1-lozbj90cEVrWfLXpW3TMtR_PG4.roa (hash: yo16aFrNe1K/8qY2QGw1QDgUIGMnW024P9x1aOJw2jM=)
2: IQ2p568B3nVEj0kGqsQb0pZOiEc.crl (hash: jUhC3ktCAn41BXW6TM0AQZMs0zC9l4dEGYEKr3zCylI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQ2p568B3nVEj0kGqsQb0pZOiEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:96:5b:9d:ac:f6:3f:af:6b:ef:4f:ef:05:65:c1:94:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=210da9e7af01de75448f4906aac41bd2964e8847
Validity
Not Before: Jul 24 23:00:14 2026 GMT
Not After : Jul 25 23:00:14 2026 GMT
Subject: CN=c7d29d0e59c35ebe58bbfe1a3d1c9f14bee160a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5f:4e:97:c4:53:0c:a8:38:b8:9b:bb:99:52:
1d:c6:a1:61:1c:75:a0:c6:35:1d:dc:73:7e:34:7a:
6c:05:7f:f4:d4:bd:3f:81:a8:31:dd:f7:63:96:e0:
86:95:7e:03:df:59:c1:14:c7:cc:b9:78:c5:07:64:
e4:a3:8c:ec:fa:05:27:bd:70:67:2b:01:8c:40:94:
f3:fb:43:6f:e9:5e:68:6c:6d:5e:c3:56:c0:a2:07:
36:a2:f4:c8:43:6b:a3:64:78:4f:c3:0d:e2:36:49:
ef:6d:f8:d3:e2:68:f7:2c:40:4a:1c:13:c5:4d:7d:
10:71:a6:53:35:53:7b:2c:60:f1:a0:df:a1:cb:c1:
c0:3f:86:44:2b:39:ad:25:88:b0:bb:81:9b:8d:31:
bc:fc:b9:31:83:93:64:2c:2b:73:b5:1b:52:cc:e6:
e5:be:30:88:12:7b:4f:72:7c:5e:10:60:74:06:7a:
7f:7a:55:9b:6e:de:b3:8d:be:ba:b3:5a:af:8f:44:
18:c1:6b:25:8e:a3:44:1f:7b:7c:8f:b6:87:32:ee:
04:6f:75:25:99:b9:cf:51:4c:94:e7:12:ab:4f:f8:
82:f0:40:91:e2:44:28:78:17:eb:5d:83:4a:53:20:
4f:6e:5d:e2:45:2a:58:a6:e4:9b:f0:58:db:3e:a0:
ef:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:D2:9D:0E:59:C3:5E:BE:58:BB:FE:1A:3D:1C:9F:14:BE:E1:60:A9
X509v3 Authority Key Identifier:
keyid:21:0D:A9:E7:AF:01:DE:75:44:8F:49:06:AA:C4:1B:D2:96:4E:88:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQ2p568B3nVEj0kGqsQb0pZOiEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:a9:c4:56:48:0c:f2:da:56:01:fa:4e:3c:b9:0f:c2:f9:9e:
6a:91:dc:93:3f:b2:9d:27:3b:f7:73:5b:44:70:d6:75:b1:32:
a3:0f:f9:20:4f:99:a0:55:24:9b:bd:ed:4c:cb:bb:cd:7b:1c:
9d:54:73:11:ce:e4:9a:05:80:2a:da:2e:1d:ea:fb:44:df:9f:
c6:ab:9c:ac:34:31:11:e0:e9:ec:df:a9:0d:7c:64:35:71:e7:
1d:bc:2b:37:d3:c2:15:d9:c1:14:10:ba:92:cb:5c:af:b3:98:
f1:3b:37:fc:6a:a3:5d:f5:03:a0:d9:21:ee:02:a8:8a:16:e3:
0d:ea:50:ae:88:5e:7c:5b:f2:50:13:35:38:74:ca:ce:f9:f2:
3a:2e:0b:ac:35:a8:bb:43:94:c7:fb:5f:16:55:23:9a:89:d7:
2c:45:1d:34:ae:56:77:b7:54:a9:36:ad:86:79:76:1b:94:47:
76:f1:45:d4:11:81:7b:32:ac:a3:70:53:c7:6b:8c:7e:18:f8:
d6:d4:29:70:14:87:f7:f5:1a:3f:22:ed:21:0f:2b:d3:13:ec:
16:0b:05:ac:4c:e0:ae:5b:7a:10:0a:a6:ee:63:44:f9:e6:0d:
18:5f:4b:89:b9:44:90:39:5a:cc:70:7b:e2:e5:d3:71:85:e4:
1a:eb:44:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+WW52s9j+va+9P7wVlwZTKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMGRhOWU3YWYwMWRlNzU0NDhmNDkwNmFhYzQxYmQyOTY0
ZTg4NDcwHhcNMjYwNzI0MjMwMDE0WhcNMjYwNzI1MjMwMDE0WjAzMTEwLwYDVQQD
EyhjN2QyOWQwZTU5YzM1ZWJlNThiYmZlMWEzZDFjOWYxNGJlZTE2MGE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1F9Ol8RTDKg4uJu7mVIdxqFhHHWg
xjUd3HN+NHpsBX/01L0/gagx3fdjluCGlX4D31nBFMfMuXjFB2Tko4zs+gUnvXBn
KwGMQJTz+0Nv6V5obG1ew1bAogc2ovTIQ2ujZHhPww3iNknvbfjT4mj3LEBKHBPF
TX0QcaZTNVN7LGDxoN+hy8HAP4ZEKzmtJYiwu4GbjTG8/Lkxg5NkLCtztRtSzObl
vjCIEntPcnxeEGB0Bnp/elWbbt6zjb66s1qvj0QYwWsljqNEH3t8j7aHMu4Eb3Ul
mbnPUUyU5xKrT/iC8ECR4kQoeBfrXYNKUyBPbl3iRSpYpuSb8FjbPqDvTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMfSnQ5Zw16+WLv+Gj0cnxS+4WCpMB8GA1UdIwQY
MBaAFCENqeevAd51RI9JBqrEG9KWTohHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVEycDU2OEIzblZFajBrR3FzUWIwcFpPaUVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9mMjc4MjEtNGNjZi00ZDJlLThiMTUt
NmUxMjc3NGY4NTFlLzEvSVEycDU2OEIzblZFajBrR3FzUWIwcFpPaUVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9mMjc4MjEtNGNjZi00ZDJlLThiMTUtNmUxMjc3NGY4NTFl
LzEvSVEycDU2OEIzblZFajBrR3FzUWIwcFpPaUVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk6nEVkgM
8tpWAfpOPLkPwvmeapHckz+ynSc793NbRHDWdbEyow/5IE+ZoFUkm73tTMu7zXsc
nVRzEc7kmgWAKtouHer7RN+fxqucrDQxEeDp7N+pDXxkNXHnHbwrN9PCFdnBFBC6
kstcr7OY8Ts3/GqjXfUDoNkh7gKoihbjDepQrohefFvyUBM1OHTKzvnyOi4LrDWo
u0OUx/tfFlUjmonXLEUdNK5Wd7dUqTathnl2G5RHdvFF1BGBezKso3BTx2uMfhj4
1tQpcBSH9/UaPyLtIQ8r0xPsFgsFrEzgrlt6EAqm7mNE+eYNGF9LiblEkDlazHB7
4uXTcYXkGutEoA==
-----END CERTIFICATE-----
Generated at Sat Jul 25 00:27:16 2026 by rpki-client