Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft
File: IacXNhMJ0pOTUcnYuiFz24MZqI8.mft (raw, json)
Hash identifier: gQeuCZfWxVo7Du33Df60792OhGkyNnpNGFkCcnb8Wgw=
Subject key identifier: 47:BC:3F:03:61:58:2F:A6:93:BB:90:C9:F9:54:81:E7:75:04:D9:3A
Authority key identifier: 21:A7:17:36:13:09:D2:93:93:51:C9:D8:BA:21:73:DB:83:19:A8:8F
Certificate issuer: /CN=21a717361309d2939351c9d8ba2173db8319a88f
Certificate serial: 01A12A9FB567A368503EDA2FE9A699AA717E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IacXNhMJ0pOTUcnYuiFz24MZqI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft
Manifest number: 12B7
Signing time: Sun 11 Oct 2026 11:01:11 +0000
Manifest this update: Sun 11 Oct 2026 11:01:11 +0000
Manifest next update: Mon 12 Oct 2026 11:01:11 +0000
Files and hashes: 1: 1-lmEP6bvSg72yf_GUeD4MSKNWhk.roa (hash: UZw/L6lxwycncfuJtQDWqM2GbKpxVlPtsRDnOtxZfq4=)
2: IacXNhMJ0pOTUcnYuiFz24MZqI8.crl (hash: 617MjXiIXTTxQ/WTI+yDTjv5ym7SlDkMfbPLQKDaN2s=)
3: uy5YZrZ342ZeZ2NGVVpULZDoPcE.roa (hash: ePYFBpMymgZ8ANPnNiychRqaQ6Srx/8bC1+U5miv+Ng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft
rsync://rpki.ripe.net/repository/DEFAULT/IacXNhMJ0pOTUcnYuiFz24MZqI8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2a:9f:b5:67:a3:68:50:3e:da:2f:e9:a6:99:aa:71:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21a717361309d2939351c9d8ba2173db8319a88f
Validity
Not Before: Oct 11 11:01:11 2026 GMT
Not After : Oct 12 11:01:11 2026 GMT
Subject: CN=47bc3f0361582fa693bb90c9f95481e77504d93a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a1:ef:e7:85:75:7c:d7:07:fc:5f:94:5e:2f:
d5:98:91:bf:d6:e8:44:2a:e1:5a:46:db:57:e8:e2:
5b:d0:76:e8:42:3d:9f:a6:7d:57:89:80:c8:95:bc:
95:7c:15:77:9b:af:ad:95:06:4b:f0:9c:c2:b5:45:
82:14:f6:f4:78:1c:77:9e:6e:2c:7d:56:da:b5:3b:
1c:c2:7c:10:1f:3e:df:4c:57:e4:6d:26:d4:46:83:
a7:d1:04:e5:7b:9b:78:68:84:f8:d3:63:2a:ce:ad:
f5:6a:19:93:c0:6b:e9:53:4d:51:17:e9:ce:7e:20:
ec:36:39:72:b0:6f:a2:a3:f3:e5:0f:37:1c:6b:5b:
bf:ea:fc:df:e1:c0:a8:7e:f2:96:49:93:98:11:a5:
27:37:db:f1:7b:00:fd:60:14:ae:b2:21:2a:18:bd:
26:e2:2f:45:7e:94:b7:cc:3b:38:80:12:ec:37:f3:
24:1d:ef:a5:d6:2a:17:5c:89:8a:47:38:27:99:d5:
4b:2e:0e:24:81:ba:c7:58:7d:3f:71:a5:b0:4f:b5:
00:a5:e0:65:40:ea:a9:33:e7:e6:39:2f:44:95:87:
cd:e2:04:b7:7a:a4:1e:5d:94:f7:64:a5:17:61:70:
30:97:39:1e:e3:d5:99:75:72:20:c8:f2:42:8f:a3:
76:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:BC:3F:03:61:58:2F:A6:93:BB:90:C9:F9:54:81:E7:75:04:D9:3A
X509v3 Authority Key Identifier:
keyid:21:A7:17:36:13:09:D2:93:93:51:C9:D8:BA:21:73:DB:83:19:A8:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IacXNhMJ0pOTUcnYuiFz24MZqI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:4c:75:39:e2:fd:4a:d2:6c:40:cf:2b:0d:58:1b:6b:67:a2:
8f:c0:bc:21:01:54:93:6a:7d:30:5e:61:b5:20:dc:53:a6:0e:
50:35:3e:87:c9:07:a6:d1:ff:a1:18:a5:40:1b:09:b8:1e:16:
18:5e:92:bf:58:1b:34:7c:26:3a:1b:81:34:b3:13:0b:92:a7:
0d:19:6b:cb:aa:2b:99:2f:48:1b:9c:bb:2e:83:bd:88:70:17:
64:53:8e:a7:fe:84:58:3a:15:dd:17:90:6b:9c:ce:00:cd:86:
fc:a6:07:80:eb:a6:a6:27:db:6c:9a:db:c4:c9:7c:a7:68:ac:
6a:c4:a4:ce:f7:eb:e5:fb:82:90:a7:d3:ca:b7:78:70:75:d4:
f8:b6:16:5a:16:f4:27:d8:ba:6f:2a:01:e5:58:07:5b:ef:91:
f3:91:c7:56:b3:5d:43:88:40:8f:68:4c:70:89:dd:98:2d:19:
18:90:f8:45:1f:ad:57:cf:94:1a:fa:7b:c8:e1:4d:5f:39:9f:
34:0f:d1:a5:a5:b1:5f:35:79:a9:88:9c:0e:6e:f3:83:aa:27:
40:20:aa:4f:61:c0:ee:2e:74:9d:b1:c9:ca:b1:03:01:31:01:
22:0b:d8:e7:e2:fa:34:97:f3:1d:d4:a3:78:81:32:58:94:44:
bc:f9:83:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEqn7Vno2hQPtov6aaZqnF+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxYTcxNzM2MTMwOWQyOTM5MzUxYzlkOGJhMjE3M2RiODMx
OWE4OGYwHhcNMjYxMDExMTEwMTExWhcNMjYxMDEyMTEwMTExWjAzMTEwLwYDVQQD
Eyg0N2JjM2YwMzYxNTgyZmE2OTNiYjkwYzlmOTU0ODFlNzc1MDRkOTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaHv54V1fNcH/F+UXi/VmJG/1uhE
KuFaRttX6OJb0HboQj2fpn1XiYDIlbyVfBV3m6+tlQZL8JzCtUWCFPb0eBx3nm4s
fVbatTscwnwQHz7fTFfkbSbURoOn0QTle5t4aIT402Mqzq31ahmTwGvpU01RF+nO
fiDsNjlysG+io/PlDzcca1u/6vzf4cCofvKWSZOYEaUnN9vxewD9YBSusiEqGL0m
4i9FfpS3zDs4gBLsN/MkHe+l1ioXXImKRzgnmdVLLg4kgbrHWH0/caWwT7UApeBl
QOqpM+fmOS9ElYfN4gS3eqQeXZT3ZKUXYXAwlzke49WZdXIgyPJCj6N2DwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEe8PwNhWC+mk7uQyflUged1BNk6MB8GA1UdIwQY
MBaAFCGnFzYTCdKTk1HJ2Lohc9uDGaiPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWFjWE5oTUowcE9UVWNuWXVpRnoyNE1acUk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny83ZmIzODEtZmM0NC00NGY2LWEzODUt
ZjhhNDY5ZDRlMmIyLzEvSWFjWE5oTUowcE9UVWNuWXVpRnoyNE1acUk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny83ZmIzODEtZmM0NC00NGY2LWEzODUtZjhhNDY5ZDRlMmIy
LzEvSWFjWE5oTUowcE9UVWNuWXVpRnoyNE1acUk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs0x1OeL9
StJsQM8rDVgba2eij8C8IQFUk2p9MF5htSDcU6YOUDU+h8kHptH/oRilQBsJuB4W
GF6Sv1gbNHwmOhuBNLMTC5KnDRlry6ormS9IG5y7LoO9iHAXZFOOp/6EWDoV3ReQ
a5zOAM2G/KYHgOumpifbbJrbxMl8p2isasSkzvfr5fuCkKfTyrd4cHXU+LYWWhb0
J9i6byoB5VgHW++R85HHVrNdQ4hAj2hMcIndmC0ZGJD4RR+tV8+UGvp7yOFNXzmf
NA/RpaWxXzV5qYicDm7zg6onQCCqT2HA7i50nbHJyrEDATEBIgvY5+L6NJfzHdSj
eIEyWJREvPmDZA==
-----END CERTIFICATE-----
Generated at Sun Oct 11 15:24:28 2026 by rpki-client