Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.mft
File: iH0wEZNRUA8lmlfi_2hQeX0bTho.mft (raw, json)
Hash identifier: PdVfowE2NSWcihmALN8N8vfkmnP5iePJvJeuhqOjd3w=
Subject key identifier: C9:9F:8C:D9:AE:F3:F1:67:46:46:7D:7A:3C:71:87:0E:23:A3:DF:AC
Authority key identifier: 88:7D:30:11:93:51:50:0F:25:9A:57:E2:FF:68:50:79:7D:1B:4E:1A
Certificate issuer: /CN=887d30119351500f259a57e2ff6850797d1b4e1a
Certificate serial: 019F927F163975E1BFCC1C8BFF13DE467C6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iH0wEZNRUA8lmlfi_2hQeX0bTho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 05:00:29 +0000
Manifest this update: Fri 24 Jul 2026 05:00:29 +0000
Manifest next update: Sat 25 Jul 2026 05:00:29 +0000
Files and hashes: 1: cFtA2whI-5eSAd_xz6FflVfrfcA.roa (hash: rjwPdM8tVlnPByunwjAWM9HihlVqQjzJw824S3HbwPc=)
2: iH0wEZNRUA8lmlfi_2hQeX0bTho.crl (hash: sSyWXQO0HEJea6y0hY/9xHxm1FHBQclCelKiIpCuLxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.mft
rsync://rpki.ripe.net/repository/DEFAULT/iH0wEZNRUA8lmlfi_2hQeX0bTho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:16:39:75:e1:bf:cc:1c:8b:ff:13:de:46:7c:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=887d30119351500f259a57e2ff6850797d1b4e1a
Validity
Not Before: Jul 24 05:00:29 2026 GMT
Not After : Jul 25 05:00:29 2026 GMT
Subject: CN=c99f8cd9aef3f16746467d7a3c71870e23a3dfac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3e:54:ec:bd:e8:53:f2:f7:42:a3:fe:98:1e:
5e:cb:2f:b2:4f:0d:7a:2e:53:8f:86:42:47:41:e6:
df:52:29:60:d6:dd:ef:a8:f2:38:2d:6a:6b:5e:9e:
46:e6:88:5f:19:77:f2:b8:7a:1e:18:18:15:59:80:
10:f7:32:4d:c1:e1:18:57:21:a9:47:77:6f:cf:af:
41:50:8e:19:24:5c:31:78:7c:df:9f:79:44:5f:80:
cc:3a:87:a4:9e:4c:a7:16:f5:62:1e:5e:0e:d9:da:
1a:ac:c9:8a:0b:68:fb:85:60:53:c1:4b:cb:79:76:
13:5e:69:da:0b:66:8b:ef:0e:25:87:8a:b6:4c:ad:
23:7b:99:61:13:79:61:58:d0:81:f1:05:29:33:b4:
50:b7:49:71:2a:fb:e5:8c:f6:58:27:9e:8d:e0:30:
f8:be:37:7f:f4:62:26:ae:e9:60:f8:ec:4b:96:1a:
ac:d6:73:e2:99:c2:70:2d:b3:f6:cb:a6:e0:99:42:
48:ed:d8:9f:61:99:74:35:a9:6e:5e:00:c4:af:7f:
d3:b3:dd:4b:a6:32:ee:30:4d:7d:6c:df:3b:7e:75:
58:1d:a7:a0:bf:72:2e:35:39:fb:4f:ef:4d:a4:78:
81:d5:a5:eb:27:b0:8d:81:90:28:5b:51:e7:a4:14:
24:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:9F:8C:D9:AE:F3:F1:67:46:46:7D:7A:3C:71:87:0E:23:A3:DF:AC
X509v3 Authority Key Identifier:
keyid:88:7D:30:11:93:51:50:0F:25:9A:57:E2:FF:68:50:79:7D:1B:4E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iH0wEZNRUA8lmlfi_2hQeX0bTho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:88:8e:ef:c3:4b:73:82:43:d4:4b:26:56:93:ba:60:90:69:
ee:ad:65:62:76:4b:eb:a9:a8:61:f0:3d:9b:c8:52:a8:ec:05:
a8:fa:5d:9f:4b:e0:fc:29:2c:c4:2a:e9:00:54:4d:58:9c:bb:
7d:18:ca:04:02:8a:14:23:32:d8:e4:ac:15:91:5c:a3:f9:ea:
8b:42:a4:ea:da:4f:98:e5:1e:17:6f:17:72:42:9a:c3:03:80:
c8:2f:2a:c0:bd:1e:80:de:0b:f8:b9:e7:ca:9d:a7:13:ce:4b:
3b:01:78:d3:08:82:93:90:b3:e9:1b:e7:81:19:1d:72:24:a9:
00:3d:09:17:98:4c:c4:23:e0:f0:b6:13:82:cd:10:e6:ef:4f:
7b:43:ba:cd:b6:47:2f:3b:be:99:49:bd:d0:d9:f8:4c:68:a7:
0e:8f:dd:e5:1c:49:72:79:41:9f:8e:5a:a1:8f:10:0f:33:aa:
56:15:f1:a2:26:c2:a9:a3:22:1b:b5:bc:3f:8e:61:59:65:27:
65:cf:b7:cc:c6:e1:b5:0a:46:1e:fd:1a:2c:97:8b:c0:61:65:
95:6d:89:cc:e4:7b:62:e2:60:61:41:b8:89:02:fe:59:aa:bd:
fe:80:fb:02:71:33:21:cd:dd:eb:ea:1b:4c:7b:e2:78:e0:43:
87:84:b3:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SfxY5deG/zByL/xPeRnxuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4N2QzMDExOTM1MTUwMGYyNTlhNTdlMmZmNjg1MDc5N2Qx
YjRlMWEwHhcNMjYwNzI0MDUwMDI5WhcNMjYwNzI1MDUwMDI5WjAzMTEwLwYDVQQD
EyhjOTlmOGNkOWFlZjNmMTY3NDY0NjdkN2EzYzcxODcwZTIzYTNkZmFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApD5U7L3oU/L3QqP+mB5eyy+yTw16
LlOPhkJHQebfUilg1t3vqPI4LWprXp5G5ohfGXfyuHoeGBgVWYAQ9zJNweEYVyGp
R3dvz69BUI4ZJFwxeHzfn3lEX4DMOoeknkynFvViHl4O2doarMmKC2j7hWBTwUvL
eXYTXmnaC2aL7w4lh4q2TK0je5lhE3lhWNCB8QUpM7RQt0lxKvvljPZYJ56N4DD4
vjd/9GImrulg+OxLlhqs1nPimcJwLbP2y6bgmUJI7difYZl0NaluXgDEr3/Ts91L
pjLuME19bN87fnVYHaegv3IuNTn7T+9NpHiB1aXrJ7CNgZAoW1HnpBQkQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMmfjNmu8/FnRkZ9ejxxhw4jo9+sMB8GA1UdIwQY
MBaAFIh9MBGTUVAPJZpX4v9oUHl9G04aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUgwd0VaTlJVQThsbWxmaV8yaFFlWDBiVGhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9mZWJiMmUtZjBkYS00ZDc0LWI1NDct
Zjc0MDFiNGU0YjRhLzEvaUgwd0VaTlJVQThsbWxmaV8yaFFlWDBiVGhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC9mZWJiMmUtZjBkYS00ZDc0LWI1NDctZjc0MDFiNGU0YjRh
LzEvaUgwd0VaTlJVQThsbWxmaV8yaFFlWDBiVGhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh4iO78NL
c4JD1EsmVpO6YJBp7q1lYnZL66moYfA9m8hSqOwFqPpdn0vg/CksxCrpAFRNWJy7
fRjKBAKKFCMy2OSsFZFco/nqi0Kk6tpPmOUeF28XckKawwOAyC8qwL0egN4L+Lnn
yp2nE85LOwF40wiCk5Cz6RvngRkdciSpAD0JF5hMxCPg8LYTgs0Q5u9Pe0O6zbZH
Lzu+mUm90Nn4TGinDo/d5RxJcnlBn45aoY8QDzOqVhXxoibCqaMiG7W8P45hWWUn
Zc+3zMbhtQpGHv0aLJeLwGFllW2JzOR7YuJgYUG4iQL+Waq9/oD7AnEzIc3d6+ob
THvieOBDh4SzAg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:57:51 2026 by rpki-client