Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.mft
File: iX2mABsSODBo_nGjD4zyhcZoMP4.mft (raw, json)
Hash identifier: gcCH/eiLwqYEH0WufPRlCzLbvpRwlWYYq4LMqz4k4uE=
Subject key identifier: BE:2B:B5:DA:39:37:46:F5:47:08:03:CA:4B:D7:DF:3B:41:B1:91:D0
Authority key identifier: 89:7D:A6:00:1B:12:38:30:68:FE:71:A3:0F:8C:F2:85:C6:68:30:FE
Certificate issuer: /CN=897da6001b12383068fe71a30f8cf285c66830fe
Certificate serial: 019F916CC697C7B9C92E1EC80AB518413D89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iX2mABsSODBo_nGjD4zyhcZoMP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 00:00:52 +0000
Manifest this update: Fri 24 Jul 2026 00:00:52 +0000
Manifest next update: Sat 25 Jul 2026 00:00:52 +0000
Files and hashes: 1: b7S_nq9L3fLkMmyZfKpBQL5uCIY.roa (hash: hHkV6ifNNgCnzjffMB2ARiro7sl9sU2WuipxUNM/huo=)
2: iX2mABsSODBo_nGjD4zyhcZoMP4.crl (hash: fC8x15sXr9nPXBffQ+M2R/einOtlXt/kBj0MJ7JRoeE=)
3: jAnHcvp-J3jJ73LmJIPdJciy_zM.roa (hash: APG1rihSnkESicy3QFJODSTSwbqRn6HF/XNwWPvWKwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iX2mABsSODBo_nGjD4zyhcZoMP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:c6:97:c7:b9:c9:2e:1e:c8:0a:b5:18:41:3d:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=897da6001b12383068fe71a30f8cf285c66830fe
Validity
Not Before: Jul 24 00:00:52 2026 GMT
Not After : Jul 25 00:00:52 2026 GMT
Subject: CN=be2bb5da393746f5470803ca4bd7df3b41b191d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7a:47:df:3c:9b:60:ee:51:47:93:4f:be:27:
28:ca:89:7a:2f:70:34:c1:69:7c:dc:4a:12:81:26:
50:6a:2d:9f:f1:b8:99:bd:25:37:cc:6d:3c:6c:64:
d0:6f:1e:7b:57:f8:b0:39:a5:56:45:cb:40:23:8a:
df:59:6a:3e:0e:06:cc:64:f3:31:27:94:13:b6:e7:
3c:6f:18:1f:c0:16:48:e7:49:da:47:7c:bc:be:50:
65:1b:f7:7d:6e:8e:4f:6a:34:49:36:88:0a:9e:e8:
c2:3f:68:c5:93:85:da:9c:37:3d:c9:a5:94:1d:22:
15:bc:d7:23:50:bb:dd:c7:3d:d4:0a:8d:46:76:14:
6e:2d:df:c3:db:fd:e3:c0:81:2d:40:8c:2f:59:b7:
81:4f:be:aa:8f:76:13:05:1b:5b:b9:33:7b:fe:82:
30:f5:d1:05:4c:13:80:c5:f4:e0:18:4d:6b:96:3f:
a2:ef:17:05:04:5b:eb:22:62:b7:bf:1f:9f:ce:17:
df:c0:0b:f2:e3:ff:2a:3c:20:8d:4d:eb:09:ac:48:
3a:5c:a5:38:17:00:f8:16:35:d8:05:66:33:06:07:
2a:15:73:ed:bf:da:ad:97:e6:ea:ee:45:10:76:97:
6b:f4:bc:db:60:fa:ac:e5:bf:29:25:37:ad:82:92:
68:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:2B:B5:DA:39:37:46:F5:47:08:03:CA:4B:D7:DF:3B:41:B1:91:D0
X509v3 Authority Key Identifier:
keyid:89:7D:A6:00:1B:12:38:30:68:FE:71:A3:0F:8C:F2:85:C6:68:30:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iX2mABsSODBo_nGjD4zyhcZoMP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:8a:fb:1f:4d:27:fa:25:6b:82:d7:a6:77:62:ff:f1:30:49:
f5:df:d4:20:53:8f:18:25:7e:b8:9f:4c:47:5d:81:25:15:a6:
d1:0d:f1:6e:f3:46:05:63:3f:0b:8b:a7:f0:33:15:57:f7:e6:
ca:98:8d:a8:83:6b:c9:38:6d:17:4b:c8:fd:b6:9d:e2:09:4d:
8b:37:6a:ee:64:d2:1d:8c:7b:86:ac:27:ef:6d:8e:f4:50:f3:
22:5d:86:2e:20:a9:bc:c1:89:38:18:23:26:4c:cf:b4:2b:85:
5b:16:f5:51:d8:d5:ce:87:86:63:5d:44:e6:3e:37:d1:bf:b3:
6f:c0:a4:31:b0:e9:fa:75:fa:92:c4:6d:22:c0:90:de:cf:07:
02:9c:e3:60:ce:eb:3f:77:97:d6:a6:db:0c:08:11:51:36:0c:
2e:91:c1:06:b3:0e:ed:bc:05:16:eb:1e:62:80:c3:15:2e:32:
52:a0:11:b0:b4:b4:b2:26:4e:28:ec:e9:8e:c9:14:9e:7d:b3:
04:63:a4:d6:7e:6e:c7:1a:5f:2f:85:f9:96:fb:75:a8:f3:23:
32:25:fb:af:91:e1:e6:20:a7:9c:25:14:f7:67:c3:5d:d2:f5:
a3:72:9d:95:c4:10:5f:27:9e:5a:d3:f4:9e:42:7a:f2:5d:2f:
ad:ce:08:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RbMaXx7nJLh7ICrUYQT2JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5N2RhNjAwMWIxMjM4MzA2OGZlNzFhMzBmOGNmMjg1YzY2
ODMwZmUwHhcNMjYwNzI0MDAwMDUyWhcNMjYwNzI1MDAwMDUyWjAzMTEwLwYDVQQD
EyhiZTJiYjVkYTM5Mzc0NmY1NDcwODAzY2E0YmQ3ZGYzYjQxYjE5MWQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXpH3zybYO5RR5NPvicoyol6L3A0
wWl83EoSgSZQai2f8biZvSU3zG08bGTQbx57V/iwOaVWRctAI4rfWWo+DgbMZPMx
J5QTtuc8bxgfwBZI50naR3y8vlBlG/d9bo5PajRJNogKnujCP2jFk4XanDc9yaWU
HSIVvNcjULvdxz3UCo1GdhRuLd/D2/3jwIEtQIwvWbeBT76qj3YTBRtbuTN7/oIw
9dEFTBOAxfTgGE1rlj+i7xcFBFvrImK3vx+fzhffwAvy4/8qPCCNTesJrEg6XKU4
FwD4FjXYBWYzBgcqFXPtv9qtl+bq7kUQdpdr9LzbYPqs5b8pJTetgpJoywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL4rtdo5N0b1RwgDykvX3ztBsZHQMB8GA1UdIwQY
MBaAFIl9pgAbEjgwaP5xow+M8oXGaDD+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVgybUFCc1NPREJvX25HakQ0enloY1pvTVA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni85NmRlYzgtNzcyMC00ZWZjLWJkMzkt
ODRmYWFmMTA1YTk3LzEvaVgybUFCc1NPREJvX25HakQ0enloY1pvTVA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni85NmRlYzgtNzcyMC00ZWZjLWJkMzktODRmYWFmMTA1YTk3
LzEvaVgybUFCc1NPREJvX25HakQ0enloY1pvTVA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGYr7H00n
+iVrgtemd2L/8TBJ9d/UIFOPGCV+uJ9MR12BJRWm0Q3xbvNGBWM/C4un8DMVV/fm
ypiNqINryThtF0vI/bad4glNizdq7mTSHYx7hqwn722O9FDzIl2GLiCpvMGJOBgj
JkzPtCuFWxb1UdjVzoeGY11E5j430b+zb8CkMbDp+nX6ksRtIsCQ3s8HApzjYM7r
P3eX1qbbDAgRUTYMLpHBBrMO7bwFFuseYoDDFS4yUqARsLS0siZOKOzpjskUnn2z
BGOk1n5uxxpfL4X5lvt1qPMjMiX7r5Hh5iCnnCUU92fDXdL1o3KdlcQQXyeeWtP0
nkJ68l0vrc4IXw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:22:56 2026 by rpki-client