Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/I67pTQ__bGx1KmlC_6lirjfH5rY.mft
File: I67pTQ__bGx1KmlC_6lirjfH5rY.mft (raw, json)
Hash identifier: z6BuRKAP7NgZf1UmoKbQNXu52NJFmtYoFGpcsRvU8Xs=
Subject key identifier: A5:B2:0B:F5:63:9B:A7:E0:3D:D3:6D:B5:6F:94:16:E8:97:8C:C1:ED
Authority key identifier: 23:AE:E9:4D:0F:FF:6C:6C:75:2A:69:42:FF:A9:62:AE:37:C7:E6:B6
Certificate issuer: /CN=23aee94d0fff6c6c752a6942ffa962ae37c7e6b6
Certificate serial: 019F93C8F8D58514418EE040F0C836493F9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I67pTQ__bGx1KmlC_6lirjfH5rY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/I67pTQ__bGx1KmlC_6lirjfH5rY.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 11:00:49 +0000
Manifest this update: Fri 24 Jul 2026 11:00:49 +0000
Manifest next update: Sat 25 Jul 2026 11:00:49 +0000
Files and hashes: 1: I67pTQ__bGx1KmlC_6lirjfH5rY.crl (hash: C+VgseZMHLVJ2GcHhn6j0/wJN46uR0z1pR5xdKI6lTk=)
2: Yf6ZWqUXXhcxyz3yHShQ-wPMSrs.roa (hash: Mgnv3OuUKOPzy7mBsU09wit3ti136EdMHMxaYU6rvTU=)
3: wP20WFZup3bISfc_Az9m_KnK__k.roa (hash: 8g/UdUihVktN9azZ2xN449i/gKlFKKRPLjoY2fK8Miw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/I67pTQ__bGx1KmlC_6lirjfH5rY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/I67pTQ__bGx1KmlC_6lirjfH5rY.mft
rsync://rpki.ripe.net/repository/DEFAULT/I67pTQ__bGx1KmlC_6lirjfH5rY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c8:f8:d5:85:14:41:8e:e0:40:f0:c8:36:49:3f:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23aee94d0fff6c6c752a6942ffa962ae37c7e6b6
Validity
Not Before: Jul 24 11:00:49 2026 GMT
Not After : Jul 25 11:00:49 2026 GMT
Subject: CN=a5b20bf5639ba7e03dd36db56f9416e8978cc1ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3f:e7:fd:4e:a9:2b:79:04:9a:6e:01:67:35:
83:2b:7a:1e:04:ff:78:07:1a:b2:39:1b:8a:90:25:
5c:f4:fa:7d:08:f3:19:fd:a0:69:e9:63:14:b4:ff:
2b:15:c3:04:78:ea:e7:2c:d0:66:00:17:f2:01:ce:
1c:68:27:16:1a:c1:fe:61:c0:8b:50:dd:bf:7f:4e:
07:fc:23:d1:42:e3:a3:be:a2:3f:ee:fd:02:57:54:
c2:f0:85:68:5f:b3:33:25:df:7a:ed:cf:38:d3:fc:
fe:37:f4:81:d0:98:32:ca:52:6f:91:83:14:9e:b4:
23:9f:37:b3:4d:8d:49:d0:ab:86:5e:5a:b8:a2:a6:
2b:20:1b:7f:89:d9:51:87:e2:b2:27:ec:64:ac:7a:
cb:18:81:1a:02:46:70:81:29:18:4a:e8:ee:93:bc:
de:5f:3b:b3:f2:e8:9b:99:7e:2d:be:18:19:df:66:
ae:a7:62:30:b9:fb:a3:30:93:80:8f:5c:90:fc:11:
5a:ab:a3:86:25:39:fc:7e:05:1f:8b:a6:f4:76:37:
0a:b6:23:0f:07:a0:75:c2:b6:e3:33:a9:04:17:5f:
c5:4d:44:53:77:f8:11:34:5a:d4:6c:f8:83:24:0d:
e9:fb:a1:a9:af:d5:49:9c:c3:40:22:2b:75:50:2c:
44:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:B2:0B:F5:63:9B:A7:E0:3D:D3:6D:B5:6F:94:16:E8:97:8C:C1:ED
X509v3 Authority Key Identifier:
keyid:23:AE:E9:4D:0F:FF:6C:6C:75:2A:69:42:FF:A9:62:AE:37:C7:E6:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I67pTQ__bGx1KmlC_6lirjfH5rY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/I67pTQ__bGx1KmlC_6lirjfH5rY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/I67pTQ__bGx1KmlC_6lirjfH5rY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:d7:0d:cf:ab:0c:cc:0d:f8:71:37:22:32:60:7e:20:53:24:
f0:9f:b6:f2:ab:e3:2c:bd:7d:86:69:f4:63:a2:fc:58:a7:f7:
bf:82:24:e0:a8:cd:57:56:d5:64:30:5d:57:12:d3:3a:77:2c:
15:87:74:6b:4d:d0:49:cf:2e:c3:79:73:c5:a3:ee:26:61:ed:
f0:6a:a4:a9:c6:7a:2b:d7:f9:b7:b0:49:ea:cc:2c:3b:66:1a:
16:01:fd:a0:93:31:75:02:50:e5:14:bc:fd:78:4c:c5:43:14:
1a:40:af:ee:ef:5a:d5:6d:6f:b0:b9:95:75:13:3b:79:94:17:
d6:37:af:c0:13:22:8a:c6:7d:0a:35:14:9d:08:d0:a1:ef:f0:
05:59:b3:30:6c:87:3b:f9:88:53:02:39:b2:91:ab:6f:4a:b5:
d4:34:92:f3:33:7a:ee:dd:f4:99:1b:3e:b4:da:e8:16:cb:1e:
a0:96:8c:ea:f7:2f:a2:97:e8:6a:b5:64:15:15:bf:96:6f:5e:
b9:de:f0:8d:6e:6a:f7:a7:e4:7f:b6:a6:a0:1a:b2:27:b5:a2:
fb:88:2a:42:53:8f:e6:72:3d:0d:c0:6f:c9:ae:f9:8c:da:10:
f3:d0:8a:9d:f5:4a:79:bf:26:45:b4:91:85:7d:0e:4f:56:f2:
5f:20:fc:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TyPjVhRRBjuBA8Mg2ST+fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzYWVlOTRkMGZmZjZjNmM3NTJhNjk0MmZmYTk2MmFlMzdj
N2U2YjYwHhcNMjYwNzI0MTEwMDQ5WhcNMjYwNzI1MTEwMDQ5WjAzMTEwLwYDVQQD
EyhhNWIyMGJmNTYzOWJhN2UwM2RkMzZkYjU2Zjk0MTZlODk3OGNjMWVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnT/n/U6pK3kEmm4BZzWDK3oeBP94
BxqyORuKkCVc9Pp9CPMZ/aBp6WMUtP8rFcMEeOrnLNBmABfyAc4caCcWGsH+YcCL
UN2/f04H/CPRQuOjvqI/7v0CV1TC8IVoX7MzJd967c840/z+N/SB0JgyylJvkYMU
nrQjnzezTY1J0KuGXlq4oqYrIBt/idlRh+KyJ+xkrHrLGIEaAkZwgSkYSujuk7ze
Xzuz8uibmX4tvhgZ32aup2IwufujMJOAj1yQ/BFaq6OGJTn8fgUfi6b0djcKtiMP
B6B1wrbjM6kEF1/FTURTd/gRNFrUbPiDJA3p+6Gpr9VJnMNAIit1UCxE2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKWyC/Vjm6fgPdNttW+UFuiXjMHtMB8GA1UdIwQY
MBaAFCOu6U0P/2xsdSppQv+pYq43x+a2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTY3cFRRX19iR3gxS21sQ182bGlyamZINXJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9kNzAyNjItZjg3Yy00MTI2LWFmODUt
YTMxODUzZTY5OTdhLzEvSTY3cFRRX19iR3gxS21sQ182bGlyamZINXJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi9kNzAyNjItZjg3Yy00MTI2LWFmODUtYTMxODUzZTY5OTdh
LzEvSTY3cFRRX19iR3gxS21sQ182bGlyamZINXJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfdcNz6sM
zA34cTciMmB+IFMk8J+28qvjLL19hmn0Y6L8WKf3v4Ik4KjNV1bVZDBdVxLTOncs
FYd0a03QSc8uw3lzxaPuJmHt8GqkqcZ6K9f5t7BJ6swsO2YaFgH9oJMxdQJQ5RS8
/XhMxUMUGkCv7u9a1W1vsLmVdRM7eZQX1jevwBMiisZ9CjUUnQjQoe/wBVmzMGyH
O/mIUwI5spGrb0q11DSS8zN67t30mRs+tNroFsseoJaM6vcvopfoarVkFRW/lm9e
ud7wjW5q96fkf7amoBqyJ7Wi+4gqQlOP5nI9DcBvya75jNoQ89CKnfVKeb8mRbSR
hX0OT1byXyD8bA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:44:49 2026 by rpki-client