Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/35cdf3-2110-4b90-9934-30812d9e3429/1/IpRcZ95iIC3YbfmripBuZv4XcYY.mft
File: IpRcZ95iIC3YbfmripBuZv4XcYY.mft (raw, json)
Hash identifier: Z1yehDcEelzJEC5hFVifX4/TtMYC7jEhuxTTQxQeaUc=
Subject key identifier: 7B:32:3B:F8:8D:91:E4:69:B4:CF:CC:F0:05:52:22:C6:88:5C:77:56
Authority key identifier: 22:94:5C:67:DE:62:20:2D:D8:6D:F9:AB:8A:90:6E:66:FE:17:71:86
Certificate issuer: /CN=22945c67de62202dd86df9ab8a906e66fe177186
Certificate serial: 01A0DB048BD1295BB210B5D850AEB6CFFB90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IpRcZ95iIC3YbfmripBuZv4XcYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/35cdf3-2110-4b90-9934-30812d9e3429/1/IpRcZ95iIC3YbfmripBuZv4XcYY.mft
Manifest number: 89
Signing time: Sat 26 Sep 2026 00:01:43 +0000
Manifest this update: Sat 26 Sep 2026 00:01:43 +0000
Manifest next update: Sun 27 Sep 2026 00:01:43 +0000
Files and hashes: 1: 0-Kq8JhekEwMATB4Jq4vPV1o2EA.roa (hash: x3WbjY2+9e4VpCttB1stFL71S7XcyqEUBA1zxosZSo0=)
2: IpRcZ95iIC3YbfmripBuZv4XcYY.crl (hash: m/+LCtPl/32VIWtw8BbQeEmfroAbQAMADx2xajwLtYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/35cdf3-2110-4b90-9934-30812d9e3429/1/IpRcZ95iIC3YbfmripBuZv4XcYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/35cdf3-2110-4b90-9934-30812d9e3429/1/IpRcZ95iIC3YbfmripBuZv4XcYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IpRcZ95iIC3YbfmripBuZv4XcYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 00:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:04:8b:d1:29:5b:b2:10:b5:d8:50:ae:b6:cf:fb:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22945c67de62202dd86df9ab8a906e66fe177186
Validity
Not Before: Sep 26 00:01:43 2026 GMT
Not After : Sep 27 00:01:43 2026 GMT
Subject: CN=7b323bf88d91e469b4cfccf0055222c6885c7756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6d:13:73:36:aa:4b:91:58:81:90:06:a4:2f:
46:c2:af:13:4d:a8:54:6e:ee:26:fd:1f:7d:ba:53:
ac:68:a2:2a:76:9a:20:73:34:a4:66:4d:bf:bc:d3:
2a:38:d9:52:9f:8c:47:64:f0:77:b8:83:ee:8a:ed:
c0:e0:91:ee:c3:22:a7:19:7f:3f:e5:62:80:98:d1:
f4:33:82:e2:e1:ed:35:d0:b6:6b:dd:68:fa:af:f1:
b7:33:72:16:ed:56:bc:8c:97:6d:df:60:70:50:25:
b0:f6:1b:82:57:2e:1a:50:eb:bd:b4:43:68:ab:bb:
78:3e:ed:02:9a:0f:ba:b6:bf:8d:18:51:91:0a:6f:
dd:29:e2:73:2c:80:0a:3d:1b:82:15:9a:92:00:22:
d4:22:0a:24:35:52:5e:78:fe:28:83:b9:21:16:f5:
ae:1d:30:36:b6:7d:4f:e3:6a:bf:ec:72:de:5c:83:
1f:1e:44:41:ba:76:2e:f7:04:ab:39:2b:a1:ee:b4:
4d:eb:15:68:f4:f2:9b:44:7e:ba:b6:8d:a8:ef:13:
ed:f2:dd:d4:43:a3:8b:f8:49:88:1e:8a:82:54:e5:
f5:54:1f:2e:a5:a5:68:9c:ec:aa:d5:e9:5e:51:c3:
94:50:e9:e7:8f:fd:3a:c5:d1:a3:e8:2d:b3:1e:4c:
63:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:32:3B:F8:8D:91:E4:69:B4:CF:CC:F0:05:52:22:C6:88:5C:77:56
X509v3 Authority Key Identifier:
keyid:22:94:5C:67:DE:62:20:2D:D8:6D:F9:AB:8A:90:6E:66:FE:17:71:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IpRcZ95iIC3YbfmripBuZv4XcYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/35cdf3-2110-4b90-9934-30812d9e3429/1/IpRcZ95iIC3YbfmripBuZv4XcYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/35cdf3-2110-4b90-9934-30812d9e3429/1/IpRcZ95iIC3YbfmripBuZv4XcYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:3d:78:ed:a4:c3:0f:34:5c:ec:87:b6:0a:b3:35:bb:8e:70:
e6:40:c0:df:59:36:4c:03:a4:67:e1:21:39:14:d8:b8:97:cc:
3f:28:7a:ad:4a:67:e3:d9:5a:6e:aa:8e:fb:fd:ed:50:b4:7f:
0a:bd:1b:25:e9:af:a4:97:65:11:22:32:41:7b:ed:df:8c:8c:
80:e3:92:ca:3f:30:4d:d3:74:ae:40:fa:11:7d:d0:53:70:a6:
8d:80:f3:9f:0d:9e:04:d2:a8:ff:0c:a4:be:ae:42:e8:a3:9c:
07:a6:02:7b:ff:17:37:87:7a:ca:3b:ab:bf:b1:8a:34:e3:b6:
b2:06:db:7b:e8:fa:7a:66:e7:15:43:92:48:57:ca:01:27:12:
8b:19:8c:39:0a:a7:3e:be:a0:f2:58:5a:65:ec:da:b9:f0:58:
bb:57:9a:cd:c5:66:de:9c:fe:7b:fc:2b:6d:50:af:e0:36:ee:
e6:a2:6a:2c:1c:aa:84:2b:8d:e0:2c:97:9d:ee:1c:34:dd:ad:
ae:e7:a9:5a:65:99:25:8d:65:bd:9a:50:0c:52:a1:a7:8f:7b:
75:b8:5b:40:aa:e0:0c:f4:90:ed:43:a1:9f:04:df:33:2e:3a:
dd:5c:66:8d:9f:ed:50:0e:38:b9:4e:ce:6e:01:a1:80:f7:5d:
d0:77:2a:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDbBIvRKVuyELXYUK62z/uQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyOTQ1YzY3ZGU2MjIwMmRkODZkZjlhYjhhOTA2ZTY2ZmUx
NzcxODYwHhcNMjYwOTI2MDAwMTQzWhcNMjYwOTI3MDAwMTQzWjAzMTEwLwYDVQQD
Eyg3YjMyM2JmODhkOTFlNDY5YjRjZmNjZjAwNTUyMjJjNjg4NWM3NzU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAum0TczaqS5FYgZAGpC9Gwq8TTahU
bu4m/R99ulOsaKIqdpogczSkZk2/vNMqONlSn4xHZPB3uIPuiu3A4JHuwyKnGX8/
5WKAmNH0M4Li4e010LZr3Wj6r/G3M3IW7Va8jJdt32BwUCWw9huCVy4aUOu9tENo
q7t4Pu0Cmg+6tr+NGFGRCm/dKeJzLIAKPRuCFZqSACLUIgokNVJeeP4og7khFvWu
HTA2tn1P42q/7HLeXIMfHkRBunYu9wSrOSuh7rRN6xVo9PKbRH66to2o7xPt8t3U
Q6OL+EmIHoqCVOX1VB8upaVonOyq1eleUcOUUOnnj/06xdGj6C2zHkxjSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHsyO/iNkeRptM/M8AVSIsaIXHdWMB8GA1UdIwQY
MBaAFCKUXGfeYiAt2G35q4qQbmb+F3GGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXBSY1o5NWlJQzNZYmZtcmlwQnVadjRYY1lZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8zNWNkZjMtMjExMC00YjkwLTk5MzQt
MzA4MTJkOWUzNDI5LzEvSXBSY1o5NWlJQzNZYmZtcmlwQnVadjRYY1lZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy8zNWNkZjMtMjExMC00YjkwLTk5MzQtMzA4MTJkOWUzNDI5
LzEvSXBSY1o5NWlJQzNZYmZtcmlwQnVadjRYY1lZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcz147aTD
DzRc7Ie2CrM1u45w5kDA31k2TAOkZ+EhORTYuJfMPyh6rUpn49labqqO+/3tULR/
Cr0bJemvpJdlESIyQXvt34yMgOOSyj8wTdN0rkD6EX3QU3CmjYDznw2eBNKo/wyk
vq5C6KOcB6YCe/8XN4d6yjurv7GKNOO2sgbbe+j6embnFUOSSFfKAScSixmMOQqn
Pr6g8lhaZezaufBYu1eazcVm3pz+e/wrbVCv4Dbu5qJqLByqhCuN4CyXne4cNN2t
ruepWmWZJY1lvZpQDFKhp497dbhbQKrgDPSQ7UOhnwTfMy463VxmjZ/tUA44uU7O
bgGhgPdd0HcqqQ==
-----END CERTIFICATE-----
Generated at Sat Sep 26 05:46:17 2026 by rpki-client