Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/502ecd-e6fe-4298-8054-1385871a909d/1/I6NILh1m2H9bml7rnIr9a17CMiQ.mft
File: I6NILh1m2H9bml7rnIr9a17CMiQ.mft (raw, json)
Hash identifier: xFdqQ62s7iiXOlaUu7Sof9L2XTVsl/BxF+kPFGZqCYE=
Subject key identifier: 03:C0:87:A6:A3:5B:10:61:DE:62:25:53:75:7B:E1:1A:8B:1B:44:F5
Authority key identifier: 23:A3:48:2E:1D:66:D8:7F:5B:9A:5E:EB:9C:8A:FD:6B:5E:C2:32:24
Certificate issuer: /CN=23a3482e1d66d87f5b9a5eeb9c8afd6b5ec23224
Certificate serial: 019F92ECD7E75E67DA8E21B1B24FA718854D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6NILh1m2H9bml7rnIr9a17CMiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/502ecd-e6fe-4298-8054-1385871a909d/1/I6NILh1m2H9bml7rnIr9a17CMiQ.mft
Manifest number: 19C7
Signing time: Fri 24 Jul 2026 07:00:22 +0000
Manifest this update: Fri 24 Jul 2026 07:00:22 +0000
Manifest next update: Sat 25 Jul 2026 07:00:22 +0000
Files and hashes: 1: 9faIgb6vdUmIyTVjibJSuOHDYNk.roa (hash: X64msVLgNRC3fKw+NLkotQNPw2VyPcVaP4QnP3a/6nk=)
2: I6NILh1m2H9bml7rnIr9a17CMiQ.crl (hash: Y3VTp2jGq5vp4SMdKFsaCWiF7q8chKmQVxWhmzYsfXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/502ecd-e6fe-4298-8054-1385871a909d/1/I6NILh1m2H9bml7rnIr9a17CMiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/502ecd-e6fe-4298-8054-1385871a909d/1/I6NILh1m2H9bml7rnIr9a17CMiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/I6NILh1m2H9bml7rnIr9a17CMiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ec:d7:e7:5e:67:da:8e:21:b1:b2:4f:a7:18:85:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23a3482e1d66d87f5b9a5eeb9c8afd6b5ec23224
Validity
Not Before: Jul 24 07:00:22 2026 GMT
Not After : Jul 25 07:00:22 2026 GMT
Subject: CN=03c087a6a35b1061de622553757be11a8b1b44f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:07:68:4a:16:03:65:95:a4:01:9f:70:33:70:
04:68:a2:7f:d7:93:0f:5d:28:c8:b3:ac:9c:65:d0:
96:e9:91:42:fc:86:a3:4f:78:74:ca:85:42:dd:1d:
94:30:33:6c:89:b4:e2:75:d5:12:f7:fe:3f:a2:c0:
e6:56:10:5b:e5:ea:60:2b:af:4f:9a:17:64:0d:83:
d3:98:a1:e4:b1:6e:a7:b7:07:d9:ae:3b:d3:d3:dc:
5d:35:d2:e4:e4:2d:40:23:f6:56:2b:59:00:73:f6:
c3:58:49:69:90:ad:4f:e5:95:eb:d4:76:96:9f:1c:
29:59:10:dc:67:c9:50:99:f3:e1:06:7d:b2:74:3d:
2d:6f:b0:e7:19:20:13:41:18:ef:c8:8f:cf:9a:5b:
7a:d6:c5:5f:cf:47:df:8e:23:4d:1d:7d:5e:f6:57:
0f:c0:38:41:4b:e3:5d:9e:4b:70:37:33:13:26:fe:
2d:72:80:12:67:ee:dd:e6:b3:cb:52:90:63:ed:fc:
51:54:4d:91:5e:42:45:db:cb:81:c6:6a:95:40:71:
07:e9:2f:cb:63:88:d4:78:d9:29:50:34:81:90:d5:
3f:e1:85:ad:f4:5b:8e:71:0d:a5:36:7c:97:b9:20:
60:b1:41:ca:01:f5:b1:9e:6d:53:d3:8d:24:0e:b5:
ea:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:C0:87:A6:A3:5B:10:61:DE:62:25:53:75:7B:E1:1A:8B:1B:44:F5
X509v3 Authority Key Identifier:
keyid:23:A3:48:2E:1D:66:D8:7F:5B:9A:5E:EB:9C:8A:FD:6B:5E:C2:32:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6NILh1m2H9bml7rnIr9a17CMiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/502ecd-e6fe-4298-8054-1385871a909d/1/I6NILh1m2H9bml7rnIr9a17CMiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/502ecd-e6fe-4298-8054-1385871a909d/1/I6NILh1m2H9bml7rnIr9a17CMiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:6e:53:c6:aa:10:1d:aa:e0:26:21:28:62:7a:27:10:7d:e1:
6b:4d:6a:d0:cc:f4:30:f4:35:96:8c:59:a7:4a:3e:ea:c2:c0:
8f:9f:24:b3:28:81:7b:ae:fe:5e:c1:21:a0:04:c1:8b:fa:f0:
e0:07:27:1f:0d:de:a1:93:67:02:de:a5:af:bb:b6:95:3a:60:
17:b2:57:2c:9c:2f:0f:64:f8:da:bf:f0:8a:42:e1:07:c4:db:
2c:21:95:dd:28:d6:f2:89:9d:b1:db:ec:84:0d:a8:ac:07:ea:
96:37:58:23:3e:9b:f8:d6:bc:16:56:34:e0:48:34:a1:a8:85:
c0:b3:79:f5:b2:de:b2:9c:58:e4:be:44:02:74:3b:1c:1e:e2:
d3:e7:3f:40:59:92:1c:36:20:b0:f8:ac:d4:b6:92:a9:9d:19:
ba:ba:37:dd:03:5b:0b:ba:72:52:a4:36:bb:2e:b9:32:72:1c:
e3:e8:b9:1c:46:06:5f:dc:e0:92:23:46:73:46:1b:f6:b0:20:
13:83:03:db:e0:56:8c:44:64:59:9c:67:6a:db:d0:da:c0:81:
c2:d1:5f:88:19:f0:40:ef:bc:d8:f1:0b:d8:6e:ba:8e:df:81:
13:69:8e:11:0b:8d:f6:59:a1:ef:60:85:ad:2f:4b:4c:7b:14:
2c:58:7d:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+S7NfnXmfajiGxsk+nGIVNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzYTM0ODJlMWQ2NmQ4N2Y1YjlhNWVlYjljOGFmZDZiNWVj
MjMyMjQwHhcNMjYwNzI0MDcwMDIyWhcNMjYwNzI1MDcwMDIyWjAzMTEwLwYDVQQD
EygwM2MwODdhNmEzNWIxMDYxZGU2MjI1NTM3NTdiZTExYThiMWI0NGY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2AdoShYDZZWkAZ9wM3AEaKJ/15MP
XSjIs6ycZdCW6ZFC/IajT3h0yoVC3R2UMDNsibTiddUS9/4/osDmVhBb5epgK69P
mhdkDYPTmKHksW6ntwfZrjvT09xdNdLk5C1AI/ZWK1kAc/bDWElpkK1P5ZXr1HaW
nxwpWRDcZ8lQmfPhBn2ydD0tb7DnGSATQRjvyI/Pmlt61sVfz0ffjiNNHX1e9lcP
wDhBS+NdnktwNzMTJv4tcoASZ+7d5rPLUpBj7fxRVE2RXkJF28uBxmqVQHEH6S/L
Y4jUeNkpUDSBkNU/4YWt9FuOcQ2lNnyXuSBgsUHKAfWxnm1T040kDrXqIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAPAh6ajWxBh3mIlU3V74RqLG0T1MB8GA1UdIwQY
MBaAFCOjSC4dZth/W5pe65yK/WtewjIkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTZOSUxoMW0ySDlibWw3cm5JcjlhMTdDTWlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC81MDJlY2QtZTZmZS00Mjk4LTgwNTQt
MTM4NTg3MWE5MDlkLzEvSTZOSUxoMW0ySDlibWw3cm5JcjlhMTdDTWlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC81MDJlY2QtZTZmZS00Mjk4LTgwNTQtMTM4NTg3MWE5MDlk
LzEvSTZOSUxoMW0ySDlibWw3cm5JcjlhMTdDTWlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGG5TxqoQ
HargJiEoYnonEH3ha01q0Mz0MPQ1loxZp0o+6sLAj58ksyiBe67+XsEhoATBi/rw
4AcnHw3eoZNnAt6lr7u2lTpgF7JXLJwvD2T42r/wikLhB8TbLCGV3SjW8omdsdvs
hA2orAfqljdYIz6b+Na8FlY04Eg0oaiFwLN59bLespxY5L5EAnQ7HB7i0+c/QFmS
HDYgsPis1LaSqZ0Zuro33QNbC7pyUqQ2uy65MnIc4+i5HEYGX9zgkiNGc0Yb9rAg
E4MD2+BWjERkWZxnatvQ2sCBwtFfiBnwQO+82PEL2G66jt+BE2mOEQuN9lmh72CF
rS9LTHsULFh9yA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:45:06 2026 by rpki-client