Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.mft
File: IzlKEl-jrODEem_jT0CGtNO6VYg.mft (raw, json)
Hash identifier: SASJPyQjD9YtyuPnaectiluOCt2j3PYyieQAtgeTSA4=
Subject key identifier: 19:BA:9E:67:31:A5:2E:CB:F4:45:6B:A1:D5:36:25:8B:10:F2:CB:62
Authority key identifier: 23:39:4A:12:5F:A3:AC:E0:C4:7A:6F:E3:4F:40:86:B4:D3:BA:55:88
Certificate issuer: /CN=23394a125fa3ace0c47a6fe34f4086b4d3ba5588
Certificate serial: 019F91A3734DD7179E8328C37A61A6A57793
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IzlKEl-jrODEem_jT0CGtNO6VYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.mft
Manifest number: 19D5
Signing time: Fri 24 Jul 2026 01:00:35 +0000
Manifest this update: Fri 24 Jul 2026 01:00:35 +0000
Manifest next update: Sat 25 Jul 2026 01:00:35 +0000
Files and hashes: 1: 5qHp_Qvizx1e_r_vv8Me8swsJF0.roa (hash: EVdPpBQJMJNTi09VFkHGGdZrOzkZ9IM2pChk9wVwdDA=)
2: IzlKEl-jrODEem_jT0CGtNO6VYg.crl (hash: vv4UJyqwHwgnNKM7XZ+ujwkdjJ+exDAo6iog3KQ83nc=)
3: nWANyekwMN1ajseL7l03yPyYN6o.roa (hash: J50Y1+ShAOFy3i/le2uIAvMIPMam//PGPnyLFegYOaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IzlKEl-jrODEem_jT0CGtNO6VYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:73:4d:d7:17:9e:83:28:c3:7a:61:a6:a5:77:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23394a125fa3ace0c47a6fe34f4086b4d3ba5588
Validity
Not Before: Jul 24 01:00:35 2026 GMT
Not After : Jul 25 01:00:35 2026 GMT
Subject: CN=19ba9e6731a52ecbf4456ba1d536258b10f2cb62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ed:61:c5:a2:86:2f:ce:d1:f0:4c:57:e9:fc:
fa:fa:ce:25:e6:1b:1f:6d:70:49:04:ff:1f:ef:e7:
bf:4f:62:ec:33:52:84:69:37:44:ef:68:8f:48:28:
d7:29:78:e1:e3:41:69:5d:f6:bd:13:20:95:35:0c:
e8:8e:dd:37:55:9c:33:36:38:e2:b6:ed:3d:a3:52:
0d:ff:99:ef:da:b9:fa:81:60:ba:bf:fa:79:b5:cc:
6b:3c:c4:ab:ea:a1:e7:7b:6f:43:6d:6c:0c:e4:d8:
d6:9b:be:10:0a:67:45:34:51:12:00:dc:bb:ec:03:
4b:04:bf:64:f2:2d:69:c0:f3:f2:a1:73:5e:bf:5a:
c8:10:0a:09:fa:ce:4c:80:c8:6e:6f:7b:cd:af:85:
50:6a:5c:4e:b0:0d:8d:82:0b:ac:02:e4:ac:f0:94:
63:4a:73:b7:91:a4:e2:c7:85:86:87:fe:01:a7:43:
bc:86:44:b3:66:35:2d:06:0a:cf:de:ff:59:ba:f2:
de:aa:e1:1f:a3:ea:41:3d:c0:01:e5:cd:35:60:cb:
7d:c8:5d:b9:6a:4d:08:80:e7:07:96:43:b3:19:4a:
7a:1f:7a:5f:98:a6:ed:62:86:63:1d:34:fb:6c:ad:
b3:7d:7a:0b:c3:d8:c6:8a:d7:91:89:77:b4:98:aa:
39:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:BA:9E:67:31:A5:2E:CB:F4:45:6B:A1:D5:36:25:8B:10:F2:CB:62
X509v3 Authority Key Identifier:
keyid:23:39:4A:12:5F:A3:AC:E0:C4:7A:6F:E3:4F:40:86:B4:D3:BA:55:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IzlKEl-jrODEem_jT0CGtNO6VYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:35:89:bc:8f:68:01:97:9a:bc:98:d8:fa:74:f5:97:a3:09:
fe:3d:80:d0:2b:90:c4:0b:0a:98:b5:8b:64:0d:56:77:22:e7:
3d:d9:cb:58:f1:fd:ec:3c:97:e5:20:a0:03:38:0d:37:e6:2f:
03:a0:d7:1f:05:2b:dd:53:b8:73:7e:aa:9b:8d:a1:ea:13:27:
96:fd:f4:94:9d:dd:1e:77:c4:71:a3:2a:10:a1:c2:83:28:9a:
84:01:e9:cb:63:44:ca:46:b6:6f:42:bc:94:ee:d4:5f:ba:74:
23:53:d2:37:18:56:99:54:a5:53:42:a2:c7:50:cf:69:77:07:
58:04:56:74:60:6f:ba:14:07:62:ac:c8:49:3a:8a:de:22:d1:
1d:b0:bf:86:7c:0b:cb:f8:c8:47:16:60:9a:a4:ea:d9:04:f5:
04:c1:aa:54:cf:06:4f:9b:7c:c1:87:4e:c4:90:e5:c7:93:07:
ac:b4:04:54:db:3d:95:96:4e:5c:de:7d:78:99:44:6a:f5:13:
d3:29:0b:0e:00:21:44:45:e5:d8:e9:8d:79:01:83:e8:56:a4:
02:8f:53:a4:2a:88:24:f7:f5:bf:50:0c:65:9d:e3:4d:2f:d1:
7c:7a:20:59:e1:bf:66:c8:ac:83:4c:6c:89:23:8c:71:ff:e7:
bf:c4:38:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Ro3NN1xeegyjDemGmpXeTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzMzk0YTEyNWZhM2FjZTBjNDdhNmZlMzRmNDA4NmI0ZDNi
YTU1ODgwHhcNMjYwNzI0MDEwMDM1WhcNMjYwNzI1MDEwMDM1WjAzMTEwLwYDVQQD
EygxOWJhOWU2NzMxYTUyZWNiZjQ0NTZiYTFkNTM2MjU4YjEwZjJjYjYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuu1hxaKGL87R8ExX6fz6+s4l5hsf
bXBJBP8f7+e/T2LsM1KEaTdE72iPSCjXKXjh40FpXfa9EyCVNQzojt03VZwzNjji
tu09o1IN/5nv2rn6gWC6v/p5tcxrPMSr6qHne29DbWwM5NjWm74QCmdFNFESANy7
7ANLBL9k8i1pwPPyoXNev1rIEAoJ+s5MgMhub3vNr4VQalxOsA2NggusAuSs8JRj
SnO3kaTix4WGh/4Bp0O8hkSzZjUtBgrP3v9ZuvLequEfo+pBPcAB5c01YMt9yF25
ak0IgOcHlkOzGUp6H3pfmKbtYoZjHTT7bK2zfXoLw9jGiteRiXe0mKo54wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBm6nmcxpS7L9EVrodU2JYsQ8stiMB8GA1UdIwQY
MBaAFCM5ShJfo6zgxHpv409AhrTTulWIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXpsS0VsLWpyT0RFZW1falQwQ0d0Tk82VllnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9hZmQ0MTUtMGE4Ni00MzFmLWJjM2Et
ZDQzMjA3ZDYyZGZlLzEvSXpsS0VsLWpyT0RFZW1falQwQ0d0Tk82VllnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi9hZmQ0MTUtMGE4Ni00MzFmLWJjM2EtZDQzMjA3ZDYyZGZl
LzEvSXpsS0VsLWpyT0RFZW1falQwQ0d0Tk82VllnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhDWJvI9o
AZeavJjY+nT1l6MJ/j2A0CuQxAsKmLWLZA1WdyLnPdnLWPH97DyX5SCgAzgNN+Yv
A6DXHwUr3VO4c36qm42h6hMnlv30lJ3dHnfEcaMqEKHCgyiahAHpy2NEyka2b0K8
lO7UX7p0I1PSNxhWmVSlU0Kix1DPaXcHWARWdGBvuhQHYqzISTqK3iLRHbC/hnwL
y/jIRxZgmqTq2QT1BMGqVM8GT5t8wYdOxJDlx5MHrLQEVNs9lZZOXN59eJlEavUT
0ykLDgAhREXl2OmNeQGD6FakAo9TpCqIJPf1v1AMZZ3jTS/RfHogWeG/Zsisg0xs
iSOMcf/nv8Q4bA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 09:32:34 2026 by rpki-client