Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/c8aa09-bdfb-43ca-8522-fa75cbe9bead/1/iBKgqAncPNH72JUaj4D2mSXhGQg.mft
File: iBKgqAncPNH72JUaj4D2mSXhGQg.mft (raw, json)
Hash identifier: 4eJEYHK8+qjQwnE7W32/WKjsCpNetK9SvFeWucTs2Gk=
Subject key identifier: 90:64:95:89:5F:37:78:09:46:6F:D2:2C:4F:CA:CA:84:47:35:26:56
Authority key identifier: 88:12:A0:A8:09:DC:3C:D1:FB:D8:95:1A:8F:80:F6:99:25:E1:19:08
Certificate issuer: /CN=8812a0a809dc3cd1fbd8951a8f80f69925e11908
Certificate serial: 019F95B768C339239B61F6CDE179501D5641
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBKgqAncPNH72JUaj4D2mSXhGQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/c8aa09-bdfb-43ca-8522-fa75cbe9bead/1/iBKgqAncPNH72JUaj4D2mSXhGQg.mft
Manifest number: 14AD
Signing time: Fri 24 Jul 2026 20:00:52 +0000
Manifest this update: Fri 24 Jul 2026 20:00:52 +0000
Manifest next update: Sat 25 Jul 2026 20:00:52 +0000
Files and hashes: 1: V4V1l39T5s1HWbLvpZ_dNNrQqrE.roa (hash: 2VhJQ/68VuS0vWM3hQGdKSnDSrR+nJHlsrGkam4iQlg=)
2: iBKgqAncPNH72JUaj4D2mSXhGQg.crl (hash: cMEwhXGy9Gp7M2MRVVbH/Gynsw38kvRz3JidWDX7Xj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/c8aa09-bdfb-43ca-8522-fa75cbe9bead/1/iBKgqAncPNH72JUaj4D2mSXhGQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/c8aa09-bdfb-43ca-8522-fa75cbe9bead/1/iBKgqAncPNH72JUaj4D2mSXhGQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iBKgqAncPNH72JUaj4D2mSXhGQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:b7:68:c3:39:23:9b:61:f6:cd:e1:79:50:1d:56:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8812a0a809dc3cd1fbd8951a8f80f69925e11908
Validity
Not Before: Jul 24 20:00:52 2026 GMT
Not After : Jul 25 20:00:52 2026 GMT
Subject: CN=906495895f377809466fd22c4fcaca8447352656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:51:3e:29:2e:dd:c3:10:b3:8a:f5:82:c4:e9:
f4:44:cc:06:5b:c0:d6:7e:81:2a:34:70:b3:97:e0:
e1:72:1b:3d:cf:b3:cd:71:59:18:89:c8:97:59:1e:
59:26:f6:5a:61:4c:eb:c9:21:bb:66:0b:e6:48:4a:
0c:15:06:e3:ba:c3:33:6c:24:2f:c6:c0:c3:75:f4:
b5:7c:3a:4c:1b:ad:3a:ee:ae:d0:7c:75:d4:5a:7b:
33:7d:45:ab:c9:39:58:f8:0c:73:48:88:29:7b:3b:
17:cb:cb:33:b4:c3:ee:7d:93:39:96:cc:8b:79:36:
45:5e:a6:47:f1:06:27:f2:23:66:af:3e:34:04:4a:
e8:71:9e:30:89:47:47:36:76:a4:71:82:d0:4a:4f:
29:56:1e:b8:0a:70:9c:a9:71:a3:a8:9b:aa:38:92:
9b:6a:19:d8:c5:8e:c9:bd:d8:eb:b3:8a:7b:9f:68:
b4:21:d4:6e:b9:ed:76:c6:08:ad:5f:92:ba:a2:22:
d3:f1:ee:cb:7c:b4:98:5f:3b:38:5f:d8:3a:59:d3:
95:5b:52:5c:36:05:41:8b:23:c3:d6:69:b5:81:e7:
42:28:78:ce:cc:66:14:70:ae:00:39:69:eb:1b:8f:
75:84:78:16:20:c2:ab:4c:0f:15:bb:6b:c1:f2:b4:
fa:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:64:95:89:5F:37:78:09:46:6F:D2:2C:4F:CA:CA:84:47:35:26:56
X509v3 Authority Key Identifier:
keyid:88:12:A0:A8:09:DC:3C:D1:FB:D8:95:1A:8F:80:F6:99:25:E1:19:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBKgqAncPNH72JUaj4D2mSXhGQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c8aa09-bdfb-43ca-8522-fa75cbe9bead/1/iBKgqAncPNH72JUaj4D2mSXhGQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c8aa09-bdfb-43ca-8522-fa75cbe9bead/1/iBKgqAncPNH72JUaj4D2mSXhGQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:ea:17:ce:ef:5a:3b:8c:49:d5:91:ad:68:ec:3a:0b:50:73:
2e:ed:a3:49:b3:63:6b:41:52:e6:f1:ef:42:65:cc:62:02:15:
dd:08:25:b1:cf:0d:2b:ed:0b:d1:8e:3b:43:b6:dd:37:55:a5:
77:b5:c0:08:6b:a5:cb:76:b5:0f:3c:50:b5:96:25:4e:37:26:
0b:1d:7a:0e:b0:12:2a:56:74:4b:e7:86:e9:86:02:62:7a:22:
dd:d1:d2:f7:76:65:2d:33:ed:ee:fb:a3:79:27:2b:01:a1:21:
d3:a1:6a:c8:a7:20:e4:fe:76:1f:27:3c:c5:09:88:fe:8b:98:
13:9a:fc:91:be:ba:81:68:5d:00:25:53:c6:6e:cd:72:89:e5:
ce:09:03:90:d6:1d:e8:4e:8b:0d:e7:90:5c:3d:3c:d5:6e:fb:
52:b4:49:47:40:54:68:34:fd:43:f2:f0:48:17:ab:22:21:85:
2b:53:a9:15:00:89:d8:ad:cb:d4:56:22:6f:a8:b7:c4:8d:56:
8d:2c:cf:e6:82:e6:69:c1:1b:64:bf:8e:b0:f2:52:35:63:a3:
0b:4f:84:7c:62:50:78:02:9a:f4:39:4e:09:1b:70:45:69:2f:
89:ae:27:18:ed:83:49:5c:e5:f8:46:35:6e:7f:dc:7d:4b:de:
ce:41:56:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Vt2jDOSObYfbN4XlQHVZBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4MTJhMGE4MDlkYzNjZDFmYmQ4OTUxYThmODBmNjk5MjVl
MTE5MDgwHhcNMjYwNzI0MjAwMDUyWhcNMjYwNzI1MjAwMDUyWjAzMTEwLwYDVQQD
Eyg5MDY0OTU4OTVmMzc3ODA5NDY2ZmQyMmM0ZmNhY2E4NDQ3MzUyNjU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlE+KS7dwxCzivWCxOn0RMwGW8DW
foEqNHCzl+Dhchs9z7PNcVkYiciXWR5ZJvZaYUzrySG7ZgvmSEoMFQbjusMzbCQv
xsDDdfS1fDpMG6067q7QfHXUWnszfUWryTlY+AxzSIgpezsXy8sztMPufZM5lsyL
eTZFXqZH8QYn8iNmrz40BErocZ4wiUdHNnakcYLQSk8pVh64CnCcqXGjqJuqOJKb
ahnYxY7Jvdjrs4p7n2i0IdRuue12xgitX5K6oiLT8e7LfLSYXzs4X9g6WdOVW1Jc
NgVBiyPD1mm1gedCKHjOzGYUcK4AOWnrG491hHgWIMKrTA8Vu2vB8rT6vQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJBklYlfN3gJRm/SLE/KyoRHNSZWMB8GA1UdIwQY
MBaAFIgSoKgJ3DzR+9iVGo+A9pkl4RkIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUJLZ3FBbmNQTkg3MkpVYWo0RDJtU1hoR1FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9jOGFhMDktYmRmYi00M2NhLTg1MjIt
ZmE3NWNiZTliZWFkLzEvaUJLZ3FBbmNQTkg3MkpVYWo0RDJtU1hoR1FnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS9jOGFhMDktYmRmYi00M2NhLTg1MjItZmE3NWNiZTliZWFk
LzEvaUJLZ3FBbmNQTkg3MkpVYWo0RDJtU1hoR1FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYeoXzu9a
O4xJ1ZGtaOw6C1BzLu2jSbNja0FS5vHvQmXMYgIV3Qglsc8NK+0L0Y47Q7bdN1Wl
d7XACGuly3a1DzxQtZYlTjcmCx16DrASKlZ0S+eG6YYCYnoi3dHS93ZlLTPt7vuj
eScrAaEh06FqyKcg5P52Hyc8xQmI/ouYE5r8kb66gWhdACVTxm7NconlzgkDkNYd
6E6LDeeQXD081W77UrRJR0BUaDT9Q/LwSBerIiGFK1OpFQCJ2K3L1FYib6i3xI1W
jSzP5oLmacEbZL+OsPJSNWOjC0+EfGJQeAKa9DlOCRtwRWkvia4nGO2DSVzl+EY1
bn/cfUvezkFWPw==
-----END CERTIFICATE-----
Generated at Sat Jul 25 00:24:26 2026 by rpki-client