Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/c3988e-8654-4311-8292-426039788919/1/IKf8vlkxTDcraPIyIjgoseM6A-w.mft
File: IKf8vlkxTDcraPIyIjgoseM6A-w.mft (raw, json)
Hash identifier: 1fMaDtnkiu7eeGiytOAILT5C7VmzignM6+5UHLNFpzU=
Subject key identifier: 96:60:80:01:CD:7C:B3:88:39:ED:2B:75:56:6D:46:DC:D9:A1:22:C9
Authority key identifier: 20:A7:FC:BE:59:31:4C:37:2B:68:F2:32:22:38:28:B1:E3:3A:03:EC
Certificate issuer: /CN=20a7fcbe59314c372b68f232223828b1e33a03ec
Certificate serial: 019F9323A69B88FEA1104CFEAF83E72105AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IKf8vlkxTDcraPIyIjgoseM6A-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/c3988e-8654-4311-8292-426039788919/1/IKf8vlkxTDcraPIyIjgoseM6A-w.mft
Manifest number: 1627
Signing time: Fri 24 Jul 2026 08:00:14 +0000
Manifest this update: Fri 24 Jul 2026 08:00:14 +0000
Manifest next update: Sat 25 Jul 2026 08:00:14 +0000
Files and hashes: 1: 4ad3Sx3tHCKPvoySsJwPEN1dqk0.roa (hash: 9KW5traDiZ8b8YIka+3LA3dxjZd+hGHcIvyVnNUiXKg=)
2: IKf8vlkxTDcraPIyIjgoseM6A-w.crl (hash: QvHRLIs1osNfanDeo3JMYk63WO97TEE7inLKVh8xL7o=)
3: k82VZQjPTfp29HOrsd4ebLlbLLQ.roa (hash: mCVrb2F3QQSAvERyzJs5ziCWnKSLVC3ur8XxDFUzHh0=)
4: w6ZIXPDpAeu5P7_mH6HZiqnkV9o.roa (hash: Yf1g7ljDU7te6N4XEGH4NkhfBi9rKgbfTnWehMLxzL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/c3988e-8654-4311-8292-426039788919/1/IKf8vlkxTDcraPIyIjgoseM6A-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/c3988e-8654-4311-8292-426039788919/1/IKf8vlkxTDcraPIyIjgoseM6A-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/IKf8vlkxTDcraPIyIjgoseM6A-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:23:a6:9b:88:fe:a1:10:4c:fe:af:83:e7:21:05:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20a7fcbe59314c372b68f232223828b1e33a03ec
Validity
Not Before: Jul 24 08:00:14 2026 GMT
Not After : Jul 25 08:00:14 2026 GMT
Subject: CN=96608001cd7cb38839ed2b75566d46dcd9a122c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cc:f6:5b:88:cb:2f:c1:6d:c8:11:36:ed:4f:
65:f3:3c:5c:18:9a:61:f2:ce:fd:a9:b7:48:a2:a0:
48:03:16:f6:cf:29:7b:ce:57:c2:84:94:55:c6:6b:
8e:28:35:8a:dc:3b:b2:54:ec:c3:69:3d:a6:46:f3:
7f:c0:87:28:50:f6:72:ae:38:39:fe:55:39:2c:e0:
57:b7:a0:fc:11:da:b1:c2:c1:d6:fc:44:da:07:0f:
55:6e:c7:d2:d0:ae:dd:3b:bd:95:fc:d2:97:c6:77:
12:e8:a0:d3:df:fa:b9:99:2c:b1:15:dd:c2:21:df:
fb:6c:b9:a2:71:49:8c:87:ae:93:89:4e:f2:75:74:
4e:de:2f:a5:63:d1:29:da:57:62:ee:4e:14:ce:5d:
a6:aa:49:fa:2e:95:71:02:25:55:81:01:ff:29:f2:
82:0d:1b:d3:d2:40:f5:3f:4b:8a:d5:7e:fc:d5:c2:
d7:6f:23:52:7e:a1:de:81:a9:65:a1:f2:c8:ca:50:
c5:05:4c:62:fd:4a:b7:51:13:54:8b:f7:c7:0e:77:
a5:a9:72:7c:6f:75:16:bb:fb:84:ee:ac:e5:bf:6d:
a5:73:1b:1a:bc:20:9b:3f:f5:77:a7:9e:af:62:dd:
8b:12:5f:c3:a9:e2:28:50:b1:ce:3f:3b:10:1c:05:
45:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:60:80:01:CD:7C:B3:88:39:ED:2B:75:56:6D:46:DC:D9:A1:22:C9
X509v3 Authority Key Identifier:
keyid:20:A7:FC:BE:59:31:4C:37:2B:68:F2:32:22:38:28:B1:E3:3A:03:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IKf8vlkxTDcraPIyIjgoseM6A-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c3988e-8654-4311-8292-426039788919/1/IKf8vlkxTDcraPIyIjgoseM6A-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c3988e-8654-4311-8292-426039788919/1/IKf8vlkxTDcraPIyIjgoseM6A-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:dd:88:ec:6f:d4:5c:b4:4c:48:30:04:a2:01:a1:6c:85:cf:
de:a3:dc:fc:3c:69:1f:0a:62:0c:96:0b:2b:b4:e8:5a:19:3c:
e6:bf:5a:73:cd:cc:e6:6d:f9:36:31:38:69:8f:b5:92:28:84:
57:4e:74:0e:d5:9c:cd:4b:3d:a5:ea:40:d7:79:24:2d:97:6b:
61:dc:8d:ef:4a:2d:11:76:e4:35:58:51:53:bd:cc:02:65:cf:
17:9b:f7:5e:49:c5:40:ce:8d:ee:c9:49:eb:b6:3b:a9:c8:2f:
fc:21:b4:a7:35:07:62:49:fc:b2:ac:0f:55:ef:76:84:35:94:
3d:8f:e7:81:75:72:6c:d8:32:ac:66:2c:26:43:24:a4:c0:14:
2c:1d:b6:c5:e7:de:26:d6:27:98:25:88:db:e4:c3:4e:56:ad:
ba:36:25:09:df:62:c8:2c:2a:00:6f:64:55:b2:9f:73:3f:f7:
d4:59:63:0f:84:c8:30:bf:62:ff:42:0c:e6:78:aa:b8:1b:ca:
69:cd:97:c5:f7:62:d5:7e:9b:b9:af:0e:46:f0:5d:b8:87:b5:
30:4c:dc:e8:30:27:02:49:75:50:3d:da:b2:ba:cf:e0:c4:ca:
92:3a:1a:00:3f:fd:fa:82:bf:5e:d6:f9:b9:19:39:a4:a2:d2:
65:6e:26:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TI6abiP6hEEz+r4PnIQWqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwYTdmY2JlNTkzMTRjMzcyYjY4ZjIzMjIyMzgyOGIxZTMz
YTAzZWMwHhcNMjYwNzI0MDgwMDE0WhcNMjYwNzI1MDgwMDE0WjAzMTEwLwYDVQQD
Eyg5NjYwODAwMWNkN2NiMzg4MzllZDJiNzU1NjZkNDZkY2Q5YTEyMmM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcz2W4jLL8FtyBE27U9l8zxcGJph
8s79qbdIoqBIAxb2zyl7zlfChJRVxmuOKDWK3DuyVOzDaT2mRvN/wIcoUPZyrjg5
/lU5LOBXt6D8EdqxwsHW/ETaBw9VbsfS0K7dO72V/NKXxncS6KDT3/q5mSyxFd3C
Id/7bLmicUmMh66TiU7ydXRO3i+lY9Ep2ldi7k4Uzl2mqkn6LpVxAiVVgQH/KfKC
DRvT0kD1P0uK1X781cLXbyNSfqHegallofLIylDFBUxi/Uq3URNUi/fHDnelqXJ8
b3UWu/uE7qzlv22lcxsavCCbP/V3p56vYt2LEl/DqeIoULHOPzsQHAVFwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJZggAHNfLOIOe0rdVZtRtzZoSLJMB8GA1UdIwQY
MBaAFCCn/L5ZMUw3K2jyMiI4KLHjOgPsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUtmOHZsa3hURGNyYVBJeUlqZ29zZU02QS13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9jMzk4OGUtODY1NC00MzExLTgyOTIt
NDI2MDM5Nzg4OTE5LzEvSUtmOHZsa3hURGNyYVBJeUlqZ29zZU02QS13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9jMzk4OGUtODY1NC00MzExLTgyOTItNDI2MDM5Nzg4OTE5
LzEvSUtmOHZsa3hURGNyYVBJeUlqZ29zZU02QS13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM92I7G/U
XLRMSDAEogGhbIXP3qPc/DxpHwpiDJYLK7ToWhk85r9ac83M5m35NjE4aY+1kiiE
V050DtWczUs9pepA13kkLZdrYdyN70otEXbkNVhRU73MAmXPF5v3XknFQM6N7slJ
67Y7qcgv/CG0pzUHYkn8sqwPVe92hDWUPY/ngXVybNgyrGYsJkMkpMAULB22xefe
JtYnmCWI2+TDTlatujYlCd9iyCwqAG9kVbKfcz/31FljD4TIML9i/0IM5niquBvK
ac2Xxfdi1X6bua8ORvBduIe1MEzc6DAnAkl1UD3asrrP4MTKkjoaAD/9+oK/Xtb5
uRk5pKLSZW4m2g==
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:17:31 2026 by rpki-client