Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/797390-81d4-4c5d-ab71-7088568c51c0/1/iq94tpd0pVUH3qv4xMlpQunvDSA.mft
File: iq94tpd0pVUH3qv4xMlpQunvDSA.mft (raw, json)
Hash identifier: UWOkUyHmKCQVJPMjgqG25iVZzzuSr0FQjENkV431+oQ=
Subject key identifier: 6F:9A:90:3E:20:86:EC:B2:8F:F6:BA:67:56:4F:08:0A:0E:29:0F:A7
Authority key identifier: 8A:AF:78:B6:97:74:A5:55:07:DE:AB:F8:C4:C9:69:42:E9:EF:0D:20
Certificate issuer: /CN=8aaf78b69774a55507deabf8c4c96942e9ef0d20
Certificate serial: 019F94A4BCCC633CCA9021B3CE5AF143E529
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iq94tpd0pVUH3qv4xMlpQunvDSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/797390-81d4-4c5d-ab71-7088568c51c0/1/iq94tpd0pVUH3qv4xMlpQunvDSA.mft
Manifest number: 10C4
Signing time: Fri 24 Jul 2026 15:00:51 +0000
Manifest this update: Fri 24 Jul 2026 15:00:51 +0000
Manifest next update: Sat 25 Jul 2026 15:00:51 +0000
Files and hashes: 1: AOuKaEFuAus3hz3w0WC3j7I2mqc.roa (hash: YMOsepey7pZcM4gw70d5HgYaXkzZjfvaKQx2Aill38c=)
2: iq94tpd0pVUH3qv4xMlpQunvDSA.crl (hash: xT9qwUohNs13eTW9gQLluyYBa6GDTjoklWYpmV6pmXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/797390-81d4-4c5d-ab71-7088568c51c0/1/iq94tpd0pVUH3qv4xMlpQunvDSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/797390-81d4-4c5d-ab71-7088568c51c0/1/iq94tpd0pVUH3qv4xMlpQunvDSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iq94tpd0pVUH3qv4xMlpQunvDSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:a4:bc:cc:63:3c:ca:90:21:b3:ce:5a:f1:43:e5:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8aaf78b69774a55507deabf8c4c96942e9ef0d20
Validity
Not Before: Jul 24 15:00:51 2026 GMT
Not After : Jul 25 15:00:51 2026 GMT
Subject: CN=6f9a903e2086ecb28ff6ba67564f080a0e290fa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b9:9b:99:9f:25:4f:2f:04:84:29:d6:0e:34:
5c:f5:88:2f:a0:33:3d:57:fa:ad:ae:63:13:8b:51:
9a:2f:1b:46:c9:e3:34:f4:d9:75:3c:21:d9:cd:9f:
4e:32:af:17:25:2f:1b:b3:e7:a9:e9:f3:3c:36:28:
dc:30:7a:62:01:13:4f:18:99:45:a8:0b:cd:9f:b1:
63:f3:27:47:d8:05:bf:ca:78:02:0c:4d:a3:2d:32:
5e:7d:82:d0:89:46:08:2c:16:84:3f:ec:64:55:8d:
19:04:b9:83:c9:ac:b3:5d:af:b6:66:17:14:d1:4e:
e4:3c:39:43:28:79:7b:56:86:04:f1:b3:88:26:58:
04:92:40:33:12:99:4c:41:d1:e7:1d:c7:96:30:2e:
0a:ea:4f:73:a0:be:19:23:63:37:fb:68:42:ab:45:
53:0d:ea:ec:24:c9:43:77:36:60:d1:e1:63:fa:4f:
9d:42:9c:0a:5d:83:56:ee:68:f9:61:07:ff:3f:c2:
fa:8d:2f:57:92:4a:38:9e:6d:42:12:4d:f8:8d:b4:
82:7d:d5:c4:38:b3:fe:0a:b6:ae:87:c9:da:09:8d:
dd:f7:71:4a:04:6d:93:e1:80:ee:d2:c6:f0:25:70:
62:a3:73:ca:4b:cd:aa:88:3c:c6:57:40:cd:f8:7c:
45:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:9A:90:3E:20:86:EC:B2:8F:F6:BA:67:56:4F:08:0A:0E:29:0F:A7
X509v3 Authority Key Identifier:
keyid:8A:AF:78:B6:97:74:A5:55:07:DE:AB:F8:C4:C9:69:42:E9:EF:0D:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iq94tpd0pVUH3qv4xMlpQunvDSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/797390-81d4-4c5d-ab71-7088568c51c0/1/iq94tpd0pVUH3qv4xMlpQunvDSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/797390-81d4-4c5d-ab71-7088568c51c0/1/iq94tpd0pVUH3qv4xMlpQunvDSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:bc:d4:4e:65:8b:2f:a0:ff:1b:4f:10:df:65:5e:97:3b:01:
68:f1:56:36:9a:d4:22:50:d4:84:61:25:04:48:36:e6:78:32:
cb:28:d1:46:05:e0:b7:f8:cb:52:a1:1e:40:06:41:c3:50:79:
84:03:52:ce:0b:d0:93:b9:05:83:85:48:f6:a4:7d:ca:7e:fa:
00:94:9e:df:ec:7e:3d:4c:28:60:68:16:1a:14:e7:96:25:60:
45:29:63:37:9c:9a:7c:8f:ed:6b:ef:fe:96:59:21:1e:9d:95:
ca:e8:09:a5:3a:bb:c6:b7:3e:f9:46:64:6d:22:6f:8e:c4:39:
05:bd:8b:5a:55:1e:35:70:fe:ca:8a:5e:b5:58:c2:72:a2:f5:
28:00:2a:b9:d6:b2:e1:65:2e:95:5a:fd:e9:97:cc:ef:ba:cb:
ea:ed:d8:31:78:d1:99:95:7e:45:ec:e0:92:59:da:41:c4:5e:
43:d3:bb:5e:c4:f4:e3:1d:d3:6e:73:d4:03:13:85:20:37:f4:
4c:e4:9b:0c:d5:4a:2f:8b:9e:83:62:33:fb:12:2b:e5:b3:8d:
62:52:e5:99:d9:da:45:fe:e9:b9:ed:5d:47:51:a7:68:b4:0f:
f9:13:9d:5a:de:80:c0:5b:2e:92:a7:93:90:09:b9:59:6b:fd:
77:f6:9d:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+UpLzMYzzKkCGzzlrxQ+UpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhYWY3OGI2OTc3NGE1NTUwN2RlYWJmOGM0Yzk2OTQyZTll
ZjBkMjAwHhcNMjYwNzI0MTUwMDUxWhcNMjYwNzI1MTUwMDUxWjAzMTEwLwYDVQQD
Eyg2ZjlhOTAzZTIwODZlY2IyOGZmNmJhNjc1NjRmMDgwYTBlMjkwZmE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrmbmZ8lTy8EhCnWDjRc9YgvoDM9
V/qtrmMTi1GaLxtGyeM09Nl1PCHZzZ9OMq8XJS8bs+ep6fM8NijcMHpiARNPGJlF
qAvNn7Fj8ydH2AW/yngCDE2jLTJefYLQiUYILBaEP+xkVY0ZBLmDyayzXa+2ZhcU
0U7kPDlDKHl7VoYE8bOIJlgEkkAzEplMQdHnHceWMC4K6k9zoL4ZI2M3+2hCq0VT
DersJMlDdzZg0eFj+k+dQpwKXYNW7mj5YQf/P8L6jS9Xkko4nm1CEk34jbSCfdXE
OLP+Crauh8naCY3d93FKBG2T4YDu0sbwJXBio3PKS82qiDzGV0DN+HxFcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG+akD4ghuyyj/a6Z1ZPCAoOKQ+nMB8GA1UdIwQY
MBaAFIqveLaXdKVVB96r+MTJaULp7w0gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXE5NHRwZDBwVlVIM3F2NHhNbHBRdW52RFNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS83OTczOTAtODFkNC00YzVkLWFiNzEt
NzA4ODU2OGM1MWMwLzEvaXE5NHRwZDBwVlVIM3F2NHhNbHBRdW52RFNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS83OTczOTAtODFkNC00YzVkLWFiNzEtNzA4ODU2OGM1MWMw
LzEvaXE5NHRwZDBwVlVIM3F2NHhNbHBRdW52RFNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHbzUTmWL
L6D/G08Q32VelzsBaPFWNprUIlDUhGElBEg25ngyyyjRRgXgt/jLUqEeQAZBw1B5
hANSzgvQk7kFg4VI9qR9yn76AJSe3+x+PUwoYGgWGhTnliVgRSljN5yafI/ta+/+
llkhHp2VyugJpTq7xrc++UZkbSJvjsQ5Bb2LWlUeNXD+yopetVjCcqL1KAAquday
4WUulVr96ZfM77rL6u3YMXjRmZV+RezgklnaQcReQ9O7XsT04x3TbnPUAxOFIDf0
TOSbDNVKL4ueg2Iz+xIr5bONYlLlmdnaRf7pue1dR1GnaLQP+ROdWt6AwFsukqeT
kAm5WWv9d/adyw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:01:59 2026 by rpki-client