Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/6efb44-012b-415f-8220-c6220e185694/1/IQdBCPDRRZtitsetsn1pNLoL56U.mft
File: IQdBCPDRRZtitsetsn1pNLoL56U.mft (raw, json)
Hash identifier: sNSSRgX8xbGpPVr+cp4pbRi5YkOYOfqDq0HxartobXs=
Subject key identifier: 19:B7:96:5F:73:AF:4C:C7:7A:0E:86:F4:70:C2:72:4C:D5:F8:93:4D
Authority key identifier: 21:07:41:08:F0:D1:45:9B:62:B6:C7:AD:B2:7D:69:34:BA:0B:E7:A5
Certificate issuer: /CN=21074108f0d1459b62b6c7adb27d6934ba0be7a5
Certificate serial: 01A0DF87048DA54D691ABC93A7540331108C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQdBCPDRRZtitsetsn1pNLoL56U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/6efb44-012b-415f-8220-c6220e185694/1/IQdBCPDRRZtitsetsn1pNLoL56U.mft
Manifest number: 1A01
Signing time: Sat 26 Sep 2026 21:02:42 +0000
Manifest this update: Sat 26 Sep 2026 21:02:42 +0000
Manifest next update: Sun 27 Sep 2026 21:02:42 +0000
Files and hashes: 1: 0EXx2Q4UxWWqfIXnYyjiTloPwI4.roa (hash: o/5NVwkVc5lQsd3OaM7KmbK/KOiJsouMCSYK61SrFmU=)
2: 4M3uPZpCb2lVRqxTc92AvFWW_fI.roa (hash: 4ESs/eZU99YDEDkrCtDsyLfNUsB2CSDDLwG2CV+Efqc=)
3: IQdBCPDRRZtitsetsn1pNLoL56U.crl (hash: SjlM0yj9ASDTHaknYwo05lvRsisb0ZVeNmxFEdBJgzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/6efb44-012b-415f-8220-c6220e185694/1/IQdBCPDRRZtitsetsn1pNLoL56U.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/6efb44-012b-415f-8220-c6220e185694/1/IQdBCPDRRZtitsetsn1pNLoL56U.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQdBCPDRRZtitsetsn1pNLoL56U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:87:04:8d:a5:4d:69:1a:bc:93:a7:54:03:31:10:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21074108f0d1459b62b6c7adb27d6934ba0be7a5
Validity
Not Before: Sep 26 21:02:42 2026 GMT
Not After : Sep 27 21:02:42 2026 GMT
Subject: CN=19b7965f73af4cc77a0e86f470c2724cd5f8934d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d5:6e:7d:5a:8e:6f:44:95:39:7f:f4:06:65:
1c:f4:ac:5e:ff:a3:3c:06:8c:4a:51:00:b3:9d:f6:
5c:82:38:52:d5:1b:2b:b6:3a:dc:7f:1a:dd:00:51:
10:6c:d0:fc:bd:1b:74:79:e3:21:97:21:24:53:f9:
6f:03:7a:37:62:ff:41:d6:3b:a7:aa:fc:0d:53:ac:
06:bb:12:8b:34:52:f2:72:0f:be:5b:10:c3:d4:bb:
e5:14:ef:fc:da:9b:17:00:f0:df:05:e5:51:8e:03:
41:42:e6:72:58:a9:81:d9:63:b6:f0:d7:53:ca:91:
b4:35:48:60:a0:60:43:11:b6:c1:c5:4f:fc:66:7f:
48:07:dc:6d:a1:7d:22:53:75:cf:06:ab:f2:38:03:
1f:7c:92:06:41:f2:40:19:39:6f:53:7c:42:80:65:
b4:12:fd:b1:27:85:3d:1b:a3:89:b9:82:99:cc:52:
67:b9:76:21:97:e0:6d:63:96:d2:29:97:d8:82:45:
37:67:ca:12:35:9b:5d:3f:c0:d6:9e:6f:62:46:a1:
4a:2b:41:38:02:2e:77:65:81:5b:31:3e:ea:e5:68:
1f:c8:d6:19:0e:98:4c:c9:7e:ef:15:e6:ab:f5:70:
2f:f3:d6:e2:cc:5c:cf:8b:7f:de:2d:1f:1f:01:9d:
99:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:B7:96:5F:73:AF:4C:C7:7A:0E:86:F4:70:C2:72:4C:D5:F8:93:4D
X509v3 Authority Key Identifier:
keyid:21:07:41:08:F0:D1:45:9B:62:B6:C7:AD:B2:7D:69:34:BA:0B:E7:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQdBCPDRRZtitsetsn1pNLoL56U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/6efb44-012b-415f-8220-c6220e185694/1/IQdBCPDRRZtitsetsn1pNLoL56U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/6efb44-012b-415f-8220-c6220e185694/1/IQdBCPDRRZtitsetsn1pNLoL56U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:24:f7:d3:ad:c3:72:a1:2c:21:21:8c:08:58:67:cf:eb:67:
e6:82:06:2b:c8:06:77:a5:b7:96:cd:57:2f:7e:45:76:78:b5:
e0:67:20:11:cb:2e:cf:20:7b:d0:a5:d3:a7:dd:9f:50:ae:20:
81:5c:c6:16:9d:52:40:00:28:a6:46:e2:81:05:d5:e4:cf:1c:
3a:dc:83:6e:1b:9f:93:7d:38:d6:be:4e:16:26:d9:e0:48:08:
b7:3e:c1:1a:79:c6:76:33:25:24:ac:52:27:92:be:8f:9d:39:
90:97:ea:a0:a6:e9:e9:19:4a:9f:0f:5a:62:ab:17:70:a3:f1:
0b:97:80:b6:0f:2d:13:ca:d8:8b:61:46:ed:77:8a:86:d9:31:
c2:e8:4d:8d:c9:dc:49:19:a6:e1:da:37:85:d5:09:0c:e0:03:
0e:36:e6:ef:f0:b2:a3:53:7a:b1:8d:1a:f8:ad:56:43:f8:d0:
06:ba:6b:d6:46:8a:8a:96:49:56:ca:b7:32:88:5c:6c:37:74:
71:a8:56:a1:41:ad:d8:8c:72:11:f7:25:f9:45:27:97:1f:69:
22:1d:45:63:3c:6f:d7:98:8d:97:18:4f:6e:50:f5:8a:27:32:
fe:de:ce:6a:51:5c:d7:3d:40:94:29:c9:f3:11:a3:3b:35:ac:
cb:34:70:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDfhwSNpU1pGryTp1QDMRCMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMDc0MTA4ZjBkMTQ1OWI2MmI2YzdhZGIyN2Q2OTM0YmEw
YmU3YTUwHhcNMjYwOTI2MjEwMjQyWhcNMjYwOTI3MjEwMjQyWjAzMTEwLwYDVQQD
EygxOWI3OTY1ZjczYWY0Y2M3N2EwZTg2ZjQ3MGMyNzI0Y2Q1Zjg5MzRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNVufVqOb0SVOX/0BmUc9Kxe/6M8
BoxKUQCznfZcgjhS1RsrtjrcfxrdAFEQbND8vRt0eeMhlyEkU/lvA3o3Yv9B1jun
qvwNU6wGuxKLNFLycg++WxDD1LvlFO/82psXAPDfBeVRjgNBQuZyWKmB2WO28NdT
ypG0NUhgoGBDEbbBxU/8Zn9IB9xtoX0iU3XPBqvyOAMffJIGQfJAGTlvU3xCgGW0
Ev2xJ4U9G6OJuYKZzFJnuXYhl+BtY5bSKZfYgkU3Z8oSNZtdP8DWnm9iRqFKK0E4
Ai53ZYFbMT7q5WgfyNYZDphMyX7vFear9XAv89bizFzPi3/eLR8fAZ2ZOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBm3ll9zr0zHeg6G9HDCckzV+JNNMB8GA1UdIwQY
MBaAFCEHQQjw0UWbYrbHrbJ9aTS6C+elMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVFkQkNQRFJSWnRpdHNldHNuMXBOTG9MNTZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC82ZWZiNDQtMDEyYi00MTVmLTgyMjAt
YzYyMjBlMTg1Njk0LzEvSVFkQkNQRFJSWnRpdHNldHNuMXBOTG9MNTZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC82ZWZiNDQtMDEyYi00MTVmLTgyMjAtYzYyMjBlMTg1Njk0
LzEvSVFkQkNQRFJSWnRpdHNldHNuMXBOTG9MNTZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAciT3063D
cqEsISGMCFhnz+tn5oIGK8gGd6W3ls1XL35Fdni14GcgEcsuzyB70KXTp92fUK4g
gVzGFp1SQAAopkbigQXV5M8cOtyDbhufk3041r5OFibZ4EgItz7BGnnGdjMlJKxS
J5K+j505kJfqoKbp6RlKnw9aYqsXcKPxC5eAtg8tE8rYi2FG7XeKhtkxwuhNjcnc
SRmm4do3hdUJDOADDjbm7/Cyo1N6sY0a+K1WQ/jQBrpr1kaKipZJVsq3MohcbDd0
cahWoUGt2IxyEfcl+UUnlx9pIh1FYzxv15iNlxhPblD1iicy/t7OalFc1z1AlCnJ
8xGjOzWsyzRwOw==
-----END CERTIFICATE-----
Generated at Sun Sep 27 02:48:48 2026 by rpki-client