Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.mft
File: MIfS4cwIqVF0v3lOLy3m49A--Co.mft (raw, json)
Hash identifier: RS41ttuqPODTwQlEk14EpA1Ffem399HHHa1WXRN7h0o=
Subject key identifier: 11:92:68:55:ED:6F:2E:DC:89:E6:C2:00:BA:34:1B:C3:F8:41:5C:6A
Authority key identifier: 30:87:D2:E1:CC:08:A9:51:74:BF:79:4E:2F:2D:E6:E3:D0:3E:F8:2A
Certificate issuer: /CN=3087d2e1cc08a95174bf794e2f2de6e3d03ef82a
Certificate serial: 019F91A3DEB637052B5A7BEB30BB2ECD0F1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MIfS4cwIqVF0v3lOLy3m49A--Co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.mft
Manifest number: 152E
Signing time: Fri 24 Jul 2026 01:01:03 +0000
Manifest this update: Fri 24 Jul 2026 01:01:03 +0000
Manifest next update: Sat 25 Jul 2026 01:01:03 +0000
Files and hashes: 1: MIfS4cwIqVF0v3lOLy3m49A--Co.crl (hash: FpXCCDFKoE6j9hYItlfCQOXO7B/meE+7L1obWK5j914=)
2: UO3-ECp44i-4NHov7ZcCJgmk2iw.roa (hash: pq04zRZsIbyhYdzYcYCke50JhIGeXTbV4hV+QB02Ah0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.mft
rsync://rpki.ripe.net/repository/DEFAULT/MIfS4cwIqVF0v3lOLy3m49A--Co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 01:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:de:b6:37:05:2b:5a:7b:eb:30:bb:2e:cd:0f:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3087d2e1cc08a95174bf794e2f2de6e3d03ef82a
Validity
Not Before: Jul 24 01:01:03 2026 GMT
Not After : Jul 25 01:01:03 2026 GMT
Subject: CN=11926855ed6f2edc89e6c200ba341bc3f8415c6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:31:12:35:57:b2:63:b0:b9:45:e2:53:b7:65:
c3:e2:96:95:ae:95:fd:1d:96:d5:fa:0e:40:03:18:
5e:d9:68:d2:fc:a7:92:68:61:1b:aa:14:d9:fc:cb:
f1:20:d0:6a:27:70:e2:51:03:77:6d:5b:3b:09:1d:
16:57:bd:bd:34:a4:b3:2f:66:db:20:13:4f:ec:a7:
5d:13:29:b4:11:49:bd:41:c4:a0:0b:72:57:df:86:
7b:7c:1d:dc:1e:b7:fb:a4:a3:9c:0c:48:b3:5d:7f:
33:c0:74:d6:e2:d3:02:48:98:99:64:58:36:96:18:
e9:f2:bc:38:37:34:9b:0b:5e:6a:94:1d:b0:55:e5:
ac:2b:d1:6f:19:df:44:a9:1f:12:11:50:fd:0e:a7:
17:c3:14:98:e8:23:67:86:f9:b8:da:9d:31:65:cd:
2b:5e:07:7c:77:ab:d5:53:8d:00:2f:7a:d0:68:68:
a9:f1:ac:6d:f2:03:e8:95:48:d8:03:71:b9:7a:13:
c5:b5:7a:5e:ba:16:83:88:f4:e3:b9:41:25:64:0d:
71:13:0f:35:90:36:bd:f7:82:49:9a:6a:8f:91:a7:
10:85:3f:c0:45:a1:af:f9:43:9a:4d:bc:38:bd:bc:
36:bc:b5:32:cf:ad:95:fc:d8:a4:33:a2:81:8e:78:
7b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:92:68:55:ED:6F:2E:DC:89:E6:C2:00:BA:34:1B:C3:F8:41:5C:6A
X509v3 Authority Key Identifier:
keyid:30:87:D2:E1:CC:08:A9:51:74:BF:79:4E:2F:2D:E6:E3:D0:3E:F8:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MIfS4cwIqVF0v3lOLy3m49A--Co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:9d:df:70:c8:52:7c:f6:76:76:50:ed:e2:70:7c:cb:79:76:
26:a2:73:af:cb:f4:8c:2b:8e:58:23:f6:c4:95:1b:b6:80:5a:
80:c2:79:14:27:f5:e8:03:35:05:ca:77:84:83:56:4f:5e:40:
e7:b4:fc:09:05:a3:37:4c:32:5a:72:fb:3b:6a:db:7d:3e:cd:
b4:72:1b:73:bd:9d:c0:a5:88:98:a4:fc:6e:25:8e:13:3f:c3:
a1:83:13:7b:d2:98:25:06:0d:dc:ec:bd:d5:fc:c3:01:20:8b:
79:c2:78:99:5c:0b:2e:23:43:73:27:d0:3d:d7:ad:2c:5f:a8:
fe:55:d7:42:26:04:8b:b9:a0:25:59:9a:a1:14:65:4d:44:28:
60:8d:22:0d:9d:0a:58:03:3b:10:ec:ed:59:d6:7d:db:9a:c9:
bc:df:13:73:f4:05:32:e1:d8:82:19:34:b9:4d:88:e5:37:a4:
cc:6c:ac:04:a8:0f:11:e8:8c:96:e5:d9:0d:3f:9f:66:a9:0f:
4d:cb:42:3e:cd:da:b3:02:7d:02:05:e1:11:2c:61:a4:55:67:
8a:87:57:a7:44:88:f7:ed:1e:12:22:ee:d6:cc:30:c6:a5:f9:
22:56:7d:ea:9c:c0:ee:d8:f3:e1:3c:18:97:e5:b8:3a:6f:28:
5a:38:a7:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Ro962NwUrWnvrMLsuzQ8dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwODdkMmUxY2MwOGE5NTE3NGJmNzk0ZTJmMmRlNmUzZDAz
ZWY4MmEwHhcNMjYwNzI0MDEwMTAzWhcNMjYwNzI1MDEwMTAzWjAzMTEwLwYDVQQD
EygxMTkyNjg1NWVkNmYyZWRjODllNmMyMDBiYTM0MWJjM2Y4NDE1YzZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjESNVeyY7C5ReJTt2XD4paVrpX9
HZbV+g5AAxhe2WjS/KeSaGEbqhTZ/MvxINBqJ3DiUQN3bVs7CR0WV729NKSzL2bb
IBNP7KddEym0EUm9QcSgC3JX34Z7fB3cHrf7pKOcDEizXX8zwHTW4tMCSJiZZFg2
lhjp8rw4NzSbC15qlB2wVeWsK9FvGd9EqR8SEVD9DqcXwxSY6CNnhvm42p0xZc0r
Xgd8d6vVU40AL3rQaGip8axt8gPolUjYA3G5ehPFtXpeuhaDiPTjuUElZA1xEw81
kDa994JJmmqPkacQhT/ARaGv+UOaTbw4vbw2vLUyz62V/NikM6KBjnh7IwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBGSaFXtby7ciebCALo0G8P4QVxqMB8GA1UdIwQY
MBaAFDCH0uHMCKlRdL95Ti8t5uPQPvgqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUlmUzRjd0lxVkYwdjNsT0x5M200OUEtLUNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8xYmE5YTYtZjYxNi00ZTc0LTk2N2Qt
N2U3MTkwZmZjNGM5LzEvTUlmUzRjd0lxVkYwdjNsT0x5M200OUEtLUNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy8xYmE5YTYtZjYxNi00ZTc0LTk2N2QtN2U3MTkwZmZjNGM5
LzEvTUlmUzRjd0lxVkYwdjNsT0x5M200OUEtLUNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ53fcMhS
fPZ2dlDt4nB8y3l2JqJzr8v0jCuOWCP2xJUbtoBagMJ5FCf16AM1Bcp3hINWT15A
57T8CQWjN0wyWnL7O2rbfT7NtHIbc72dwKWImKT8biWOEz/DoYMTe9KYJQYN3Oy9
1fzDASCLecJ4mVwLLiNDcyfQPdetLF+o/lXXQiYEi7mgJVmaoRRlTUQoYI0iDZ0K
WAM7EOztWdZ925rJvN8Tc/QFMuHYghk0uU2I5TekzGysBKgPEeiMluXZDT+fZqkP
TctCPs3aswJ9AgXhESxhpFVniodXp0SI9+0eEiLu1swwxqX5IlZ96pzA7tjz4TwY
l+W4Om8oWjinLQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:28:44 2026 by rpki-client