Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/8878d9-4f1c-426b-8a40-658120ae68e1/1/ICZNUaES0LwizqcxTLBs9aGuM-k.mft
File: ICZNUaES0LwizqcxTLBs9aGuM-k.mft (raw, json)
Hash identifier: vttkoEIGGPRnaxLv6FwWmOUwT0AVHbeBI1RSa7zlK1c=
Subject key identifier: B1:FE:71:5B:BF:B2:EC:A1:06:AF:BA:4E:91:D1:CC:2A:CA:1B:FE:06
Authority key identifier: 20:26:4D:51:A1:12:D0:BC:22:CE:A7:31:4C:B0:6C:F5:A1:AE:33:E9
Certificate issuer: /CN=20264d51a112d0bc22cea7314cb06cf5a1ae33e9
Certificate serial: 019F9248D5B1AECC3A5CE355DE9A69DA71C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ICZNUaES0LwizqcxTLBs9aGuM-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/8878d9-4f1c-426b-8a40-658120ae68e1/1/ICZNUaES0LwizqcxTLBs9aGuM-k.mft
Manifest number: 195A
Signing time: Fri 24 Jul 2026 04:01:14 +0000
Manifest this update: Fri 24 Jul 2026 04:01:14 +0000
Manifest next update: Sat 25 Jul 2026 04:01:14 +0000
Files and hashes: 1: ICZNUaES0LwizqcxTLBs9aGuM-k.crl (hash: P4nJIe3Lo9N8YeHpAyofaPiMfjEdYp4Jn9uHK09+0Mk=)
2: TlCjshw48MI80zaCqZRdp10HXmU.roa (hash: IUaeg0F1EJZvlebFMhAdUjihSrKer72rVZfI7a/WmYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/8878d9-4f1c-426b-8a40-658120ae68e1/1/ICZNUaES0LwizqcxTLBs9aGuM-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/8878d9-4f1c-426b-8a40-658120ae68e1/1/ICZNUaES0LwizqcxTLBs9aGuM-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/ICZNUaES0LwizqcxTLBs9aGuM-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:d5:b1:ae:cc:3a:5c:e3:55:de:9a:69:da:71:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20264d51a112d0bc22cea7314cb06cf5a1ae33e9
Validity
Not Before: Jul 24 04:01:14 2026 GMT
Not After : Jul 25 04:01:14 2026 GMT
Subject: CN=b1fe715bbfb2eca106afba4e91d1cc2aca1bfe06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:85:8b:f2:66:c4:04:02:a3:12:a7:71:a6:1b:
d7:37:0f:c5:82:b5:ec:cf:a6:e1:e8:5a:4c:53:86:
3d:8c:12:55:63:43:e5:7d:2d:bf:45:b8:88:b2:0a:
71:0c:d2:5b:68:7c:b5:7e:ff:75:55:1d:2a:49:b1:
25:40:b9:42:ef:c8:35:af:c1:d2:75:5b:6c:ba:0e:
02:a1:99:ab:8c:d2:6e:ed:a4:5e:21:cf:4c:58:78:
e9:1e:2d:40:a6:1c:a1:2e:d3:5c:43:07:26:a6:46:
48:c8:d9:a4:19:0b:56:ac:15:06:82:bd:c9:29:31:
02:46:69:eb:d5:84:49:24:69:d3:1b:85:8a:82:47:
c4:3f:d7:92:b9:fb:e8:ba:75:ea:59:9c:13:1b:59:
3f:e6:7e:36:07:a6:61:9c:17:44:fd:0d:11:ce:03:
08:82:b3:b6:28:fc:41:90:24:d6:e5:7f:61:07:9e:
9e:d5:0f:45:cf:5c:36:af:18:15:df:6c:a8:50:5c:
10:22:e9:ce:3d:8b:e2:d9:61:f2:f5:2b:28:71:cc:
b1:1a:f6:c6:f2:78:34:8e:00:d8:f9:b8:26:40:2a:
ba:02:bf:40:b3:e4:04:84:41:3f:cf:b8:69:73:3b:
c1:10:32:c2:d8:53:3a:16:05:6b:3e:18:a2:7c:69:
26:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:FE:71:5B:BF:B2:EC:A1:06:AF:BA:4E:91:D1:CC:2A:CA:1B:FE:06
X509v3 Authority Key Identifier:
keyid:20:26:4D:51:A1:12:D0:BC:22:CE:A7:31:4C:B0:6C:F5:A1:AE:33:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ICZNUaES0LwizqcxTLBs9aGuM-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/8878d9-4f1c-426b-8a40-658120ae68e1/1/ICZNUaES0LwizqcxTLBs9aGuM-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/8878d9-4f1c-426b-8a40-658120ae68e1/1/ICZNUaES0LwizqcxTLBs9aGuM-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:fe:4a:74:e1:da:e5:e5:ce:9c:72:d2:0f:ab:c8:d7:66:e4:
a3:4f:25:be:59:d4:3d:99:aa:a4:85:33:5b:b5:11:39:01:c4:
71:41:ea:c5:32:20:cb:4c:64:2a:9b:9f:6a:50:d9:4f:01:fb:
4e:5b:a3:a3:f0:16:45:6e:69:55:86:6e:58:e0:31:a4:4c:32:
4b:13:58:82:d5:bf:ec:a1:0d:cf:8c:98:52:f7:73:64:e5:17:
1f:44:02:01:72:26:e4:1a:57:8f:67:32:76:ce:23:04:cb:e7:
6e:da:5b:97:c3:15:16:ca:e3:dd:36:30:65:4e:9f:44:f8:a0:
f5:ba:4f:da:c0:d0:e6:a3:95:fc:cc:8c:f1:be:16:e5:86:a7:
be:af:8f:e2:3f:b2:70:c9:61:02:d0:0f:73:35:88:2e:3b:31:
89:5e:a7:a6:bc:5f:71:2c:9a:4c:be:21:1f:10:f9:b2:f1:47:
9e:96:9b:d2:2c:08:70:37:eb:fc:4a:81:20:24:56:c3:82:20:
69:7d:d5:44:65:ec:7c:89:f2:fc:f8:42:ba:20:5f:c6:06:c6:
ce:3b:d7:f7:d7:54:3a:e8:e5:f2:f5:5d:ce:6d:3a:aa:aa:ec:
6b:c5:37:70:45:42:57:bb:c8:9b:fc:40:01:5c:5d:78:a1:dd:
7d:83:0b:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SSNWxrsw6XONV3ppp2nHHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwMjY0ZDUxYTExMmQwYmMyMmNlYTczMTRjYjA2Y2Y1YTFh
ZTMzZTkwHhcNMjYwNzI0MDQwMTE0WhcNMjYwNzI1MDQwMTE0WjAzMTEwLwYDVQQD
EyhiMWZlNzE1YmJmYjJlY2ExMDZhZmJhNGU5MWQxY2MyYWNhMWJmZTA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4WL8mbEBAKjEqdxphvXNw/FgrXs
z6bh6FpMU4Y9jBJVY0PlfS2/RbiIsgpxDNJbaHy1fv91VR0qSbElQLlC78g1r8HS
dVtsug4CoZmrjNJu7aReIc9MWHjpHi1AphyhLtNcQwcmpkZIyNmkGQtWrBUGgr3J
KTECRmnr1YRJJGnTG4WKgkfEP9eSufvounXqWZwTG1k/5n42B6ZhnBdE/Q0RzgMI
grO2KPxBkCTW5X9hB56e1Q9Fz1w2rxgV32yoUFwQIunOPYvi2WHy9SsoccyxGvbG
8ng0jgDY+bgmQCq6Ar9As+QEhEE/z7hpczvBEDLC2FM6FgVrPhiifGkm/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLH+cVu/suyhBq+6TpHRzCrKG/4GMB8GA1UdIwQY
MBaAFCAmTVGhEtC8Is6nMUywbPWhrjPpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUNaTlVhRVMwTHdpenFjeFRMQnM5YUd1TS1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy84ODc4ZDktNGYxYy00MjZiLThhNDAt
NjU4MTIwYWU2OGUxLzEvSUNaTlVhRVMwTHdpenFjeFRMQnM5YUd1TS1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy84ODc4ZDktNGYxYy00MjZiLThhNDAtNjU4MTIwYWU2OGUx
LzEvSUNaTlVhRVMwTHdpenFjeFRMQnM5YUd1TS1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy/5KdOHa
5eXOnHLSD6vI12bko08lvlnUPZmqpIUzW7UROQHEcUHqxTIgy0xkKpufalDZTwH7
Tlujo/AWRW5pVYZuWOAxpEwySxNYgtW/7KENz4yYUvdzZOUXH0QCAXIm5BpXj2cy
ds4jBMvnbtpbl8MVFsrj3TYwZU6fRPig9bpP2sDQ5qOV/MyM8b4W5Yanvq+P4j+y
cMlhAtAPczWILjsxiV6nprxfcSyaTL4hHxD5svFHnpab0iwIcDfr/EqBICRWw4Ig
aX3VRGXsfIny/PhCuiBfxgbGzjvX99dUOujl8vVdzm06qqrsa8U3cEVCV7vIm/xA
AVxdeKHdfYMLCw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:04:31 2026 by rpki-client