Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.mft
File: IUblYKP1ysfGT-DxO-Zj2UyHFFM.mft (raw, json)
Hash identifier: 1lagWJX2QRgp/J065M3Re0zaQOKRPNj3VsZYUH159pA=
Subject key identifier: 22:2D:8E:52:B1:0F:78:77:19:D4:28:8E:F9:DA:20:B2:2A:9A:06:4D
Authority key identifier: 21:46:E5:60:A3:F5:CA:C7:C6:4F:E0:F1:3B:E6:63:D9:4C:87:14:53
Certificate issuer: /CN=2146e560a3f5cac7c64fe0f13be663d94c871453
Certificate serial: 019F9436B71713C5B83109FF246D3D24D9F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IUblYKP1ysfGT-DxO-Zj2UyHFFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.mft
Manifest number: 084D
Signing time: Fri 24 Jul 2026 13:00:41 +0000
Manifest this update: Fri 24 Jul 2026 13:00:41 +0000
Manifest next update: Sat 25 Jul 2026 13:00:41 +0000
Files and hashes: 1: IUblYKP1ysfGT-DxO-Zj2UyHFFM.crl (hash: oWFZQQ8KM58WiurN/dljzq6T6yiGnHjT67B0y6vvxd8=)
2: LjoyTAIqIdVonXqWj6vk4FoukK0.roa (hash: bQBFj6QQOo1AQBEY/tE2iTw4IsOMKBpMDv9YhAGGsps=)
3: PAUyEeyz0ynlGNIPQlDkGnYP9qw.roa (hash: rPWU+wKJ+ccuMgvRWcLsdSjoKQhoTdU4QLcfL/aRiOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IUblYKP1ysfGT-DxO-Zj2UyHFFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:36:b7:17:13:c5:b8:31:09:ff:24:6d:3d:24:d9:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2146e560a3f5cac7c64fe0f13be663d94c871453
Validity
Not Before: Jul 24 13:00:41 2026 GMT
Not After : Jul 25 13:00:41 2026 GMT
Subject: CN=222d8e52b10f787719d4288ef9da20b22a9a064d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ea:76:5d:5c:9d:99:c9:4e:8a:d4:bb:a2:33:
f9:35:2a:9a:fd:d5:e4:10:d9:32:df:66:3b:20:9c:
9c:a3:ea:22:82:c4:f4:fc:1f:7e:e9:40:9a:d0:7d:
af:b9:cd:a6:3c:93:90:99:3e:dd:a7:34:9f:8f:6c:
88:39:a0:57:d7:9c:e0:11:dd:9f:5d:5e:09:7c:13:
84:57:e5:d5:3c:ce:d9:7a:23:5c:7d:62:a0:83:60:
94:dc:63:3c:f5:8a:be:95:f6:3e:37:83:a4:18:f2:
ad:dd:08:4e:1d:29:c2:3b:46:df:9b:a2:af:3c:30:
40:c1:87:66:b4:20:69:2d:a3:05:47:cc:0b:99:6d:
53:35:23:ca:14:49:37:3d:ac:da:58:f1:65:4d:b4:
4b:74:9d:8c:63:7e:17:ce:f0:e6:92:dd:23:4e:f8:
b9:10:9f:9d:54:d4:50:78:e9:b3:8b:dc:3c:d2:ec:
10:5d:24:00:18:6f:90:0a:ef:3c:57:19:f8:ce:50:
de:dd:82:d9:69:10:96:a4:90:8e:66:af:f3:fa:d0:
bf:df:7d:15:c3:aa:8a:60:a8:42:f0:2e:fc:5f:d4:
05:c9:6b:a7:5b:7a:d2:f4:ea:1f:91:c3:fa:1e:fd:
73:57:fd:f0:1a:55:46:6d:7a:d4:a9:3b:1a:ce:68:
79:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:2D:8E:52:B1:0F:78:77:19:D4:28:8E:F9:DA:20:B2:2A:9A:06:4D
X509v3 Authority Key Identifier:
keyid:21:46:E5:60:A3:F5:CA:C7:C6:4F:E0:F1:3B:E6:63:D9:4C:87:14:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IUblYKP1ysfGT-DxO-Zj2UyHFFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:ae:0b:12:8c:55:e5:90:7b:aa:9a:e6:b5:7a:f8:19:52:37:
2e:c7:13:c9:9e:7e:19:2b:18:3c:c6:2a:c0:b7:7c:68:82:46:
ab:f8:04:c2:6d:b6:31:ba:d2:76:9a:ed:5f:c3:32:15:a2:a0:
cc:d1:8b:70:25:03:4e:71:10:f0:25:2b:39:46:f0:c7:66:40:
2d:73:21:06:8c:69:ac:ca:eb:9d:e7:5e:34:3b:00:ae:db:4d:
cb:bc:73:36:35:76:82:68:f0:9d:7a:a5:b1:c6:1f:13:6d:74:
5d:ac:cf:3b:84:47:3b:86:80:a1:ab:4c:14:97:f2:4a:5e:c3:
6d:b2:d4:2c:20:1c:97:ff:28:61:9e:3f:41:16:bb:1e:5d:3a:
b2:dc:cc:bf:29:eb:7f:bb:b0:16:9c:dc:8b:27:cf:0b:01:5c:
a9:47:0b:88:0e:9d:50:ab:d4:78:c9:2b:0d:f8:a9:bb:ca:5e:
9f:8c:05:19:63:9f:71:c4:62:09:7b:13:de:63:95:24:2d:d7:
2a:d0:55:e4:64:87:74:38:8f:87:8f:c5:c9:4b:00:73:5a:bb:
bf:74:de:fc:26:e2:b4:af:8b:0b:0c:58:2b:d8:02:97:d4:73:
d1:29:21:73:4d:dd:79:0b:53:29:e1:40:84:2a:ba:84:98:13:
78:65:6a:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+UNrcXE8W4MQn/JG09JNnxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxNDZlNTYwYTNmNWNhYzdjNjRmZTBmMTNiZTY2M2Q5NGM4
NzE0NTMwHhcNMjYwNzI0MTMwMDQxWhcNMjYwNzI1MTMwMDQxWjAzMTEwLwYDVQQD
EygyMjJkOGU1MmIxMGY3ODc3MTlkNDI4OGVmOWRhMjBiMjJhOWEwNjRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtup2XVydmclOitS7ojP5NSqa/dXk
ENky32Y7IJyco+oigsT0/B9+6UCa0H2vuc2mPJOQmT7dpzSfj2yIOaBX15zgEd2f
XV4JfBOEV+XVPM7ZeiNcfWKgg2CU3GM89Yq+lfY+N4OkGPKt3QhOHSnCO0bfm6Kv
PDBAwYdmtCBpLaMFR8wLmW1TNSPKFEk3PazaWPFlTbRLdJ2MY34XzvDmkt0jTvi5
EJ+dVNRQeOmzi9w80uwQXSQAGG+QCu88Vxn4zlDe3YLZaRCWpJCOZq/z+tC/330V
w6qKYKhC8C78X9QFyWunW3rS9OofkcP6Hv1zV/3wGlVGbXrUqTsazmh5SwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCItjlKxD3h3GdQojvnaILIqmgZNMB8GA1UdIwQY
MBaAFCFG5WCj9crHxk/g8TvmY9lMhxRTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVVibFlLUDF5c2ZHVC1EeE8tWmoyVXlIRkZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9iMjdlYWQtOTZiZi00NTM3LTlhOTkt
NWJlNDY3NGI0NjdjLzEvSVVibFlLUDF5c2ZHVC1EeE8tWmoyVXlIRkZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS9iMjdlYWQtOTZiZi00NTM3LTlhOTktNWJlNDY3NGI0Njdj
LzEvSVVibFlLUDF5c2ZHVC1EeE8tWmoyVXlIRkZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD64LEoxV
5ZB7qprmtXr4GVI3LscTyZ5+GSsYPMYqwLd8aIJGq/gEwm22MbrSdprtX8MyFaKg
zNGLcCUDTnEQ8CUrOUbwx2ZALXMhBoxprMrrnedeNDsArttNy7xzNjV2gmjwnXql
scYfE210XazPO4RHO4aAoatMFJfySl7DbbLULCAcl/8oYZ4/QRa7Hl06stzMvynr
f7uwFpzciyfPCwFcqUcLiA6dUKvUeMkrDfipu8pen4wFGWOfccRiCXsT3mOVJC3X
KtBV5GSHdDiPh4/FyUsAc1q7v3Te/CbitK+LCwxYK9gCl9Rz0Skhc03deQtTKeFA
hCq6hJgTeGVqhg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 15:07:38 2026 by rpki-client