Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/281dfb-3293-4bab-ba22-1becb5dcd7aa/1/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.mft
File: Iw0xH8GUY_3TCt7MkXtfAph0G0Q.mft (raw, json)
Hash identifier: +Cxdc8KasVOq7JkZsVpex1+M3wNzyQKlB1mkOTgSE9M=
Subject key identifier: 15:61:1E:A2:9C:54:B0:50:AD:58:6E:D3:DB:A7:A7:96:99:76:F2:D7
Authority key identifier: 23:0D:31:1F:C1:94:63:FD:D3:0A:DE:CC:91:7B:5F:02:98:74:1B:44
Certificate issuer: /CN=230d311fc19463fdd30adecc917b5f0298741b44
Certificate serial: 019F935ABCDE44176D8C35B4B3F1E1621321
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/281dfb-3293-4bab-ba22-1becb5dcd7aa/1/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.mft
Manifest number: 13E4
Signing time: Fri 24 Jul 2026 09:00:25 +0000
Manifest this update: Fri 24 Jul 2026 09:00:25 +0000
Manifest next update: Sat 25 Jul 2026 09:00:25 +0000
Files and hashes: 1: 3kj2IZUmhg4c3fn_vDNshjS1bYM.roa (hash: F1j+Rw7AK0w/RfaxR+vC5zwL/WwgyQ05RgO+QAvekpY=)
2: Iw0xH8GUY_3TCt7MkXtfAph0G0Q.crl (hash: FTlseiW/bpzlqzLhrUGAC4vKiz0CSrAUyTStWx7+Quc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/281dfb-3293-4bab-ba22-1becb5dcd7aa/1/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/281dfb-3293-4bab-ba22-1becb5dcd7aa/1/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5a:bc:de:44:17:6d:8c:35:b4:b3:f1:e1:62:13:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=230d311fc19463fdd30adecc917b5f0298741b44
Validity
Not Before: Jul 24 09:00:25 2026 GMT
Not After : Jul 25 09:00:25 2026 GMT
Subject: CN=15611ea29c54b050ad586ed3dba7a7969976f2d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:60:3c:02:d9:3d:38:e0:43:bb:5a:c7:f9:12:
62:c8:87:f2:55:83:d3:5e:f3:f7:75:02:28:85:25:
36:ec:df:c2:2c:e1:c3:8f:ea:ba:c2:51:89:3a:8d:
36:cf:77:1b:04:13:b1:8e:2a:21:a5:23:a6:9f:b2:
7c:73:f7:c9:2c:5c:ad:8d:48:f1:35:78:9e:7f:89:
b5:e8:76:09:24:e3:a1:5e:09:29:56:21:c7:29:34:
c6:21:ad:76:91:d6:5e:4e:16:b3:c5:29:3e:97:c3:
5c:f1:70:c2:c0:39:f2:ef:cc:62:98:78:18:1c:5a:
7a:d0:4c:b8:76:2e:48:05:d9:46:95:b9:67:52:54:
67:41:01:84:5d:9d:da:0e:b2:0b:99:42:83:a8:c8:
ac:fe:03:3f:5e:c0:a0:e0:75:43:14:b1:d6:10:fe:
3e:da:f6:9b:f8:5f:72:03:bc:c0:1c:09:2a:df:32:
cf:9d:53:d3:aa:0d:e7:81:0f:08:4d:24:2b:4b:07:
e4:61:24:fd:eb:08:22:78:58:2d:4f:d2:de:61:c8:
7e:ea:77:72:05:09:79:69:c4:46:7e:c5:1a:c3:11:
b9:8d:79:74:bc:8c:a4:71:15:9a:f7:96:c1:5a:d8:
63:7d:ba:b1:10:37:e4:08:2e:be:ca:cc:c6:71:d7:
04:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:61:1E:A2:9C:54:B0:50:AD:58:6E:D3:DB:A7:A7:96:99:76:F2:D7
X509v3 Authority Key Identifier:
keyid:23:0D:31:1F:C1:94:63:FD:D3:0A:DE:CC:91:7B:5F:02:98:74:1B:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/281dfb-3293-4bab-ba22-1becb5dcd7aa/1/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/281dfb-3293-4bab-ba22-1becb5dcd7aa/1/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:ca:b5:15:f0:c9:a6:22:e0:31:62:dc:05:9d:60:52:92:47:
a2:43:70:fe:c3:5e:a0:23:f5:8d:21:33:ce:ef:e3:8f:37:c8:
21:82:49:00:2b:9a:c2:cf:66:53:82:2f:b2:82:0f:11:45:19:
0e:21:80:3c:2b:99:08:8c:b6:01:93:88:a8:c6:54:30:be:81:
b8:9f:b5:45:d1:9f:4f:c2:f3:d7:da:4a:a9:0c:e9:19:ed:f8:
52:6d:a0:b1:33:76:a5:51:0f:f6:28:83:54:1d:d3:60:23:c9:
e0:3e:d3:0d:de:26:0e:ac:c3:d2:66:4a:9f:68:2f:cd:01:6a:
7d:e1:b2:d2:9d:ac:fb:12:a8:05:00:e9:ea:31:0b:cd:94:c4:
29:81:13:07:29:e9:ec:aa:b3:50:46:db:5a:d4:4d:04:ee:24:
81:25:26:cf:3d:df:78:af:aa:65:a6:a6:10:0d:cd:7d:d0:66:
46:31:1f:a5:62:9b:fe:0b:05:d3:1a:e5:84:49:0f:fe:24:fa:
64:84:bc:34:49:2d:85:c4:59:ce:68:e1:6e:cf:11:73:88:77:
a3:b1:88:61:56:d7:4c:56:fc:7f:9d:33:09:04:a0:3f:4d:c6:
04:4d:99:0b:63:c3:5d:c6:fc:57:59:de:bb:6e:28:c1:d0:d0:
ec:15:e0:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TWrzeRBdtjDW0s/HhYhMhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzMGQzMTFmYzE5NDYzZmRkMzBhZGVjYzkxN2I1ZjAyOTg3
NDFiNDQwHhcNMjYwNzI0MDkwMDI1WhcNMjYwNzI1MDkwMDI1WjAzMTEwLwYDVQQD
EygxNTYxMWVhMjljNTRiMDUwYWQ1ODZlZDNkYmE3YTc5Njk5NzZmMmQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2WA8Atk9OOBDu1rH+RJiyIfyVYPT
XvP3dQIohSU27N/CLOHDj+q6wlGJOo02z3cbBBOxjiohpSOmn7J8c/fJLFytjUjx
NXief4m16HYJJOOhXgkpViHHKTTGIa12kdZeThazxSk+l8Nc8XDCwDny78ximHgY
HFp60Ey4di5IBdlGlblnUlRnQQGEXZ3aDrILmUKDqMis/gM/XsCg4HVDFLHWEP4+
2vab+F9yA7zAHAkq3zLPnVPTqg3ngQ8ITSQrSwfkYST96wgieFgtT9LeYch+6ndy
BQl5acRGfsUawxG5jXl0vIykcRWa95bBWthjfbqxEDfkCC6+yszGcdcErwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBVhHqKcVLBQrVhu09unp5aZdvLXMB8GA1UdIwQY
MBaAFCMNMR/BlGP90wrezJF7XwKYdBtEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXcweEg4R1VZXzNUQ3Q3TWtYdGZBcGgwRzBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8yODFkZmItMzI5My00YmFiLWJhMjIt
MWJlY2I1ZGNkN2FhLzEvSXcweEg4R1VZXzNUQ3Q3TWtYdGZBcGgwRzBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8yODFkZmItMzI5My00YmFiLWJhMjItMWJlY2I1ZGNkN2Fh
LzEvSXcweEg4R1VZXzNUQ3Q3TWtYdGZBcGgwRzBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARsq1FfDJ
piLgMWLcBZ1gUpJHokNw/sNeoCP1jSEzzu/jjzfIIYJJACuaws9mU4IvsoIPEUUZ
DiGAPCuZCIy2AZOIqMZUML6BuJ+1RdGfT8Lz19pKqQzpGe34Um2gsTN2pVEP9iiD
VB3TYCPJ4D7TDd4mDqzD0mZKn2gvzQFqfeGy0p2s+xKoBQDp6jELzZTEKYETBynp
7KqzUEbbWtRNBO4kgSUmzz3feK+qZaamEA3NfdBmRjEfpWKb/gsF0xrlhEkP/iT6
ZIS8NEkthcRZzmjhbs8Rc4h3o7GIYVbXTFb8f50zCQSgP03GBE2ZC2PDXcb8V1ne
u24owdDQ7BXgyg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:14:08 2026 by rpki-client