
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft
File: IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft (raw, json)
Hash identifier: dz0mKaVcm0dglc/+Uv/Al7oM7mx+SC36sNna/wXOK5c=
Subject key identifier: 16:44:0A:7B:94:A9:A6:A4:E6:39:04:53:64:15:68:04:F5:4C:F4:24
Authority key identifier: 21:A0:00:80:CD:2C:B1:BB:07:39:03:B3:2B:25:AD:66:0A:36:64:86
Certificate issuer: /CN=21a00080cd2cb1bb073903b32b25ad660a366486
Certificate serial: 019F905AA56976A41D0C5CF4900262830140
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft
Manifest number: 189B
Signing time: Thu 23 Jul 2026 19:01:27 +0000
Manifest this update: Thu 23 Jul 2026 19:01:27 +0000
Manifest next update: Fri 24 Jul 2026 19:01:27 +0000
Files and hashes: 1: IaAAgM0ssbsHOQOzKyWtZgo2ZIY.crl (hash: eth/xt+NFBx6MWe2WG+U1QR/XJ7udop2i1m6lqVnr94=)
2: VND09LSiHkpjSOuhfnkKXr1ycfk.roa (hash: EuKqokjCANLNooQ3HgGRZe/o74jjpFvSm4Mcmm5yRzA=)
3: a8PSnoMbEUhv4Faq7MVolsfXT_Y.roa (hash: BPdIhgn9ulm4J7RgTCmSDSsMLRstDEKHEvI4iWcZR7s=)
4: u26fRlT_magCXskBSsLbW-Zc4HE.roa (hash: 9IYpduU01RzT9y1ftFaznGYathxT6zXqQawir2B1XDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:a5:69:76:a4:1d:0c:5c:f4:90:02:62:83:01:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21a00080cd2cb1bb073903b32b25ad660a366486
Validity
Not Before: Jul 23 19:01:27 2026 GMT
Not After : Jul 24 19:01:27 2026 GMT
Subject: CN=16440a7b94a9a6a4e639045364156804f54cf424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:99:90:44:dd:9e:f4:8c:f7:cd:b1:5c:09:a8:
1c:f8:8c:c2:bf:13:ba:7c:e2:73:48:70:e8:6e:bb:
50:ed:39:d9:75:9e:7a:dc:61:68:ba:39:3e:a9:e6:
63:ea:bf:d9:ea:6b:f6:e0:90:a8:14:59:18:e6:bd:
78:76:0c:b6:f9:f3:91:98:fc:16:b2:6b:de:9a:d3:
3d:e4:71:d7:cc:7f:4f:fe:02:54:c8:a6:e1:4e:af:
78:34:eb:c7:2c:5c:e3:5d:82:6f:15:2d:fa:dc:70:
6d:41:83:83:84:d6:39:6e:aa:a5:fd:b5:6e:3f:6c:
e9:15:ca:ce:38:bb:d2:47:d9:33:eb:9c:a8:c8:84:
83:be:ea:66:77:c4:70:1b:ff:eb:27:bc:75:0f:44:
48:37:66:84:b4:e1:6e:e0:4a:48:ea:44:8b:e0:01:
04:0d:a5:53:99:16:79:da:b8:c2:a3:80:d6:a7:c0:
34:74:b9:72:ad:02:d7:dc:19:a5:ca:57:16:b2:9f:
1e:42:4a:00:38:dc:aa:39:36:f7:e3:09:4e:95:24:
3f:36:dc:5f:5e:7f:6f:7c:ad:96:b2:98:b3:8b:74:
e9:50:3b:70:80:45:54:0b:b9:92:ea:d2:8e:78:ef:
72:e4:ff:ba:dd:8c:92:e9:79:b4:90:a2:46:bd:25:
5f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:44:0A:7B:94:A9:A6:A4:E6:39:04:53:64:15:68:04:F5:4C:F4:24
X509v3 Authority Key Identifier:
keyid:21:A0:00:80:CD:2C:B1:BB:07:39:03:B3:2B:25:AD:66:0A:36:64:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:81:c3:fb:ae:74:b6:e8:ac:28:ad:59:bc:35:7b:09:52:47:
ff:80:c5:10:9a:db:21:b8:7d:00:15:d5:f0:d6:7e:61:7c:a8:
e3:bd:0f:01:1b:cb:6d:36:70:d3:11:7b:ca:f8:27:d7:9a:74:
15:57:8d:21:05:56:4b:ef:8d:bc:05:d9:51:12:cf:e2:c3:8d:
31:a7:6e:ee:bf:c1:9c:35:60:93:6c:94:90:6b:c3:5a:9e:30:
82:47:cd:a1:45:53:d4:76:d1:5a:09:4c:14:89:32:ff:8c:91:
c4:74:a7:3b:4b:c1:2a:99:92:1e:51:47:3f:c5:2b:f0:da:ad:
3f:7f:68:0d:fb:8a:c9:0b:dd:52:e4:2a:b0:14:b3:14:ad:14:
03:9b:c6:24:8a:94:9d:30:05:b9:d2:7a:8a:f3:c5:b0:50:94:
5f:08:89:fc:d9:d7:8c:56:54:68:a2:db:3e:7b:0d:63:dc:5d:
30:ef:e6:06:84:1c:72:78:42:3d:82:7d:d8:fe:82:86:ef:02:
84:72:f5:64:2f:d6:c5:d5:91:80:50:d7:a0:7c:01:70:08:92:
ce:13:28:e6:b7:3e:f0:9f:69:37:31:ed:0c:72:e3:71:1a:06:
f6:f7:d9:67:d0:08:a8:52:4c:38:fe:fa:20:d7:37:73:42:61:
20:66:8c:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QWqVpdqQdDFz0kAJigwFAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxYTAwMDgwY2QyY2IxYmIwNzM5MDNiMzJiMjVhZDY2MGEz
NjY0ODYwHhcNMjYwNzIzMTkwMTI3WhcNMjYwNzI0MTkwMTI3WjAzMTEwLwYDVQQD
EygxNjQ0MGE3Yjk0YTlhNmE0ZTYzOTA0NTM2NDE1NjgwNGY1NGNmNDI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5mQRN2e9Iz3zbFcCagc+IzCvxO6
fOJzSHDobrtQ7TnZdZ563GFoujk+qeZj6r/Z6mv24JCoFFkY5r14dgy2+fORmPwW
smvemtM95HHXzH9P/gJUyKbhTq94NOvHLFzjXYJvFS363HBtQYODhNY5bqql/bVu
P2zpFcrOOLvSR9kz65yoyISDvupmd8RwG//rJ7x1D0RIN2aEtOFu4EpI6kSL4AEE
DaVTmRZ52rjCo4DWp8A0dLlyrQLX3BmlylcWsp8eQkoAONyqOTb34wlOlSQ/Ntxf
Xn9vfK2Wspizi3TpUDtwgEVUC7mS6tKOeO9y5P+63YyS6Xm0kKJGvSVfLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBZECnuUqaak5jkEU2QVaAT1TPQkMB8GA1UdIwQY
MBaAFCGgAIDNLLG7BzkDsyslrWYKNmSGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWFBQWdNMHNzYnNIT1FPekt5V3RaZ28yWklZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy82YzNkOWYtOGE0Zi00YTZjLTg1Nzkt
ZTkyZWNlNGQzY2IzLzEvSWFBQWdNMHNzYnNIT1FPekt5V3RaZ28yWklZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy82YzNkOWYtOGE0Zi00YTZjLTg1NzktZTkyZWNlNGQzY2Iz
LzEvSWFBQWdNMHNzYnNIT1FPekt5V3RaZ28yWklZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADIHD+650
tuisKK1ZvDV7CVJH/4DFEJrbIbh9ABXV8NZ+YXyo470PARvLbTZw0xF7yvgn15p0
FVeNIQVWS++NvAXZURLP4sONMadu7r/BnDVgk2yUkGvDWp4wgkfNoUVT1HbRWglM
FIky/4yRxHSnO0vBKpmSHlFHP8Ur8NqtP39oDfuKyQvdUuQqsBSzFK0UA5vGJIqU
nTAFudJ6ivPFsFCUXwiJ/NnXjFZUaKLbPnsNY9xdMO/mBoQccnhCPYJ92P6Chu8C
hHL1ZC/WxdWRgFDXoHwBcAiSzhMo5rc+8J9pNzHtDHLjcRoG9vfZZ9AIqFJMOP76
INc3c0JhIGaMLQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:58:44 2026 by rpki-client