Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.mft
File: ifnCFo0tgt39inBjfUQBivMLH5c.mft (raw, json)
Hash identifier: IvGqz5Mc5EG5daaGvrsr8TdUVX76WN+uplgUKv5eQvQ=
Subject key identifier: B2:44:D1:33:AE:73:7A:C4:AA:21:74:26:1C:6E:66:C0:4C:93:78:91
Authority key identifier: 89:F9:C2:16:8D:2D:82:DD:FD:8A:70:63:7D:44:01:8A:F3:0B:1F:97
Certificate issuer: /CN=89f9c2168d2d82ddfd8a70637d44018af30b1f97
Certificate serial: 019F93920BFD131E853D66021DF000D047B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ifnCFo0tgt39inBjfUQBivMLH5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.mft
Manifest number: 0500
Signing time: Fri 24 Jul 2026 10:00:49 +0000
Manifest this update: Fri 24 Jul 2026 10:00:49 +0000
Manifest next update: Sat 25 Jul 2026 10:00:49 +0000
Files and hashes: 1: gBJFcoYbkBHMY5TM8IY4zHwd7l8.roa (hash: N41NaFkXMzlFGahMYjKRbrB7l7KmQbIsQ/36YmVvgpQ=)
2: ifnCFo0tgt39inBjfUQBivMLH5c.crl (hash: nwRHZ5mSYkZjpYqGzbo2sJTojWtjCAmCommuEX2BT0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/ifnCFo0tgt39inBjfUQBivMLH5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:92:0b:fd:13:1e:85:3d:66:02:1d:f0:00:d0:47:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89f9c2168d2d82ddfd8a70637d44018af30b1f97
Validity
Not Before: Jul 24 10:00:49 2026 GMT
Not After : Jul 25 10:00:49 2026 GMT
Subject: CN=b244d133ae737ac4aa2174261c6e66c04c937891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:72:83:2e:8b:60:91:68:54:0e:87:f9:89:27:
1a:91:d9:d7:f9:6c:88:0c:d7:41:85:c8:0b:ec:f7:
ab:a8:7b:6d:63:62:95:cb:84:5a:0e:0f:83:5a:de:
eb:ba:57:57:a5:19:33:72:92:dc:77:32:a7:92:75:
ba:4c:12:3f:dc:58:d4:42:b0:67:55:60:bc:5c:79:
b1:d8:d3:dc:3a:d4:3e:8d:d8:25:b3:7c:f1:f1:13:
eb:94:3b:7a:9f:32:e1:dd:a0:43:96:7f:c7:b4:61:
5b:45:bc:82:82:c3:62:bd:3f:22:53:7d:0a:b6:f4:
ec:51:0f:0f:51:69:c6:8c:61:92:2b:94:51:7a:a0:
31:55:4e:11:66:43:d4:3a:2c:09:04:b4:e9:b9:ef:
10:1e:88:09:8d:2b:29:af:95:a9:5c:dc:14:dd:7e:
be:45:89:90:7e:cc:97:c9:61:71:cf:f7:fe:25:40:
a4:0b:b5:eb:a7:74:5f:d2:58:b0:f0:3d:67:6b:f2:
3e:31:04:64:07:7e:b2:77:39:45:7e:79:19:bb:ef:
7a:d4:15:23:37:d1:96:1a:1c:3c:10:16:ce:1f:11:
2b:fb:b2:f1:00:8c:95:e5:9a:72:13:82:c7:e8:b1:
3a:df:b6:85:b6:69:82:4b:47:b5:ab:ba:74:4d:b2:
dc:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:44:D1:33:AE:73:7A:C4:AA:21:74:26:1C:6E:66:C0:4C:93:78:91
X509v3 Authority Key Identifier:
keyid:89:F9:C2:16:8D:2D:82:DD:FD:8A:70:63:7D:44:01:8A:F3:0B:1F:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ifnCFo0tgt39inBjfUQBivMLH5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:34:52:cf:04:fa:74:f3:8d:8b:bf:12:ab:5e:71:3c:d4:7b:
e7:43:1d:28:ea:df:75:37:b7:c3:59:66:d7:1b:0e:27:a6:2d:
ee:55:cb:d7:ef:34:ed:bf:b1:51:40:2e:12:fa:3a:2d:3d:e0:
4c:db:04:1a:71:69:99:88:67:6e:c4:dc:46:1c:d5:0e:58:f5:
51:c1:53:82:0d:d2:d2:34:79:e4:81:68:86:39:f3:86:4f:da:
e8:9e:11:d1:b1:94:ce:a6:b9:cd:00:0e:f1:45:ad:18:c1:10:
3d:97:36:88:8b:bb:4e:73:2b:7e:2f:a5:28:4f:72:6a:47:9c:
0b:1a:97:a9:8b:78:27:3b:e9:e2:d8:de:3d:88:ff:72:49:01:
9a:5b:b7:1a:0a:69:84:dc:19:eb:a3:de:6a:26:b2:b0:f1:53:
d3:e8:a6:4e:2e:83:e0:0f:c1:f6:7a:1d:21:2f:c2:8c:e8:61:
22:db:18:93:62:2f:8d:10:20:5b:c8:27:e1:21:f3:33:f7:b7:
ce:ce:d7:33:42:73:7e:12:96:70:f9:d2:4c:e0:fd:9a:63:41:
c2:00:a6:6b:33:1c:45:59:9d:d6:eb:3e:db:70:f1:ff:e7:85:
c5:a8:c3:13:28:78:c1:17:d3:ae:88:6d:e7:42:e0:fd:f4:b1:
cc:1c:b2:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Tkgv9Ex6FPWYCHfAA0Ee3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5ZjljMjE2OGQyZDgyZGRmZDhhNzA2MzdkNDQwMThhZjMw
YjFmOTcwHhcNMjYwNzI0MTAwMDQ5WhcNMjYwNzI1MTAwMDQ5WjAzMTEwLwYDVQQD
EyhiMjQ0ZDEzM2FlNzM3YWM0YWEyMTc0MjYxYzZlNjZjMDRjOTM3ODkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3KDLotgkWhUDof5iScakdnX+WyI
DNdBhcgL7PerqHttY2KVy4RaDg+DWt7ruldXpRkzcpLcdzKnknW6TBI/3FjUQrBn
VWC8XHmx2NPcOtQ+jdgls3zx8RPrlDt6nzLh3aBDln/HtGFbRbyCgsNivT8iU30K
tvTsUQ8PUWnGjGGSK5RReqAxVU4RZkPUOiwJBLTpue8QHogJjSspr5WpXNwU3X6+
RYmQfsyXyWFxz/f+JUCkC7Xrp3Rf0liw8D1na/I+MQRkB36ydzlFfnkZu+961BUj
N9GWGhw8EBbOHxEr+7LxAIyV5ZpyE4LH6LE637aFtmmCS0e1q7p0TbLcKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLJE0TOuc3rEqiF0JhxuZsBMk3iRMB8GA1UdIwQY
MBaAFIn5whaNLYLd/YpwY31EAYrzCx+XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWZuQ0ZvMHRndDM5aW5CamZVUUJpdk1MSDVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9lMWVhOWItZDUyOS00OGJhLThiYTIt
YmFjYWUwMzBlMzc0LzEvaWZuQ0ZvMHRndDM5aW5CamZVUUJpdk1MSDVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9lMWVhOWItZDUyOS00OGJhLThiYTItYmFjYWUwMzBlMzc0
LzEvaWZuQ0ZvMHRndDM5aW5CamZVUUJpdk1MSDVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeTRSzwT6
dPONi78Sq15xPNR750MdKOrfdTe3w1lm1xsOJ6Yt7lXL1+807b+xUUAuEvo6LT3g
TNsEGnFpmYhnbsTcRhzVDlj1UcFTgg3S0jR55IFohjnzhk/a6J4R0bGUzqa5zQAO
8UWtGMEQPZc2iIu7TnMrfi+lKE9yakecCxqXqYt4Jzvp4tjePYj/ckkBmlu3Ggpp
hNwZ66PeaiaysPFT0+imTi6D4A/B9nodIS/CjOhhItsYk2IvjRAgW8gn4SHzM/e3
zs7XM0JzfhKWcPnSTOD9mmNBwgCmazMcRVmd1us+23Dx/+eFxajDEyh4wRfTroht
50Lg/fSxzByy4w==
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:53:16 2026 by rpki-client