Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/iwVEhe5ixvGTlhPLogZp7vRQT3k.mft
File: iwVEhe5ixvGTlhPLogZp7vRQT3k.mft (raw, json)
Hash identifier: wO9nZmpwEnezvUMSxuUN7oQguwB1H52YISZhEccD22E=
Subject key identifier: 52:C3:97:D5:90:27:0C:E8:08:5E:C3:B6:F1:0B:3B:B2:FB:D7:3C:31
Authority key identifier: 8B:05:44:85:EE:62:C6:F1:93:96:13:CB:A2:06:69:EE:F4:50:4F:79
Certificate issuer: /CN=8b054485ee62c6f1939613cba20669eef4504f79
Certificate serial: 019F93C8C8F001F52571FA5E1D26DED9D1A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwVEhe5ixvGTlhPLogZp7vRQT3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/iwVEhe5ixvGTlhPLogZp7vRQT3k.mft
Manifest number: 0FB9
Signing time: Fri 24 Jul 2026 11:00:37 +0000
Manifest this update: Fri 24 Jul 2026 11:00:37 +0000
Manifest next update: Sat 25 Jul 2026 11:00:37 +0000
Files and hashes: 1: MPdIoBhSamsoceGH97ZrbeY-7Y4.roa (hash: xk+VO+lT2ZL0Nzt8GYWzkONFJ8wXFr2d45kNV/RsFNQ=)
2: iwVEhe5ixvGTlhPLogZp7vRQT3k.crl (hash: JREAz6odwC4ANLBpkq1mTW6Tx+9095biDvJfLdRVxow=)
3: lYJDRXWPAACOBIGtN5SoMpmELk8.roa (hash: +/i7PrD75ms6DLzi7NKAcmr/vu2swer4LejKpfAFxnA=)
4: uUrDuBilHzuoCgA80rJqPJxqSNQ.roa (hash: 77BWKMeC9pAnIWkDSdffjc6huYPIszzufpj7ouuEVAY=)
5: vl57Hdk_U8b9_Y2PxCQcURRvrQw.roa (hash: LDklYITUv8QycRGMLTw4zqVIBgqTAfoD6STDQphVOWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/iwVEhe5ixvGTlhPLogZp7vRQT3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/iwVEhe5ixvGTlhPLogZp7vRQT3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/iwVEhe5ixvGTlhPLogZp7vRQT3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 11:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c8:c8:f0:01:f5:25:71:fa:5e:1d:26:de:d9:d1:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b054485ee62c6f1939613cba20669eef4504f79
Validity
Not Before: Jul 24 11:00:37 2026 GMT
Not After : Jul 25 11:00:37 2026 GMT
Subject: CN=52c397d590270ce8085ec3b6f10b3bb2fbd73c31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:34:96:d3:a8:30:63:35:6c:9e:d4:8f:c8:bf:
7f:55:22:9d:87:fa:ec:fa:d5:9c:c5:d4:44:6b:86:
1a:73:74:59:5a:20:2e:cb:3c:f0:64:4e:8b:0c:7d:
1e:42:97:4d:ce:cf:ac:f2:ba:44:89:cb:db:75:e1:
a9:3e:8b:e9:61:04:a6:83:38:e1:37:a1:32:dc:56:
0e:77:07:ff:b1:7c:03:72:fe:3f:ba:c7:9f:dc:25:
0b:9a:13:d4:0f:3d:71:a9:81:1c:85:6e:30:c2:88:
bc:0b:27:9e:23:e5:8f:e9:69:0c:b4:26:ef:8d:f2:
00:17:4b:24:9f:51:47:ec:20:d1:c8:7a:fe:21:c4:
7c:35:ec:29:4d:95:04:90:cb:ce:2a:bb:e1:89:9b:
e1:fa:da:93:24:55:4c:07:bd:85:21:dd:bb:83:12:
49:6f:0a:4a:d0:93:a1:52:3b:02:e2:22:bf:af:ab:
59:de:e8:d6:e0:e7:89:e0:ef:87:b2:34:36:95:cc:
13:90:f2:b1:52:11:c6:76:52:fe:48:11:16:c4:7c:
d9:9e:e7:f9:49:e7:67:97:07:72:4d:65:fb:f2:19:
78:20:29:3c:57:35:7a:34:b8:3f:0c:81:a6:ae:21:
5f:c4:f7:d5:eb:cd:b2:d2:1c:c2:81:d5:bf:23:a8:
95:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:C3:97:D5:90:27:0C:E8:08:5E:C3:B6:F1:0B:3B:B2:FB:D7:3C:31
X509v3 Authority Key Identifier:
keyid:8B:05:44:85:EE:62:C6:F1:93:96:13:CB:A2:06:69:EE:F4:50:4F:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwVEhe5ixvGTlhPLogZp7vRQT3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/iwVEhe5ixvGTlhPLogZp7vRQT3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/iwVEhe5ixvGTlhPLogZp7vRQT3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:ec:18:5f:7c:ba:ef:57:89:26:aa:67:18:83:49:c3:6d:30:
d8:6e:f6:88:91:19:60:fe:b2:40:6d:32:fc:f4:38:84:58:ee:
31:b3:07:65:86:df:a7:92:a5:e7:21:3d:5a:c0:53:8d:ca:e0:
87:98:9f:e4:2e:2f:30:2a:dc:5b:04:e1:6b:7c:e9:26:03:86:
46:1b:8f:ff:98:45:09:f3:be:f8:77:22:99:b7:66:eb:b6:f0:
6c:c7:54:b5:58:a3:d2:67:26:29:9a:5a:15:06:5f:83:d9:9b:
b6:0f:12:60:e2:88:1b:2c:44:e8:60:d7:66:0c:d6:da:92:72:
0d:78:a3:c7:be:f1:e6:2e:28:92:9c:9a:67:7a:0c:92:da:3b:
1e:81:15:a2:d6:37:be:c9:fc:51:3b:d9:2d:fc:9f:74:68:11:
fd:c7:6c:3d:b4:67:1a:e1:cd:44:8d:6a:ae:e7:f1:7a:67:44:
f7:ca:e2:43:0b:79:a9:e3:dd:97:44:7b:bc:7b:43:76:72:18:
4c:be:e4:f2:09:b2:fe:2b:20:4c:65:a5:13:22:d2:4a:5e:f1:
a8:3b:7b:f4:97:1e:c7:31:2b:dc:64:33:84:e9:54:00:3a:32:
26:db:c0:40:94:b4:36:5e:d5:8e:02:b6:e5:f8:79:99:b8:eb:
09:41:10:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TyMjwAfUlcfpeHSbe2dGmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiMDU0NDg1ZWU2MmM2ZjE5Mzk2MTNjYmEyMDY2OWVlZjQ1
MDRmNzkwHhcNMjYwNzI0MTEwMDM3WhcNMjYwNzI1MTEwMDM3WjAzMTEwLwYDVQQD
Eyg1MmMzOTdkNTkwMjcwY2U4MDg1ZWMzYjZmMTBiM2JiMmZiZDczYzMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2zSW06gwYzVsntSPyL9/VSKdh/rs
+tWcxdREa4Yac3RZWiAuyzzwZE6LDH0eQpdNzs+s8rpEicvbdeGpPovpYQSmgzjh
N6Ey3FYOdwf/sXwDcv4/usef3CULmhPUDz1xqYEchW4wwoi8CyeeI+WP6WkMtCbv
jfIAF0skn1FH7CDRyHr+IcR8NewpTZUEkMvOKrvhiZvh+tqTJFVMB72FId27gxJJ
bwpK0JOhUjsC4iK/r6tZ3ujW4OeJ4O+HsjQ2lcwTkPKxUhHGdlL+SBEWxHzZnuf5
SednlwdyTWX78hl4ICk8VzV6NLg/DIGmriFfxPfV682y0hzCgdW/I6iVgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFLDl9WQJwzoCF7DtvELO7L71zwxMB8GA1UdIwQY
MBaAFIsFRIXuYsbxk5YTy6IGae70UE95MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXdWRWhlNWl4dkdUbGhQTG9nWnA3dlJRVDNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC83NzljMDktZjQ5YS00YjM4LWE3Nzgt
NmJjMzkwOTk1Y2FiLzEvaXdWRWhlNWl4dkdUbGhQTG9nWnA3dlJRVDNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC83NzljMDktZjQ5YS00YjM4LWE3NzgtNmJjMzkwOTk1Y2Fi
LzEvaXdWRWhlNWl4dkdUbGhQTG9nWnA3dlJRVDNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfuwYX3y6
71eJJqpnGINJw20w2G72iJEZYP6yQG0y/PQ4hFjuMbMHZYbfp5Kl5yE9WsBTjcrg
h5if5C4vMCrcWwTha3zpJgOGRhuP/5hFCfO++Hcimbdm67bwbMdUtVij0mcmKZpa
FQZfg9mbtg8SYOKIGyxE6GDXZgzW2pJyDXijx77x5i4okpyaZ3oMkto7HoEVotY3
vsn8UTvZLfyfdGgR/cdsPbRnGuHNRI1qrufxemdE98riQwt5qePdl0R7vHtDdnIY
TL7k8gmy/isgTGWlEyLSSl7xqDt79JcexzEr3GQzhOlUADoyJtvAQJS0Nl7VjgK2
5fh5mbjrCUEQRA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 22:03:09 2026 by rpki-client