Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/30cdbe-11e1-44ca-b654-029e63f0889a/1/iwPcp2MZkDFS8kbgXAaf0aHbXFk.mft
File: iwPcp2MZkDFS8kbgXAaf0aHbXFk.mft (raw, json)
Hash identifier: p9Qm0zuxqotMaWQG+zy1RkBTGfzGQErh4Pl6yj3Rxf4=
Subject key identifier: BB:BD:DB:63:C7:B7:83:F6:8A:59:EE:68:39:84:91:4C:E8:D8:AD:A4
Authority key identifier: 8B:03:DC:A7:63:19:90:31:52:F2:46:E0:5C:06:9F:D1:A1:DB:5C:59
Certificate issuer: /CN=8b03dca76319903152f246e05c069fd1a1db5c59
Certificate serial: 019F96250022A2E233B631C6E0BCEA8A2E4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwPcp2MZkDFS8kbgXAaf0aHbXFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/30cdbe-11e1-44ca-b654-029e63f0889a/1/iwPcp2MZkDFS8kbgXAaf0aHbXFk.mft
Manifest number: 0AD4
Signing time: Fri 24 Jul 2026 22:00:34 +0000
Manifest this update: Fri 24 Jul 2026 22:00:34 +0000
Manifest next update: Sat 25 Jul 2026 22:00:34 +0000
Files and hashes: 1: iwPcp2MZkDFS8kbgXAaf0aHbXFk.crl (hash: h2KK6yckwfU/Q/X5uyw9XYnmiQz6+NUzTTMmY7YCFs8=)
2: rTrNf2BtsL1vlw_R__r7UKcCZJk.roa (hash: lQAxfhbBIAhm99xgTizcCxmFSvD0y0yK3pththJkeEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/30cdbe-11e1-44ca-b654-029e63f0889a/1/iwPcp2MZkDFS8kbgXAaf0aHbXFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/30cdbe-11e1-44ca-b654-029e63f0889a/1/iwPcp2MZkDFS8kbgXAaf0aHbXFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/iwPcp2MZkDFS8kbgXAaf0aHbXFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:96:25:00:22:a2:e2:33:b6:31:c6:e0:bc:ea:8a:2e:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b03dca76319903152f246e05c069fd1a1db5c59
Validity
Not Before: Jul 24 22:00:34 2026 GMT
Not After : Jul 25 22:00:34 2026 GMT
Subject: CN=bbbddb63c7b783f68a59ee683984914ce8d8ada4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ea:5b:8d:e7:dd:dc:9b:c6:ef:f4:92:0c:40:
9a:f1:cf:8d:9a:41:97:94:2c:03:13:50:dc:75:89:
fa:42:7f:2d:19:fd:07:fa:9f:5a:5e:46:17:bf:32:
bd:c5:77:50:03:c8:b8:15:48:35:3f:71:0f:fd:3b:
0c:79:5d:fe:dc:7c:45:9a:af:f4:18:a9:bd:ec:09:
55:45:8c:4a:f2:79:52:19:66:9d:9c:0d:64:26:03:
b1:bd:59:d9:6c:e3:c0:90:ed:6f:80:c0:8a:2e:b5:
ba:e7:30:db:ac:ce:4a:4b:58:44:69:1a:df:c1:8b:
21:72:fb:54:06:ef:45:db:aa:85:ed:ba:86:1a:dd:
d9:c1:fe:cb:2c:d7:7f:76:0a:52:f8:93:02:37:61:
39:d5:8a:f4:b1:b6:c4:98:34:d9:61:6a:e4:b3:87:
54:c5:2d:55:52:3f:1e:6a:6b:a8:ec:b7:af:3f:2c:
2d:0c:a7:81:fb:f9:82:c7:41:af:29:66:7e:54:2f:
f5:23:f9:52:b8:c3:6c:5d:dc:e6:32:ed:12:22:56:
26:e9:0c:24:78:28:dc:12:13:1f:02:2e:5a:7c:40:
98:b8:d2:95:e4:8a:5d:15:d5:51:67:28:98:30:75:
43:2b:7d:75:b3:cf:17:a4:12:50:37:43:41:15:e2:
25:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:BD:DB:63:C7:B7:83:F6:8A:59:EE:68:39:84:91:4C:E8:D8:AD:A4
X509v3 Authority Key Identifier:
keyid:8B:03:DC:A7:63:19:90:31:52:F2:46:E0:5C:06:9F:D1:A1:DB:5C:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwPcp2MZkDFS8kbgXAaf0aHbXFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/30cdbe-11e1-44ca-b654-029e63f0889a/1/iwPcp2MZkDFS8kbgXAaf0aHbXFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/30cdbe-11e1-44ca-b654-029e63f0889a/1/iwPcp2MZkDFS8kbgXAaf0aHbXFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:02:4d:7d:ab:cb:19:17:c7:22:18:a5:94:f7:b7:5b:e3:14:
9b:6b:45:f7:63:08:cd:51:7a:2d:7a:4c:ee:f0:a5:0e:6b:9a:
0c:c1:78:be:e5:7e:08:da:c8:cd:12:fc:a4:cc:48:d9:a8:40:
d6:57:ca:65:7f:6c:d8:1f:55:18:ca:90:69:ac:27:fc:bb:4d:
df:59:6d:3f:bd:36:dc:64:f5:db:91:5b:81:b5:b5:37:84:26:
cd:0a:5a:ea:84:f4:1a:01:3f:04:69:99:81:b5:d5:1b:fd:cf:
ad:43:ef:86:69:ac:e7:86:fa:1f:92:6e:54:6f:e4:5c:ae:53:
31:ed:61:54:e8:78:14:f5:01:14:91:a1:7b:6c:98:ef:25:f8:
9e:7d:b1:fb:f2:e8:91:8c:60:c5:65:8e:0a:c5:e2:c9:5b:56:
2c:b3:f3:c1:a5:30:cf:76:f6:96:63:1f:93:77:46:09:e0:5c:
36:26:76:7c:3b:41:5d:f1:be:c7:3c:53:23:24:6a:e4:ec:4d:
04:a3:d2:cb:f2:86:f3:a5:c9:32:19:d6:fe:73:e6:85:39:1d:
50:ac:b9:41:8d:6e:80:fa:44:e7:33:d9:0c:11:4a:83:0b:80:
21:4d:98:d3:15:1e:5a:86:42:69:38:16:cd:d2:3f:43:d5:99:
7d:82:b1:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+WJQAiouIztjHG4Lzqii5MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiMDNkY2E3NjMxOTkwMzE1MmYyNDZlMDVjMDY5ZmQxYTFk
YjVjNTkwHhcNMjYwNzI0MjIwMDM0WhcNMjYwNzI1MjIwMDM0WjAzMTEwLwYDVQQD
EyhiYmJkZGI2M2M3Yjc4M2Y2OGE1OWVlNjgzOTg0OTE0Y2U4ZDhhZGE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+pbjefd3JvG7/SSDECa8c+NmkGX
lCwDE1DcdYn6Qn8tGf0H+p9aXkYXvzK9xXdQA8i4FUg1P3EP/TsMeV3+3HxFmq/0
GKm97AlVRYxK8nlSGWadnA1kJgOxvVnZbOPAkO1vgMCKLrW65zDbrM5KS1hEaRrf
wYshcvtUBu9F26qF7bqGGt3Zwf7LLNd/dgpS+JMCN2E51Yr0sbbEmDTZYWrks4dU
xS1VUj8eamuo7LevPywtDKeB+/mCx0GvKWZ+VC/1I/lSuMNsXdzmMu0SIlYm6Qwk
eCjcEhMfAi5afECYuNKV5IpdFdVRZyiYMHVDK311s88XpBJQN0NBFeIljwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLu922PHt4P2ilnuaDmEkUzo2K2kMB8GA1UdIwQY
MBaAFIsD3KdjGZAxUvJG4FwGn9Gh21xZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXdQY3AyTVprREZTOGtiZ1hBYWYwYUhiWEZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8zMGNkYmUtMTFlMS00NGNhLWI2NTQt
MDI5ZTYzZjA4ODlhLzEvaXdQY3AyTVprREZTOGtiZ1hBYWYwYUhiWEZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy8zMGNkYmUtMTFlMS00NGNhLWI2NTQtMDI5ZTYzZjA4ODlh
LzEvaXdQY3AyTVprREZTOGtiZ1hBYWYwYUhiWEZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUgJNfavL
GRfHIhillPe3W+MUm2tF92MIzVF6LXpM7vClDmuaDMF4vuV+CNrIzRL8pMxI2ahA
1lfKZX9s2B9VGMqQaawn/LtN31ltP7023GT125FbgbW1N4QmzQpa6oT0GgE/BGmZ
gbXVG/3PrUPvhmms54b6H5JuVG/kXK5TMe1hVOh4FPUBFJGhe2yY7yX4nn2x+/Lo
kYxgxWWOCsXiyVtWLLPzwaUwz3b2lmMfk3dGCeBcNiZ2fDtBXfG+xzxTIyRq5OxN
BKPSy/KG86XJMhnW/nPmhTkdUKy5QY1ugPpE5zPZDBFKgwuAIU2Y0xUeWoZCaTgW
zdI/Q9WZfYKxdg==
-----END CERTIFICATE-----
Generated at Sat Jul 25 00:24:27 2026 by rpki-client