Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/IW66tPRvJU2V9JZbhKjPJBlrnJU.mft
File: IW66tPRvJU2V9JZbhKjPJBlrnJU.mft (raw, json)
Hash identifier: QGFygxo3G19XKQJvA4Wm0D8gvfxPfdNdNpt4lVhxn+0=
Subject key identifier: D3:B5:13:F0:E9:B5:1B:36:6C:7D:FB:C8:97:EF:5C:EC:18:B3:61:A6
Authority key identifier: 21:6E:BA:B4:F4:6F:25:4D:95:F4:96:5B:84:A8:CF:24:19:6B:9C:95
Certificate issuer: /CN=216ebab4f46f254d95f4965b84a8cf24196b9c95
Certificate serial: 019F9323C44397EF91547FF2E4AC8FCC9E4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IW66tPRvJU2V9JZbhKjPJBlrnJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/IW66tPRvJU2V9JZbhKjPJBlrnJU.mft
Manifest number: 08E1
Signing time: Fri 24 Jul 2026 08:00:22 +0000
Manifest this update: Fri 24 Jul 2026 08:00:22 +0000
Manifest next update: Sat 25 Jul 2026 08:00:22 +0000
Files and hashes: 1: IW66tPRvJU2V9JZbhKjPJBlrnJU.crl (hash: 8RR7hpr7JtD/hmF1PrBtfPLxrKoNC1UNRmgBjiedgVw=)
2: TGA4vVujs0yD_obPFPyktqNpDgc.roa (hash: 5S5Kx8RY4RfrsLwFClyqoZagN1DyIRqE+8qw4ESGtGA=)
3: vYa3Ih6LXEOuOYMk9rXJWrFe8TQ.roa (hash: cUJ90bZFPukFANzteUEP/DKwx2ymm3AfgIUKRxH9Byw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/IW66tPRvJU2V9JZbhKjPJBlrnJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/IW66tPRvJU2V9JZbhKjPJBlrnJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IW66tPRvJU2V9JZbhKjPJBlrnJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:23:c4:43:97:ef:91:54:7f:f2:e4:ac:8f:cc:9e:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=216ebab4f46f254d95f4965b84a8cf24196b9c95
Validity
Not Before: Jul 24 08:00:22 2026 GMT
Not After : Jul 25 08:00:22 2026 GMT
Subject: CN=d3b513f0e9b51b366c7dfbc897ef5cec18b361a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:08:d2:1b:a9:13:17:08:b3:8d:41:a4:27:2a:
3b:e6:4c:09:cb:74:54:37:93:42:25:11:b5:08:37:
bd:96:e6:06:17:47:6a:19:78:80:86:c9:23:95:36:
2c:4f:d4:c2:cc:f2:eb:52:1d:99:71:51:6b:97:5d:
cc:c1:a3:a9:74:e7:81:c2:df:6b:53:06:6b:11:88:
da:10:46:61:ea:4d:2e:35:b4:39:62:a0:3f:29:bd:
b1:6c:7a:fb:cb:6d:a0:c2:6f:db:09:8a:6a:b4:95:
ef:88:f8:72:eb:12:f0:44:5d:a7:b4:5d:3e:77:1b:
c3:9f:14:ca:f0:8a:c0:d7:c4:73:ed:b1:da:62:53:
07:30:b3:bf:7a:2e:40:af:8e:97:55:58:40:66:02:
20:2f:b8:7e:81:19:6e:6e:ab:fd:c3:e0:1f:e6:de:
04:e2:e7:50:a6:9f:05:26:e7:f1:3d:35:80:4f:82:
55:a7:27:d3:29:7f:a8:b7:ec:c9:e5:87:e4:cf:3f:
86:da:25:42:9d:04:41:b3:e7:2e:a1:0b:fa:ee:03:
12:68:eb:5d:40:8f:78:7e:5e:e2:dd:bb:1c:94:8a:
ee:0e:81:c1:00:d3:4c:51:de:29:88:16:db:56:cc:
76:23:50:00:fd:8d:34:11:10:4e:1b:6a:11:19:1f:
28:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:B5:13:F0:E9:B5:1B:36:6C:7D:FB:C8:97:EF:5C:EC:18:B3:61:A6
X509v3 Authority Key Identifier:
keyid:21:6E:BA:B4:F4:6F:25:4D:95:F4:96:5B:84:A8:CF:24:19:6B:9C:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IW66tPRvJU2V9JZbhKjPJBlrnJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/IW66tPRvJU2V9JZbhKjPJBlrnJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/IW66tPRvJU2V9JZbhKjPJBlrnJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:2b:3a:b1:c8:cc:f9:b3:fb:76:9f:a8:99:82:16:e7:73:0a:
fb:0e:f1:33:e1:48:c7:15:97:44:59:d2:dc:9b:ef:5d:90:57:
5d:83:b3:a4:12:c1:9a:1e:b6:a7:69:6f:1e:05:be:84:74:9a:
1b:38:17:96:47:4a:79:56:46:f9:90:54:ba:28:d6:64:d5:9b:
2a:6b:bb:51:51:5c:f9:1d:13:22:02:b8:76:94:6c:f0:f7:e3:
18:c5:a2:21:92:dd:d7:35:59:65:47:fd:64:26:9c:ab:00:f4:
cf:c2:98:a3:87:18:f9:5c:27:a8:99:22:ec:3d:4b:a9:4c:2f:
32:f2:4b:37:36:8c:f6:3a:1d:b1:22:86:7e:6a:2e:33:0f:d7:
76:52:fa:1a:b3:ce:a9:d9:1e:8d:2b:f9:28:94:bf:61:13:76:
8b:24:dc:30:c8:96:a8:cc:c7:14:31:2d:b5:7c:2e:d7:5f:01:
c4:37:91:37:bc:88:2a:1d:43:df:ad:19:63:ac:48:54:63:46:
c8:14:c3:3d:4f:eb:8a:74:ea:7b:67:5a:27:1e:c4:54:7c:c6:
97:45:4c:74:b6:e7:ed:8d:ee:76:6b:53:29:80:31:e4:fd:bb:
43:e6:e3:93:82:56:0e:d3:24:f5:0a:9f:1c:21:9d:8d:2c:4a:
f9:78:43:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TI8RDl++RVH/y5KyPzJ5NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxNmViYWI0ZjQ2ZjI1NGQ5NWY0OTY1Yjg0YThjZjI0MTk2
YjljOTUwHhcNMjYwNzI0MDgwMDIyWhcNMjYwNzI1MDgwMDIyWjAzMTEwLwYDVQQD
EyhkM2I1MTNmMGU5YjUxYjM2NmM3ZGZiYzg5N2VmNWNlYzE4YjM2MWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwjSG6kTFwizjUGkJyo75kwJy3RU
N5NCJRG1CDe9luYGF0dqGXiAhskjlTYsT9TCzPLrUh2ZcVFrl13MwaOpdOeBwt9r
UwZrEYjaEEZh6k0uNbQ5YqA/Kb2xbHr7y22gwm/bCYpqtJXviPhy6xLwRF2ntF0+
dxvDnxTK8IrA18Rz7bHaYlMHMLO/ei5Ar46XVVhAZgIgL7h+gRlubqv9w+Af5t4E
4udQpp8FJufxPTWAT4JVpyfTKX+ot+zJ5Yfkzz+G2iVCnQRBs+cuoQv67gMSaOtd
QI94fl7i3bsclIruDoHBANNMUd4piBbbVsx2I1AA/Y00ERBOG2oRGR8oAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNO1E/DptRs2bH37yJfvXOwYs2GmMB8GA1UdIwQY
MBaAFCFuurT0byVNlfSWW4SozyQZa5yVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVc2NnRQUnZKVTJWOUpaYmhLalBKQmxybkpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS82ZDhhMmMtZTIyOC00ZDQwLThkOTAt
ZGVjMjBkZGM3M2FhLzEvSVc2NnRQUnZKVTJWOUpaYmhLalBKQmxybkpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS82ZDhhMmMtZTIyOC00ZDQwLThkOTAtZGVjMjBkZGM3M2Fh
LzEvSVc2NnRQUnZKVTJWOUpaYmhLalBKQmxybkpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiSs6scjM
+bP7dp+omYIW53MK+w7xM+FIxxWXRFnS3JvvXZBXXYOzpBLBmh62p2lvHgW+hHSa
GzgXlkdKeVZG+ZBUuijWZNWbKmu7UVFc+R0TIgK4dpRs8PfjGMWiIZLd1zVZZUf9
ZCacqwD0z8KYo4cY+VwnqJki7D1LqUwvMvJLNzaM9jodsSKGfmouMw/XdlL6GrPO
qdkejSv5KJS/YRN2iyTcMMiWqMzHFDEttXwu118BxDeRN7yIKh1D360ZY6xIVGNG
yBTDPU/rinTqe2daJx7EVHzGl0VMdLbn7Y3udmtTKYAx5P27Q+bjk4JWDtMk9Qqf
HCGdjSxK+XhDqQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:34:52 2026 by rpki-client