Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.mft
File: IxMMmax6pAhscXVxFKQWP4AJAUI.mft (raw, json)
Hash identifier: gbMU+pdNnF1Iw6KrfFuIexW2fMKvjXxOiZ0o+trat3k=
Subject key identifier: BF:FB:F4:BE:5F:3B:E2:44:05:B1:36:E2:09:BA:71:3D:24:5A:EE:D9
Authority key identifier: 23:13:0C:99:AC:7A:A4:08:6C:71:75:71:14:A4:16:3F:80:09:01:42
Certificate issuer: /CN=23130c99ac7aa4086c71757114a4163f80090142
Certificate serial: 019F9247FFE0595FED205EECCBCC6D53211B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IxMMmax6pAhscXVxFKQWP4AJAUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.mft
Manifest number: 0D10
Signing time: Fri 24 Jul 2026 04:00:19 +0000
Manifest this update: Fri 24 Jul 2026 04:00:19 +0000
Manifest next update: Sat 25 Jul 2026 04:00:19 +0000
Files and hashes: 1: IxMMmax6pAhscXVxFKQWP4AJAUI.crl (hash: cp0FKIlVgsxlZo1Zh7asNybnKm/0eGrhq8l9/uUA23M=)
2: M7AsOPJRuDvyqpdVNAPIyt4dy4E.roa (hash: VA2KwTkb4NGqo/O9WoJ31YAHnrH27JkWDC9odiYJKyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IxMMmax6pAhscXVxFKQWP4AJAUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:47:ff:e0:59:5f:ed:20:5e:ec:cb:cc:6d:53:21:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23130c99ac7aa4086c71757114a4163f80090142
Validity
Not Before: Jul 24 04:00:19 2026 GMT
Not After : Jul 25 04:00:19 2026 GMT
Subject: CN=bffbf4be5f3be24405b136e209ba713d245aeed9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:95:e9:42:8e:1f:fe:d1:a5:4a:c0:41:6c:e4:
8d:b5:c7:a4:35:a6:7a:e1:86:7e:33:f8:69:75:5e:
8c:a7:1f:95:bf:39:6b:60:20:76:e1:41:f1:82:07:
54:e5:2e:2c:cc:50:72:92:f0:11:2d:79:f4:d2:d4:
a0:53:b7:46:39:35:84:11:dc:b1:a6:9c:17:0a:cd:
ae:0c:47:b3:9c:88:22:6b:e7:62:69:b5:98:20:46:
6c:ca:d2:84:1e:4c:74:31:2f:78:7c:c7:89:7b:26:
e0:80:53:6d:f4:66:3b:3f:74:90:7c:ce:31:b5:68:
82:ec:24:81:59:4f:c8:d4:ac:8c:60:7b:d6:67:73:
b9:d1:4b:63:32:f7:d4:83:d8:c7:45:2f:a0:52:6c:
a5:ce:e4:a7:28:15:68:0f:fa:9f:b8:ec:e3:d1:61:
d0:51:64:0d:a0:8e:3d:61:c6:fd:7f:fc:51:2c:9d:
71:7b:1f:4f:ea:aa:dc:a7:34:fc:9b:41:f4:63:80:
55:af:44:81:1c:23:3a:67:4b:91:e1:43:18:20:16:
a1:3e:8c:8d:0b:25:47:ee:a4:37:87:10:0e:df:93:
37:f0:6f:e3:2e:cc:82:0d:6a:8e:49:29:f7:6d:f1:
db:65:d6:9b:1d:41:30:cc:72:99:f9:22:b4:88:1b:
6e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:FB:F4:BE:5F:3B:E2:44:05:B1:36:E2:09:BA:71:3D:24:5A:EE:D9
X509v3 Authority Key Identifier:
keyid:23:13:0C:99:AC:7A:A4:08:6C:71:75:71:14:A4:16:3F:80:09:01:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IxMMmax6pAhscXVxFKQWP4AJAUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:85:6f:93:7d:90:3e:8e:8f:1e:82:33:74:78:f5:d7:3f:e7:
38:32:70:f7:f3:1e:80:79:a8:4b:84:98:72:86:93:b3:54:f6:
83:71:9e:33:45:a4:9b:60:af:fe:1a:e5:0b:7d:fe:ea:1d:71:
bd:84:db:e9:b9:c0:6d:7e:74:f7:2e:d7:e9:40:ed:34:8f:4e:
79:b0:9f:92:b8:72:96:2d:ef:b0:33:2c:2d:a6:3c:ea:f5:0e:
aa:cb:ae:ee:b3:3e:ea:49:fb:04:e7:3b:81:14:79:73:eb:aa:
de:95:90:00:2d:4f:f5:ee:a1:7d:ab:09:53:21:1f:6b:42:ac:
12:cf:5f:14:12:54:a3:0c:98:c2:24:1b:41:fa:e8:47:4f:e4:
9f:de:f1:6a:bf:62:e6:d9:a5:63:4c:03:7b:8b:1b:19:7e:89:
c4:0d:2e:cc:01:e8:57:a9:81:e1:76:90:c1:96:cb:53:a0:23:
28:fd:47:ac:73:1f:79:42:05:2c:11:63:e6:b4:e7:2a:b1:95:
18:45:4d:e5:d2:d5:70:61:cb:4b:18:e2:43:98:87:91:11:fd:
5e:2d:03:aa:f4:63:33:a0:2c:f9:c3:eb:74:32:be:8a:f1:a4:
9d:43:50:98:cc:96:74:22:95:70:08:a3:96:95:3f:8a:41:cc:
c5:90:e2:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SR//gWV/tIF7sy8xtUyEbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzMTMwYzk5YWM3YWE0MDg2YzcxNzU3MTE0YTQxNjNmODAw
OTAxNDIwHhcNMjYwNzI0MDQwMDE5WhcNMjYwNzI1MDQwMDE5WjAzMTEwLwYDVQQD
EyhiZmZiZjRiZTVmM2JlMjQ0MDViMTM2ZTIwOWJhNzEzZDI0NWFlZWQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA95XpQo4f/tGlSsBBbOSNtcekNaZ6
4YZ+M/hpdV6Mpx+VvzlrYCB24UHxggdU5S4szFBykvARLXn00tSgU7dGOTWEEdyx
ppwXCs2uDEeznIgia+diabWYIEZsytKEHkx0MS94fMeJeybggFNt9GY7P3SQfM4x
tWiC7CSBWU/I1KyMYHvWZ3O50UtjMvfUg9jHRS+gUmylzuSnKBVoD/qfuOzj0WHQ
UWQNoI49Ycb9f/xRLJ1xex9P6qrcpzT8m0H0Y4BVr0SBHCM6Z0uR4UMYIBahPoyN
CyVH7qQ3hxAO35M38G/jLsyCDWqOSSn3bfHbZdabHUEwzHKZ+SK0iBturQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL/79L5fO+JEBbE24gm6cT0kWu7ZMB8GA1UdIwQY
MBaAFCMTDJmseqQIbHF1cRSkFj+ACQFCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXhNTW1heDZwQWhzY1hWeEZLUVdQNEFKQVVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy81YzNhZTYtMjkzNC00NzllLThjMmQt
OGU4ZDViM2U1NTg2LzEvSXhNTW1heDZwQWhzY1hWeEZLUVdQNEFKQVVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy81YzNhZTYtMjkzNC00NzllLThjMmQtOGU4ZDViM2U1NTg2
LzEvSXhNTW1heDZwQWhzY1hWeEZLUVdQNEFKQVVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaoVvk32Q
Po6PHoIzdHj11z/nODJw9/MegHmoS4SYcoaTs1T2g3GeM0Wkm2Cv/hrlC33+6h1x
vYTb6bnAbX509y7X6UDtNI9OebCfkrhyli3vsDMsLaY86vUOqsuu7rM+6kn7BOc7
gRR5c+uq3pWQAC1P9e6hfasJUyEfa0KsEs9fFBJUowyYwiQbQfroR0/kn97xar9i
5tmlY0wDe4sbGX6JxA0uzAHoV6mB4XaQwZbLU6AjKP1HrHMfeUIFLBFj5rTnKrGV
GEVN5dLVcGHLSxjiQ5iHkRH9Xi0DqvRjM6As+cPrdDK+ivGknUNQmMyWdCKVcAij
lpU/ikHMxZDiyQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:59:18 2026 by rpki-client