Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.mft
File: IuSOFh5JBZI_bUqirgohUw8t4gs.mft (raw, json)
Hash identifier: 6vvnKUOxfJ/sTzgyFXs341bsU83CLpZ3IACp8Rmiyoo=
Subject key identifier: 9A:4B:20:11:3D:F8:07:21:52:E6:EC:96:DA:9E:74:A9:D7:6C:A2:46
Authority key identifier: 22:E4:8E:16:1E:49:05:92:3F:6D:4A:A2:AE:0A:21:53:0F:2D:E2:0B
Certificate issuer: /CN=22e48e161e4905923f6d4aa2ae0a21530f2de20b
Certificate serial: 019F92487657C2F2737750C97ADF0F6E71E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IuSOFh5JBZI_bUqirgohUw8t4gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.mft
Manifest number: 19C5
Signing time: Fri 24 Jul 2026 04:00:50 +0000
Manifest this update: Fri 24 Jul 2026 04:00:50 +0000
Manifest next update: Sat 25 Jul 2026 04:00:50 +0000
Files and hashes: 1: IuSOFh5JBZI_bUqirgohUw8t4gs.crl (hash: zkYR/iGmgyh3t361rB1NsoIT6sr0GThF25w0WpkiqUI=)
2: WjnU7eVkPkVNVM9MOmgLUUUpMzM.roa (hash: +R4Zj+vw0Ft1e0nUhwZse4EmeZXGoZD55vZpzhImACo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.mft
rsync://rpki.ripe.net/repository/DEFAULT/IuSOFh5JBZI_bUqirgohUw8t4gs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:76:57:c2:f2:73:77:50:c9:7a:df:0f:6e:71:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22e48e161e4905923f6d4aa2ae0a21530f2de20b
Validity
Not Before: Jul 24 04:00:50 2026 GMT
Not After : Jul 25 04:00:50 2026 GMT
Subject: CN=9a4b20113df8072152e6ec96da9e74a9d76ca246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f9:b9:cf:28:d7:3c:df:30:a0:19:87:9d:ca:
f5:27:27:c5:4f:6e:b9:4c:1a:ff:2c:54:26:17:6a:
6f:b6:5b:28:01:6f:05:fe:97:ae:52:71:95:53:1f:
b2:a1:14:4c:6b:d7:61:7b:fb:e3:7a:f3:fb:03:77:
59:d5:74:d8:4f:57:2d:29:58:8a:32:37:50:56:fc:
28:d7:f6:4c:8e:cb:70:5a:a9:6e:2d:f9:85:17:84:
ec:08:56:b1:ef:d8:ef:70:e2:9a:e4:09:34:3f:77:
4c:8b:59:65:31:15:6d:44:34:85:4b:a8:1a:08:0e:
d0:b4:2f:8c:93:b9:3f:8d:32:71:2b:69:94:dd:6e:
d4:ac:84:f6:b5:5d:43:19:3a:7e:15:2c:ea:9b:2e:
7b:fa:a7:3b:b9:dc:fc:16:66:fe:8a:9b:ec:9e:5b:
0b:d6:5d:14:c4:44:31:43:08:12:69:65:4a:3d:74:
69:ae:35:c6:b0:da:de:01:b3:43:1a:d9:24:32:8d:
d7:3a:85:fa:4b:e2:f2:f2:7e:a1:cf:4b:79:ba:a6:
e3:16:ab:68:5c:a3:5d:67:b8:30:71:12:63:9a:2f:
86:24:95:d1:29:e3:27:d0:19:45:8e:65:f9:d3:81:
9c:dc:03:82:fd:0c:81:d5:98:34:a2:4b:ca:79:dd:
92:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:4B:20:11:3D:F8:07:21:52:E6:EC:96:DA:9E:74:A9:D7:6C:A2:46
X509v3 Authority Key Identifier:
keyid:22:E4:8E:16:1E:49:05:92:3F:6D:4A:A2:AE:0A:21:53:0F:2D:E2:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IuSOFh5JBZI_bUqirgohUw8t4gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:26:4b:7a:64:4c:28:42:27:ce:6b:e9:86:b9:b2:54:aa:5b:
2b:68:11:e6:56:01:54:48:35:95:fc:e6:62:f2:8c:b0:74:25:
3a:d3:41:26:b8:aa:16:a4:78:0d:ad:51:d1:56:aa:d8:d7:a7:
76:3a:ee:44:71:a9:8a:35:20:5e:b3:1b:c4:26:82:eb:3f:4d:
f3:09:44:fb:cf:27:fd:77:83:f9:fd:f6:2e:ef:7d:e4:73:3d:
08:9e:d3:f6:99:9e:b5:aa:b5:4b:18:90:4c:da:23:95:ce:43:
fc:03:d2:8c:28:e4:79:1b:d8:44:45:7b:62:a6:ea:6d:25:c8:
1c:a0:3b:d6:93:68:ab:44:91:a3:c0:85:30:66:3e:74:fa:2d:
6d:cb:e7:8f:25:9c:31:6b:9a:25:71:dd:a7:48:4f:6d:14:4f:
de:10:a4:e5:3c:62:b5:d0:62:75:d3:7b:11:0d:c4:d7:ae:48:
46:ed:03:79:ad:30:03:ad:e4:e7:15:60:b0:99:c5:24:11:1f:
eb:12:cf:58:e3:0f:c3:be:85:38:a1:c3:db:d7:6d:b1:09:2b:
24:12:a2:c3:f1:28:6f:4f:a1:f9:27:0b:59:c0:99:08:e0:79:
ff:c5:fe:21:ca:5d:bc:cb:4c:65:9d:7a:03:d2:72:17:57:3b:
6c:cf:f0:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SSHZXwvJzd1DJet8PbnHgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyZTQ4ZTE2MWU0OTA1OTIzZjZkNGFhMmFlMGEyMTUzMGYy
ZGUyMGIwHhcNMjYwNzI0MDQwMDUwWhcNMjYwNzI1MDQwMDUwWjAzMTEwLwYDVQQD
Eyg5YTRiMjAxMTNkZjgwNzIxNTJlNmVjOTZkYTllNzRhOWQ3NmNhMjQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvm5zyjXPN8woBmHncr1JyfFT265
TBr/LFQmF2pvtlsoAW8F/peuUnGVUx+yoRRMa9dhe/vjevP7A3dZ1XTYT1ctKViK
MjdQVvwo1/ZMjstwWqluLfmFF4TsCFax79jvcOKa5Ak0P3dMi1llMRVtRDSFS6ga
CA7QtC+Mk7k/jTJxK2mU3W7UrIT2tV1DGTp+FSzqmy57+qc7udz8Fmb+ipvsnlsL
1l0UxEQxQwgSaWVKPXRprjXGsNreAbNDGtkkMo3XOoX6S+Ly8n6hz0t5uqbjFqto
XKNdZ7gwcRJjmi+GJJXRKeMn0BlFjmX504Gc3AOC/QyB1Zg0okvKed2SOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJpLIBE9+AchUubsltqedKnXbKJGMB8GA1UdIwQY
MBaAFCLkjhYeSQWSP21Koq4KIVMPLeILMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXVTT0ZoNUpCWklfYlVxaXJnb2hVdzh0NGdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8yYzM0ZTktNzU1OS00MWE2LTljYWMt
M2U2Yjc1MWE1NWY0LzEvSXVTT0ZoNUpCWklfYlVxaXJnb2hVdzh0NGdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8yYzM0ZTktNzU1OS00MWE2LTljYWMtM2U2Yjc1MWE1NWY0
LzEvSXVTT0ZoNUpCWklfYlVxaXJnb2hVdzh0NGdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJiZLemRM
KEInzmvphrmyVKpbK2gR5lYBVEg1lfzmYvKMsHQlOtNBJriqFqR4Da1R0Vaq2Nen
djruRHGpijUgXrMbxCaC6z9N8wlE+88n/XeD+f32Lu995HM9CJ7T9pmetaq1SxiQ
TNojlc5D/APSjCjkeRvYREV7YqbqbSXIHKA71pNoq0SRo8CFMGY+dPotbcvnjyWc
MWuaJXHdp0hPbRRP3hCk5TxitdBiddN7EQ3E165IRu0Dea0wA63k5xVgsJnFJBEf
6xLPWOMPw76FOKHD29dtsQkrJBKiw/Eob0+h+ScLWcCZCOB5/8X+IcpdvMtMZZ16
A9JyF1c7bM/wQA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:21:44 2026 by rpki-client