Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
File: dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft (raw, json)
Hash identifier: Mugk4PIFgue1+fT4+R7FBqjqJN2uhDKpeiDe+NEkWfE=
Subject key identifier: 74:AD:41:E5:7D:99:E2:12:1F:C9:10:23:32:FF:62:16:62:8C:9B:A7
Authority key identifier: 74:AA:93:12:AF:4C:3D:9C:EE:08:2C:95:41:A6:B6:5A:DA:56:9B:3C
Certificate issuer: /CN=74aa9312af4c3d9cee082c9541a6b65ada569b3c
Certificate serial: 019F9323F7A6857603E998334318408914E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
Manifest number: 154E
Signing time: Fri 24 Jul 2026 08:00:35 +0000
Manifest this update: Fri 24 Jul 2026 08:00:35 +0000
Manifest next update: Sat 25 Jul 2026 08:00:35 +0000
Files and hashes: 1: ZigwfFDMTq9p3ufVtUZkAGSvOE8.roa (hash: hCk1IHYdcTCr5kX9GXFGk1z+A8RaamqdMUb21r4V0lQ=)
2: dKqTEq9MPZzuCCyVQaa2WtpWmzw.crl (hash: js4yH1yXR21RQcwAgpJ6EwE3FWgJYkGhPs2mA/RnczE=)
3: flKVPpAvai5LYhEzoPM0jquwK-0.roa (hash: gt9oKYbyp03lTOWG6kgwsHallu80XJx83x5hEWcn0Ms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:23:f7:a6:85:76:03:e9:98:33:43:18:40:89:14:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74aa9312af4c3d9cee082c9541a6b65ada569b3c
Validity
Not Before: Jul 24 08:00:35 2026 GMT
Not After : Jul 25 08:00:35 2026 GMT
Subject: CN=74ad41e57d99e2121fc9102332ff6216628c9ba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ff:96:8d:67:58:b9:11:a5:79:a9:68:76:17:
d9:88:40:96:dc:10:eb:56:6d:d6:e6:15:0f:5e:e5:
07:7e:70:c8:ad:0d:fb:e5:de:94:71:cb:23:ed:7c:
df:01:07:18:71:51:48:28:be:fa:81:89:7c:57:de:
75:ae:f7:eb:ce:5d:05:04:7f:0a:25:c3:9d:c6:ff:
1c:77:e7:15:09:ef:cd:d8:36:f8:1c:4a:59:7c:f3:
df:76:4f:10:50:fa:4c:ee:1f:54:71:cd:6a:43:02:
ea:bb:8f:c7:f2:31:fb:7e:46:93:31:10:33:6c:b8:
11:19:41:fc:e1:ef:99:9e:9a:18:e4:a1:dc:90:98:
fa:43:a6:83:77:30:97:6f:43:da:b5:ec:a2:95:f4:
23:6b:c9:97:14:80:00:1d:6d:7f:67:da:4e:64:9e:
06:09:ca:29:60:f3:34:8e:86:2d:3b:09:a5:da:03:
6f:30:25:e9:ec:e0:15:0c:e5:f7:98:14:95:02:08:
59:9e:4a:a4:e2:bf:56:68:d4:36:53:68:b6:3e:14:
b6:bf:8b:97:f6:27:1b:f1:ed:46:42:c8:dd:63:df:
d8:15:1c:00:df:a7:4a:d9:81:18:f9:0d:ba:16:5c:
7e:b1:6a:47:c9:30:6a:86:3e:18:59:2c:be:21:10:
58:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:AD:41:E5:7D:99:E2:12:1F:C9:10:23:32:FF:62:16:62:8C:9B:A7
X509v3 Authority Key Identifier:
keyid:74:AA:93:12:AF:4C:3D:9C:EE:08:2C:95:41:A6:B6:5A:DA:56:9B:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:e8:ab:96:50:35:e8:ef:00:8c:37:cf:1a:b8:2e:ed:61:cf:
69:23:76:71:1a:24:3a:06:01:a1:c4:4e:b7:f3:da:e6:cd:90:
0e:a9:45:35:87:60:da:f7:5b:37:3b:99:a2:21:5e:98:bc:71:
85:0d:6d:56:27:b5:6a:0e:af:ba:47:6c:83:27:06:6f:c1:15:
c1:e2:be:ae:a0:79:26:c7:f4:05:62:43:21:a3:54:13:97:b9:
b3:98:bc:6a:7c:13:2e:ae:ba:83:22:20:b2:19:52:5b:80:2c:
29:5e:db:81:7f:ed:2e:e1:86:d7:ea:f5:d6:20:a6:1d:df:c3:
3a:67:34:62:ed:9d:26:ae:18:71:d3:c1:3c:4f:bc:e1:01:d5:
b1:dd:27:85:a4:d0:36:08:2f:2a:ca:d7:39:a5:97:90:ad:9a:
aa:6f:6e:2a:e7:a4:18:6d:2f:e5:5e:9d:9d:a5:65:95:ef:05:
8a:5b:67:8d:ed:7f:ad:fa:46:71:7b:81:16:d6:a2:4b:ac:3f:
56:26:49:d9:ff:ed:be:c2:19:f5:90:f5:e8:e0:0a:af:42:da:
3e:56:71:5b:2c:cb:b9:f1:a6:4e:1d:7c:d8:5c:3c:83:11:d6:
d1:d4:4c:a0:a4:ab:7e:2a:1c:93:3b:9c:17:1a:3a:cc:c0:e7:
1d:01:9a:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TI/emhXYD6ZgzQxhAiRTgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0YWE5MzEyYWY0YzNkOWNlZTA4MmM5NTQxYTZiNjVhZGE1
NjliM2MwHhcNMjYwNzI0MDgwMDM1WhcNMjYwNzI1MDgwMDM1WjAzMTEwLwYDVQQD
Eyg3NGFkNDFlNTdkOTllMjEyMWZjOTEwMjMzMmZmNjIxNjYyOGM5YmE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuv+WjWdYuRGlealodhfZiECW3BDr
Vm3W5hUPXuUHfnDIrQ375d6Uccsj7XzfAQcYcVFIKL76gYl8V951rvfrzl0FBH8K
JcOdxv8cd+cVCe/N2Db4HEpZfPPfdk8QUPpM7h9Ucc1qQwLqu4/H8jH7fkaTMRAz
bLgRGUH84e+ZnpoY5KHckJj6Q6aDdzCXb0PateyilfQja8mXFIAAHW1/Z9pOZJ4G
CcopYPM0joYtOwml2gNvMCXp7OAVDOX3mBSVAghZnkqk4r9WaNQ2U2i2PhS2v4uX
9icb8e1GQsjdY9/YFRwA36dK2YEY+Q26Flx+sWpHyTBqhj4YWSy+IRBY6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHStQeV9meISH8kQIzL/YhZijJunMB8GA1UdIwQY
MBaAFHSqkxKvTD2c7ggslUGmtlraVps8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEtxVEVxOU1QWnp1Q0N5VlFhYTJXdHBXbXp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS8wYTQxNWEtYzcyOC00MmU5LWJlNDUt
OThhMWQ2NWNmZTZmLzEvZEtxVEVxOU1QWnp1Q0N5VlFhYTJXdHBXbXp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS8wYTQxNWEtYzcyOC00MmU5LWJlNDUtOThhMWQ2NWNmZTZm
LzEvZEtxVEVxOU1QWnp1Q0N5VlFhYTJXdHBXbXp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0uirllA1
6O8AjDfPGrgu7WHPaSN2cRokOgYBocROt/Pa5s2QDqlFNYdg2vdbNzuZoiFemLxx
hQ1tVie1ag6vukdsgycGb8EVweK+rqB5Jsf0BWJDIaNUE5e5s5i8anwTLq66gyIg
shlSW4AsKV7bgX/tLuGG1+r11iCmHd/DOmc0Yu2dJq4YcdPBPE+84QHVsd0nhaTQ
NggvKsrXOaWXkK2aqm9uKuekGG0v5V6dnaVlle8Filtnje1/rfpGcXuBFtaiS6w/
ViZJ2f/tvsIZ9ZD16OAKr0LaPlZxWyzLufGmTh182Fw8gxHW0dRMoKSrfiockzuc
Fxo6zMDnHQGaBw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:31:39 2026 by rpki-client