Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft
File: d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft (raw, json)
Hash identifier: fL1TcrQXcs0SBS2Aq2WUc2hb7heaLECrd7sIOWCelA4=
Subject key identifier: 0D:D3:65:EE:FC:F4:92:F7:9C:CD:4C:86:70:21:B7:D6:BD:FB:AF:86
Authority key identifier: 77:48:05:27:D0:B3:5C:AF:95:B3:75:02:C4:C6:F9:E3:E8:1F:D8:A3
Certificate issuer: /CN=77480527d0b35caf95b37502c4c6f9e3e81fd8a3
Certificate serial: 019F91A3EC8A516E1323CA8B795FD372C449
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 01:01:06 +0000
Manifest this update: Fri 24 Jul 2026 01:01:06 +0000
Manifest next update: Sat 25 Jul 2026 01:01:06 +0000
Files and hashes: 1: d0gFJ9CzXK-Vs3UCxMb54-gf2KM.crl (hash: xGBiK+E1zPvIpeoi+BhaElao0xxSf5qLNXJd7sxPrXk=)
2: mQsjU1zOjVRO_u3D1WDC_GA_q4U.roa (hash: 4af//0/sTljaocW55fj5PkOIaVuuWa8S7DrXdP1GzbU=)
3: oFwZbtA1lxypnx_w-x5XCq34vRQ.roa (hash: i/Rl9TaZZIbdRkmJK6JnEtSg149s52oPIfIzhWvJ8BQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft
rsync://rpki.ripe.net/repository/DEFAULT/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 01:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:ec:8a:51:6e:13:23:ca:8b:79:5f:d3:72:c4:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77480527d0b35caf95b37502c4c6f9e3e81fd8a3
Validity
Not Before: Jul 24 01:01:06 2026 GMT
Not After : Jul 25 01:01:06 2026 GMT
Subject: CN=0dd365eefcf492f79ccd4c867021b7d6bdfbaf86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:36:15:9c:52:3f:41:48:c8:ad:bc:35:3d:19:
99:8f:ee:6e:61:be:d3:06:dd:82:f5:96:87:18:0d:
f0:d7:d3:a8:05:2a:6d:08:63:0e:d4:8a:0d:3a:43:
e6:fd:fb:a1:41:e4:60:0f:d3:34:05:2b:c9:b6:1b:
55:20:bd:3b:8d:9f:a9:b3:dd:ed:fa:10:51:91:95:
11:24:f3:63:e8:3d:02:8d:16:f4:95:1a:7a:8e:72:
55:8c:22:d1:8c:ea:0c:a3:f4:e7:c1:38:1a:ff:8c:
c6:0f:e4:c4:90:24:a8:1e:6a:06:da:20:5d:59:9b:
b6:b7:71:3e:af:a0:2c:f7:6b:a3:5f:f9:bf:e2:4e:
88:6a:29:37:62:85:f1:b5:5c:d0:51:7b:a3:93:69:
9c:e7:eb:da:13:b1:e3:56:7c:13:d5:10:0a:06:10:
e8:44:b0:b8:6e:7d:96:26:20:1f:bf:55:54:08:d7:
2f:37:58:1b:21:b2:7e:16:5d:85:b4:c6:04:e7:c0:
2b:6b:21:0b:ea:fb:d9:f0:34:13:d3:6e:c2:e1:5f:
8c:86:b3:cb:61:f5:53:cb:03:06:49:b4:6f:ca:32:
85:bb:c5:1a:0d:35:53:88:38:d4:5f:5a:89:67:b3:
33:24:5f:bf:04:de:ca:ec:56:39:e7:2e:52:83:d1:
01:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:D3:65:EE:FC:F4:92:F7:9C:CD:4C:86:70:21:B7:D6:BD:FB:AF:86
X509v3 Authority Key Identifier:
keyid:77:48:05:27:D0:B3:5C:AF:95:B3:75:02:C4:C6:F9:E3:E8:1F:D8:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:c5:93:b1:59:62:8b:2b:4a:84:db:e5:f1:68:19:03:50:a6:
43:e4:69:fd:0f:af:e8:7c:6b:ce:cb:20:08:3c:a2:a5:0c:bb:
51:a2:e6:05:f2:b8:97:2d:5a:27:e0:23:d7:a1:4a:bc:76:35:
70:5f:fa:4a:a8:7b:b9:db:45:a3:48:11:f9:e6:c4:d3:2f:a5:
ec:4c:3d:fb:d6:2b:57:4e:2d:06:f0:19:74:f1:e5:48:92:4b:
13:9c:c8:67:b7:31:ba:20:9d:b9:c4:29:ef:5b:23:e0:c7:fd:
bc:28:1e:b1:ba:43:4b:a9:e6:21:90:cd:a1:40:55:2d:91:0d:
8c:45:5d:89:2d:f0:f9:24:77:e4:bb:65:ea:1c:a3:87:aa:43:
b6:54:a9:0b:11:a0:7e:94:ec:1a:67:df:e2:10:86:dc:02:60:
40:2d:4f:52:98:fd:9e:23:df:6d:7a:fa:83:3e:9e:f5:48:69:
19:30:c8:fc:8c:4f:e5:ea:ba:81:3a:1c:0c:fd:bd:26:d4:97:
d4:74:41:82:67:50:3b:e0:15:51:d5:d3:57:c4:5b:f7:bc:06:
f2:66:bf:83:6b:0e:ee:7e:4a:58:e6:d0:66:d7:a5:73:c3:c6:
3e:cc:0a:47:30:5c:21:46:3b:a7:26:a6:3d:b7:28:7d:82:ad:
a5:45:05:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Ro+yKUW4TI8qLeV/TcsRJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3NDgwNTI3ZDBiMzVjYWY5NWIzNzUwMmM0YzZmOWUzZTgx
ZmQ4YTMwHhcNMjYwNzI0MDEwMTA2WhcNMjYwNzI1MDEwMTA2WjAzMTEwLwYDVQQD
EygwZGQzNjVlZWZjZjQ5MmY3OWNjZDRjODY3MDIxYjdkNmJkZmJhZjg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzYVnFI/QUjIrbw1PRmZj+5uYb7T
Bt2C9ZaHGA3w19OoBSptCGMO1IoNOkPm/fuhQeRgD9M0BSvJthtVIL07jZ+ps93t
+hBRkZURJPNj6D0CjRb0lRp6jnJVjCLRjOoMo/TnwTga/4zGD+TEkCSoHmoG2iBd
WZu2t3E+r6As92ujX/m/4k6Iaik3YoXxtVzQUXujk2mc5+vaE7HjVnwT1RAKBhDo
RLC4bn2WJiAfv1VUCNcvN1gbIbJ+Fl2FtMYE58ArayEL6vvZ8DQT027C4V+MhrPL
YfVTywMGSbRvyjKFu8UaDTVTiDjUX1qJZ7MzJF+/BN7K7FY55y5Sg9EBEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA3TZe789JL3nM1MhnAht9a9+6+GMB8GA1UdIwQY
MBaAFHdIBSfQs1yvlbN1AsTG+ePoH9ijMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDBnRko5Q3pYSy1WczNVQ3hNYjU0LWdmMktNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iOTc4NDktMmFmNS00YzNlLThmMGUt
NGRkMzg1M2EyMjQxLzEvZDBnRko5Q3pYSy1WczNVQ3hNYjU0LWdmMktNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9iOTc4NDktMmFmNS00YzNlLThmMGUtNGRkMzg1M2EyMjQx
LzEvZDBnRko5Q3pYSy1WczNVQ3hNYjU0LWdmMktNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiMWTsVli
iytKhNvl8WgZA1CmQ+Rp/Q+v6HxrzssgCDyipQy7UaLmBfK4ly1aJ+Aj16FKvHY1
cF/6Sqh7udtFo0gR+ebE0y+l7Ew9+9YrV04tBvAZdPHlSJJLE5zIZ7cxuiCducQp
71sj4Mf9vCgesbpDS6nmIZDNoUBVLZENjEVdiS3w+SR35Ltl6hyjh6pDtlSpCxGg
fpTsGmff4hCG3AJgQC1PUpj9niPfbXr6gz6e9UhpGTDI/IxP5eq6gTocDP29JtSX
1HRBgmdQO+AVUdXTV8Rb97wG8ma/g2sO7n5KWObQZtelc8PGPswKRzBcIUY7pyam
PbcofYKtpUUF0g==
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:28:50 2026 by rpki-client