Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft
File: paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft (raw, json)
Hash identifier: WULzVFC5xMOufe/mlDLRo2L2cQ1rDOOxxdRq1y7JYMg=
Subject key identifier: C9:47:1F:A1:6C:94:A6:F3:01:E9:37:D7:6C:28:05:3C:5B:12:C7:7A
Authority key identifier: A5:A4:2D:26:0D:5E:CD:C2:FA:2B:0B:5D:BF:60:3B:90:D7:15:44:4D
Certificate issuer: /CN=a5a42d260d5ecdc2fa2b0b5dbf603b90d715444d
Certificate serial: 019F93FF8DD36FBFDFC654AA741E74AAA3B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/paQtJg1ezcL6Kwtdv2A7kNcVRE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft
Manifest number: 19CC
Signing time: Fri 24 Jul 2026 12:00:26 +0000
Manifest this update: Fri 24 Jul 2026 12:00:26 +0000
Manifest next update: Sat 25 Jul 2026 12:00:26 +0000
Files and hashes: 1: 8TFEeT0ED8cWFIRanZCQuiqs9z4.asa (hash: DPNI/t4ezcf9TYreKz9gz+qylmX+2capDQAsVuxnaps=)
2: fU7vAx88I2t9pBLysLmJvv9YNY8.roa (hash: TqwghLMTcemORehBLI5oD0AWOOUybzh1PnqJKdrkY2A=)
3: paQtJg1ezcL6Kwtdv2A7kNcVRE0.crl (hash: wQ/6vlfHtc6R4PdYGzDfLdCyNqwBfJdqOd5g7ET7Cpk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/paQtJg1ezcL6Kwtdv2A7kNcVRE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:ff:8d:d3:6f:bf:df:c6:54:aa:74:1e:74:aa:a3:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5a42d260d5ecdc2fa2b0b5dbf603b90d715444d
Validity
Not Before: Jul 24 12:00:26 2026 GMT
Not After : Jul 25 12:00:26 2026 GMT
Subject: CN=c9471fa16c94a6f301e937d76c28053c5b12c77a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d7:63:44:26:76:57:be:4e:d4:58:6d:8f:7b:
5d:83:b6:29:8f:ab:01:f8:02:d3:a3:2a:8f:4b:e0:
f5:35:36:63:dc:bc:0e:6c:18:59:40:0a:58:8a:20:
3d:34:79:9c:c6:06:96:4c:20:c4:a3:d0:71:aa:9a:
fe:04:b1:22:e2:c5:c1:6f:f9:ae:5d:2f:1e:82:db:
21:21:d3:19:02:94:38:8f:d3:e9:5f:ec:1c:19:c7:
b3:fc:ad:82:16:f7:4e:f4:0f:c0:3a:a2:2c:be:1d:
ae:af:38:6a:9d:24:c9:a0:24:d8:ca:d0:9a:f3:88:
8d:62:b0:74:cc:0f:b8:ac:c9:98:79:39:a5:a9:f7:
c1:0d:b6:b6:51:7b:9e:67:7e:17:6b:9d:b6:cc:2d:
fe:d6:ac:53:9a:f3:ac:4c:3e:ff:22:83:d5:d4:e9:
54:14:cb:28:47:07:6b:1a:bc:13:5f:40:e9:b9:8d:
20:5d:16:24:61:52:fd:7b:6a:f4:13:a0:5e:79:cb:
ef:30:bb:af:64:a3:29:8c:d6:7a:8c:b9:95:63:31:
9d:02:b3:b4:ad:a0:59:cf:32:81:a3:8e:45:ac:c7:
39:d1:c0:c6:ec:ef:ce:2b:e7:87:fe:73:ac:14:a6:
19:1e:76:fc:4d:34:e7:4e:14:eb:43:f7:81:0d:9b:
76:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:47:1F:A1:6C:94:A6:F3:01:E9:37:D7:6C:28:05:3C:5B:12:C7:7A
X509v3 Authority Key Identifier:
keyid:A5:A4:2D:26:0D:5E:CD:C2:FA:2B:0B:5D:BF:60:3B:90:D7:15:44:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/paQtJg1ezcL6Kwtdv2A7kNcVRE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:54:f5:af:4c:47:54:4e:55:06:29:18:a1:0e:b7:66:3d:1e:
91:94:77:e3:d0:9e:c1:2f:6c:43:d4:fe:62:07:ea:a2:bf:fc:
76:9b:71:aa:94:f1:1e:e5:e6:35:24:94:52:b7:de:79:d5:82:
f6:44:a1:00:3f:8e:ad:96:d6:66:30:b0:c5:e2:9a:b9:92:31:
49:63:ae:c0:b3:09:7f:4f:6a:ad:f2:a0:82:86:d2:e9:53:eb:
fa:a0:9b:2a:09:52:cf:88:9a:90:a9:d8:e1:fe:ac:9e:ef:29:
50:28:81:1f:b6:8b:01:c8:22:44:52:73:7f:c2:de:8c:d6:c0:
ba:8e:67:32:77:6d:47:64:ad:92:96:49:4b:e8:ea:cc:3f:89:
1c:fb:cc:62:fc:66:51:d6:da:b6:e0:0c:8c:de:aa:63:fb:01:
4f:2b:d7:73:78:9a:0f:35:4d:d8:c9:f8:59:cf:88:7e:de:b3:
53:ae:d7:91:73:03:bd:35:83:0f:12:4b:37:b5:a3:c9:90:f0:
48:0f:93:92:cc:e6:f9:6a:04:87:bb:b0:de:3b:04:18:d0:4e:
79:f8:39:8e:d3:5b:db:40:a3:dc:2c:8f:15:99:03:f1:5f:6d:
4b:d0:68:60:32:7f:58:5f:27:8c:e4:32:3e:02:e2:e9:6c:ed:
84:00:04:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+T/43Tb7/fxlSqdB50qqO1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1YTQyZDI2MGQ1ZWNkYzJmYTJiMGI1ZGJmNjAzYjkwZDcx
NTQ0NGQwHhcNMjYwNzI0MTIwMDI2WhcNMjYwNzI1MTIwMDI2WjAzMTEwLwYDVQQD
EyhjOTQ3MWZhMTZjOTRhNmYzMDFlOTM3ZDc2YzI4MDUzYzViMTJjNzdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNdjRCZ2V75O1Fhtj3tdg7Ypj6sB
+ALToyqPS+D1NTZj3LwObBhZQApYiiA9NHmcxgaWTCDEo9Bxqpr+BLEi4sXBb/mu
XS8egtshIdMZApQ4j9PpX+wcGcez/K2CFvdO9A/AOqIsvh2urzhqnSTJoCTYytCa
84iNYrB0zA+4rMmYeTmlqffBDba2UXueZ34Xa522zC3+1qxTmvOsTD7/IoPV1OlU
FMsoRwdrGrwTX0DpuY0gXRYkYVL9e2r0E6BeecvvMLuvZKMpjNZ6jLmVYzGdArO0
raBZzzKBo45FrMc50cDG7O/OK+eH/nOsFKYZHnb8TTTnThTrQ/eBDZt2QwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMlHH6FslKbzAek312woBTxbEsd6MB8GA1UdIwQY
MBaAFKWkLSYNXs3C+isLXb9gO5DXFURNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGFRdEpnMWV6Y0w2S3d0ZHYyQTdrTmNWUkUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9jMzkyZDctMGE5OS00MWM5LWEyY2Qt
ZjBkMmI5NDNjYjUzLzEvcGFRdEpnMWV6Y0w2S3d0ZHYyQTdrTmNWUkUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC9jMzkyZDctMGE5OS00MWM5LWEyY2QtZjBkMmI5NDNjYjUz
LzEvcGFRdEpnMWV6Y0w2S3d0ZHYyQTdrTmNWUkUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc1T1r0xH
VE5VBikYoQ63Zj0ekZR349CewS9sQ9T+Ygfqor/8dptxqpTxHuXmNSSUUrfeedWC
9kShAD+OrZbWZjCwxeKauZIxSWOuwLMJf09qrfKggobS6VPr+qCbKglSz4iakKnY
4f6snu8pUCiBH7aLAcgiRFJzf8LejNbAuo5nMndtR2StkpZJS+jqzD+JHPvMYvxm
UdbatuAMjN6qY/sBTyvXc3iaDzVN2Mn4Wc+Ift6zU67XkXMDvTWDDxJLN7WjyZDw
SA+Tkszm+WoEh7uw3jsEGNBOefg5jtNb20Cj3CyPFZkD8V9tS9BoYDJ/WF8njOQy
PgLi6WzthAAEZg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:36:33 2026 by rpki-client